Quiz
Module 2.3/2.4/2.5
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (61)
1An IT security analyst is conducting a risk assessment for a global corporation that recently started outsourcing its hardware production to several manufacturers overseas. The corporation is aware of the threats associated with an expanded supply chain and seeks to mitigate potential security risks linked to its hardware devices. Which of the following risk mitigation strategies should the corporation adopt to ensure the security of its hardware devices without unnecessarily hindering its operations? (Select the best two options.)
- AOutsource all hardware production to a single trusted manufacturer.
- BAdopt a zero-trust network architecture.
- CPerform regular audits of its supplier's manufacturing processes.
- DImplement strict supplier vetting processes.
2An attacker passes data that deliberately flood a temporary memory space on one of the corporate machines. What type of application vulnerability does this action describe?
- AMalicious update
- BMemory injection
- CBuffer overflow
- DRace conditions
3A cyber consultant inspects a corporate desktop after receiving numerous complaints. What type of vulnerability can include instances where processors inside the computer allow malicious programs to steal data during processing?
- AFirmware
- BLegacy
- CVirtualization
- DEnd-of-life
4Upon transitioning to a virtualized environment for application and data hosting, the IT department of a large organization has noticed a boost in resource utilization efficiency. However, the network administrator, intent on preventing potential data leakage and preserving data integrity, decides to devise a strategy for resource reuse. In this context, which strategy should the network administrator consider employing to protect the remnants of prior data from exposure during resource reassignment in the virtualized environment?
- AEnforce password complexity rules.
- BEnable Secure Sockets Layer (SSL) encryption.
- CDevelop an incident response plan.
- DApply secure deallocation.
5Which type of application vulnerability refers to an update that appears legitimate but contains harmful code, often used by cybercriminals to distribute malware or execute a cyberattack?
- ARace conditions
- BBuffer overflow
- CMemory injection
- DMalicious update
6The security team for an online retail company received an alert indicating potential security threats to their customer-facing web application. Upon investigating the logs, they discovered suspicious patterns in the user-input fields, suggesting the possibility of structured query language injection (SQLi) and cross-site scripting (XSS) attacks. To mitigate these threats and safeguard the web application, what should be the security team's initial course of action?
- AUpgrade to the latest version of the web server software.
- BImplement input validation and sanitization techniques.
- CIncrease the frequency of system backups.
- DEnable two-factor authentication (2FA) for all users.
7A cyber technician works on a corporate laptop where an employee complains the software is outdated. What type of vulnerability describes continued use of outdated software methods, technology, computer systems, or application programs, despite known shortcomings?
- AEnd-of-life
- BLegacy
- CFirmware
- DVirtualization
8A software engineer trains new employees on the impacts of hardware and software vulnerabilities. The trainees must analyze and identify the vulnerability in their training session. During the session, the trainees experience a vulnerability where an attacker with access to a virtual machine (VM) breaks out of this isolated environment and gains access to the host system or other VMs running on the same host. What type of vulnerability did the trainees experience in this situation?
- ALegacy
- BEnd-of-life
- CVirtualization
- DFirmware
9An IT security specialist at a mid-size corporation observes a trend of unauthorized apps appearing on company-provided mobile devices. The specialist suspects the employees are either sideloading apps or have jailbroken their devices. What steps should the security specialist take to verify the cause of the unauthorized applications and to re-establish proper security protocols? (Select the two best options.)
- AHire external IT consultants to manage mobile device usage.
- BPurchase new mobile devices to replace all current ones.
- CImplement mobile device management (MDM) policies to restrict unauthorized application installation.
- DConduct device audits to identify unauthorized applications and to detect any signs of jailbreaking or sideloading.
10A system administrator at a software company is reviewing the company's security procedures. The company uses various cryptographic techniques for data security and is currently concerned about potential misconfigurations that could compromise data integrity and confidentiality. The system administrator aims to mitigate the risk of misconfigurations in the company's cryptographic settings that could lead to potential security vulnerabilities. Which of the following actions should the system administrator prioritize to ensure the cryptographic systems are well-configured and avoid possible security gaps? (Select the two best options.)
- ARegularly update and patch cryptographic software.
- BConduct periodic penetration testing.
- CImplement network segmentation.
- DAdopt biometric authentication.
11An IT team diligently works to ensure their systems and networks remain secure. The primary focus is relationships with external entities such as the service provider who hosts their web-based applications, the hardware provider that furnishes their server equipment, and the software provider supplying them with operating system licenses. When an enterprise's IT security posture depends on external entities, what should the IT team prioritize to ensure continued security?
