wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

CompTIA Security+ Quiz

Total questions: 25

Worksheet time: 20mins

Name
Class
Date
1.

Which of the following devices best illustrates the concept of edge computing?

a)

Router

b)

Smartwatch

c)

Server

d)

UPS

2.

A cloud deployment model consisting of two or more interlinked cloud infrastructures (private, community, or public) is referred to as a hybrid cloud.

a)

True

b)

False

3.

Which of the following terms refers to a third-party vendor offering IT security management services?

a)

MSP

b)

MAN

c)

MSSP

d)

MaaS

4.

The term "Fog computing" refers to a local network infrastructure between IoT devices and the cloud designed to speed up data transmission and processing.

a)

True

b)

False

5.

Which of the following terms refers to the concept of virtualization on an application level?

a)

Hypervisor

b)

System on Chip

c)

Infrastructure as Code

d)

Containerization

6.

In software engineering, the term "Microservice" describes independent and self-contained code components that can be put together to form an application.

a)

True

b)

False

7.

A sales manager at your company is complaining about slow performance on his computer. When you thoroughly investigate the issue, you find spyware on his computer. He insists that the only thing he has downloaded recently was a freeware stock trading application. What would best explain this situation?

a)

Logic bomb

b)

Rootkit

c)

Trojan horse

d)

Macro virus

8.

Code obfuscation techniques rely on encryption to protect the source code against unauthorized access.

a)

True

b)

False

9.

In cloud computing, users on an on-premises network take advantage of a transit gateway to connect to:

a)

VPC

b)

SAN

c)

NAS

d)

VLAN

10.

The term "VM escape" refers to the process of breaking out of the boundaries of a guest operating system installation to access the primary hypervisor controlling all the virtual machines on the host machine.

a)

True

b)

False

11.

What are the countermeasures against SQL injection attacks? (Select 2 answers)

a)

Input validation

b)

Patch management

c)

Code obfuscation

d)

Stored procedures

e)

Memory management

12.

A collection of commonly used programming functions designed to speed up software development process is known as:

a)

Dependency

b)

Library

c)

Repository

d)

Container

13.

An email arrives telling Bob that there is a limited time to act to get a software package for free and that the first 50 downloads will not have to be paid for. What social engineering principle is being used against him?

a)

Scarcity

b)

Intimidation

c)

Consensus

d)

Authority

14.

A program that is used to translate the code written by high-level programming language into a binary format that computers are able to understand is called

a)

Data compressor

b)

Compiler

c)

Fuzzer

d)

RAR

15.

HOTP uses a shared secret key and current time to calculate authentication tokens.

a)

True

b)

False

16.

Which of the following is an example of a software authentication token?

a)

Key fob

b)

USB token

c)

Authenticator app

d)

Smart card

17.

A measure of the likelihood that a biometric security system will incorrectly accept an access attempt by an unauthorized user is known as:

a)

FAR

b)

CER

c)

FRR

d)

NDA

18.

Examples of static authentication methods include: (Select 2 answers)

a)

SMS

b)

PIN

c)

Password

d)

Token

e)

Push notification

19.

One of your users cannot recall the password for their laptop. You want to recover that password for them. You intend to use a tool/technique that is popular with hackers, and it consists of searching tables of precomputed hashes to recover the password. What best describes this?

a)

Spraying attack

b)

Bruteforce attack

c)

Dictionary attack

d)

Rainbow table

20.

Which of the following examples meets the requirement of multifactor authentication?

a)

Password and biometric scan

b)

Username and PIN

c)

Smart card and ID badge

d)

Fingerprint scan and facial recognition

21.

Which of the answers listed below refers to the process of granting or denying access to resources?

a)

Authentication

b)

Authorization

c)

Accounting

22.

Which of the following RAID levels does not offer fault tolerance?

a)

RAID 0

b)

RAID 1

c)

RAID 5

d)

RAID 10

23.

Which of the following cloud service models provides the consumer with the most control over the cloud resources?

a)

IaaS

b)

PaaS

c)

SaaS

d)

DaaS

24.

Microsoft’s Onedrive file synchronization service is an example of which one of the following cloud service models?

a)

IaaS

b)

PaaS

c)

SaaS

d)

SoC

25.

You are responsible for network security at a company. Users have reported that personal data is being stolen when using the wireless network. They all insist they only connect to the corporate wireless access point (AP). However, logs for the AP show that these users have not connected to it. Which of the following could best explain this situation?

a)

Session hijacking

b)

Rogue access point

c)

Bluejacking

d)

Privilege escalation