FC0-U71 Security Practice Test 5 — 15 Questions

Question 1

Which component of the CIA triad ensures that data cannot be modified by unauthorized users?

Accepted Answer

Integrity. Integrity ensures that data is not altered unexpectedly by unauthorized parties. Confidentiality prevents unauthorized access, and availability ensures systems are accessible when needed.

Answer

Authentication

Answer

Availability

Answer

Confidentiality

Question 2

A user receives an email that appears to be from their bank, asking them to click a link and verify their account. The email contains urgent language and a generic greeting. Which type of security threat is this?

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers send deceptive emails to steal credentials. The generic greeting and urgent language are common signs.

Answer

Smishing

Answer

Spear phishing

Answer

Vishing

Question 3

A company implements a policy where employees must swipe their ID card and then enter a PIN to access the server room. Which two authentication factors are being used?

Accepted Answer

Something you have and something you know. The ID card is 'something you have' (possession factor) and the PIN is 'something you know' (knowledge factor). This is multi-factor authentication.

Answer

Something you know and something you are

Answer

Something you have and something you are

Answer

Something you know and somewhere you are

Question 4

Which of the following best describes the principle of least privilege?

Accepted Answer

Users should have the minimum access needed to perform their tasks.. The principle of least privilege grants users only the permissions necessary to perform their job functions, minimizing potential damage from accidents or attacks.

Answer

Access should be granted based on seniority within the organization.

Answer

All users should have the same level of access to ensure consistency.

Answer

Users should have full administrative access to their own devices.

Question 5

What is the primary purpose of a password manager?

Accepted Answer

To store passwords in an encrypted vault and generate complex passwords. A password manager securely stores and generates strong, unique passwords for each account, reducing password reuse and improving security.

Answer

To share passwords with other users securely

Answer

To automatically log in to websites without typing a password

Answer

To recover forgotten passwords quickly

Question 6

An employee allows a delivery person to enter a secure office building by holding the door open. The delivery person does not have an access badge. Which social engineering attack is this?

Accepted Answer

Tailgating. Tailgating (or piggybacking) occurs when an unauthorized person follows an authorized person into a restricted area without proper authentication.

Answer

Phishing

Answer

Baiting

Answer

Pretexting

Question 7

A security administrator wants to protect data at rest on a laptop that may be lost or stolen. Which of the following is the BEST solution?

Accepted Answer

Enable full disk encryption. Full disk encryption (e.g., BitLocker or FileVault) encrypts the entire drive, making data inaccessible without the decryption key, protecting data at rest.

Answer

Use a VPN when connecting to the internet

Answer

Install a host-based firewall

Answer

Implement strong password policies

Question 8

Which backup strategy involves keeping three copies of data on two different media types with one copy offsite?

Accepted Answer

3-2-1 backup rule. The 3-2-1 rule: three copies of data, on two different media types, with one copy stored offsite to ensure redundancy and disaster recovery.

Answer

Full backup

Answer

Differential backup

Answer

Incremental backup

Question 9

What is the primary purpose of a network firewall?

Accepted Answer

To block unauthorized network traffic based on rules. A network firewall filters incoming and outgoing traffic based on a set of rules, typically by port and protocol, to block unauthorized access while allowing legitimate communication.

Answer

To prevent malware infections by scanning files

Answer

To encrypt data transmitted over the network

Answer

To provide wireless network access

Question 10

Which type of malware attaches to legitimate files and spreads when those files are executed?

Accepted Answer

Virus. A virus attaches itself to files or programs and replicates when the infected file is executed. Worms spread without a host file; trojans disguise as legitimate software.

Answer

Ransomware

Answer

Worm

Answer

Trojan

Question 11

A company requires employees to use a one-time code from a smartphone app in addition to their password to log into the corporate VPN. This is an example of:

Accepted Answer

Multi-factor authentication. Multi-factor authentication (MFA) combines something you know (password) and something you have (smartphone app generating a code). This is MFA.

Answer

Single factor authentication

Answer

Two-step verification using the same factor

Answer

Biometric authentication

Question 12

What is the primary risk of using public Wi-Fi without a VPN?

Accepted Answer

Data transmitted can be intercepted by attackers. Public Wi-Fi is often unencrypted, allowing attackers to intercept data transmitted over the network. A VPN encrypts traffic, protecting data in transit.

Answer

The Wi-Fi network may be slower

Answer

The device may overheat

Answer

Increased risk of malware infection from the network

Question 13

Which TWO of the following are examples of physical security measures? (Select TWO)

Accepted Answer

Locking the computer screen when leaving the desk. Locking screens when away (lock screen) and shredding sensitive documents are physical security measures. Firewalls and encryption are logical/technical controls; passwords are authentication.

Answer

Requiring strong passwords

Answer

Using encryption for sensitive files

Answer

Installing a network firewall

Question 14

Which THREE of the following are characteristics of a strong password? (Select THREE)

Accepted Answer

At least 12 characters in length. A strong password is at least 12 characters long, contains a mix of uppercase, lowercase, numbers, and symbols, and is not reused across accounts. Using personal information or common words makes passwords weak.

Answer

Includes the user's birth date

Answer

Is reused across multiple accounts

Question 15

Which TWO of the following are types of malware? (Select TWO)

Accepted Answer

Ransomware. Ransomware and spyware are both types of malware. A firewall is a security tool, encryption is a protection method, and phishing is a social engineering attack.

Answer

Firewall

Answer

Encryption

Answer

Phishing