WorksheetsCompTIA Security+ Access
Total questions: 24
Worksheet time: 12mins
During an airline flight, a laptop user makes last-minute changes to a presentation that contains sensitive company information. Which of the following would make it difficult for other passengers to view this information on the laptop display?
Cable lock
Privacy filter
Smart card
Mantrap
A technician assists Joe, an employee in the sales department who needs access to the client database, by granting him administrator privileges. Later, Joe discovers he has access to the salaries in the payroll database Which of the following security practices was violated?
Strong password policy
Multifactor authentication
Entry control roster
Principle of least privilege
Bob calls and complains that he has suddenly started getting a lot of unwanted email. Which of the following is the BEST type of software to install to help solve Bob's problem?
Anti-virus
Anti-malware
Anti-spam
Anti-plagiarism
Which of the following security practices are the BEST example of the principle of least privilege?
All users on a Windows workstation are limited users except for one user, who is responsible for maintaining the system.
Autorun has been disabled on a Windows workstation.
All users on a Windows workstation have been assigned strong passwords
The Guest user account on a Windows workstation has been disabled
Which are examples of a strong password? (Select TWO)
NewYork
il0ve2EatIceCr3am
skippy
Morganstern
TuxP3nguinsRn0v3l
A security incident is currently occurring on the company network. You discover that the attack involves a computer system that is attached to the network. You're unsure what kind of damage is being done to the network systems or data. Which of the following actions should you take FIRST?
Stop the attack and contain the damage by disconnecting the system from the network
Examine the active computer system to analyze the live network connection, memory contents, and running programs.
Determine whether you have the expertise to conduct an investigation, or whether you need to call in additional help
Document and photograph the entire scene of the crime including the current state of the attached computer system
The chain of custody is used for what purposes?
Retaining evidence integrity by identifying people coming into contact with evidence
Detailing the timeline between creation and discovery of evidence
Identifying the owner of evidence
Maintaining compliance with federal privacy laws
A security technician is conducting a forensic analysis. Which of the following actions is MOST likely to destroy critical evidence?
Disconnecting the system from the network
Shutting down the system
Copying the contents of memory to removable media
Restricting physical access to the system
A public library has purchased a new laptop computer to replace their older desktop computers and is concerned that they are vulnerable to theft. Which of the following laptop features should be used to physically secure the laptop?
A cable lock
Biometric authentication
A multi-factor password policy
An external encryption device
You have a set of DVD-RW discs that have been used to archive files for your latest development project. You need to dispose of the discs. Which of the following methods should you use to BEST prevent extracting data from the discs?
Degaussing
Shredding
Delete the data on the discs
Write junk data over the discs 7 times
You have purchased new computers and will be disposing of your old computers. These computers were previously used for storing highly-sensitive customer order information, including credit card numbers.
To properly protect the accidental discovery of the company's sensitive information, which of the following steps MUST be completed prior to getting rid of the computers?
Physically destroy the hard drives with a hammer
Repartition the hard drives.
Reformat the hard drives
Delete user data and applications from the hard
drives
Reinstall a fresh copy of Windows on the drives
While reviewing video files from your organization's security cameras, you notice a suspicious person using piggy-backing to gain access to your building. The individual in question did not have a security badge.
Which of the following would you MOST likely implement to keep this from happening in the future
Mantraps
Cable locks
Door locks with card readers
Lo-jack recovery service
An unauthorized person gains access to a secured area by following an authorized person through a door controlled by a badge reader. Which of the following security threats does this sentence describe?
Tailgating
Shoulder surfing
Brute forcing
Phishing
Joe, an executive, receives an email that appears to be from the financial institution that provides his company credit card. The text of the email includes Joe's name and the company name and states that there is a problem with Joe's credit card. The email provides a link to verify the credit card, but when Joe hovers over the link, he thinks the web address seems strange.
Which of the following BEST describes this type of attack?
Social engineering
Zero-day attack
Brute forcing
Man-in-the-middle attack
Which of the following are common forms of social engineering attacks?
Sending hoax virus information emails
Using a sniffer to capture network traffic
Stealing the key card of an employee and using that to enter a secured building
Distributing false information about your organization's financial status
Which of the following is an example of social engineering?
Brute force password cracking
Port scanning
Dumpster diving
War dialing
What is the best countermeasure against social engineering?
Acceptable use policy
User awareness training
Strong passwords
Access auditing
You want to configure your computer so that a password is required before the operating system will load. What should you do?
Configure a user password in the BIOS/UEFI.
Configure an administrator password in the BIOS/UEFI
Configure chassis instruction detect
Require complex passwords in the local security policy
ou have purchased a used computer from a computer liquidator. When you boot the computer, you find that there has been a password set on the BIOS. You need to clear the password so that you can edit the CMOS settings.
What should you do?
Remove the motherboard battery for a few seconds.
Flash the BIOS.
Press F2 while booting the computer.
Press Ctrl + Alt + Del while booting the computer.
A large number of compromised computers are infected with malware that allows an attacker (herder) to control them to spread email spam and launch denial-of-service attacks. Which of the following does this security threat describe?
Zombie/botnet
Phishing
Spoofing
Man-in-the-middle
What is a program that appears to be a legitimate application, utility, game, or screensaver, but performs malicious firewall port exposures?
Ransomware
Worm
Scareware
Trojan
What is a cookie?
A file saved on your hard drive that tracks website preferences and use.
A malicious program that runs when you read an email attachment
A malicious program that disguises itself as a useful program.
An executable file that runs in the background and tracks internet use.
While browsing the internet, you notice that your browser displays pop-ups containing advertisements that are related to recent keyword searches you have performed.
What is this an example of?
Adware
Worm
Grayware
Trojan
What is the common name for a program that has no useful purpose, but attempts to spread itself to other systems and often damages resources on the systems where it is found?
Virus
Trojan
Buffer overflow
Password attack
