FC0-U71 Practice Questions 2 — 50 Questions

Question 1

A company has a server that hosts a critical database. The server uses RAID 5 with three disks. One disk fails. What is the immediate impact on data availability?

Accepted Answer

Data is still available, but performance may degrade. RAID 5 uses block-level striping with distributed parity. With three disks, the array can tolerate a single disk failure without data loss because the parity information on the remaining two disks can reconstruct the missing data on the fly. Therefore, data remains fully available immediately after one disk fails, though read and write performance may degrade due to the overhead of parity calculation and reconstruction.

Answer

Data is available only after replacing the disk

Answer

The server will shut down

Answer

All data on the array is lost

Question 2

Which of the following is a valid SQL statement to retrieve all records from a table named 'Employees'?

Accepted Answer

SELECT * FROM Employees. SELECT * FROM Employees is the correct SQL syntax to retrieve all columns and rows from the table. The other options have incorrect syntax or keywords.

Answer

GET * FROM Employees

Answer

FETCH * FROM Employees

Answer

READ * FROM Employees

Question 3

What is the binary representation of the decimal number 10?

Accepted Answer

1010. The decimal number 10 is converted to binary by dividing by 2 repeatedly: 10 ÷ 2 = 5 remainder 0, 5 ÷ 2 = 2 remainder 1, 2 ÷ 2 = 1 remainder 0, 1 ÷ 2 = 0 remainder 1. Reading the remainders from bottom to top gives 1010. This matches option C.

Answer

1001

Answer

1110

Answer

1100

Question 4

Which TWO of the following are types of optical disc storage? (Select exactly two.)

Accepted Answer

DVD. DVD (Digital Versatile Disc) is a type of optical disc storage that uses a laser to read and write data on a reflective plastic disc. It is a standard optical media format, distinct from magnetic or solid-state storage technologies.

Answer

SSD

Answer

HDD

Answer

Flash drive

Question 5

A company wants to implement a backup solution that allows for quick restoration of individual files. Which backup type should be used?

Accepted Answer

Full backup. A full backup creates a complete copy of all selected data, allowing any individual file to be restored directly from that single backup set without needing to process other backup sets. This makes it the simplest and fastest option for restoring specific files, as no additional dependencies or chain reconstructions are required.

Answer

System image backup

Answer

Differential backup

Answer

Incremental backup

Question 6

What is the difference between a threat and a vulnerability?

Accepted Answer

A threat is a potential harm, and a vulnerability is a weakness. A threat is a potential source of harm (e.g., a hacker), while a vulnerability is a weakness that can be exploited (e.g., unpatched software).

Answer

They are the same thing

Answer

A threat is a weakness, and a vulnerability is a danger

Answer

A threat is a type of malware, and a vulnerability is a type of attack

Question 7

A security analyst is evaluating risks to the company's network. According to the risk formula (Risk = Likelihood × Impact), which THREE of the following are considered vulnerabilities?

Accepted Answer

Weak encryption used for data in transit. A vulnerability is a weakness that can be exploited by a threat.

Answer

A hacker attempting to guess passwords

Answer

A fire in the data center

Question 8

An employee allows a delivery person to enter a secure office building by holding the door open. The delivery person does not have an access badge. Which social engineering attack is this?

Accepted Answer

Tailgating. Tailgating (or piggybacking) occurs when an unauthorized person follows an authorized person into a restricted area without proper authentication.

Answer

Phishing

Answer

Baiting

Answer

Pretexting

Question 9

What is the primary risk of using public Wi-Fi without a VPN?

Accepted Answer

Data transmitted can be intercepted by attackers. Public Wi-Fi is often unencrypted, allowing attackers to intercept data transmitted over the network. A VPN encrypts traffic, protecting data in transit.

Answer

The Wi-Fi network may be slower

Answer

The device may overheat

Answer

Increased risk of malware infection from the network

Question 10

A user is concerned about connecting to a public Wi-Fi network at a coffee shop. Which security measure can best protect their data?

