6.0 Security - CompTIA IT Fundamentals (ITF+) Security Quiz #1

Which of the following practices aims to prevent unauthorized access to information?

• Data replication

• Encryption

• Load balancing

• Traffic filtering

Answer explanation

Encryption is a practice that secures data by converting it into a coded format, preventing unauthorized access. Unlike data replication, load balancing, and traffic filtering, encryption specifically protects the confidentiality of information.

Which term describes intercepting private communication without consent?

• Snooping

• Eavesdropping

• Wiretapping

• Social engineering

Answer explanation

Snooping refers to the act of intercepting private communication without consent. While eavesdropping and wiretapping are similar, snooping is the broader term that encompasses various methods of unauthorized access to information.

What is the primary goal of integrity in the CIA model?

• Ensuring data remains accessible

• Ensuring data is accurate and unaltered

• Protecting data from unauthorized access

• Backing up data regularly

Answer explanation

The primary goal of integrity in the CIA model is to ensure data is accurate and unaltered. This means protecting data from being modified or corrupted, which is crucial for maintaining trust and reliability.

Which of the following can compromise data integrity by altering communication between two parties?

• Man-in-the-Middle attack

• Phishing attack

• Replay attack

• Social engineering attack

Answer explanation

A Man-in-the-Middle attack compromises data integrity by intercepting and altering communication between two parties, allowing the attacker to manipulate the data being exchanged.

What technique ensures information and systems are accessible to authorized users when needed?

• Encryption

• Load balancing

• Firewalls

• Hash functions

Answer explanation

Encryption ensures that information is protected and only accessible to authorized users, allowing them to access systems and data securely when needed.

Which software is essential for detecting and removing malicious threats from a device?

• Firewall

• Antivirus/Anti-malware

• Load balancer

• Password manager

Answer explanation

Antivirus/Anti-malware software is essential for detecting and removing malicious threats from a device, as it specifically targets viruses, malware, and other harmful software, unlike firewalls or password managers.

Why should default passwords on devices be changed immediately?

• To enable encryption

• To prevent unauthorized access

• To improve connection speed

• To enable automatic updates

Answer explanation

Default passwords are often widely known, making devices vulnerable to unauthorized access. Changing them immediately helps secure the device and protect sensitive information.

Which practice involves downloading software only from trusted and official sources?

• Traffic filtering

• Validating legitimate sources

• Using command-line interfaces

• Data redundancy

Answer explanation

Validating legitimate sources ensures that software is downloaded from trusted and official locations, reducing the risk of malware and security threats. This practice is essential for safe software management.

How often should operating systems and software be updated to maintain security?

• Once a year

• When the system crashes

• Regularly

• Only when new features are added

Answer explanation

Operating systems and software should be updated regularly to protect against vulnerabilities and security threats. Waiting for a crash or new features can leave systems exposed, making regular updates essential for security.

What practice helps ensure devices are protected against malware infections?

• Disabling firewalls

• Using weak passwords

• Safe browsing practices

• Ignoring software updates

Answer explanation

Safe browsing practices help users avoid malicious websites and downloads, significantly reducing the risk of malware infections. In contrast, disabling firewalls, using weak passwords, and ignoring updates increase vulnerability.