- AEnsure thorough auditing of service providers, hardware providers, and software providers is conducted on a regular basis.
- BRelocate the hosting of web-based applications to in-house servers.
- CReplace all hardware equipment annually regardless of its current state.
- DUpdate all software systems without regard to the service provider's updates.
12A company's IT security team is addressing time-of-check and time-of-use (TOCTOU) race conditions to enhance the security of their software applications. These race conditions occur when a system's state changes between checking a condition (like a security credential) and using the results of that condition. To address these TOCTOU race conditions, which of the following should the security team implement during their software development and testing processes? (Select the two best options.)
- AAllocate unnecessary resources for checks.
- BDelay security credentials verification.
- CImplement detailed access logs for user actions.
- DApply immediate file locks upon access check.
13A company's IT team has detected an anomaly in a cloud-based environment after a recent software update. There are suspicions that the update could contain malicious code, potentially leading to unauthorized access to sensitive data. Which of the following actions should the IT team take as a first step to address the threat posed by the potential malicious update?
- AMigrate all data to a different cloud service provider immediately.
- BUpdate firewall rules to block all incoming traffic.
- CImplement two-factor authentication for all user accounts.
- DIsolate the affected systems and perform a rollback to the previous update.
14A large corporation is assessing its cybersecurity practices by focusing on potential security risks linked to hardware and firmware within the company's extensive network of computer systems. For the IT department, which of the following strategies MOST effectively mitigates the risks related to hardware and firmware security vulnerabilities?
- AAllow unrestricted hardware modifications for all employees.
- BRegularly update firmware to the latest, most secure versions.
- CRestrict all software updates to once a year to minimize disruptions.
- DRely solely on perimeter defenses such as firewalls and intrusion detection systems.
15Evaluating the security risks tied to a company's virtualized environment, a network administrator for the company relies on multiple virtual machines (VMs) for service distribution throughout the infrastructure. The administrator's primary concern is a specific risk: an application compromised within a VM might interact with the host system and potentially propagate harmful activities. What strategy should the network administrator employ to mitigate this risk and guarantee the individual VMs' integrity and isolation in the company's virtualized environment?
- AMitigating virtual machine escape
- BEstablishing firewall rules
- CImplementing network segmentation
- DEnforcing user access controls
16An organization experienced disruptions in its business operations due to repeated crashes of a critical application. The IT department suspects a security issue and initiates a thorough investigation. The findings suggest the application failed due to excessive data processing beyond its expected limits. What does the IT department confirm is the cybersecurity threat occurring in its business operations?
- AOn-path attack
- BSocial engineering attack
- CBuffer overflow attack
- DDistributed denial-of-service (DDoS) attack
17The IT department in a mid-sized organization recently moved to a virtualized environment to host its applications and data. The network administrator observes an increase in resource utilization efficiency. However, to mitigate potential data leakage and ensure the integrity of data, the administrator plans to implement a strategy for resource reuse. Given the current scenario, which of the following approaches should the network administrator consider for reassigning resources in the virtualized environment to protect remnants of any previous data from exposure to the subsequent processes?
- AEnforce password complexity rules.
- BApply secure deallocation.
- CEnable Secure Sockets Layer (SSL) encryption.
- DDevelop an incident response plan.
18A software engineer presents a series of training events on vulnerabilities associated with applications. Which type of application vulnerability refers to a security flaw where an attacker can introduce malicious code into a running application's process RAM?
- AMalicious update
- BBuffer overflow
- CRace conditions
- DMemory injection
19An e-commerce company recently identified suspicious activity on its web-based application suggesting a zero-day exploit. The security team suspects that a vulnerability in the application might be under active exploitation by malicious actors before the company identified and patched it. With no known fixes available for a zero-day exploit, what should be the initial course of action for the security team to minimize potential damage and safeguard the application and its users?
- AUpdate the antivirus software on all company devices.
- BPerform a comprehensive system backup.
- CImplement intrusion detection systems (IDS) and application firewalls.
- DEnforce password changes for all users.
20A system administrator is upgrading a company's network security infrastructure and notices several legacy machines running end-of-life operating systems (OS). These machines are no longer upgradeable as the developer has stopped issuing security patches and updates. However, the machines are still necessary for certain critical tasks. What is the system administrator's MOST effective course of action to reduce potential security vulnerabilities caused by these legacy machines running end-of-life operating systems?
