CompTIA ITF+ ITF+ Information Security Principles 2

Question 1

A user receives an email claiming their bank account will be suspended unless they click a link and verify their credentials. What type of attack is this?

Accepted Answer

Phishing

Answer

Pharming

Answer

Vishing

Answer

Smishing

Question 2

Which of the following BEST describes the principle of least privilege?

Accepted Answer

Users should only have the minimum access rights needed to perform their job

Answer

Users should share accounts to reduce administrative overhead

Answer

Administrators should have access to all systems for troubleshooting

Answer

Passwords should be the shortest length possible for convenience

Question 3

What is the purpose of multi-factor authentication (MFA)?

Accepted Answer

To require verification from two or more different categories of credentials

Answer

To allow users to log in without a password

Answer

To store passwords in multiple locations for redundancy

Answer

To encrypt data during transmission

Question 4

A company stores customer credit card numbers in plain text in a database. Which security control is MOST needed?

Accepted Answer

Encryption

Answer

Firewall

Answer

Antivirus

Answer

Physical lock

Question 5

Which of the following is an example of 'something you are' in authentication?

Accepted Answer

Fingerprint scan

Answer

PIN number

Answer

Smart card

Answer

Security token

Question 6

What does a VPN primarily provide for remote workers?

Accepted Answer

A secure, encrypted tunnel over a public network

Answer

Faster internet speeds

Answer

Free access to geo-restricted content

Answer

Automatic malware removal

Question 7

An attacker intercepts and alters communication between two parties without their knowledge. What type of attack is this?

Accepted Answer

Man-in-the-middle

Answer

Denial of service

Answer

SQL injection

Answer

Brute force