FC0-U71 Security Practice Test 4 — 15 Questions

Question 1

Which element of the CIA triad is primarily concerned with ensuring that data is not accessed by unauthorized individuals?

Accepted Answer

Confidentiality. Confidentiality ensures that data is accessible only to authorized users, preventing unauthorized access.

Answer

Authentication

Answer

Availability

Answer

Integrity

Question 2

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the sender's email address is slightly misspelled. Which type of threat is this?

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers send fraudulent emails to steal sensitive information.

Answer

Rootkit

Answer

Tailgating

Answer

Ransomware

Question 3

An organization requires employees to use a password and a one-time code sent to their mobile phone when logging into the network. Which security principle is being implemented?

Accepted Answer

Multi-factor authentication. Multi-factor authentication (MFA) requires two or more factors: something you know (password) and something you have (phone).

Answer

Least privilege

Answer

Biometrics

Answer

Single sign-on

Question 4

Which of the following is the best practice for creating a strong password?

Accepted Answer

Using a 14-character phrase with numbers and symbols. A strong password is at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols.

Answer

Using your pet's name

Answer

Using the same password for multiple accounts

Answer

Using a sequence of 8 characters with letters only

Question 5

A security analyst is explaining the difference between a threat and a vulnerability. Which statement accurately describes this difference?

Accepted Answer

A threat is a potential cause of harm, and a vulnerability is a weakness that can be exploited.. A vulnerability is a weakness, while a threat is a potential danger that exploits that weakness.

Answer

A vulnerability is a risk, and a threat is a countermeasure.

Answer

A threat is a weakness in a system, and a vulnerability is an attack that exploits it.

Answer

A vulnerability is a potential harm, and a threat is likelihood times impact.

Question 6

Which type of malware is disguised as legitimate software but performs malicious actions?

Accepted Answer

Trojan. A Trojan horse appears useful but contains harmful code, unlike viruses or worms that self-replicate.

Answer

Virus

Answer

Ransomware

Answer

Worm

Question 7

A company wants to ensure that data on lost laptops cannot be accessed. Which technology should be used?

Accepted Answer

Full disk encryption. Full disk encryption (e.g., BitLocker) encrypts the entire drive, making data unreadable without the key.

Answer

VPN

Answer

Firewall

Answer

Antivirus software

Question 8

What is the primary purpose of a password manager?

Accepted Answer

To generate and store strong, unique passwords. Password managers generate and store strong, unique passwords for each account, reducing password reuse.

Answer

To store passwords in the cloud

Answer

To share passwords with others

Answer

To bypass authentication

Question 9

An employee calls the help desk claiming to be a manager from another department and requests a password reset. This is an example of which social engineering technique?

Accepted Answer

Pretexting. Pretexting involves creating a fabricated scenario (pretext) to obtain information.

Answer

Baiting

Answer

Tailgating

Answer

Phishing

Question 10

A user is concerned about connecting to a public Wi-Fi network at a coffee shop. Which security measure can best protect their data?

Accepted Answer

Use a VPN. A VPN encrypts traffic between the user's device and the VPN server, protecting data on public networks.

Answer

Use HTTPS websites only

Answer

Use a firewall

Answer

Disable antivirus

Question 11

A company's backup strategy requires three copies of data, on two different media types, with one copy offsite. Which backup rule does this follow?

Accepted Answer

3-2-1 rule. The 3-2-1 backup rule: three copies, two different media types, one offsite.

Answer

Incremental backup

Answer

Differential backup

Answer

Full backup

Question 12

Which of the following is an example of something you are in multi-factor authentication?

Accepted Answer

Fingerprint scan. Biometrics (fingerprint, face) are physical characteristics, i.e., something you are.

Answer

Password

Answer

Smart card

Answer

One-time passcode

Question 13

A company is implementing physical security measures. Which two of the following are examples of physical security controls? (Select TWO.)

Accepted Answer

Locking screens when leaving the desk. Locking screens prevent unauthorized viewing, and shredding documents destroys sensitive paper data. Both are physical security.

Answer

Enforcing strong passwords

Answer

Using a firewall

Answer

Installing antivirus software

Question 14

An IT administrator is hardening a server. Which three of the following actions should be taken to improve security? (Select THREE.)

Accepted Answer

Disable unused services and ports. Disabling unnecessary services reduces attack surface; enabling automatic updates ensures patches; implementing least privilege limits access.

Answer

Disable the firewall for better performance

Answer

Grant all users administrative rights

Question 15

A user receives a suspicious email with an attachment claiming to be an invoice. Which three practices should the user follow? (Select THREE.)

Accepted Answer

Do not download unexpected attachments. Verify the sender, avoid downloading unexpected attachments, and hover over links to check URL. Forwarding to all users spreads potential risk.

Answer

Forward the email to all employees for awareness

Answer

Download and open the attachment to check its content