Accepted Answer

Use a VPN. A VPN encrypts traffic between the user's device and the VPN server, protecting data on public networks.

Answer

Use HTTPS websites only

Answer

Use a firewall

Answer

Disable antivirus

Question 11

Which of the following is the primary purpose of hashing a password before storing it in a database?

Accepted Answer

To verify the password without storing it in plaintext. Hashing is a one-way function that converts a password into a fixed-length string. It is used to securely store passwords so that even if the database is breached, the actual passwords are not easily recoverable.

Answer

To make the password longer and more secure

Answer

To compress the password to save storage space

Answer

To encrypt the password so it can be decrypted later

Question 12

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user suspects it is a phishing attempt. Which type of phishing attack is this most likely to be?

Accepted Answer

Spear phishing. Spear phishing targets specific individuals or organizations, often using personalized information to appear legitimate.

Answer

Vishing

Answer

Whaling

Answer

Smishing

Question 13

A user receives an email that appears to be from their bank, asking them to click a link and verify their account. The email contains urgent language and a generic greeting. Which type of security threat is this?

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers send deceptive emails to steal credentials. The generic greeting and urgent language are common signs.

Answer

Smishing

Answer

Spear phishing

Answer

Vishing

Question 14

Which type of malware is disguised as legitimate software but performs malicious actions?

Accepted Answer

Trojan. A Trojan horse appears useful but contains harmful code, unlike viruses or worms that self-replicate.

Answer

Virus

Answer

Ransomware

Answer

Worm

Question 15

A company wants to implement the principle of least privilege for its employees. Which TWO of the following actions align with this principle? (Choose TWO.)

Accepted Answer

Providing access only to the applications needed for each employee's role. Least privilege means giving users only the permissions necessary to perform their jobs. Granting access only to required applications and revoking old permissions enforce this.

Answer

Allowing employees to share passwords for convenience

Answer

Granting all employees administrative rights by default

Answer

Giving all employees full access to the company's financial data

Question 16

Which of the following is the best practice for backing up data according to the 3-2-1 rule?

Accepted Answer

Three copies on two different media types, with one copy stored offsite. The 3-2-1 rule means at least three copies of data, on two different types of storage media, with one copy stored offsite.

Answer

Three copies on three different external hard drives stored in the same building

Answer

Two copies on the same server, one on a different server

Answer

One copy on the same drive, one on an external drive, one in the cloud

Question 17

A security analyst is explaining the difference between a threat and a vulnerability. Which statement accurately describes this difference?

Accepted Answer

A threat is a potential cause of harm, and a vulnerability is a weakness that can be exploited.. A vulnerability is a weakness, while a threat is a potential danger that exploits that weakness.

Answer

A vulnerability is a risk, and a threat is a countermeasure.

Answer

A threat is a weakness in a system, and a vulnerability is an attack that exploits it.

Answer

A vulnerability is a potential harm, and a threat is likelihood times impact.

Question 18

Which of the following is the best practice for creating a strong password?

Accepted Answer

Using a 14-character phrase with numbers and symbols. A strong password is at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols.

Answer

Using your pet's name

Answer

Using the same password for multiple accounts

Answer

Using a sequence of 8 characters with letters only

Question 19

Which of the following best describes the principle of least privilege?

Accepted Answer

Users should have the minimum access needed to perform their tasks.. The principle of least privilege grants users only the permissions necessary to perform their job functions, minimizing potential damage from accidents or attacks.

Answer

Access should be granted based on seniority within the organization.

Answer

All users should have the same level of access to ensure consistency.

Answer

Users should have full administrative access to their own devices.

Question 20

Which of the following is an example of a physical security control?

Accepted Answer

Biometric door lock. Physical security controls include measures like locks, guards, and biometric scanners to protect physical assets.

Answer

Password policy

Answer

Antivirus software

Answer

Firewall