SkillTestPro | CompTIA Security+ Practice Test 7

CompTIA Security+ Practice Test 7

CompTIA Security+ Quiz

1 / 20

A security team needs to analyze a suspicious file without risking infection. What is the best approach?

Execute it on a production system

Delete the file immediately

Use a sandbox environment

Quarantine the file without analysis

Reboot the system

2 / 20

A system administrator is implementing file encryption to protect data at rest on company laptops. Which technology should be used?

TLS

BitLocker

IPSec

WPA2

SSL

3 / 20

A security analyst needs to encrypt email communications to ensure message confidentiality. Which protocol should be used?

SSL

TLS

S/MIME

IMAP

Telnet

4 / 20

Which of the following is an example of a technical security control?

Access control lists (ACLs)

Security policies

Employee training programs

Background checks

Physical locks

5 / 20

What is the function of a security information and event management (SIEM) system?

To encrypt sensitive data in transit

To manage user authentication and authorization

To scan for vulnerabilities in applications To configure network devices remotely

To collect, analyze, and report on security-related data from various sources

6 / 20

Which of the following is a primary characteristic of a distributed denial-of-service (DDoS) attack?

Gaining unauthorized access to a system

Intercepting communications between two parties

Overwhelming a target system with traffic from multiple sources

Exploiting software vulnerabilities to execute arbitrary code

Redirecting users to malicious websites

7 / 20

In risk management, what does the term "residual risk" mean?

The risk that has been completely eliminated

The initial risk before any controls are applied

The remaining risk after implementing security controls

The risk that is transferred to a third party

The risk that is accepted without mitigation

8 / 20

What is the main advantage of using multifactor authentication (MFA)?

It simplifies the login process for users

It reduces the need for strong passwords

It eliminates the need for user training

It speeds up system performance

It enhances security by requiring multiple forms of verification

9 / 20

Which security model focuses on preventing conflicts of interest by restricting access based on user roles and data classifications?

Clark-Wilson model

Bell-LaPadula model

Biba model

Brewer-Nash model

Chinese Wall model

10 / 20

What is the purpose of a digital signature?

To verify the authenticity and integrity of a message or document

To encrypt data for secure transmission

To compress files for storage efficiency

To scan systems for malware

To monitor network traffic

11 / 20

Which of the following protocols is commonly used to securely manage network devices over an unsecured network?

FTP

Telnet

SSH

HTTP

SMTP

12 / 20

What does the term "zero-day vulnerability" refer to?

A flaw that only affects systems on the first day of the month

A previously unknown security flaw that is exploited before a fix is available

A vulnerability that has been patched but not yet applied

A security weakness in outdated software

A vulnerability that requires zero user interaction to exploit

13 / 20

Which of the following is an example of a physical security control?

Antivirus software

Encryption protocols

Biometric access systems

Firewalls

Intrusion detection systems

14 / 20

What is the primary goal of implementing a public key infrastructure (PKI)?

To monitor network traffic

To enforce password policies

To control physical access to facilities

To manage and distribute digital certificates

To develop software applications

15 / 20

In the context of cybersecurity, what does the term "phishing" refer to?

A technique used to trick individuals into divulging sensitive information

A method of encrypting data

A type of firewall configuration

A network scanning tool

A software development methodology

16 / 20

Which type of malware is designed to replicate itself and spread to other systems without user intervention?

Trojan

Worm

Spyware

Adware

Rootkit

17 / 20

What is the main function of a network firewall?

To encrypt data in transit

To detect malware on endpoints

To manage user authentication

To block unauthorized access while permitting authorized communications

To monitor employee productivity

18 / 20

Which of the following best describes the principle of least privilege?

All users have equal access to all systems

Users are granted the minimum access necessary to perform their duties

Access is granted based on seniority

Users can access any system after authentication

Access rights are granted based on user requests

19 / 20

What is the primary purpose of a demilitarized zone (DMZ) in network architecture?

To encrypt internal communications

To serve as a backup network

To monitor internal traffic

To segment the wireless network

To isolate public-facing servers from the internal network

20 / 20

Which of the following is a symmetric encryption algorithm?

RSA

ECC

AES

DSA

Diffie-Hellman

Your score is

The average score is 0%