SkillTestPro | CompTIA Security+ Practice Test 6

CompTIA Security+ Practice Test 6

CompTIA Security+ Quiz

1 / 20

A security administrator notices a high number of failed login attempts on a server from a single IP address. What is the most likely explanation?

Distributed denial-of-service (DDoS) attack

Man-in-the-middle attack

SQL injection

Brute-force attack

Zero-day exploit

2 / 20

A security team wants to verify that company software applications do not contain security flaws before deployment. What should they perform?

Penetration testing

Code review

Brute-force attack

Social engineering attack

Rogue access point detection

3 / 20

An attacker successfully gains access to an internal corporate network but cannot move laterally. What security measure likely prevented this?

Network segmentation

Weak password policies

Brute-force protection

Disabling logging

Using a shared Wi-Fi password

4 / 20

A web application stores sensitive customer information in plaintext within a database. What is the best way to secure this data?

Use a strong password policy

Encrypt the stored data

Disable unnecessary ports

Enable logging and monitoring

Restrict user permissions

5 / 20

A company requires employees to use unique, complex passwords that change every 90 days. What security concept does this support?

Least privilege

Single sign-on (SSO)

Role-based access control (RBAC)

Password rotation policy

Non-repudiation

6 / 20

A hacker intercepts an encrypted email but cannot decrypt its contents. What security principle is being enforced?

Integrity

Availability

Non-repudiation

Confidentiality

Least privilege

7 / 20

A company's security policy requires that any system changes be reviewed and approved before deployment. What security principle is this?

Least privilege

Separation of duties

Role-based access control (RBAC)

Zero trust

Change management

8 / 20

A penetration tester successfully retrieves password hashes from a compromised server. What is the next likely step an attacker would take?

Perform a brute-force or dictionary attack

Immediately log in as an administrator

Launch a denial-of-service attack

Encrypt the data for protection

Use a honeypot to trap users

9 / 20

Correct Answer: Vulnerability scanner
Explanation: A vulnerability scanner identifies security weaknesses and known exploits in systems.

Weak password policies

Brute-force attack

Network congestion

Rootkit infection

Expired digital certificates

10 / 20

A cybersecurity team needs to verify whether an organization's servers are vulnerable to known exploits. What tool should they use?

Vulnerability scanner

Packet sniffer

Firewall

Load balancer

Proxy server

11 / 20

A user receives an email stating their bank account has been compromised and needs immediate verification via a link. What type of attack is this?

Denial-of-service (DoS)

Cross-site request forgery (CSRF)

Brute-force attack

Replay attack

Phishing

12 / 20

A financial institution requires employees to use smart cards and PINs for authentication. What type of authentication is being used?

Single sign-on (SSO)

Role-based access control (RBAC)

Multi-factor authentication (MFA)

Mandatory access control (MAC)

Biometric authentication

13 / 20

An attacker gains access to a company's internal network and intercepts unencrypted email communications. What type of attack is this?

Privilege escalation

Session hijacking

Brute-force attack

Cross-site scripting (XSS)

Man-in-the-middle attack

14 / 20

A company is implementing a honeypot on its network. What is the primary purpose of this device?

To act as a firewall

To detect and study cyberattacks

To encrypt data in transit

To authenticate users

To prevent social engineering attacks

15 / 20

A security analyst detects an unusual increase in outbound network traffic. What type of attack might this indicate?

Data exfiltration

Denial-of-service (DoS) attack

Brute-force attack

SQL injection

Replay attack

16 / 20

A security administrator wants to prevent employees from sending sensitive information via email. What solution should be implemented?

Antivirus software

Role-based access control (RBAC)

Data loss prevention (DLP)

Password policies

Network segmentation

17 / 20

A company requires employees to use biometric authentication before accessing sensitive data. What security concept is being implemented?

Something you know

Single sign-on (SSO)

Role-based access control (RBAC)

Something you are

Something you have

18 / 20

An attacker uses a fake access point with the same SSID as a legitimate network to trick users into connecting. What is this attack called?

Replay attack

DNS spoofing

Evil twin attack

Vishing

Man-in-the-middle attack

19 / 20

A cybersecurity team needs to securely transfer logs from multiple remote locations to a central server. What protocol should they use?

FTP

Telnet

SNMPv1

HTTP

Syslog over TLS

20 / 20

A network administrator notices unauthorized devices connecting to the corporate Wi-Fi. What is the best way to prevent this?

Disable SSID broadcasting

Implement WPA2-Enterprise authentication

Reduce Wi-Fi signal strength

Use a simple shared password

Enable port forwarding

Your score is

The average score is 0%