75 of 98 questions · Page 1/2 · Itf Security topic · Answers revealed
A company requires all employees to use a smart card and a PIN to access the building. This is an example of which concept?
Two different factors are used: possession (smart card) and knowledge (PIN).
Why this answer
Multi-factor authentication combines something you have (smart card) and something you know (PIN).
Which type of malware is designed to replicate itself and spread to other computers without needing to attach to a host file?
Worms spread without needing a host file.
Why this answer
Worms are self-replicating and spread independently, unlike viruses which attach to files.
An attacker gains physical access to a secure area by following an authorized employee through a door that requires a badge. This social engineering technique is known as:
Tailgating is physically following someone through a door without authorization.
Why this answer
Tailgating (or piggybacking) is when an unauthorized person follows an authorized person into a restricted area without proper authentication.
A small business owner wants to protect customer data stored on laptops in case the devices are stolen. Which encryption method provides the best protection for the entire hard drive?
Correct: full disk encryption protects all data on the drive.
Why this answer
Full disk encryption (e.g., BitLocker or FileVault) encrypts the entire drive, making data unreadable without the decryption key even if the physical device is stolen.
An employee allows a delivery person to enter a secure office building by holding the door open. The delivery person does not have an access badge. Which social engineering attack is this?
Correct. Following someone into a secure area is tailgating.
Why this answer
Tailgating (or piggybacking) occurs when an unauthorized person follows an authorized person into a restricted area without proper authentication.
Which TWO of the following are effective measures to protect against ransomware attacks? (Select two.)
Patches fix vulnerabilities that ransomware might exploit.
Why this answer
Regular backups allow restoration without paying ransom; keeping systems patched closes vulnerabilities that ransomware exploits.
A security analyst is evaluating risks to the company's network. According to the risk formula (Risk = Likelihood × Impact), which THREE of the following are considered vulnerabilities?
Weak encryption is a vulnerability that can be exploited to intercept data.
Why this answer
A vulnerability is a weakness that can be exploited by a threat.
A user receives an email from their bank asking them to click a link and verify their account information. The email contains spelling errors and the sender's address looks suspicious. Which type of social engineering attack is this?
The email is a typical phishing attempt trying to steal credentials.
Why this answer
Phishing is a social engineering attack where attackers send deceptive emails to trick recipients into revealing sensitive information.
A user reports that their computer has been displaying unwanted pop-up advertisements frequently. Which type of malware is most likely responsible?
Adware is specifically designed to display advertisements.
Why this answer
Adware displays unwanted advertisements, often in pop-ups or banners.
Which of the following is a best practice for creating a strong password?
Correct: a long passphrase with complexity is strong.
Why this answer
Strong passwords should be at least 12 characters, include a mix of uppercase, lowercase, numbers, and symbols, and should not be reused across accounts.
A security analyst discovers that a file on a server has been modified without authorization. Which element of the CIA triad has been compromised?
Integrity is compromised when data is altered without authorization.
Why this answer
Integrity ensures that data is not altered unexpectedly. Unauthorized modification violates integrity.
What is the primary risk of using public Wi-Fi without a VPN?
Correct. Without encryption, data can be intercepted.
Why this answer
Public Wi-Fi is often unencrypted, allowing attackers to intercept data transmitted over the network. A VPN encrypts traffic, protecting data in transit.
Which of the following is the best practice for creating strong passwords?
This produces a strong password.
Why this answer
A strong password should be at least 12 characters long and include a mix of character types.
What is the primary purpose of a password manager?
This is the core function.
Why this answer
Password managers generate and store complex, unique passwords for each account, reducing password reuse and improving security.
Which component of the CIA triad ensures that data cannot be modified by unauthorized users?
Correct. Integrity ensures data is not altered without authorization.
Why this answer
Integrity ensures that data is not altered unexpectedly by unauthorized parties. Confidentiality prevents unauthorized access, and availability ensures systems are accessible when needed.
A user is concerned about connecting to a public Wi-Fi network at a coffee shop. Which security measure can best protect their data?
Correct. VPNs encrypt data over public networks.
Why this answer
A VPN encrypts traffic between the user's device and the VPN server, protecting data on public networks.
Which of the following is the primary purpose of hashing a password before storing it in a database?
Hashing allows verification by comparing hashes.
Why this answer
Hashing is a one-way function that converts a password into a fixed-length string. It is used to securely store passwords so that even if the database is breached, the actual passwords are not easily recoverable.
A company's backup strategy requires three copies of data, on two different media types, with one copy offsite. Which backup rule does this follow?
Correct. This is the 3-2-1 backup rule.
Why this answer
The 3-2-1 backup rule: three copies, two different media types, one offsite.
A company is developing a security policy. Which THREE of the following are examples of physical security controls?
