"CompTIA Security+ Practice Test - SimeonOnSecurity"

Question 1

"Which attack method was used in the WannaCry ransomware attack?"

Accepted Answer

"The WannaCry ransomware attack exploited a known vulnerability called EternalBlue in Microsoft's SMB protocol, allowing it to spread quickly across networks. The other options were not involved in the WannaCry attack."

Question 2

"What type of attack involves intercepting and modifying communications between two parties?"

Accepted Answer

"A Man-in-the-Middle (MITM) attack is when an attacker intercepts and potentially modifies communications between two parties. The other options do not involve intercepting or modifying communications."

Question 3

"Which type of attack involves an attacker sending a high volume of connection requests to a system to exhaust its resources?"

Accepted Answer

"A Syn flood attack involves an attacker sending a high volume of connection requests to a system, intending to exhaust its resources and render it unavailable. The other options do not involve overwhelming a system with connection requests."

Question 4

"Which attack involves an attacker attempting to exploit a system by sending data that exceeds the storage capacity of a buffer?"

Accepted Answer

"A buffer overflow attack occurs when an attacker sends data that exceeds the storage capacity of a buffer, potentially causing the system to crash or allowing the attacker to execute arbitrary code. The other options do not involve exploiting a buffer's storage capacity."

Question 5

"Which type of attack involves an attacker embedding malicious code in a trusted website that executes in the user's browser?"

Accepted Answer

"Cross-site Scripting (XSS) attacks involve an attacker embedding malicious code in a trusted website, which then executes in the user's browser. The other options do not involve embedding malicious code in a trusted website."

Question 6

"What type of attack involves an attacker targeting a specific group of users by compromising websites that the group is known to visit?"

Accepted Answer

"A watering hole attack involves an attacker targeting a specific group of users by compromising websites that the group is known to visit. The other options do not involve targeting users through websites they visit."

Question 7

"Which type of attack involves creating a fake wireless access point to intercept network traffic?"

Accepted Answer

"An evil twin attack involves creating a fake wireless access point to intercept network traffic. The other options do not involve creating fake wireless access points."

Question 8

"Which attack involves an attacker retransmitting a valid data transmission after a delay, with the intention of tricking the receiver into accepting it as a new transmission?"

Accepted Answer

"A replay attack involves an attacker retransmitting a valid data transmission after a delay to trick the receiver into accepting it as a new transmission. The other options do not involve retransmitting valid data transmissions."

Question 9

"What is the purpose of a honeypot?"

Accepted Answer

"The purpose of a honeypot is to attract attackers and divert their attention away from actual production systems. Honeypots are designed to look vulnerable and enticing to attackers in order to capture information about their techniques and motives."

Question 10

"What is a vulnerability scanner?"

Accepted Answer

"A vulnerability scanner is a tool used to test the security of a network or system by scanning for known vulnerabilities in software, configuration settings, or other components."

Question 11

"What is a protocol analyzer?"

Accepted Answer

"A protocol analyzer, also known as a network analyzer or packet sniffer, is a tool used to monitor network traffic and capture packets for analysis. Protocol analyzers can be used to troubleshoot network issues, identify security threats, or perform other network-related tasks."

Question 12

"What is a firewall?"

Accepted Answer

"A firewall is a security device that monitors and controls network traffic between different security zones. Firewalls can be used to block unauthorized access to a network, prevent the spread of malware, or enforce security policies."

Question 13

"What is a virtual private network (VPN)?"

Accepted Answer

"A virtual private network (VPN) is a secure connection between two networks over an insecure network, such as the Internet. VPNs can be used to provide remote access to a network, connect geographically dispersed offices, or secure communications between different security zones."

Question 14

"What is the purpose of a WAF?"

Accepted Answer

"A Web Application Firewall (WAF) is designed to protect web applications from attacks by filtering and blocking malicious traffic. It can prevent SQL injection, cross-site scripting, and other web-based attacks."

Question 15

"What is an IPS?"

Accepted Answer

"An Intrusion Prevention System (IPS) is a tool used to prevent network-based attacks by analyzing network traffic in real-time and taking action to block or prevent attacks. It can detect and prevent a wide range of attacks, including buffer overflows, port scans, and denial-of-service attacks."

Question 16

"What is a SIEM?"

Accepted Answer

"A Security Information and Event Management (SIEM) system is a tool used to collect, correlate, and analyze security events from multiple sources in real-time. It can help identify security threats, investigate security incidents, and provide compliance reporting."

Question 17

"What is the purpose of a DLP?"

Accepted Answer

"A Data Loss Prevention (DLP) system is designed to detect and prevent data leakage by monitoring and controlling data transfers. It can prevent unauthorized access to sensitive data, detect and prevent data exfiltration, and ensure compliance with data protection regulations."

Question 18

"What is a password cracker?"

Accepted Answer

"A password cracker is a tool used to crack password hashes by trying different combinations of characters until the correct password is found. Password crackers can be used to test the strength of passwords and identify weak passwords that need to be changed."

Question 19

"What is a DMZ?"

Accepted Answer

"A Demilitarized Zone (DMZ) is a network segment used to isolate public-facing systems from the internal network. It provides an additional layer of security and helps prevent attackers from directly accessing sensitive systems."

Question 20

"What is the purpose of a HIDS?"

Accepted Answer

"A Host-based Intrusion Detection System (HIDS) is a tool used to detect and prevent host-based attacks by monitoring system logs, file integrity, and other indicators of compromise. It can detect a wide range of attacks, including malware infections, privilege escalation, and unauthorized access."

Question 21

"What is a vulnerability?"

Accepted Answer

"A vulnerability is a weakness in software, hardware, or other components that can be exploited by attackers to compromise the security of a system. Vulnerabilities can be caused by coding errors, misconfigurations, or other factors, and they can be mitigated through patching, configuration changes, or other security controls."

Question 22

"What is a rootkit?"

Accepted Answer

"A rootkit is a type of malware that provides privileged access to a system by modifying the operating system or other components to hide its presence and evade detection. Rootkits can be used to steal sensitive information, install additional malware, or perform other malicious activities."

Question 23

"What is a digital certificate?"

Accepted Answer

"A digital certificate is a digital document used to verify the identity of a person, organization, or device. It contains information about the identity of the certificate holder, as well as a public key that can be used to encrypt or sign data."

Question 24

"What is the principle of least privilege?"

Accepted Answer

"The principle of least privilege is the practice of giving users the minimum amount of access they need to do their job. This reduces the risk of accidental or intentional misuse of resources, and limits the impact of a security breach."

Question 25

"What is a security domain?"

Accepted Answer

"A security domain is a logical grouping of resources with a common security policy. It can be used to segregate different types of data, applications, or users based on their security requirements."

CompTIA Security+ Practice Test - SimeonOnSecurity

What is a business impact analysis?