Security

A company requires all employees to use a smart card and a PIN to access the building. This is an example of which concept?

Which type of malware is designed to replicate itself and spread to other computers without needing to attach to a host file?

An attacker gains physical access to a secure area by following an authorized employee through a door that requires a badge. This social engineering technique is known as:

A small business owner wants to protect customer data stored on laptops in case the devices are stolen. Which encryption method provides the best protection for the entire hard drive?

An employee allows a delivery person to enter a secure office building by holding the door open. The delivery person does not have an access badge. Which social engineering attack is this?

Which TWO of the following are effective measures to protect against ransomware attacks? (Select two.)

A security analyst is evaluating risks to the company's network. According to the risk formula (Risk = Likelihood × Impact), which THREE of the following are considered vulnerabilities?

A user receives an email from their bank asking them to click a link and verify their account information. The email contains spelling errors and the sender's address looks suspicious. Which type of social engineering attack is this?

A user reports that their computer has been displaying unwanted pop-up advertisements frequently. Which type of malware is most likely responsible?

Which of the following is a best practice for creating a strong password?

A security analyst discovers that a file on a server has been modified without authorization. Which element of the CIA triad has been compromised?

What is the primary risk of using public Wi-Fi without a VPN?

Which of the following is the best practice for creating strong passwords?

What is the primary purpose of a password manager?

Which component of the CIA triad ensures that data cannot be modified by unauthorized users?

A user is concerned about connecting to a public Wi-Fi network at a coffee shop. Which security measure can best protect their data?

Which of the following is the primary purpose of hashing a password before storing it in a database?

A company's backup strategy requires three copies of data, on two different media types, with one copy offsite. Which backup rule does this follow?

A company is developing a security policy. Which THREE of the following are examples of physical security controls?

What is the primary purpose of a network firewall?

Which TWO of the following are examples of multi-factor authentication?

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user suspects it is a phishing attempt. Which type of phishing attack is this most likely to be?

Which of the following is the strongest password?

An organization requires employees to use a password and a one-time code sent to their mobile phone when logging into the network. Which security principle is being implemented?

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The email contains urgent language and threats of account closure. What type of attack is this?

A user receives an email that appears to be from their bank, asking them to click a link and verify their account. The email contains urgent language and a generic greeting. Which type of security threat is this?

Which element of the CIA triad is primarily concerned with ensuring that data is not accessed by unauthorized individuals?

Which of the following is a characteristic of a worm in the context of malware?

An organization uses a security model where users are granted the minimum permissions necessary to perform their job functions. This model is known as:

Which TWO of the following are characteristics of ransomware?

Which THREE of the following are effective methods to protect against malware infections? (Select THREE.)

An employee calls the help desk claiming to be a manager from another department and requests a password reset. This is an example of which social engineering technique?

Which THREE of the following are best practices for password security?

Which of the following best describes the 'Confidentiality' component of the CIA triad?

Which of the following best describes the principle of least privilege?

Which type of malware is disguised as legitimate software but performs malicious actions?

An employee is working from a coffee shop and needs to access company files. Which of the following is the most secure method?

What is the difference between a threat and a vulnerability?

Which TWO of the following are best practices for password security?

A company wants to implement the principle of least privilege for its employees. Which TWO of the following actions align with this principle? (Choose TWO.)

A company is implementing a backup strategy. Which of the following best adheres to the 3-2-1 backup rule?

A company implements a policy where employees must lock their computer screen when leaving their desk. Which security principle does this practice support?

Which of the following is the best practice for backing up data according to the 3-2-1 rule?

Which backup strategy involves keeping three copies of data on two different media types with one copy offsite?

Which of the following is a key difference between a vulnerability and a threat in cybersecurity?

Which of the following malware types is characterized by self-replication without needing to attach to a host file?

A security analyst is explaining the difference between a threat and a vulnerability. Which statement accurately describes this difference?

A company wants to ensure that sensitive documents are not readable if a laptop is stolen. Which of the following provides the best protection?

Which TWO of the following are recommended practices for physical security in an office environment? (Select two.)

