CompTIA Security Fundamentals 4 — Questions and Answers
Question 1: Which type of backup only copies data that has changed since the last full backup, resetting the archive bit?
- Differential backup
- Incremental backup (Correct answer)
- Full backup
- Snapshot backup
Correct answer: Incremental backup
An incremental backup captures only changes made since the last backup of any type and resets the archive bit after each run.
Question 2: What is the primary purpose of network segmentation in security?
- Increase network speed
- Reduce the attack surface by limiting lateral movement between network zones (Correct answer)
- Simplify network management
- Enable wireless connectivity
Correct answer: Reduce the attack surface by limiting lateral movement between network zones
Network segmentation divides a network into isolated zones to contain breaches and limit an attacker's ability to move laterally.
Question 3: An attacker sends millions of requests to a web server to make it unavailable. This is called a:
- Brute force attack
- Denial of Service (DoS) attack (Correct answer)
- Replay attack
- Buffer overflow attack
Correct answer: Denial of Service (DoS) attack
A DoS attack overwhelms a target system with traffic or requests, making it unavailable to legitimate users.
Question 4: What does HTTPS indicate about a website connection?
- The website is government-approved
- The connection is encrypted using TLS/SSL (Correct answer)
- The website has no malware
- The site passed a security audit
Correct answer: The connection is encrypted using TLS/SSL
HTTPS indicates the communication between the browser and server is encrypted using TLS, protecting data in transit.
Question 5: Which concept describes the process of verifying that data has not been altered during transmission?
- Confidentiality
- Availability
- Integrity (Correct answer)
- Authentication
Correct answer: Integrity
Integrity ensures that data remains accurate and unmodified during storage or transmission, often verified using hashes.
Question 6: What is the purpose of a VPN (Virtual Private Network)?
- Speed up internet connections
- Create an encrypted tunnel for secure communication over public networks (Correct answer)
- Block malicious websites
- Manage user passwords
Correct answer: Create an encrypted tunnel for secure communication over public networks
A VPN encrypts network traffic and routes it through a secure tunnel, protecting data sent over untrusted networks like the internet.
Question 7: Which type of social engineering attack targets specific high-profile individuals within an organization?
- Phishing
- Spear phishing
- Whaling (Correct answer)
- Smishing
Correct answer: Whaling
Whaling is a spear phishing attack specifically targeting executives or other high-value individuals within an organization.
CompTIA Security Fundamentals 4
Which type of backup only copies data that has changed since the last full backup, resetting the archive bit?