SkillTestPro | CompTIA Security+ Practice Test 8

CompTIA Security+ Practice Test 8

CompTIA Security+ Quiz

1 / 20

A security analyst is investigating unusual outbound traffic from a workstation. The system is sending encrypted data to an unknown IP. What is the most likely cause?

Brute-force attack

Social engineering

Misconfigured firewall

Expired digital certificate

Data exfiltration

2 / 20

A company is using role-based access control (RBAC). How does this improve security?

All employees have administrator privileges

Users must change passwords daily

Passwords are stored in plaintext

Users are assigned permissions based on their job role

Only external users require authentication

3 / 20

An attacker exploits a software vulnerability that the vendor has not yet patched. What type of attack is this?

Denial-of-service attack

Session hijacking

Zero-day attack

Trojan attack

Pharming

4 / 20

A cybersecurity team is implementing a SIEM system. What is its primary purpose?

Blocking all unauthorized traffic

Encrypting network communications

Managing user passwords

Log aggregation and real-time security monitoring

Filtering spam emails

5 / 20

Which security measure can help protect against insider threats?

Mandatory security awareness training

Stronger firewalls

Increased internet speed

Physical security controls

Open-access policies

6 / 20

A user receives an email from their bank requesting urgent verification of their account details. What should they do?

Click the link and verify their details

Call the bank using the number in the email

Ignore the email and report it as phishing

Reply to the email for confirmation

Forward the email to colleagues for review

7 / 20

A cybersecurity analyst is investigating a brute-force attack against a company's web application. What security measure can help mitigate this type of attack?

Open authentication

Disable HTTPS

Increase logging levels

Use weak passwords for decoys

Account lockout policy

8 / 20

A company wants to secure remote access for employees working from home. What is the best solution?

Use a VPN

Disable remote access

Require employees to use personal devices

Use a shared login for all remote workers

Increase password complexity

9 / 20

An attacker successfully injects malicious SQL queries into a website’s login form. What type of attack has occurred?

Cross-site scripting (XSS)

Brute-force attack

DNS poisoning

SQL injection

ARP spoofing

10 / 20

A security analyst discovers an open port that allows unauthorized remote access to a server. What should be done first?

Close the port immediately

Monitor the port for activity

Update firewall rules

Disable all remote access

Run a vulnerability scan

11 / 20

A hacker intercepts unencrypted login credentials sent over a public Wi-Fi network. What type of attack is this?

Brute-force attack

SQL injection

Man-in-the-middle attack

Denial-of-service attack

Session hijacking

12 / 20

A company needs to securely store passwords to prevent unauthorized access. Which hashing algorithm is most suitable?

MD5

SHA-1

SHA-256

DES

AES

13 / 20

A user reports that their computer is displaying pop-ups and redirecting them to suspicious websites. What is the most likely cause?

Man-in-the-middle attack

Brute-force attack

Expired security certificate

Weak encryption

Spyware infection

14 / 20

A security engineer is tasked with securing access to the company database by ensuring only authorized applications can communicate with it. What should be implemented?

Antivirus software

Regular system updates

Password rotation policies

Application whitelisting

File encryption

15 / 20

A cybersecurity team is implementing a system that will require users to verify their identity using both a password and a fingerprint. What type of authentication is this?

Single sign-on

Biometric-only authentication

Multifactor authentication

Role-based authentication

Federated authentication

16 / 20

A security administrator notices an unknown device connected to the internal network. What is the best action to take first?

Perform a network scan

Block all network traffic

Immediately disconnect the device

Investigate logs for any unauthorized access

Contact the ISP

17 / 20

An organization wants to prevent ex-employees from accessing corporate cloud applications. What is the best approach?

Implement role-based access control (RBAC)

Disable their accounts immediately

Change the company Wi-Fi password

Update the firewall rules

Monitor network traffic

18 / 20

A security analyst is reviewing logs and notices multiple failed login attempts on an administrator account occurring at regular intervals from different IP addresses. What type of attack is taking place?

Phishing

Brute-force attack

Denial-of-service attack

Man-in-the-middle attack

SQL injection

19 / 20

A user reports that their system is running slowly and that unknown processes are using a high amount of CPU and memory. Upon further investigation, the security team finds that the computer is part of a botnet. What type of malware is most likely responsible?

Ransomware

Trojan

Rootkit

Bot

Spyware

20 / 20

A company has detected unauthorized access to its internal network. Upon investigation, the security team finds that an employee’s credentials were stolen and used to log in from an unusual geographic location. What security measure would have best prevented this?

Account lockout policy

Geofencing and conditional access

Password complexity rules

Antivirus software

cAntivirus software

Your score is

The average score is 0%