FC0-U71 Security Practice Test 5 — 15 Questions

Question 1

A security analyst is explaining the difference between a threat and a vulnerability. Which statement accurately describes this difference?

Accepted Answer

A threat is a potential cause of harm, and a vulnerability is a weakness that can be exploited.. A vulnerability is a weakness, while a threat is a potential danger that exploits that weakness.

Answer

A vulnerability is a risk, and a threat is a countermeasure.

Answer

A threat is a weakness in a system, and a vulnerability is an attack that exploits it.

Answer

A vulnerability is a potential harm, and a threat is likelihood times impact.

Question 2

Which type of malware is disguised as legitimate software but performs malicious actions?

Accepted Answer

Trojan. A Trojan horse appears useful but contains harmful code, unlike viruses or worms that self-replicate.

Answer

Virus

Answer

Ransomware

Answer

Worm

Question 3

A company wants to ensure that data on lost laptops cannot be accessed. Which technology should be used?

Accepted Answer

Full disk encryption. Full disk encryption (FDE) encrypts the entire storage volume so that if a laptop is lost or stolen, the data is unreadable without the decryption key (typically tied to a TPM or user credential). This directly addresses the requirement that data on lost laptops cannot be accessed, even if the drive is removed and mounted elsewhere.

Answer

VPN

Answer

Firewall

Answer

Antivirus software

Question 4

An employee calls the help desk claiming to be a manager from another department and requests a password reset. This is an example of which social engineering technique?

Accepted Answer

Pretexting. Pretexting is a social engineering technique where an attacker invents a fabricated scenario (a pretext) — such as impersonating a manager from another department — to manipulate a victim into divulging information or performing an action like a password reset. The key element is the false identity and fabricated context used to gain trust. Because the caller claims to be a manager requesting a password reset, this is a textbook pretexting attack.

Answer

Baiting

Answer

Tailgating

Answer

Phishing

Question 5

A user is concerned about connecting to a public Wi-Fi network at a coffee shop. Which security measure can best protect their data?

Accepted Answer

Use a VPN. A VPN encrypts traffic between the user's device and the VPN server, protecting data on public networks.

Answer

Use HTTPS websites only

Answer

Use a firewall

Answer

Disable antivirus

Question 6

A company's backup strategy requires three copies of data, on two different media types, with one copy offsite. Which backup rule does this follow?

Accepted Answer

3-2-1 rule. The 3-2-1 backup rule: three copies, two different media types, one offsite.

Answer

Incremental backup

Answer

Differential backup

Answer

Full backup

Question 7

Which of the following is an example of something you are in multi-factor authentication?

Accepted Answer

Fingerprint scan. In multi-factor authentication, the three factor categories are something you know (password, PIN), something you have (smart card, token, phone), and something you are (biometric — fingerprint, retina, face). A fingerprint scan is a biometric, which falls under 'something you are,' making it the correct example of an 'are' factor.

Answer

Password

Answer

Smart card

Answer

One-time passcode

Question 8

An IT administrator is hardening a server. Which three of the following actions should be taken to improve security? (Select THREE.)

Accepted Answer

Disable unused services and ports. Option A is correct because disabling unused services and closing unused ports reduces the attack surface, eliminating unnecessary daemons and listening sockets that attackers could exploit. Option B is correct because applying the principle of least privilege ensures users and processes receive only the minimum rights needed, limiting the blast radius of a compromise or insider misuse. Option D is correct because enabling automatic software updates ensures timely patching of known vulnerabilities in the OS and applications, closing exploits before they can be leveraged. Option C is incorrect because disabling the firewall removes a critical network access control layer and exposes services to unauthorized traffic, harming rather than improving security. Option E is incorrect because granting all users administrative rights violates least privilege and dramatically increases the risk of privilege abuse and malware propagation.

Answer

Disable the firewall for better performance

Answer

Grant all users administrative rights

Question 9

A user receives a suspicious email with an attachment claiming to be an invoice. Which three practices should the user follow? (Select THREE.)

Accepted Answer

Do not download unexpected attachments. Option A is correct because unexpected attachments are a primary malware and phishing delivery vector, so the user should not download or open them. Option B is correct because attackers often spoof or typosquat sender addresses, so carefully verifying the sender's actual email address helps confirm legitimacy. Option D is correct because hovering over a link reveals the true destination URL in the status bar or tooltip, exposing mismatched or malicious domains before any click. Option C is wrong because forwarding a suspicious email to all employees can spread malicious links or attachments and cause panic; it should instead be reported to IT/security. Option E is wrong because downloading and opening the attachment to inspect it can execute malicious code and compromise the user's system.

Answer

Forward the email to all employees for awareness

Answer

Download and open the attachment to check its content

Question 10

Which component of the CIA triad ensures that data cannot be modified by unauthorized users?

Accepted Answer

Integrity. Integrity, the 'I' in the CIA triad, specifically ensures that data remains accurate, complete, and unaltered unless modified by authorized parties. It protects against unauthorized modification, deletion, or corruption, whether the data is at rest, in transit, or in use. Authentication verifies identity, availability ensures access, and confidentiality prevents unauthorized disclosure—none of these directly address modification prevention.

Answer

Authentication

Answer

Availability

Answer

Confidentiality

Question 11

A user receives an email that appears to be from their bank, asking them to click a link and verify their account. The email contains urgent language and a generic greeting. Which type of security threat is this?

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers send deceptive emails to steal credentials. The generic greeting and urgent language are common signs.

Answer

Smishing

Answer

Spear phishing

Answer

Vishing

Question 12

A company implements a policy where employees must swipe their ID card and then enter a PIN to access the server room. Which two authentication factors are being used?

Accepted Answer

Something you have and something you know. The ID card is 'something you have' (possession factor) and the PIN is 'something you know' (knowledge factor). This is multi-factor authentication.

Answer

Something you know and something you are

Answer

Something you have and something you are

Answer

Something you know and somewhere you are

Question 13

An employee allows a delivery person to enter a secure office building by holding the door open. The delivery person does not have an access badge. Which social engineering attack is this?

Accepted Answer

Tailgating. Tailgating (or piggybacking) occurs when an unauthorized person follows an authorized person into a restricted area without proper authentication.

Answer

Phishing

Answer

Baiting

Answer

Pretexting

Question 14

A security administrator wants to protect data at rest on a laptop that may be lost or stolen. Which of the following is the BEST solution?

Accepted Answer

Enable full disk encryption. Full disk encryption (FDE) protects data at rest by encrypting the entire volume, so if the laptop is lost or stolen the data is unreadable without the decryption key. This directly addresses the threat of physical device compromise, which is the scenario described.

Answer

Use a VPN when connecting to the internet

Answer

Install a host-based firewall

Answer

Implement strong password policies

Question 15

Which backup strategy involves keeping three copies of data on two different media types with one copy offsite?

Accepted Answer

3-2-1 backup rule. The 3-2-1 backup rule is a widely recommended strategy that specifies: at least 3 copies of data, on 2 different media types, with 1 copy stored offsite. This ensures redundancy and protection against various failure scenarios, including local disasters. The other options are specific backup types, not strategies for copy distribution.

Answer

Full backup

Answer

Differential backup

Answer

Incremental backup