CompTIA ITF+ ITF+ Information Security Principles 2

Question 1

A user receives an email claiming their bank account will be suspended unless they click a link and verify their credentials. What type of attack is this?

Accepted Answer

Phishing

Answer

Phishing uses deceptive emails that impersonate trusted entities to trick users into revealing credentials.

Question 2

Which of the following BEST describes the principle of least privilege?

Accepted Answer

Users should only have the minimum access rights needed to perform their job

Answer

Least privilege limits user access rights to only what is necessary, reducing the attack surface.

Question 3

What is the purpose of multi-factor authentication (MFA)?

Accepted Answer

To require verification from two or more different categories of credentials

Answer

MFA requires proof from at least two categories: something you know, have, or are — making unauthorized access much harder.

Question 4

A company stores customer credit card numbers in plain text in a database. Which security control is MOST needed?

Accepted Answer

Encryption

Answer

Encryption converts sensitive data into an unreadable format, protecting it even if the database is compromised.

Question 5

Which of the following is an example of 'something you are' in authentication?

Accepted Answer

Fingerprint scan

Answer

Biometrics like fingerprints represent 'something you are' — a physical or behavioral characteristic unique to the user.

CompTIA Practice Test

CompTIA Practice Test

CompTIA ITF+ ITF+ Information Security Principles 2