Guards are physical security.
Why this answer
Physical security controls protect hardware and facilities. Badge readers, locks, and guards are physical. Firewalls and antivirus are logical/technical controls.
What is the primary purpose of a network firewall?
Correct. Firewalls filter traffic to block unauthorized access.
Why this answer
A network firewall filters incoming and outgoing traffic based on a set of rules, typically by port and protocol, to block unauthorized access while allowing legitimate communication.
Which TWO of the following are examples of multi-factor authentication?
Smart card (something you have) and PIN (something you know) are different factors.
Why this answer
Multi-factor authentication requires two or more different types of authentication factors.
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user suspects it is a phishing attempt. Which type of phishing attack is this most likely to be?
The email is personalized and appears to come from the user's bank, making it a targeted attack.
Why this answer
Spear phishing targets specific individuals or organizations, often using personalized information to appear legitimate.
Which of the following is the strongest password?
12 characters, mix of uppercase, lowercase, numbers, symbol.
Why this answer
A strong password is long and includes a mix of character types.
An organization requires employees to use a password and a one-time code sent to their mobile phone when logging into the network. Which security principle is being implemented?
Correct. MFA uses multiple authentication factors.
Why this answer
Multi-factor authentication (MFA) requires two or more factors: something you know (password) and something you have (phone).
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The email contains urgent language and threats of account closure. What type of attack is this?
The email is a phishing attempt to steal credentials.
Why this answer
Phishing is a social engineering attack where attackers impersonate a legitimate entity to steal sensitive information.
A user receives an email that appears to be from their bank, asking them to click a link and verify their account. The email contains urgent language and a generic greeting. Which type of security threat is this?
Correct. This is a typical phishing attempt.
Why this answer
Phishing is a social engineering attack where attackers send deceptive emails to steal credentials. The generic greeting and urgent language are common signs.
Which element of the CIA triad is primarily concerned with ensuring that data is not accessed by unauthorized individuals?
Correct. Confidentiality prevents unauthorized access to data.
Why this answer
Confidentiality ensures that data is accessible only to authorized users, preventing unauthorized access.
Which of the following is a characteristic of a worm in the context of malware?
Correct: worms are self-propagating and do not need a host file.
Why this answer
A worm is a standalone malware that replicates itself to spread to other computers without needing to attach to a host file, often exploiting network vulnerabilities.
An organization uses a security model where users are granted the minimum permissions necessary to perform their job functions. This model is known as:
This is the definition of least privilege.
Why this answer
The principle of least privilege ensures users have only the access they need, reducing risk of misuse.
Which TWO of the following are characteristics of ransomware?
Ransomware encrypts files to prevent access.
Why this answer
Ransomware encrypts files and demands payment for decryption.
Which THREE of the following are effective methods to protect against malware infections? (Select THREE.)
Antivirus software is a primary defense against malware.
Why this answer
Antivirus software detects and removes malware; keeping software updated patches vulnerabilities; using a firewall blocks malicious traffic. Disabling software updates would increase risk, and opening all email attachments is dangerous.
An employee calls the help desk claiming to be a manager from another department and requests a password reset. This is an example of which social engineering technique?
Correct. The attacker creates a false identity to gain information.
Why this answer
Pretexting involves creating a fabricated scenario (pretext) to obtain information.
Which THREE of the following are best practices for password security?
2FA adds an extra layer of security beyond the password.
Why this answer
Strong passwords are long, complex, unique, and not shared.
Which of the following best describes the 'Confidentiality' component of the CIA triad?
Confidentiality prevents unauthorized access.
Why this answer
Confidentiality ensures that data is not accessed by unauthorized individuals. Integrity protects data from unauthorized modification, and availability ensures data is accessible when needed.
Which of the following best describes the principle of least privilege?
This is the correct definition of the principle of least privilege.
Why this answer
The principle of least privilege states that users should be granted only the minimum permissions necessary to perform their job functions, reducing potential damage from accidents or attacks.
Which type of malware is disguised as legitimate software but performs malicious actions?
Correct. A Trojan disguises itself as legitimate software.
Why this answer
A Trojan horse appears useful but contains harmful code, unlike viruses or worms that self-replicate.
An employee is working from a coffee shop and needs to access company files. Which of the following is the most secure method?
VPN provides a secure tunnel.
What is the difference between a threat and a vulnerability?
Correct definitions.
Why this answer
A threat is a potential source of harm (e.g., a hacker), while a vulnerability is a weakness that can be exploited (e.g., unpatched software).
Which TWO of the following are best practices for password security?
MFA provides additional security beyond passwords.
Why this answer
Using a password manager helps generate and store strong, unique passwords. Enabling MFA adds an extra layer of security. Sharing passwords and using simple patterns are insecure.
