SkillTestPro | CompTIA Security+ Practice Test 3

CompTIA Security+ Practice Test 3

CompTIA Security+ Quiz

1 / 20

A company wants to ensure that any modifications to critical system files are logged and can be traced back to a specific user. What tool should be used?

File integrity monitoring (FIM)

Network address translation (NAT)

Port scanning

Disabling firewall logs

Disabling automatic updates

2 / 20

A network administrator needs to segment a network to improve security and prevent unauthorized access between different departments. What is the best solution?

VLANs

ARP poisoning

Using a single subnet for all users

Installing an IDS

Disabling network logs

3 / 20

A cybersecurity team is implementing a zero-trust architecture. What is a key principle of this security model?

Always trust internal users

Grant full access to VPN users

Never trust, always verify

Only external users require authentication

Use default passwords for all accounts

4 / 20

A company wants to ensure that all employees' mobile devices comply with security policies before accessing corporate data. What solution should be implemented?

Brute-force protection

Man-in-the-middle filtering

Session hijacking prevention

Implementing MAC filtering

Mobile device management (MDM)

5 / 20

A security analyst is investigating an unauthorized login attempt outside of normal business hours. What is the best security control to prevent this?

Antivirus software

Time-based access restrictions

SSL/TLS encryption

Role-based access control

Disabling USB ports

6 / 20

A company wants to restrict access to its internal network so that only company-issued devices can connect. What security measure should be used?

Port forwarding

Man-in-the-middle protection

Using a VPN

Network Access Control (NAC)

Disabling DHCP

7 / 20

A user reports that their computer is running slowly and displaying pop-up ads even when no browser is open. What is the most likely cause?

Man-in-the-middle attack

Denial-of-service attack

Insufficient RAM

Brute-force attack

Adware infection

8 / 20

A security analyst needs to test an organization's security controls without prior knowledge of its infrastructure. What type of penetration test should be conducted?

Black box testing

White box testing

Gray box testing

Red teaming

Code review

9 / 20

An organization needs to ensure the confidentiality of sensitive customer records. What is the best way to achieve this?

Disabling automatic updates

Blocking all incoming network traffic

Using default administrator credentials

Data encryption

Reducing password length requirements

10 / 20

A system administrator finds that a user has installed a keylogger on a shared company workstation. What type of threat is this?

Insider threat

Zero-day exploit

Phishing attack

Man-in-the-middle attack

Cross-site scripting

11 / 20

A company wants to ensure that its wireless network is secured against unauthorized access. What is the best security protocol to use?

WEP

WPA3

Telnet

PAP

RADIUS

12 / 20

An attacker successfully tricks a user into clicking on a malicious link that downloads malware onto their system. What type of attack is this?

Brute-force attack

Denial-of-service attack

Spoofing

Session hijacking

Phishing

13 / 20

A network administrator is implementing port security to prevent unauthorized devices from connecting to the network. What security method should be used?

Changing default passwords

Application logging

Role-based access control

MAC address filtering

Data loss prevention (DLP)

14 / 20

A company wants to prevent unauthorized access to data stored on company laptops, even if the devices are stolen. What security measure should be implemented?

Full-disk encryption

MAC filtering

Multi-factor authentication

Antivirus software

Disabling USB ports

15 / 20

An attacker gains access to an employee’s login session and hijacks their connection. What type of attack is this?

Privilege escalation

Session hijacking

Brute-force attack

Trojan horse

DNS poisoning

16 / 20

A security administrator wants to ensure that employees cannot install unauthorized software on their work computers. What is the best solution?

Enabling auto-updates

Using a VPN

Allowing guest accounts

Application allowlisting

Implementing geofencing

17 / 20

A security analyst needs to detect vulnerabilities on a company’s network before attackers can exploit them. What tool should be used?

Network sniffer

Intrusion prevention system (IPS)

Firewall

Vulnerability scanner

Log analyzer

18 / 20

An attacker sends an email appearing to be from a company's CEO, requesting a wire transfer. What type of attack is this?

Whaling

Smishing

Vishing

Man-in-the-middle attack

DDoS attack

19 / 20

A security team is reviewing user permissions and finds that some employees have administrative access they no longer need. What principle should be applied?

Role-based access control (RBAC)

Separation of duties

Implicit deny

Principle of least privilege

Zero trust architecture

20 / 20

A cybersecurity analyst notices that employees are repeatedly using weak passwords despite security policies. What is the best way to enforce stronger passwords?

Use a default password for all accounts

Enable a password complexity policy

Encourage employees to write passwords down

Disable multi-factor authentication

Limit password length to 6 characters

Your score is

The average score is 0%