CompTIA Security Fundamentals 5 — Questions and Answers
Question 1: What is the main goal of a penetration test?
- Install security software across the network
- Simulate real-world attacks to identify vulnerabilities before malicious actors do (Correct answer)
- Monitor network traffic for intrusions
- Train employees on security awareness
Correct answer: Simulate real-world attacks to identify vulnerabilities before malicious actors do
A penetration test ethically simulates attacks on a system to discover exploitable vulnerabilities before real attackers find them.
Question 2: Which of the following BEST describes multi-factor authentication (MFA)?
- Using a long, complex password
- Requiring authentication from two or more different factor categories (Correct answer)
- Having multiple user accounts
- Changing passwords frequently
Correct answer: Requiring authentication from two or more different factor categories
MFA requires two or more factors from different categories (something you know, have, or are) to verify identity.
Question 3: What does a hash function produce when applied to a file?
- An encrypted version of the file
- A fixed-size digest that uniquely represents the file's contents (Correct answer)
- A compressed archive of the file
- A digital signature for the file
Correct answer: A fixed-size digest that uniquely represents the file's contents
A hash function produces a fixed-length digest (fingerprint) of data; even a small change in input produces a completely different hash.
Question 4: An attacker gains unauthorized physical access to a secure area by following an authorized employee through a door. This is called:
- Shoulder surfing
- Tailgating (piggybacking) (Correct answer)
- Dumpster diving
- Vishing
Correct answer: Tailgating (piggybacking)
Tailgating (or piggybacking) involves an unauthorized person following an authorized individual through a secured physical access point.
Question 5: What is the purpose of patch management in an organization?
- Monitor network performance
- Regularly apply updates to fix vulnerabilities and keep software secure (Correct answer)
- Create system backups
- Configure firewall rules
Correct answer: Regularly apply updates to fix vulnerabilities and keep software secure
Patch management ensures systems are kept up to date with security fixes to reduce the risk of exploitation through known vulnerabilities.
Question 6: Which of the following is an example of physical security control?
- Antivirus software
- Encryption
- Badge access reader on a server room door (Correct answer)
- Network firewall
Correct answer: Badge access reader on a server room door
A badge access reader is a physical security control that restricts unauthorized individuals from entering sensitive areas.
Question 7: What is the difference between a vulnerability and an exploit?
- They are the same thing
- A vulnerability is a weakness; an exploit is the code or technique used to take advantage of it (Correct answer)
- An exploit is a weakness; a vulnerability is a type of attack
- A vulnerability is a successful attack; an exploit is a failed attempt
Correct answer: A vulnerability is a weakness; an exploit is the code or technique used to take advantage of it
A vulnerability is a security weakness or flaw, while an exploit is the specific method or tool used to leverage that weakness for an attack.
CompTIA Security Fundamentals 5
What is the main goal of a penetration test?