A company wants to implement the principle of least privilege for its employees. Which TWO of the following actions align with this principle? (Choose TWO.)
This aligns with least privilege.
Why this answer
Least privilege means giving users only the permissions necessary to perform their jobs. Granting access only to required applications and revoking old permissions enforce this.
A company is implementing a backup strategy. Which of the following best adheres to the 3-2-1 backup rule?
Three copies, two media types (NAS and cloud), one offsite (cloud).
Why this answer
The 3-2-1 rule means 3 copies of data, on 2 different media types, with 1 offsite. Option B meets this: 3 copies (original + 2 backups), 2 media (NAS + cloud), 1 offsite (cloud).
A company implements a policy where employees must lock their computer screen when leaving their desk. Which security principle does this practice support?
Correct: locking the screen prevents others from viewing or accessing data, maintaining confidentiality.
Why this answer
Locking the screen prevents unauthorized access when the user is away, supporting confidentiality by ensuring only authorized users can access the system.
Which of the following is the best practice for backing up data according to the 3-2-1 rule?
This follows the 3-2-1 backup rule.
Why this answer
The 3-2-1 rule means at least three copies of data, on two different types of storage media, with one copy stored offsite.
Which backup strategy involves keeping three copies of data on two different media types with one copy offsite?
Correct. This is the 3-2-1 rule.
Why this answer
The 3-2-1 rule: three copies of data, on two different media types, with one copy stored offsite to ensure redundancy and disaster recovery.
Which of the following is a key difference between a vulnerability and a threat in cybersecurity?
Correct: vulnerability = weakness; threat = potential danger.
Why this answer
A vulnerability is a weakness that could be exploited, while a threat is a potential danger (e.g., a hacker or malware) that could exploit that vulnerability.
Which of the following malware types is characterized by self-replication without needing to attach to a host file?
Worms self-replicate without host files.
Why this answer
A worm is standalone malware that replicates itself to spread to other computers, often using network connections.
A security analyst is explaining the difference between a threat and a vulnerability. Which statement accurately describes this difference?
Correct. A threat is a potential danger; a vulnerability is a weakness.
Why this answer
A vulnerability is a weakness, while a threat is a potential danger that exploits that weakness.
A company wants to ensure that sensitive documents are not readable if a laptop is stolen. Which of the following provides the best protection?
FDE protects data at rest.
Why this answer
Full disk encryption (FDE) encrypts the entire drive, making data unreadable without the decryption key.
Which TWO of the following are recommended practices for physical security in an office environment? (Select two.)
Prevents unauthorized access to the system.
Why this answer
Locking screens when away prevents unauthorized access; shredding documents ensures sensitive information is not readable.
Which of the following encryption methods is used to protect data in transit over a public network, such as the internet?
A VPN encrypts all data transmitted over a public network, securing the entire connection.
Why this answer
A VPN encrypts data traffic over public networks, providing a secure tunnel for data in transit.
An organization implements a security control that requires users to swipe a smart card and then enter a PIN to access a secure facility. Which combination of authentication factors does this represent?
This is correct: smart card (have) and PIN (know).
Why this answer
Smart card is 'something you have' and PIN is 'something you know', making it two-factor authentication using different factor types.
Which THREE of the following are examples of multi-factor authentication? (Select three.)
Smart card (have) + PIN (know) = two factors.
Why this answer
MFA requires two or more different factors: something you know, something you have, and something you are. Each correct answer uses at least two distinct factors.
Which of the following is an example of multi-factor authentication?
PIN (something you know) and smart card (something you have) are two different factors.
Why this answer
MFA requires two or more factors: something you know (PIN), something you have (smart card), something you are (biometric). Option D combines a PIN (know) and a smart card (have).
An IT administrator is hardening a server. Which three of the following actions should be taken to improve security? (Select THREE.)
Correct. This reduces attack vectors.
Why this answer
Disabling unnecessary services reduces attack surface; enabling automatic updates ensures patches; implementing least privilege limits access.
An organization adopts the 3-2-1 backup rule. Which of the following practices aligns with this rule?
Correct: this is the definition of the 3-2-1 rule.
Why this answer
The 3-2-1 rule means having three copies of data on two different media types with one copy offsite. Storing backups on external drives and cloud meets this requirement.
A security analyst notices that a user's computer is running slowly and displaying many pop-up ads. Which type of malware is most likely causing this?
Adware displays pop-up ads and can slow down the system.
Why this answer
Adware displays unwanted advertisements and often causes performance issues. Spyware collects information, ransomware encrypts files, and a rootkit hides itself.
Which of the following is a characteristic of a strong password?
This meets the criteria for a strong password.
