6.0 Security - CompTIA IT Fundamentals (ITF+) Security Flashcard #1

Front

Which of the following practices aims to prevent unauthorized access to information?
Data replication,
Encryption,
Load balancing,
Traffic filtering

Back

Encryption

Answer explanation

Encryption is a practice that secures data by converting it into a coded format, preventing unauthorized access. Unlike data replication, load balancing, and traffic filtering, encryption specifically protects the confidentiality of information.

Front

Which term describes intercepting private communication without consent? Options: Snooping, Eavesdropping, Wiretapping, Social engineering

Back

Snooping

Answer explanation

Snooping refers to the act of intercepting private communication without consent. While eavesdropping and wiretapping are similar, snooping is the broader term that encompasses various methods of unauthorized access to information.

Front

What is the primary goal of integrity in the CIA model?

Back

Ensuring data is accurate and unaltered

Answer explanation

The primary goal of integrity in the CIA model is to ensure data is accurate and unaltered. This means protecting data from being modified or corrupted, which is crucial for maintaining trust and reliability.

Front

Which of the following can compromise data integrity by altering communication between two parties?
Man-in-the-Middle attack, Phishing attack, Replay attack, Social engineering attack

Back

Man-in-the-Middle attack

Answer explanation

A Man-in-the-Middle attack compromises data integrity by intercepting and altering communication between two parties, allowing the attacker to manipulate the data being exchanged.

Front

What technique ensures information and systems are accessible to authorized users when needed?

Back

Encryption

Answer explanation

Encryption ensures that information is protected and only accessible to authorized users, allowing them to access systems and data securely when needed.

Front

Which software is essential for detecting and removing malicious threats from a device? Options: Firewall, Antivirus/Anti-malware, Load balancer, Password manager

Back

Antivirus/Anti-malware

Answer explanation

Antivirus/Anti-malware software is essential for detecting and removing malicious threats from a device, as it specifically targets viruses, malware, and other harmful software, unlike firewalls or password managers.

Front

Why should default passwords on devices be changed immediately?

Back

To prevent unauthorized access

Answer explanation

Default passwords are often widely known, making devices vulnerable to unauthorized access. Changing them immediately helps secure the device and protect sensitive information.

Front

Which practice involves downloading software only from trusted and official sources?

Back

Validating legitimate sources

Answer explanation

Validating legitimate sources ensures that software is downloaded from trusted and official locations, reducing the risk of malware and security threats. This practice is essential for safe software management.

Front

How often should operating systems and software be updated to maintain security?

Back

Regularly

Answer explanation

Operating systems and software should be updated regularly to protect against vulnerabilities and security threats. Waiting for a crash or new features can leave systems exposed, making regular updates essential for security.

Front

What practice helps ensure devices are protected against malware infections?

Back

Safe browsing practices

Answer explanation

Safe browsing practices help users avoid malicious websites and downloads, significantly reducing the risk of malware infections. In contrast, disabling firewalls, using weak passwords, and ignoring updates increase vulnerability.