Which of the following encryption methods is used to protect data in transit over a public network, such as the internet?

An organization implements a security control that requires users to swipe a smart card and then enter a PIN to access a secure facility. Which combination of authentication factors does this represent?

Which THREE of the following are examples of multi-factor authentication? (Select three.)

Which of the following is an example of multi-factor authentication?

An IT administrator is hardening a server. Which three of the following actions should be taken to improve security? (Select THREE.)

An organization adopts the 3-2-1 backup rule. Which of the following practices aligns with this rule?

A security analyst notices that a user's computer is running slowly and displaying many pop-up ads. Which type of malware is most likely causing this?

Which of the following is a characteristic of a strong password?

Which TWO of the following are examples of physical security controls?

A company is implementing physical security measures. Which two of the following are examples of physical security controls? (Select TWO.)

A company implements a policy requiring employees to use a password and a one-time code sent to their mobile phone when logging into the corporate network. Which security concept is being employed?

Which TWO of the following are examples of physical security measures? (Select TWO)

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the email address is slightly misspelled (e.g., 'support@bankk.com' instead of 'support@bank.com'). Which type of attack is this?

Which of the following is the best practice for creating a strong password?

Which TWO of the following are examples of social engineering attacks? (Select TWO.)

Which of the following is an example of something you are in multi-factor authentication?

Which of the following best describes the principle of confidentiality in the CIA triad?

Which of the following best describes the principle of confidentiality in the CIA triad?

Which of the following is a characteristic of a strong password?

A company requires employees to use a one-time code from a smartphone app in addition to their password to log into the corporate VPN. This is an example of:

Which THREE of the following are characteristics of a strong password? (Select THREE)

A company wants to protect its network from unauthorized external access. Which of the following devices should be configured to filter traffic based on port and protocol?

Which of the following is a characteristic of a worm compared to a virus?

Which of the following best describes the principle of least privilege?

A security analyst discovers that a file on a server has been modified without authorization. However, the system logs show that the modification was made by an authenticated user who had legitimate access to the file. Which aspect of the CIA triad has been violated?

A security administrator wants to protect data at rest on a laptop that may be lost or stolen. Which of the following is the BEST solution?

Which of the following is an example of a physical security control?

An attacker gains physical access to a building by following an employee through a secured door without using a badge. This is an example of which social engineering technique?

What is the primary purpose of a firewall?

Which type of malware attaches to legitimate files and spreads when those files are executed?

Which TWO of the following are characteristics of a strong password? (Select TWO.)

A user receives a suspicious email with an attachment claiming to be an invoice. Which three practices should the user follow? (Select THREE.)

A company implements a policy where employees must swipe their ID card and then enter a PIN to access the server room. Which two authentication factors are being used?

A company's IT policy mandates data backups following the 3-2-1 rule. Which TWO of the following practices align with this rule?

What is the primary purpose of a password manager?

An organization wants to ensure that employees only have access to the data necessary to perform their job functions. Which principle should be applied?

An employee receives an email that appears to be from the CEO, urgently requesting a wire transfer to an external vendor. The email address looks slightly off. Which type of social engineering attack is this?

Which TWO of the following are examples of multi-factor authentication? (Choose TWO.)

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the sender's email address is slightly misspelled. Which type of threat is this?

Which TWO of the following are types of malware? (Select TWO)

A user wants to protect their laptop in case it is stolen. Which TWO of the following measures would help protect the confidentiality of the data?

A company wants to ensure that data on lost laptops cannot be accessed. Which technology should be used?

A help desk technician receives a call from a user who says their computer is showing a message that files are encrypted and a ransom is demanded. Which TWO types of malware are most likely involved?

A user downloads a free game from an untrusted website. After installation, the user's computer begins displaying pop-up advertisements frequently. Which type of malware is most likely installed?

An employee is tailgated into a secure office building by someone without a badge. Which type of security threat does this represent?

What is the primary purpose of a password manager?

An organization implements a security policy where users must provide a password and a one-time code generated by a mobile app to log in. Which type of authentication is being used?

A security analyst is explaining the CIA triad to new employees. Which scenario best illustrates a breach of integrity?