- AUpgrade the software to make it compatible with a modern OS
- BIsolate the legacy machines on a separate network segment.
- CReplace the legacy machines with modern machines.
- DDisable all network connections on the legacy machines.
21While enhancing the network security infrastructure of a company, a network administrator identifies several outdated machines running on unsupported operating systems (OS). The manufacturer no longer provides updates or security patches for these machines, yet they are essential for specific critical operations. What action can the network administrator take to minimize the security risks linked to these outdated machines that use unsupported operating systems?
- ADisable all network connections on the legacy machines.
- BReplace the legacy machines with modern machines.
- CUpgrade the software to make it compatible with a modern OS.
- DIsolate the legacy machines on a separate network segment.
22An employee reports an issue to the tech department declaring that their laptop is no longer accepting updates for critical software. What type of vulnerability includes instances where a specific product or version of a product that the manufacturer or vendor has publicly declared as no longer supported?
- AVirtualization
- BEnd-of-life
- CFirmware
- DLegacy
23A security analyst at a software company notices that a seemingly legitimate software update on the server has released a malicious payload resulting in harm to the system. What type of attack likely occurred?
- ALogic bomb
- BTrojan
- CRootkit
- DRansomware
24A tech Subject Matter Expert (SME) presents a program on the various types of attacks that can occur against corporate assets. What is one of the first types of malware that spreads without any authorization from the user, concealed within the executable code of another process?
- AWorm
- BTrojan
- CRansomware
- DSpyware
25The security team at a tech company receives a notification regarding a sudden increase in the number of system logs generated. The system is generating logs at unusual times outside regular business hours. The company follows a well-documented security protocol. What does the sudden increase in the logging activity indicate?
- AMalware attacks
- BSpraying
- COut-of-cycle logging
- DIncorrect documentation
26A cyber architect identifies spyware on a corporate device that is actively attempting to steal confidential information by recording character strokes. What type of spyware is the architect witnessing?
- ARootkit
- BVirus
- CKeylogger
- DLogic bomb
27A popular news website unexpectedly begins to redirect visitors to an archived version of the site that lacks recent security updates. Upon investigation, the site's security team identified a targeted manipulation of their DNSSEC. What type of cybersecurity attack is this incident MOST likely reflecting?
- ABrute force attacks
- BPhishing attacks
- COn-path attacks
- DDomain Name System attacks
28A company's cybersecurity team evaluates threats that could exploit vulnerabilities in its physical infrastructure. The team is specifically considering threats that can directly harm the company's systems and potentially damage data or services. What type of threat does this scenario BEST describe?
- AEnvironmental threats
- BSocial engineering attacks
- CDowngrade attacks
- DNetwork attacks
29A network administrator identifies a malicious software on a system designed to collect information about users without their knowledge. This information includes internet browsing habits, system information, or even keystrokes. What term BEST describes this malicious software?
- AWorm
- BTrojan
- CRootkit
- DSpyware
30The server manager of a tech company observes a significant increase in server resource consumption, which is not proportional to the workload on the server. Which of the following is the MOST plausible cause for these observations?
- AConcurrent session usage
- BMalware infection
- CRFID cloning
- DResource consumption
31A cybersecurity analyst at a large corporation notices suspicious activity from one of the employee accounts. Log entries indicate that the same account is accessing the company's intranet from two countries just an hour apart. However, the employee is currently on a business trip and is only using wireless connections. Which security anomaly is occurring in this situation?
- AImpossible travel
- BDistributed denial-of-service (DDoS)
- CBrute force attack
- DWireless misconfiguration
32A major online retail company has recently been experiencing intermittent downtime of its website. Network analysts observe a massive influx of traffic from multiple sources to the server. However, the traffic seems redirected from other systems. What type of attack is the company likely experiencing?
- AInjection
- BCollision
- CDistributed denial-of-service (DDoS)
- DBuffer overflow
33A cybersecurity specialist deals with potential system compromises that can manifest as suspicious network activity or abnormal system behavior in the organization's network. What manifestation should the cybersecurity specialist be analyzing?
- ASystem logs
- BFirewall alerts
- CIntrusion detection system (IDS) alerts
- DIndicators
34A systems administrator notices that several user accounts are frequently getting locked out. Upon further investigation, the administrator determined that the system did not record any logs during these instances of lockouts. Which of the following could be the MOST likely reason for this scenario?
