FC0-U71 Security Practice Test 3 — 15 Questions

Question 1

Which TWO of the following are characteristics of a strong password? (Select TWO.)

Accepted Answer

Includes uppercase letters, numbers, and symbols. A strong password is at least 12 characters and includes a mix of character types. Using common words or personal information weakens the password.

Answer

Uses a common dictionary word

Answer

Based on your birth date

Answer

Contains only lowercase letters

Question 2

Which of the following best describes the principle of confidentiality in the CIA triad?

Accepted Answer

Preventing unauthorized access to data. Confidentiality ensures that data is not disclosed to unauthorized individuals or systems.

Answer

Systems are accessible when needed

Answer

Ensuring data is backed up regularly

Answer

Data is not altered unexpectedly

Question 3

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user suspects it is a phishing attempt. Which type of phishing attack is this most likely to be?

Accepted Answer

Spear phishing. Spear phishing targets specific individuals or organizations, often using personalized information to appear legitimate.

Answer

Vishing

Answer

Whaling

Answer

Smishing

Question 4

An organization implements a security policy where users must provide a password and a one-time code generated by a mobile app to log in. Which type of authentication is being used?

Accepted Answer

Two-factor authentication. Multi-factor authentication requires two or more factors from different categories: something you know (password), something you have (smartphone app generating a code), and something you are (biometric).

Answer

Biometric authentication

Answer

Token-based authentication

Answer

Single-factor authentication

Question 5

Which of the following is a characteristic of a strong password?

Accepted Answer

Contains a combination of uppercase, lowercase, numbers, and symbols. Strong passwords are at least 12 characters long and include a mix of uppercase letters, lowercase letters, numbers, and symbols.

Answer

Is exactly 8 characters long

Answer

Uses only lowercase letters

Answer

Is the same as the username

Question 6

A company requires all employees to use a smart card and a PIN to access the building. This is an example of which concept?

Accepted Answer

Multi-factor authentication. Multi-factor authentication combines something you have (smart card) and something you know (PIN).

Answer

Authorization

Answer

Biometrics

Answer

Single sign-on

Question 7

A security analyst discovers that a file on a server has been modified without authorization. Which element of the CIA triad has been compromised?

Accepted Answer

Integrity. Integrity ensures that data is not altered unexpectedly. Unauthorized modification violates integrity.

Answer

Non-repudiation

Answer

Availability

Answer

Confidentiality

Question 8

Which type of malware is designed to replicate itself and spread to other computers without needing to attach to a host file?

Accepted Answer

Worm. Worms are self-replicating and spread independently, unlike viruses which attach to files.

Answer

Trojan

Answer

Virus

Answer

Ransomware

Question 9

Which of the following is the best practice for backing up data according to the 3-2-1 rule?

Accepted Answer

Three copies on two different media types, with one copy stored offsite. The 3-2-1 rule means at least three copies of data, on two different types of storage media, with one copy stored offsite.

Answer

Three copies on three different external hard drives stored in the same building

Answer

Two copies on the same server, one on a different server

Answer

One copy on the same drive, one on an external drive, one in the cloud

Question 10

An attacker gains physical access to a secure area by following an authorized employee through a door that requires a badge. This social engineering technique is known as:

Accepted Answer

Tailgating. Tailgating (or piggybacking) is when an unauthorized person follows an authorized person into a restricted area without proper authentication.

Answer

Pretexting

Answer

Phishing

Answer

Baiting

Question 11

Which of the following encryption methods is used to protect data in transit over a public network, such as the internet?

Accepted Answer

VPN. A VPN encrypts data traffic over public networks, providing a secure tunnel for data in transit.

Answer

Full disk encryption

Answer

File encryption

Answer

HTTPS

Question 12

A user reports that their computer has been displaying unwanted pop-up advertisements frequently. Which type of malware is most likely responsible?

Accepted Answer

Adware. Adware displays unwanted advertisements, often in pop-ups or banners.

Answer

Ransomware

Answer

Spyware

Answer

Rootkit

Question 13

Which of the following is an example of a physical security control?

Accepted Answer

Biometric door lock. Physical security controls include measures like locks, guards, and biometric scanners to protect physical assets.

Answer

Password policy

Answer

Antivirus software

Answer

Firewall

Question 14

A company wants to implement the principle of least privilege for its employees. Which TWO of the following actions align with this principle? (Choose TWO.)

Accepted Answer

Providing access only to the applications needed for each employee's role. Least privilege means giving users only the permissions necessary to perform their jobs. Granting access only to required applications and revoking old permissions enforce this.

Answer

Allowing employees to share passwords for convenience

Answer

Granting all employees administrative rights by default

Answer

Giving all employees full access to the company's financial data

Question 15

Which TWO of the following are examples of multi-factor authentication? (Choose TWO.)

Accepted Answer

Smart card and a PIN. MFA requires two or more factors from different categories. A password plus a fingerprint combines knowledge (password) and inherence (fingerprint). A smart card plus a PIN combines possession (card) and knowledge (PIN).

Answer

Password and a security question

Answer

Username and password

Answer

Two different passwords