FC0-U71 Practice Test 7 — 10 Questions

Question 1

Which of the following is the primary purpose of hashing a password before storing it in a database?

Accepted Answer

To verify the password without storing it in plaintext. Hashing is a one-way function that converts a password into a fixed-length string. It is used to securely store passwords so that even if the database is breached, the actual passwords are not easily recoverable.

Answer

To make the password longer and more secure

Answer

To compress the password to save storage space

Answer

To encrypt the password so it can be decrypted later

Question 2

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user suspects it is a phishing attempt. Which type of phishing attack is this most likely to be?

Accepted Answer

Spear phishing. Spear phishing targets specific individuals or organizations, often using personalized information to appear legitimate.

Answer

Vishing

Answer

Whaling

Answer

Smishing

Question 3

A user receives an email that appears to be from their bank, asking them to click a link and verify their account. The email contains urgent language and a generic greeting. Which type of security threat is this?

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers send deceptive emails to steal credentials. The generic greeting and urgent language are common signs.

Answer

Smishing

Answer

Spear phishing

Answer

Vishing

Question 4

Which type of malware is disguised as legitimate software but performs malicious actions?

Accepted Answer

Trojan. A Trojan horse appears useful but contains harmful code, unlike viruses or worms that self-replicate.

Answer

Virus

Answer

Ransomware

Answer

Worm

Question 5

A company wants to implement the principle of least privilege for its employees. Which TWO of the following actions align with this principle? (Choose TWO.)

Accepted Answer

Providing access only to the applications needed for each employee's role. Least privilege means giving users only the permissions necessary to perform their jobs. Granting access only to required applications and revoking old permissions enforce this.

Answer

Allowing employees to share passwords for convenience

Answer

Granting all employees administrative rights by default

Answer

Giving all employees full access to the company's financial data

Question 6

Which of the following is the best practice for backing up data according to the 3-2-1 rule?

Accepted Answer

Three copies on two different media types, with one copy stored offsite. The 3-2-1 rule means at least three copies of data, on two different types of storage media, with one copy stored offsite.

Answer

Three copies on three different external hard drives stored in the same building

Answer

Two copies on the same server, one on a different server

Answer

One copy on the same drive, one on an external drive, one in the cloud

Question 7

A security analyst is explaining the difference between a threat and a vulnerability. Which statement accurately describes this difference?

Accepted Answer

A threat is a potential cause of harm, and a vulnerability is a weakness that can be exploited.. A vulnerability is a weakness, while a threat is a potential danger that exploits that weakness.

Answer

A vulnerability is a risk, and a threat is a countermeasure.

Answer

A threat is a weakness in a system, and a vulnerability is an attack that exploits it.

Answer

A vulnerability is a potential harm, and a threat is likelihood times impact.

Question 8

Which of the following is the best practice for creating a strong password?

Accepted Answer

Using a 14-character phrase with numbers and symbols. A strong password is at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols.

Answer

Using your pet's name

Answer

Using the same password for multiple accounts

Answer

Using a sequence of 8 characters with letters only

Question 9

Which of the following best describes the principle of least privilege?

Accepted Answer

Users should have the minimum access needed to perform their tasks.. The principle of least privilege grants users only the permissions necessary to perform their job functions, minimizing potential damage from accidents or attacks.

Answer

Access should be granted based on seniority within the organization.

Answer

All users should have the same level of access to ensure consistency.

Answer

Users should have full administrative access to their own devices.

Question 10

Which of the following is an example of a physical security control?

Accepted Answer

Biometric door lock. Physical security controls include measures like locks, guards, and biometric scanners to protect physical assets.

Answer

Password policy

Answer

Antivirus software

Answer

Firewall