- AMissing logs
- BMalware attack
- CUnsecure network connection
- DAccount lockout
35A cyber consultant uses a sandbox environment to test some malware recently found on a company laptop. What malware can deliver as the payload for an exploit of a severe vulnerability and able to execute without requiring any authorization using SYSTEM privileges?
- AVirus
- BLogic bomb
- CRootkit
- DKeylogger
36A security analyst is investigating a security breach in a network system that involves unauthorized access to user credentials and reusing them multiple times. What is the MOST likely type of attack that has occurred?
- AGolden ticket attacks
- BPass the ticket attacks
- CBuffer overflow attacks
- DCredential replay
37An organization creates a standard operating procedure on methods to combat attacks by external threat actors. What malware can perform adware-like tracking, monitor local application activity, take screenshots, and activate recording devices, such as a microphone or webcam?
- ATrojan
- BRansomware
- CWorm
- DSpyware
38During a recent security audit, a security specialist identified an attack that takes advantage of a vulnerability in an application, enabling an attacker to write data beyond the allocated space. What type of attack has likely occurred?
- AStructured query language (SQL) injection
- BDistributed denial-of-service (DDoS)
- CCross-site scripting (XSS)
- DBuffer overlfow
39A cybersecurity analyst is trying to discover why a web application's interpreter executes unintended commands. The analyst notices that the attack involves sending untrusted data to an interpreter as part of a command or query. What does the analyst suspect is happening?
- ADDoS attack
- BOn-path attack
- CReplay attack
- DInjection attack
40An organization is facing issues with some of its systems running slow without any obvious reasons. A cybersecurity professional suspects the issue involves some undesired software that is not malicious but takes up system resources. Which type of software is the suspected cause?
- ADirectory traversal
- BBloatware
- CConcurrent session usage
- DVirus
41The cybersecurity team at a company raises an alert after observing an unusual situation. A remote employee's account has been simultaneously logging into the system from two geographically distant regions within an hour. The team finds this unusual pattern of access after confirming that the employee is using only wireless connections during a business trip. What is causing an alert in this activity?
- AImpossible travel
- BWireless misconfiguration
- CBrute force attack
- DDistributed denial-of-service (DDoS)
42The IT department at a financial institution notices a peculiar trend in its system logs. The system, which generally logs events during regular business hours, has recorded an unusual volume of logs outside these hours. They observe this anomaly despite the company following a detailed security protocol. What is likely the cause of this unusual logging pattern?
- AOut-of-cycle logging
- BSpraying
- CMalware attacks
- DIncorrect documentation
43A cybersecurity specialist in a company notes a general decrease in system performance due to resource consumption, but there is no evidence of harmful intent, and the network seems to be functional. What is MOST likely causing the decreased performance?
- AConcurrent session usage
- BVirus
- CDirectory traversal
- DBloatware
44A cyber consultant creates a technical guide covering emerging threats to employees' devices. What malware replicates and spreads from computer to computer, usually by infecting executable applications or program code?
- ARootkit
- BVirus
- CLogic bomb
- DKeylogger
45A tech team is preparing a presentation for all staff members after a recent malware attack crippled the company's network. What type of malware tries to extort money from the victim by making the victim's computer or data files unavailable, demanding payment?
- ATrojan
- BRansomware
- CWorm
- DSpyware
46The IT department of a global corporation identifies an incident where critical files are involuntarily encrypted, with a popup message on the screen declaring that an attacker is leveraging the destruction of the decryption key. Which attack has the IT department MOST accurately portrayed?
- ARansomware
- BRootkit
- CSpyware
- DTrojan
47A test engineer analyzes a team's set of laptops after an outbreak of viruses and malware infections. What malware conceals itself within an installer package for software that appears to be legitimate?
- ATrojan
- BSpyware
- CWorm
- DRansomware
48A multinational corporation's website is under attack by threat actors attempting to manipulate the company's DNSSEC. Their method involves having users access a redirected website, which is an older, less secure version of the site. Which type of attack BEST describes this situation?
- APhishing attacks
- BBrute force attacks
- COn-path attacks
- DDomain Name System attacks
49A recently breached company tasks the cyber team to further restrict end-user permissions. What describes the use of an application allow list?
- AIt is a list of rules or entries that specify users' access.
- BIt is used in computer systems and networks to enforce policies.
- CIt allows or denies an application from running.
- DIt controls access to files, directories, or systems resources in OSs.
