Font size
WorksheetsCompTIA Security+
Total questions: 98
Worksheet time: 1hrs 2mins
The most important aspect of maintaining the chain of custody is:
Documentation
Security
Access control
Labeling
How can technical debt affect long-term security issues?
By increasing the risk of vulnerabilities
By reducing the need for security updates
By eliminating security concerns
By ensuring complete security
UTM (Unified Threat Management) consolidates multiple security functions into a single appliance. Which of the following is NOT typically included?
Firewall
Antivirus
Data Backup
Intrusion Detection
Who is responsible for setting data access policies and security requirements?
Data Analyst
System Administrator
Data Owner
Network Engineer
The role of a data owner is to:
manage and protect data assets
write code for data processing
design user interfaces
conduct market research
What is the responsibility of a data controller?
To manage and process personal data on behalf of the data subject
To determine the purposes and means of processing personal data
To ensure the security of the data processing environment
To provide data subjects with access to their personal data
Who collects employee information in the context of data processing?
Human Resources Department
IT Department
Finance Department
Marketing Department
The role of a data processor is to:
store data
process data
delete data
create data
The responsibility of a data custodian is to:
Manage data access and security
Create data models
Analyze data trends
Develop software applications
Probability in the context of risk events is defined as:
The likelihood of an event occurring
The impact of an event
The cost associated with an event
The time taken for an event to occur
Likelihood in risk assessment measures:
the probability of an event occurring
the impact of an event
the cost of an event
the duration of an event
The exposure factor (EF) in a security incident is:
a measure of the potential loss from a threat
a method to prevent security breaches
a type of encryption algorithm
a security protocol for data transmission
What does severity ranking determine in risk management?
The likelihood of a risk occurring
The impact of a risk on project objectives
The priority of addressing a risk
The cost associated with a risk
Data espionage is:
a form of cybercrime involving the theft of confidential information
a type of data analysis technique
a method of data storage
a way to protect data from unauthorized access
The purpose of due diligence in vendor appraisal is to:
Evaluate the vendor's financial stability and reputation
Negotiate better pricing terms
Establish a long-term partnership
Improve product quality
How does ticket creation aid in automation and orchestration?
By providing a manual process for tracking issues
By enabling automated workflows and task management
By requiring human intervention for every step
By complicating the orchestration process
A responsibility matrix is:
a tool used to assign tasks and responsibilities to team members
a chart that shows the hierarchy of an organization
a document that outlines the project timeline
a list of project stakeholders
Risk tolerance in an organization refers to:
The level of risk an organization is willing to accept.
The amount of risk an organization can eliminate.
The strategies used to avoid risk.
The process of identifying risks.
Fill in the blank: Risk appetite represents the organization's overall attitude towards (a) .
What is 'Risk threshold' in the context of organizational risk management?
A specific point at which risk becomes unacceptable
A measure of the likelihood of a risk occurring
A strategy to mitigate risks
A tool for assessing risk impact
In a Reflected DDoS attack, the victim's IP is used for:
initiating the attack
receiving the attack
spoofing the source
amplifying the traffic
An Amplified DDoS attack exploits a server by:
overloading it with a high volume of traffic using amplification techniques.
hacking into the server and stealing data.
installing malware on the server.
redirecting traffic to a different server.
The purpose of 'Key escrow' in cryptographic systems is to:
allow recovery of encrypted data by authorized parties
enhance encryption strength
provide faster encryption
reduce the cost of encryption
PKI stands for Public Key Infrastructure. What is its purpose?
To encrypt data
To manage digital certificates and public-key encryption
To provide internet access
To store passwords
Fill in the blank: Federation allows different organizations to share digital identities, enabling single (a) across them.
The role of 'Continuous integration' in security teams is to:
automate code testing and deployment
manage team communications
handle customer support
design user interfaces
EAP stands for ______ and its function is to provide support to employees.
Employee Assistance Program
Enterprise Application Platform
Emergency Action Plan
Electronic Authentication Protocol
Fill in the blank: LDAP is mainly used for user directory querying and (a) .
The purpose of the SPF (Sender Policy Framework) in email security is to:
Authenticate the sender's IP address to prevent email spoofing.
Encrypt the email content for privacy.
Filter spam emails based on content.
Provide a backup for email data.
What does SPF check in an email?
Content of the email
Sending server IP
Header From address
How does DKIM ensure the integrity of an email?
By encrypting the email content
By adding a digital signature to the email header
By requiring a password to open the email
By scanning the email for viruses
The role of DMARC in email security is to:
Authenticate email senders and prevent email spoofing
Encrypt email content for privacy
Filter spam emails
Provide end-to-end email encryption
Which protocol uses asymmetric encryption to verify the sender's identity?
SPF
DKIM
DMARC
What happens if an email fails the DMARC check?
The email is delivered to the inbox.
The email is marked as spam.
The email is rejected or quarantined.
The email is forwarded to the recipient.
What is the purpose of the SPF protocol?
(a)
Which protocol ensures email integrity?
(a)
What does DMARC enhance?
(a)
What is the key function of S/MIME?
(a)
What does RTO stand for?
(a)
What is the definition of MTBF?
(a)
Which protocol is used for sending emails?
(a)
What is the communication flow for IMAP?
(a)
What is the purpose of POP3 in email communication?
Sending emails
Retrieving emails
Encrypting emails
Fill in the blank: POP3 is used when you want to store emails locally and access from a (a) .
What is the example use of a Public Key?
Decrypt message
Encrypt a message
Create a digital signature
Fill in the blank: Logical segmentation segments a larger network into distinct units, improving traffic management and (a) .
What does Software-defined networking (SDN) focus on?
