FC0-U71 Security — Timed 10 Questions

Question 1

An organization is implementing a defense-in-depth strategy. Which THREE of the following are considered security controls that can be used? (Choose THREE.)

Accepted Answer

Firewall. Defense-in-depth uses multiple layers of security controls. Firewalls, antivirus, and encryption are different types of controls that provide overlapping protection.

Answer

Single sign-on

Answer

Acceptable use policy

Question 2

Which of the following best describes the principle of confidentiality in the CIA triad?

Accepted Answer

Preventing unauthorized access to information. Confidentiality ensures that information is not disclosed to unauthorized individuals, systems, or processes.

Answer

Data is not altered unexpectedly

Answer

Systems are accessible when needed

Answer

Ensuring data is backed up regularly

Question 3

A company implements a policy requiring employees to use a password and a one-time code sent to their mobile phone when logging into the corporate network. Which security concept is being employed?

Accepted Answer

Multi-factor authentication. Multi-factor authentication (MFA) requires two or more factors: something you know (password) and something you have (phone).

Answer

Role-based access control

Answer

Single sign-on

Answer

Biometrics

Question 4

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The email contains urgent language and threats of account closure. What type of attack is this?

Accepted Answer

Phishing. Phishing is a social engineering attack where attackers impersonate a legitimate entity to steal sensitive information.

Answer

Spear phishing

Answer

Smishing

Answer

Vishing

Question 5

Which of the following is the strongest password?

Accepted Answer

MyD0g!sF1d0. A strong password is long and includes a mix of character types.

Answer

12345678

Answer

P@ssw0rd

Answer

password

Question 6

A security analyst discovers that a file on a server has been modified without authorization. However, the system logs show that the modification was made by an authenticated user who had legitimate access to the file. Which aspect of the CIA triad has been violated?

Accepted Answer

Integrity. Integrity ensures data is not altered by unauthorized parties. Even though the user was authenticated, the modification was unauthorized, violating integrity.

Answer

Non-repudiation

Answer

Availability

Answer

Confidentiality

Question 7

Which of the following malware types is characterized by self-replication without needing to attach to a host file?

Accepted Answer

Worm. A worm is standalone malware that replicates itself to spread to other computers, often using network connections.

Answer

Virus

Answer

Trojan

Answer

Ransomware

Question 8

A company wants to ensure that sensitive documents are not readable if a laptop is stolen. Which of the following provides the best protection?

Accepted Answer

Full disk encryption. Full disk encryption (FDE) encrypts the entire drive, making data unreadable without the decryption key.

Answer

Antivirus software

Answer

Firewall

Answer

Strong password on user account

Question 9

What is the primary purpose of a password manager?

Accepted Answer

To generate and store strong, unique passwords. Password managers generate and store complex, unique passwords for each account, reducing password reuse and improving security.

Answer

To store passwords in the cloud for easy access

Answer

To encrypt all network traffic

Answer

To share passwords securely with team members

Question 10

An attacker gains physical access to a building by following an employee through a secured door without using a badge. This is an example of which social engineering technique?

Accepted Answer

Tailgating. Tailgating (also called piggybacking) is when an unauthorized person follows an authorized person into a restricted area.

Answer

Phishing

Answer

Baiting

Answer

Pretexting