50In times of war, countries remind their service members that any mobile device can be a security risk and leak important information to the internet or enemy. What steps can service members take to ensure they will not leak sensitive information? (Select the three best options.)
- ATurn off geolocation in photos
- BReview application permissions
- CUse the phone in authorized areas only
- DEnsure patches are up-to-date
51A new IT tech believes the system is completely secure by only allowing access to needed physical ports on a local test computer. However, once placed back on the network, it is easily compromised. What is the BEST change the IT tech could have made to make the system more secure from network attacks?
- AUpdate the local antivirus software
- BInstall a host-based firewall
- CDisable unneeded logical ports
- DEncrypt the local Hard Disk Drive (HDD).
52An organization tasks a cyber team to implement advanced endpoint protection measures after a recent exfiltration. What is a tenet of Host-based intrusion prevention (HIPS)? (Select the three best choices.)
- AIt describes software tools that monitor and protect individual hosts.
- BIt uses signature-based detection and anomaly detection.
- CIt requires deploying and configuring specialized software agents.
- DIt provides controls for incoming and outgoing network traffic.
53In preparation for taking over inventory for their division, an engineer reviews the records for the previous inventory count. The engineer notes that a few items were on the previous inventory count that they could not find during their initial search. What records should they review prior to looking for the missing items?
- AAccess control
- BConfiguration enforcement
- CMonitoring
- DDecommissioning
54A system admin implement a process that assigns all users a username and password combination that allows them to interact with specific areas of the network. Which mitigation technique should the system admin implement?
- AAccess control lists
- BAccess control
- CConfiguration enforcement
- DMonitoring
55An organization wants to increase regulation and management of permissions granted to users after a recent breach. When evaluating variances in endpoint configurations, what are tenets associated with access control lists (ACLs)? (Select the three best options.)
- AIt controls access to files, directories, or systems resources in OSs.
- BIt enforces policies in computer systems and networks.
- CIt is a list of rules or entries that specify users' access.
- DIt denies execution unless the process is explicitly authorized.
56A company acquires a smaller company and has its in-house technical team review the new systems before allowing them on the existing network. During this review, the technical team discovers users with unnecessary permissions, user accounts for former employees, and no longer needed groups. These discoveries indicate the violation of what BEST practice?
- APrinciple of least privilege
- BFile system permissions
- CConfiguration enforcement
- DAccess control
57A new IT tech reviews changes made to a computer, including turning off unneeded logical ports, installing a host-based firewall, and updating the installed antivirus software. These actions are examples of what technique?
- AFollowing a baseline configuration and registry settings
- BControlling access to the system
- CImplementing host-based intrusion detection/prevention
- DSecuring the system against a network attack
58For several months, new access control lists (ACL) policies created an increasingly complex system for a group of IT administrators to manage. This complexity resulted in an incorrect configuration within an ACL and caused necessary data files to become inaccessible to all users. What considerations should the team take when working with ACLs to prevent this from happening again? (Select the three best options.)
- AFile system security
- BPeriodic reviews
- CProper planning
- DBest practice configurations
59A distribution company bidding on a national contract must demonstrate that its networks are secure and response times are adequate to stop attacks from reaching the client company. What can support the company in meeting this requirement?
- ASegmentation
- BIsolation
- CPatch management
- DHardening
60A distribution company bids on a national contract and utilizes segmentation to protect its network and hardware from attackers. What are some of the benefits of using segmentation as protection? (Select the three best options.)
- AGranular control ensures that only information for specific tasks is available to users, devices, and applications
- BSignificantly complicates an attacker's work, giving an organization more time to detect and respond
- CLimits the potential for malware to propagate across the network.
- DAllows for easier tracking of the location of hardware when separated
61A new system admin reviews a report showing that incorrect configuration within an access control list (ACL) kept users from accessing needed files. The admin wants to implement an overhaul of the ACLs, ensuring the usage of proper planning, periodic reviews, and BEST practice configurations. What will these considerations help the system admin prevent?
- ALosing access to ACLs
- BFile systems losing permissions
- CACLs becoming too complex
- DFailure of configuration enforcement
Information
- Description
- 5 ComptiaSecurity+ Quiz on Module 2.3/2.4/2.5, created by Timotei Moscaliuc on 10/02/2025.
- Author
- Timotei Moscaliuc
- Language
- English
- Views
- 3
- Tags
- Rating
- No ratings yet Rate this quiz