Why this answer
Strong passwords are at least 12 characters long and include a mix of uppercase letters, lowercase letters, numbers, and symbols.
Which TWO of the following are examples of physical security controls?
A security guard is a physical control to prevent unauthorized access.
Why this answer
Physical security controls protect the physical environment and assets.
A company is implementing physical security measures. Which two of the following are examples of physical security controls? (Select TWO.)
Correct. This is a physical security practice.
Why this answer
Locking screens prevent unauthorized viewing, and shredding documents destroys sensitive paper data. Both are physical security.
A company implements a policy requiring employees to use a password and a one-time code sent to their mobile phone when logging into the corporate network. Which security concept is being employed?
Password and phone code are two different factors.
Why this answer
Multi-factor authentication (MFA) requires two or more factors: something you know (password) and something you have (phone).
Which TWO of the following are examples of physical security measures? (Select TWO)
Correct. This is a physical security practice.
Why this answer
Locking screens when away (lock screen) and shredding sensitive documents are physical security measures. Firewalls and encryption are logical/technical controls; passwords are authentication.
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the email address is slightly misspelled (e.g., 'support@bankk.com' instead of 'support@bank.com'). Which type of attack is this?
This is a classic example of a phishing email attempting to trick the recipient.
Why this answer
Phishing is a social engineering attack where attackers send fraudulent emails pretending to be from legitimate sources to steal sensitive information.
Which of the following is the best practice for creating a strong password?
Correct. Long and complex passwords are strong.
Why this answer
A strong password is at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols.
Which TWO of the following are examples of social engineering attacks? (Select TWO.)
Pretexting is a social engineering attack where the attacker invents a scenario to trick the victim.
Why this answer
Pretexting involves creating a fabricated scenario to gain information, and tailgating is following an authorized person into a restricted area. Both manipulate human behavior rather than technical systems.
Which of the following is an example of something you are in multi-factor authentication?
Correct. Fingerprint is a biometric, something you are.
Why this answer
Biometrics (fingerprint, face) are physical characteristics, i.e., something you are.
Which of the following best describes the principle of confidentiality in the CIA triad?
Confidentiality is about preventing unauthorized access.
Why this answer
Confidentiality ensures that information is not disclosed to unauthorized individuals, systems, or processes.
Which of the following best describes the principle of confidentiality in the CIA triad?
Confidentiality is about keeping data secret from unauthorized parties.
Why this answer
Confidentiality ensures that data is not disclosed to unauthorized individuals or systems.
Which of the following is a characteristic of a strong password?
Long and complex passwords are strong.
Why this answer
A strong password should be at least 12 characters, include uppercase, lowercase, numbers, and symbols, and should not be reused or shared.
A company requires employees to use a one-time code from a smartphone app in addition to their password to log into the corporate VPN. This is an example of:
Correct. Password (know) and code (have) are two factors.
Why this answer
Multi-factor authentication (MFA) combines something you know (password) and something you have (smartphone app generating a code). This is MFA.
Which THREE of the following are characteristics of a strong password? (Select THREE)
Correct. Length is a key factor for strength.
Why this answer
A strong password is at least 12 characters long, contains a mix of uppercase, lowercase, numbers, and symbols, and is not reused across accounts. Using personal information or common words makes passwords weak.
A company wants to protect its network from unauthorized external access. Which of the following devices should be configured to filter traffic based on port and protocol?
Correct: a network firewall filters traffic between networks based on rules.
Why this answer
A network firewall examines incoming and outgoing traffic and can block or allow based on rules involving ports and protocols, providing a barrier between internal and external networks.
Which of the following is a characteristic of a worm compared to a virus?
Worms exploit network vulnerabilities to spread autonomously.
Why this answer
A worm can spread automatically without needing to attach to a host file or require user action, while a virus typically requires a host file and user execution to spread.
Which of the following best describes the principle of least privilege?
Correct. Least privilege means minimal necessary access.
Why this answer
The principle of least privilege grants users only the permissions necessary to perform their job functions, minimizing potential damage from accidents or attacks.
A security analyst discovers that a file on a server has been modified without authorization. However, the system logs show that the modification was made by an authenticated user who had legitimate access to the file. Which aspect of the CIA triad has been violated?
Unauthorized modification violates integrity.
Why this answer
Integrity ensures data is not altered by unauthorized parties. Even though the user was authenticated, the modification was unauthorized, violating integrity.
A security administrator wants to protect data at rest on a laptop that may be lost or stolen. Which of the following is the BEST solution?
Correct. Full disk encryption protects data on the laptop.
Why this answer
Full disk encryption (e.g., BitLocker or FileVault) encrypts the entire drive, making data inaccessible without the decryption key, protecting data at rest.
Ready to test yourself?
Try a timed practice session using only Itf Security questions.