23 of 98 questions · Page 2/2 · Itf Security topic · Answers revealed
Which of the following is an example of a physical security control?
A biometric door lock physically restricts access to a room.
Why this answer
Physical security controls include measures like locks, guards, and biometric scanners to protect physical assets.
An attacker gains physical access to a building by following an employee through a secured door without using a badge. This is an example of which social engineering technique?
Following someone through a door without authorization.
Why this answer
Tailgating (also called piggybacking) is when an unauthorized person follows an authorized person into a restricted area.
What is the primary purpose of a firewall?
Firewalls block unauthorized traffic.
Why this answer
A firewall controls incoming and outgoing network traffic based on predetermined security rules. It filters traffic by port, protocol, or IP address to block unauthorized access.
Which type of malware attaches to legitimate files and spreads when those files are executed?
Correct. A virus attaches to files and spreads when executed.
Why this answer
A virus attaches itself to files or programs and replicates when the infected file is executed. Worms spread without a host file; trojans disguise as legitimate software.
Which TWO of the following are characteristics of a strong password? (Select TWO.)
Complexity from character variety strengthens the password.
Why this answer
A strong password is at least 12 characters and includes a mix of character types. Using common words or personal information weakens the password.
A user receives a suspicious email with an attachment claiming to be an invoice. Which three practices should the user follow? (Select THREE.)
Correct. Unexpected attachments may contain malware.
Why this answer
Verify the sender, avoid downloading unexpected attachments, and hover over links to check URL. Forwarding to all users spreads potential risk.
A company implements a policy where employees must swipe their ID card and then enter a PIN to access the server room. Which two authentication factors are being used?
Correct. ID card is something you have; PIN is something you know.
Why this answer
The ID card is 'something you have' (possession factor) and the PIN is 'something you know' (knowledge factor). This is multi-factor authentication.
A company's IT policy mandates data backups following the 3-2-1 rule. Which THREE of the following practices align with this rule?
Three copies on two media types (server/cloud and tape) with one offsite.
Why this answer
The 3-2-1 rule means: at least 3 copies of data, on 2 different media types, with 1 copy offsite.
What is the primary purpose of a password manager?
Correct. Password managers create and manage complex passwords.
Why this answer
Password managers generate and store strong, unique passwords for each account, reducing password reuse.
An organization wants to ensure that employees only have access to the data necessary to perform their job functions. Which principle should be applied?
Users get minimum necessary permissions.
Why this answer
The principle of least privilege grants users only the permissions they need to do their work, minimizing potential damage.
An employee receives an email that appears to be from the CEO, urgently requesting a wire transfer to an external vendor. The email address looks slightly off. Which type of social engineering attack is this?
Spear phishing targets a specific person or organization with a tailored message.
Why this answer
This is a phishing attack, specifically spear phishing because it targets a specific individual (the employee) and impersonates the CEO to steal money.
Which TWO of the following are examples of multi-factor authentication? (Choose TWO.)
Smart card (possession) and PIN (knowledge) are two different factors.
Why this answer
MFA requires two or more factors from different categories. A password plus a fingerprint combines knowledge (password) and inherence (fingerprint). A smart card plus a PIN combines possession (card) and knowledge (PIN).
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the sender's email address is slightly misspelled. Which type of threat is this?
Correct. The email is a phishing attempt to steal credentials.
Why this answer
Phishing is a social engineering attack where attackers send fraudulent emails to steal sensitive information.
Which TWO of the following are types of malware? (Select TWO)
Correct. Ransomware is malware that encrypts files for ransom.
Why this answer
Ransomware and spyware are both types of malware. A firewall is a security tool, encryption is a protection method, and phishing is a social engineering attack.
A user wants to protect their laptop in case it is stolen. Which THREE of the following measures would help protect the confidentiality of the data?
Encryption renders data unreadable without the key.
Why this answer
Confidentiality measures prevent unauthorized access to data.
A company wants to ensure that data on lost laptops cannot be accessed. Which technology should be used?
Correct. Full disk encryption protects data at rest.
Why this answer
Full disk encryption (e.g., BitLocker) encrypts the entire drive, making data unreadable without the key.
A help desk technician receives a call from a user who says their computer is showing a message that files are encrypted and a ransom is demanded. Which TWO types of malware are most likely involved?
Ransomware is often delivered as a trojan.
Why this answer
Ransomware encrypts files for ransom. It is often delivered via a trojan (disguised as legitimate software) that the user inadvertently runs. The other options are incorrect: adware shows ads, spyware collects info, rootkit hides.
A user downloads a free game from an untrusted website. After installation, the user's computer begins displaying pop-up advertisements frequently. Which type of malware is most likely installed?
Adware shows pop-up ads.
Why this answer
Adware displays unwanted advertisements, often bundled with free software.
An employee is tailgated into a secure office building by someone without a badge. Which type of security threat does this represent?
Correct: tailgating is when someone follows an authorized person without credentials.
Why this answer
Tailgating (or piggybacking) is a physical social engineering attack where an unauthorized person follows an authorized person into a restricted area.
What is the primary purpose of a password manager?
Correct. Secure storage and generation are key.
Why this answer
A password manager securely stores and generates strong, unique passwords for each account, reducing password reuse and improving security.
An organization implements a security policy where users must provide a password and a one-time code generated by a mobile app to log in. Which type of authentication is being used?
Two factors are used: password (knowledge) and code from device (possession).
Why this answer
Multi-factor authentication requires two or more factors from different categories: something you know (password), something you have (smartphone app generating a code), and something you are (biometric).
A security analyst is explaining the CIA triad to new employees. Which scenario best illustrates a breach of integrity?
Correct: unauthorized modification is a breach of integrity.
Why this answer
Integrity means data is not altered without authorization. An unauthorized modification breaches integrity, even if the system remains available and confidential.
An organization is implementing a defense-in-depth strategy. Which THREE of the following are considered security controls that can be used? (Choose THREE.)
A firewall is a network security control that filters traffic.
Why this answer
Defense-in-depth uses multiple layers of security controls. Firewalls, antivirus, and encryption are different types of controls that provide overlapping protection.
Ready to test yourself?
Try a timed practice session using only Itf Security questions.