CompTIA Security+ Practice Test

Which type of attack involves flooding a target system with traffic to exhaust resources and bandwidth, rendering the system unresponsive?

In the context of cybersecurity, what is 'social engineering'?

Which of the following is a type of malware that requires user interaction to activate and replicate, often disguised as legitimate software?

In cybersecurity, what is a 'honeypot' primarily used for?

What is the primary purpose of a 'zero-day' exploit in cybersecurity?

Which type of attack is characterized by the insertion or "injection" of a SQL query via the input data from the client to the application?

What type of cyber attack involves intercepting and altering communications between two parties without their knowledge?

What is a 'buffer overflow' attack in the context of cybersecurity?

In cybersecurity, what does 'phishing' primarily refer to?

Which type of cybersecurity attack involves exploiting vulnerabilities in web applications by sending malicious scripts to end users?

What kind of attack involves the unauthorized interception and retransmission of a valid data transmission, often to bypass authentication processes?

In cybersecurity, what is 'vishing'?

Which type of cybersecurity threat involves exploiting a flaw in software before a patch or solution is implemented?

In the context of cybersecurity, what is 'spear phishing'?

What is the primary purpose of 'watering hole' attacks in cybersecurity?

Which cybersecurity term describes a small piece of data used to identify and authenticate a user's session?

What is the main difference between a virus and a worm in the context of cybersecurity threats?

What type of cyber attack uses multiple compromised systems to target a single system, causing a Denial of Service (DoS)?

In cybersecurity, what does 'ransomware' do?

What is the primary purpose of a HIDS (Host-based Intrusion Detection System)?

What is the primary purpose of the tcpdump tool in network security?

What is the primary purpose of using a WAF (Web Application Firewall)?

In the context of network security, what is the main function of an IPS (Intrusion Prevention System)?

In cybersecurity, what is the primary function of a SIEM (Security Information and Event Management) system?

Which tool is primarily used for vulnerability scanning in a network?

Which technology is most effective for preventing data leakage via email?

Which of the following is a primary use case for a protocol analyzer in network security?

What is the primary security function of a UTM (Unified Threat Management) appliance?

In a Public Key Infrastructure (PKI), what is the role of a Certificate Authority (C

Which security technology is primarily used to inspect SSL/TLS encrypted traffic at the perimeter of a network?

What is the main function of a CASB (Cloud Access Security Broker)?

In the context of digital forensics, what is the main purpose of a write blocker?

What is the primary purpose of a Network Access Control NAC system?

In network security, what is the primary purpose of using a honeypot?

Which tool is used in cybersecurity to simulate attacks on a system or network to identify vulnerabilities?

In cybersecurity, what is the primary function of a Next-Generation Firewall (NGFW)?

Which technology is essential for securing a network against Zero Day exploits?

What is the primary use of a Security Assertion Markup Language (SAML)?

In network security, what is the main function of an IDS (Intrusion Detection System)?

What is the primary security function of a WAF (Web Application Firewall)?

Which technology is primarily used for isolating network traffic to improve security and performance in a virtualized environment?

What is the primary function of Secure Sockets Layer (SSL) / Transport Layer Security (TLS) in network security?

In the context of cloud computing, what is the main purpose of a Cloud Access Security Broker CASB?

Which of the following is a security concept that ensures that data is only modified by authorized users and in authorized ways?

In the context of secure network design, what is the primary purpose of a Demilitarized Zone (DMZ)?

In a security context, what is the main purpose of employing a honeypot in a network?

In cybersecurity, what is the primary purpose of employing containerization?

What is the primary function of a network-based Intrusion Detection System (NIDS)?

Which of the following best describes the concept of defense in depth in network security?

In network security, what is the main purpose of a VLAN (Virtual Local Area Network)?

What is the primary purpose of implementing an IDS (Intrusion Detection System) in tandem with an IPS (Intrusion Prevention System)?

What is the primary purpose of a SIEM (Security Information and Event Management) system in a cybersecurity infrastructure?

In a cloud computing environment, what is the primary security benefit of implementing microsegmentation?

What is the primary security concern addressed by the implementation of a Zero Trust model?

Which authentication protocol primarily relies on tickets for client-server authentication and does not transmit passwords over the network?

In Identity and Access Management, what is the primary purpose of a Federation Service?

What is the primary function of TACACS+ in network security?

Which of the following best describes a 'Privileged Access Management' (PAM) system?

Which authentication factor category does a fingerprint scanner fall under?

In a Single Sign-On (SSO) implementation, what is the primary security risk?

Which term best describes a system where different authentication methods are used at different times or in different contexts for the same user?

In the context of Public Key Infrastructure (PKI), what role does the Certificate Revocation List (CRL) play?

What is the main advantage of implementing a Role-Based Access Control RBAC system in an organization?

What is the main purpose of implementing a Directory Service in network security?

In a PKI, what is the function of a Key Escrow?

In Identity and Access Management, what is a primary security feature of using smart cards as an authentication factor?

Which access control model dynamically assigns roles to users based on attributes and environmental conditions?

Which of the following best describes a 'risk register' in the context of risk management?

In risk management, what does the term 'risk appetite' refer to?

In the context of risk management, what is 'residual risk'?

Which term describes the process of prioritizing risks for further analysis or action by assessing their likelihood and impact?

In the context of risk management, what is 'risk transference'?

What is the primary purpose of 'quantitative risk analysis' in risk management?

Which approach in risk management prioritizes risks based on their severity and likelihood of occurrence?

In risk management, what is the primary purpose of 'Continuous Monitoring'?

Which document in risk management outlines the overall risk strategy and policies of an organization?

What role does 'Due Diligence' play in risk management?

Which concept in risk management involves determining the impact of an adverse event that may affect the assets, resources, or operations of an organization?

In risk management, what does 'Annual Loss Expectancy' (ALE) represent?

In cryptography, what is the main purpose of a Certificate Revocation List (CRL)?

Which cryptographic principle prevents the sender of a message from denying the message's content and transmission?

Which cryptographic attack involves attempting to decrypt a cipher by trying every possible key?

In the context of public key infrastructure (PKI), what is the role of a Certificate Authority (C

What is the main difference between symmetric and asymmetric encryption?

In asymmetric cryptography, what is the primary purpose of a digital signature?

Which property of cryptographic hash functions ensures that, if two different messages produce the same hash, it's computationally infeasible to find them?

In the context of PKI, what does the term 'chain of trust' refer to?

What cryptographic concept involves the use of two keys, a public key for encryption, and a private key for decryption?

Which of the following algorithms is not a symmetric key algorithm?

What cryptographic concept involves splitting data into parts where individual parts do not reveal the whole?