CompTIA Security Fundamentals 2

Question 1

Which type of attack intercepts communication between two parties without their knowledge to steal or alter data?

Accepted Answer

Man-in-the-middle (MitM)

Answer

A man-in-the-middle attack positions the attacker between two communicating parties to eavesdrop or alter the exchanged data.

Question 2

What is the primary purpose of a DMZ (demilitarized zone) in network security?

Accepted Answer

To host public-facing services while isolating the internal network

Answer

A DMZ is a network segment that hosts public-facing servers (e.g., web, email) while keeping the internal corporate network protected.

Question 3

A user receives an email appearing to be from their bank asking them to verify account details via a link. This is BEST described as:

Accepted Answer

Phishing

Answer

Phishing uses deceptive emails that appear legitimate to trick users into revealing sensitive information.

Question 4

Which authentication factor is represented by a fingerprint scan?

Accepted Answer

Something you are

Answer

Biometrics like fingerprints represent 'something you are,' which is an inherence factor in authentication.

Question 5

What does the principle of 'defense in depth' mean in cybersecurity?

Accepted Answer

Layering multiple security controls so that if one fails, others still protect the system

Answer

Defense in depth uses multiple overlapping security layers so an attacker must bypass each one to compromise the system.

CompTIA Practice Test