ITF+ Security Principles Flashcards
6 cards from real COMPTIA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 ITF+ Security Principles flashcards as text
A company's financial records were secretly modified to show a lower profit, allowing an executive to purchase company stock at a reduced price. Which principle of the CIA triad was primarily violated?
Answer: Integrity
Integrity ensures that data is accurate, consistent, and has not been tampered with by unauthorized parties. In this scenario, the unauthorized modification of financial records is a direct violation of data integrity.
Which of the following is a security control that acts as a barrier between a trusted internal network and an untrusted external network, such as the internet, by filtering traffic based on a set of rules?
Answer: Firewall
A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. Its primary purpose is to create a barrier between a secure internal network and untrusted external networks.
An employee receives an email that appears to be from their bank, asking them to click a link and verify their account details due to a "security alert." The link leads to a fraudulent website designed to steal credentials. What type of attack is this?
Answer: Phishing
Phishing is a type of social engineering attack where attackers deceive individuals into revealing sensitive information, such as usernames, passwords, and credit card details, by masquerading as a trustworthy entity in an electronic communication.
A user downloads what appears to be a legitimate free screen-saver application. However, once installed, the program secretly installs software that gives a remote attacker unauthorized access to the user's system. What type of malware is the screen-saver application?
Answer: Trojan horse
A Trojan horse, or Trojan, is a type of malware that disguises itself as legitimate software to trick users into installing it. Once executed, it carries out its malicious function, such as creating a backdoor for an attacker.
When setting up a new online account, a user is required to provide a password. Which of the following represents the MOST secure password?
Answer: MyP@ssw0rd!2024
A strong password uses a combination of uppercase letters, lowercase letters, numbers, and special characters (complexity). It is also sufficiently long, which makes it resistant to brute-force and dictionary attacks.
Which of the following is an example of the 'something you are' authentication factor?
Answer: A fingerprint scan
Authentication factors are categorized as something you know (e.g., password), something you have (e.g., token), and something you are. 'Something you are' refers to biometric data, which includes unique physical characteristics like fingerprints, retinal patterns, or facial features.