CompTIA Security Exam Questions

A company implements a Zero Trust model to secure its infrastructure. What is the core principle of this model?

• Implicit trust within the internal network

• Continuous authentication and least privilege

• Network segmentation with firewalls

• Encrypting all data stored on-premises

An attacker exploits a weak API endpoint to access sensitive customer data. What is the best defense against such attacks?

• Encrypt all API communications

• Require multi-factor authentication for API users

• Use input validation and rate limiting

• Deploy endpoint protection on developer systems

What is the primary purpose of a Business Impact Analysis (BIA)?

• Ensure compliance with regulatory frameworks

• Identify critical business functions and assess the impact of disruptions

• Detect insider threats through behavior monitoring

• Analyze vulnerabilities in legacy systems

A company experiences a ransomware attack. The attackers demand payment to decrypt critical files. What should the incident response team prioritize?

• Notify law enforcement and preserve evidence

• Pay the ransom to restore operations quickly

• Isolate affected systems and restore from backups

• Disable all network traffic to contain the attack

Which cryptographic technique ensures the integrity of a transmitted file?

• Encryption

• Hashing

• Tokenization

• Salting

An attacker sends phishing emails targeting executives of an organization. What is this attack called?

• Spear phishing

• Whaling

• Vishing

• Smishing

Which of the following is a primary function of a Security Information and Event Management (SIEM) system?

• Encrypt sensitive files in real-time

• Analyze and correlate security events across the network

• Automatically patch vulnerable systems

• Deploy firewalls and intrusion prevention systems

What is the best method to secure data stored in a misconfigured cloud storage bucket?

• Restrict public access and implement identity-based permissions

• Encrypt all files with RSA

• Configure logging to monitor access attempts

• Deploy an intrusion detection system (IDS)

An attacker intercepts and modifies communication between two devices. What is this attack called?

• Replay attack

• Man-in-the-middle (MITM)

• ARP poisoning

• Session hijacking

Which of the following tools is used to analyze network traffic for suspicious activity?

• Wireshark

• Nessus

• Splunk

• Metasploit