FC0-U71 Security Practice Test 6 — 15 Questions

Question 1

What is the primary purpose of a network firewall?

Accepted Answer

To block unauthorized network traffic based on rules. A network firewall's primary purpose is to control incoming and outgoing network traffic by comparing packets against a set of predefined security rules. It acts as a barrier between trusted internal networks and untrusted external networks (like the internet), allowing or denying traffic based on criteria such as IP addresses, ports, and protocols. This rule-based filtering is the core function that distinguishes a firewall from other security tools.

Answer

To prevent malware infections by scanning files

Answer

To encrypt data transmitted over the network

Answer

To provide wireless network access

Question 2

Which type of malware attaches to legitimate files and spreads when those files are executed?

Accepted Answer

Virus. A virus attaches itself to files or programs and replicates when the infected file is executed. Worms spread without a host file; trojans disguise as legitimate software.

Answer

Ransomware

Answer

Worm

Answer

Trojan

Question 3

A company requires employees to use a one-time code from a smartphone app in addition to their password to log into the corporate VPN. This is an example of:

Accepted Answer

Multi-factor authentication. Using a one-time code from a smartphone app in addition to a password combines two different authentication factors: something you know (the password) and something you have (the smartphone app generating the OTP). This satisfies the definition of multi-factor authentication because it uses two distinct factor categories.

Answer

Single factor authentication

Answer

Two-step verification using the same factor

Answer

Biometric authentication

Question 4

What is the primary risk of using public Wi-Fi without a VPN?

Accepted Answer

Data transmitted can be intercepted by attackers. Public Wi-Fi is often unencrypted, allowing attackers to intercept data transmitted over the network. A VPN encrypts traffic, protecting data in transit.

Answer

The Wi-Fi network may be slower

Answer

The device may overheat

Answer

Increased risk of malware infection from the network

Question 5

Which THREE of the following are characteristics of a strong password? (Select THREE)

Accepted Answer

At least 12 characters in length. Option A is correct because a minimum length of at least 12 characters increases the search space an attacker must cover in a brute-force or dictionary attack, making the password substantially harder to crack. Option B is correct because mixing uppercase letters, lowercase letters, numbers, and symbols expands the character set and defeats simple dictionary and pattern-based guessing techniques. Option D is correct because using a unique password that is not reused on other accounts prevents credential-stuffing attacks, where a breach of one service would otherwise compromise multiple accounts. Option C is incorrect because including a user's birth date creates a predictable, easily guessable value often obtainable from social media or public records. Option E is incorrect because reusing a password across multiple accounts is a dangerous practice that amplifies the impact of any single credential leak.

Answer

Includes the user's birth date

Answer

Is reused across multiple accounts

Question 6

Which TWO of the following are types of malware? (Select TWO)

Accepted Answer

Ransomware. Ransomware (B) is a type of malware that encrypts a victim's files or locks a system and demands payment for restoration, making it a classic malicious software category. Spyware (E) is also malware, designed to covertly monitor user activity and harvest sensitive information such as credentials or browsing habits. A firewall (A) is a security control that filters network traffic, not malware. Encryption (C) is a legitimate cryptographic technique for protecting data confidentiality, not malicious software. Phishing (D) is a social-engineering attack that tricks users into revealing information, but it is an attack method rather than a malware type.

Answer

Firewall

Answer

Encryption

Answer

Phishing

Question 7

Which of the following best describes the 'Confidentiality' component of the CIA triad?

Accepted Answer

Data is accessible only to authorized users. Confidentiality ensures that data is not accessed by unauthorized individuals. Integrity protects data from unauthorized modification, and availability ensures data is accessible when needed.

Answer

Systems are operational when needed

Answer

Data is encrypted at rest

Answer

Data is not modified without authorization

Question 8

A company is implementing a backup strategy. Which of the following best adheres to the 3-2-1 backup rule?

Accepted Answer

Original data on a server, a backup on a NAS in the same building, and a backup in the cloud. The 3-2-1 rule means 3 copies of data, on 2 different media types, with 1 offsite. Option B meets this: 3 copies (original + 2 backups), 2 media (NAS + cloud), 1 offsite (cloud).

Answer

Two backups on tape drives, both stored in the server room

Answer

Original data on a laptop, a backup on a USB drive, and a backup on a second USB drive stored in a safe

Answer

One backup on an external drive stored in the same room as the server

Question 9

An organization wants to ensure that employees only have access to the data necessary to perform their job functions. Which principle should be applied?

Accepted Answer

Least privilege. The principle of least privilege grants users only the permissions they need to do their work, minimizing potential damage.

Answer

Defense in depth

Answer

Separation of duties

Answer

Mandatory access control

Question 10

A security analyst notices that a user's computer is running slowly and displaying many pop-up ads. Which type of malware is most likely causing this?

Accepted Answer

Adware. Adware displays unwanted advertisements and often causes performance issues. Spyware collects information, ransomware encrypts files, and a rootkit hides itself.

Answer

Spyware

Answer

Ransomware

Answer

Rootkit

Question 11

Which of the following is the primary purpose of hashing a password before storing it in a database?

Accepted Answer

To verify the password without storing it in plaintext. Hashing is a one-way function that converts a password into a fixed-length string. It is used to securely store passwords so that even if the database is breached, the actual passwords are not easily recoverable.

Answer

To make the password longer and more secure

Answer

To compress the password to save storage space

Answer

To encrypt the password so it can be decrypted later

Question 12

What is the difference between a threat and a vulnerability?

Accepted Answer

A threat is a potential harm, and a vulnerability is a weakness. A threat is a potential source of harm (e.g., a hacker), while a vulnerability is a weakness that can be exploited (e.g., unpatched software).

Answer

They are the same thing

Answer

A threat is a weakness, and a vulnerability is a danger

Answer

A threat is a type of malware, and a vulnerability is a type of attack

Question 13

An employee is working from a coffee shop and needs to access company files. Which of the following is the most secure method?

Accepted Answer

Use a VPN to encrypt all traffic between the laptop and the company. A VPN encrypts all traffic between the laptop and the company network, protecting data from eavesdropping on the untrusted public Wi-Fi. This ensures that even if the coffee shop's network is compromised, the employee's files and credentials remain secure. It is the most secure method because it provides end-to-end encryption and authenticated access to company resources.

Answer

Connect directly to the company's network over the public Wi-Fi

Answer

Disable file sharing on the laptop

Answer

Use HTTPS websites only

Question 14

Which of the following is a characteristic of a worm compared to a virus?

Accepted Answer

A worm can self-replicate without user intervention. A worm is defined by its ability to self-replicate and propagate across networks without requiring user interaction or a host file. It exploits vulnerabilities or uses network shares to spread autonomously, distinguishing it from a virus, which requires a host file and typically user action (like opening an attachment) to execute and replicate.

Answer

A worm is always disguised as legitimate software

Answer

A worm is a type of ransomware

Answer

A worm requires a host file to replicate

Question 15

What is the primary purpose of a firewall?

Accepted Answer

To prevent unauthorized network access. A firewall controls incoming and outgoing network traffic based on predetermined security rules. It filters traffic by port, protocol, or IP address to block unauthorized access.

Answer

To encrypt data on the hard drive

Answer

To detect and remove viruses

Answer

To manage user passwords