Segmenting networks
Centralizing network control
Encrypting data
Fill in the blank: Containerization encapsulates applications and their environments but does not pertain to network (a) .
What is the purpose of log aggregation?
Encrypting data
Collecting and normalizing log data
Segmenting networks
Fill in the blank: E-discovery focuses on the systematic search of electronic data to identify pieces of evidence that can be produced in a (a) context.
What is the function of Telnet?
Allows user to remotely access and control another computer through a text-based interface
Allows send and receive emails
Translate IPs to human-readable names.
Which protocol uses port number 25?
A) Telnet
B) Simple Mail Transfer Protocol (SMTP)
C) Domain Name System (DNS)
Fill in the blank: Domain Name System (DNS) translates IPs to (a) .
What is the function of Trivial File Transfer Protocol (TFTP)?
Securely move files between devices on local network
Allow access and view webpages
Verifies user identities without sending passwords over the internet.
Which protocol uses port number 80?
Kerberos
Hypertext Transfer Protocol (HTTP)
Post Office Protocol (POP3)
Fill in the blank: Kerberos verifies user identities without sending (a) over the internet.
What is the function of Post Office Protocol (POP3)?
Downloads emails from a server to a local device
Distribute, retrieve, inquire about, and post news articles on the internet
Allows program to request a service from another program on a different device.
Which protocol uses port number 119?
Remote Procedure Call (RPC)
Network News Transfer Protocol (NNTP)
NetBIOS
Fill in the blank: Remote Procedure Call (RPC) allows program to request a service from another program on a different (a) .
What is the function of NetBIOS?
A) Allows applications on different devices to communicate over
B) Translate IPs to human-readable names
C) Securely move files between devices on local network.
What is the function of the Internet Message Access Protocol (IMAP)?
Allows users to access their email from any device
Monitor and manage network devices
Encrypts data transmitted between a user’s web browser and a website
Share files, printers, and other resources across a network
Which protocol uses port number 161 and is used to monitor and manage network devices by collecting status, health, and performance data?
(a)
What is the purpose of SNMPTrap?
Allows applications to access and manage user information
Messages sent by network devices to an SNMP management system to indicate a specific event or error
Method for securing the SMTP using transport layer security (TLS)
Encrypts the transmission of data related to network accounts
Which protocol allows applications to access and manage user information within a network directory and uses port number 389?
(a)
What is the function of HTTPS?
Allows users to access their email from any device
Monitor and manage network devices
Encrypts data transmitted between a user’s web browser and a website
Share files, printers, and other resources across a network
Which protocol uses port number 445 and is used to share files, printers, and other resources across a network?
(a)
What is the purpose of SMTPS?
Allows applications to access and manage user information
Method for securing the SMTP using transport layer security (TLS)
Encrypts the transmission of data related to network accounts
Share files, printers, and other resources across a network
Which protocol allows a system administrator to monitor and manage logs from different parts of the system and uses port number 514?
(a)
What is the function of LDAPS?
Allows users to access their email from any device
Encrypts the transmission of data related to network accounts
Monitor and manage network devices
Share files, printers, and other resources across a network
Which protocol uses port number 636 and is used to secure authentication?
(a)
What is the purpose of IMAPS?
Secure IMAP
Secure POP3
Secure Syslog
Which protocol uses port 995?
IMAPS
POP3S
RADIUS UDP
What is the function of Microsoft SQL?
Secure Syslog
Storing and processing information in a relational database
Makes connections between computers
Fill in the blank: Remote Authenticate (RADIUS) makes connections between computers and provides authentication, authorization, and (a) .
Which protocol is NOT secure RADIUS?
RADIUS UDP
Remote Desktop Protocol
Syslog TLS
What is the purpose of Remote Desktop Protocol (RDP)?
Secure IMAP
Allows users to connect to a remote device over a network
Storing and processing information in a relational database.
What is the purpose of Syslog TLS?
Secure Syslog
Secure POP3
Secure IMAP
GDPR mandates that personal data must be:
Collected with consent and used transparently
Shared freely without restrictions
Stored indefinitely without purpose
Accessible to everyone without control
The purpose of a risk register is to:
Identify potential risks and their impact
Track project timelines
Manage team performance
Allocate project resources
Ephemeral credentials are designed for:
Long-term access to resources
Temporary access to resources
Permanent user authentication
Data encryption
What is the process that involves real-time tracking of system events?
(a)
What is the process of securing and preserving evidence related to a security incident for potential use in legal proceedings?
(a)
What allows for the visualization of flow patterns?
(a)
Which agreement defines service performance levels?
(a)
Which agreement formalizes business partnership terms?
(a)
Which agreement outlines mutual understandings?
(a)
Which agreement sets terms for ongoing services?
(a)
What is the primary use case for a Jump Server?
(a)
What is the primary use case for a Proxy?
(a)
The role of a security analyst in interpreting NetFlow data is to:
Monitor network traffic for anomalies and threats.
Develop software applications for data analysis.
Manage hardware installations for network infrastructure.
Provide customer support for network issues.
What type of security offers more stringent monitoring and access control for administrators?
Fill in the blank: Traffic goes through a central, secure server, then to other (a) systems.
Which of the following is a common use in remote access?
An admin connects to a jump server to access databases or servers inside a private network by using:
SSH (Secure Shell)
FTP (File Transfer Protocol)
HTTP (Hypertext Transfer Protocol)
SMTP (Simple Mail Transfer Protocol)
What is the key size for AES encryption?
Fill in the blank: RSA is an (a) (public-key) algorithm with a key size of 1024 - 4096 bits.
Which encryption algorithm is considered weak and obsolete?
What is the block size for TDES encryption?
