SkillTestPro | CompTIA Security+ Practice Test 9

CompTIA Security+ Practice Test 9

CompTIA Security+ Quiz

1 / 20

A company wants to ensure that employees cannot reuse their previous five passwords. What security control enforces this?

Password history policy

Account lockout policy

Single sign-on

Multifactor authentication

Time-based access control

2 / 20

A security analyst is investigating an alert where multiple failed authentication attempts occurred within seconds from different locations. What is the most likely cause?

Cross-site scripting attack

SQL injection attack

Session hijacking

Credential stuffing attack

Evil twin attack

3 / 20

A company needs to protect customer data stored in a cloud database from unauthorized access. What is the best approach?

Use a firewall

Implement MAC filtering

Block all external connections

Disable administrator accounts

Enable database encryption

4 / 20

An organization enforces policies that require employees to use a smart card and a PIN for authentication. What type of security mechanism is this?

Single sign-on (SSO)

Role-based access control

Multifactor authentication (MFA)

Geofencing

Time-based authentication

5 / 20

A hacker successfully exploits an outdated version of a web server’s software before a patch is available. What type of attack is this?

Cross-site request forgery

Denial-of-service attack

Brute-force attack

Phishing attack

Zero-day attack

6 / 20

A security engineer needs to establish a secure connection for remote access to a corporate network. What protocol should be used?

Telnet

FTP

VPN

RDP without encryption

POP3

7 / 20

A cybersecurity team is securing an email server by ensuring that all outgoing emails are digitally signed. Which technology should be used?

TLS

IPSec

RADIUS

S/MIME

Kerberos

8 / 20

A security team needs to ensure that all system logs are synchronized and use a standardized timestamp. What protocol should they implement?

NTP

SNMP

SSH

TLS

SAML

9 / 20

A company wants to prevent employees from sending confidential files outside the organization via email or USB storage. What solution should be implemented?

Firewall rules

Antivirus software

MAC filtering

Geofencing

Data Loss Prevention (DLP)

10 / 20

An attacker captures data packets on a wireless network and later replays them to gain access to an authenticated session. What attack is being performed?

Evil twin attack

Replay attack

DNS spoofing

Man-in-the-middle attack

SQL injection

11 / 20

A security analyst detects an increase in network traffic to a single server, causing slowdowns. The traffic originates from multiple sources worldwide. What type of attack is likely occurring?

Brute-force attack

Phishing attack

Session hijacking

Distributed denial-of-service (DDoS)

SQL injection

12 / 20

A hacker exploits a buffer overflow vulnerability in a software application to gain administrative privileges. What type of attack is this?

Denial-of-service attack

Privilege escalation

Cross-site scripting

Brute-force attack

Replay attack

13 / 20

A company's web application is vulnerable to attackers injecting JavaScript into form fields, which executes when other users visit the page. What type of attack is this?

SQL injection

Buffer overflow

Privilege escalation

Man-in-the-middle attack

Cross-site scripting (XSS)

14 / 20

A security engineer is tasked with encrypting an entire hard drive to prevent data theft in case of device loss. What should be used?

AES encryption for files

TLS

MD5 hashing

SSL

BitLocker

15 / 20

A user receives an email that appears to be from their IT department asking them to reset their password via an unfamiliar link. What type of attack is this?

Brute-force attack

Spear phishing

Denial-of-service attack

Man-in-the-middle attack

Session hijacking

16 / 20

A cybersecurity team is setting up an intrusion prevention system (IPS) to block malicious traffic. Where should this device be placed in the network?

Between the firewall and the internal network

After the internal router

Inside the endpoint devices

Outside the network perimeter

Inside the VPN tunnel

17 / 20

An attacker successfully alters the DNS settings of a corporate website, redirecting users to a fake login page. What type of attack has occurred?

Session hijacking

DNS poisoning

Cross-site scripting

Denial-of-service

ARP spoofing

18 / 20

A security administrator is implementing 802.1X authentication on network switches. What is the primary purpose of this configuration?

Preventing unauthorized network access

Encrypting wireless traffic

Protecting against phishing attacks

Filtering DNS requests

Implementing MAC address blocking

19 / 20

A company wants to ensure that only employees using company-issued devices can access sensitive corporate applications. Which security measure should be implemented?

Geofencing

MAC filtering

Time-based access controls

Zero Trust architecture

DNS filtering

20 / 20

A security analyst notices that multiple employee accounts have been locked due to excessive failed login attempts. What is the most likely type of attack?

Phishing attack

Denial-of-service attack

Brute-force attack

Man-in-the-middle attack

Cross-site scripting

Your score is

The average score is 0%