CompTIA Security Fundamentals 3

Question 1

Which type of malware disguises itself as legitimate software but performs malicious actions when executed?

Accepted Answer

Trojan horse

Answer

A Trojan horse masquerades as legitimate or useful software while secretly executing malicious functions.

Question 2

What is the function of an Intrusion Detection System (IDS)?

Accepted Answer

Monitor and alert on suspicious activity or policy violations

Answer

An IDS monitors network traffic or system activity for suspicious behavior and generates alerts without actively blocking traffic.

Question 3

An employee plugs in a USB drive found in the parking lot. This is an example of which social engineering technique?

Accepted Answer

Baiting

Answer

Baiting lures victims by exploiting curiosity, often using physical media like USB drives left in conspicuous locations.

Question 4

Which access control model assigns permissions based on job roles within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC grants permissions based on predefined organizational roles rather than individual user identities.

Question 5

What is a zero-day vulnerability?

Accepted Answer

A flaw that is unknown to the vendor and has no available patch

Answer

A zero-day vulnerability is an unknown security flaw that vendors have had zero days to address, leaving systems exposed.

CompTIA Practice Test