Font size
WorksheetsCompTIA Security+ Quiz
Total questions: 25
Worksheet time: 20mins
Which of the following devices best illustrates the concept of edge computing?
Router
Smartwatch
Server
UPS
A cloud deployment model consisting of two or more interlinked cloud infrastructures (private, community, or public) is referred to as a hybrid cloud.
True
False
Which of the following terms refers to a third-party vendor offering IT security management services?
MSP
MAN
MSSP
MaaS
The term "Fog computing" refers to a local network infrastructure between IoT devices and the cloud designed to speed up data transmission and processing.
True
False
Which of the following terms refers to the concept of virtualization on an application level?
Hypervisor
System on Chip
Infrastructure as Code
Containerization
In software engineering, the term "Microservice" describes independent and self-contained code components that can be put together to form an application.
True
False
A sales manager at your company is complaining about slow performance on his computer. When you thoroughly investigate the issue, you find spyware on his computer. He insists that the only thing he has downloaded recently was a freeware stock trading application. What would best explain this situation?
Logic bomb
Rootkit
Trojan horse
Macro virus
Code obfuscation techniques rely on encryption to protect the source code against unauthorized access.
True
False
In cloud computing, users on an on-premises network take advantage of a transit gateway to connect to:
VPC
SAN
NAS
VLAN
The term "VM escape" refers to the process of breaking out of the boundaries of a guest operating system installation to access the primary hypervisor controlling all the virtual machines on the host machine.
True
False
What are the countermeasures against SQL injection attacks? (Select 2 answers)
Input validation
Patch management
Code obfuscation
Stored procedures
Memory management
A collection of commonly used programming functions designed to speed up software development process is known as:
Dependency
Library
Repository
Container
An email arrives telling Bob that there is a limited time to act to get a software package for free and that the first 50 downloads will not have to be paid for. What social engineering principle is being used against him?
Scarcity
Intimidation
Consensus
Authority
A program that is used to translate the code written by high-level programming language into a binary format that computers are able to understand is called
Data compressor
Compiler
Fuzzer
RAR
HOTP uses a shared secret key and current time to calculate authentication tokens.
True
False
Which of the following is an example of a software authentication token?
Key fob
USB token
Authenticator app
Smart card
A measure of the likelihood that a biometric security system will incorrectly accept an access attempt by an unauthorized user is known as:
FAR
CER
FRR
NDA
Examples of static authentication methods include: (Select 2 answers)
SMS
PIN
Password
Token
Push notification
One of your users cannot recall the password for their laptop. You want to recover that password for them. You intend to use a tool/technique that is popular with hackers, and it consists of searching tables of precomputed hashes to recover the password. What best describes this?
Spraying attack
Bruteforce attack
Dictionary attack
Rainbow table
Which of the following examples meets the requirement of multifactor authentication?
Password and biometric scan
Username and PIN
Smart card and ID badge
Fingerprint scan and facial recognition
Which of the answers listed below refers to the process of granting or denying access to resources?
Authentication
Authorization
Accounting
Which of the following RAID levels does not offer fault tolerance?
RAID 0
RAID 1
RAID 5
RAID 10
Which of the following cloud service models provides the consumer with the most control over the cloud resources?
IaaS
PaaS
SaaS
DaaS
Microsoft’s Onedrive file synchronization service is an example of which one of the following cloud service models?
IaaS
PaaS
SaaS
SoC
You are responsible for network security at a company. Users have reported that personal data is being stolen when using the wireless network. They all insist they only connect to the corporate wireless access point (AP). However, logs for the AP show that these users have not connected to it. Which of the following could best explain this situation?
Session hijacking
Rogue access point
Bluejacking
Privilege escalation
