COMPTIA SECURITY PLUS SY0 601
NETWORK SECURITY QUIZ 2026
FINAL PAPER PRACTICE
QUESTIONS ANSWERS ACCURATE
A+
◉ Cristin wants to protect her database server from indirect attacks via
the web applications that her company has deployed. Which of the
following types of attacks might she want to protect against?
a. SQL stuffing
b. DBMS DDL
c. SQL injection
d. DBMS wrapping.
Answer: SQL injection
◉ Tavon is testing an application before it goes into production. As part
of his testing, he is entering various types of data into the form's text
fields in the application to see if he can get it to generate a system error
that isn't caught by the application's input validation. He tries to enter the
number 289 into a field that is being stored as an 8-bit number in the
database. Which of the following might be the result?
a. This will cause a buffer overflow.
b. This will cause a SQL injection.
c. There will not be an error and it will insert into the table correctly.
,d. This will cause an integer overflow..
Answer: This will cause an integer overflow.
◉ Elzbieta is a cybersecurity analyst at a water treatment utility. The
company is looking to automate some of the functions at the plants that
it operates to save on labor costs. Which of the following might she
suggest that they deploy?
a. BAS
b. ICS
c. IoT
d. RTOS.
Answer: ICS
◉ A pandemic has spread worldwide that has caused a number of health
issues, requiring many companies to ask their employees to work from
home. However, there are some concerns that some of the devices on
their employees' home networks easily could be compromised if not
developed with a strong security posture in mind. Which of the
following types of devices are the most likely concern?
a. IoT
b. FPGA
c. RTOS
d. SoC.
Answer: IoT
,◉ Isak works for a company that makes embedded systems for use in
the building and construction industry. Which of the following most
commonly is used by SoC technologies that he will most likely need to
be familiar with?
a. IoT
b. RTOS
c. FPGA
d. SCADA.
Answer: RTOS
◉ Emil works for a large online ecommerce site. The company is
looking to automate deliveries to its customers while avoiding the traffic
jams in large cities. However, they are concerned that some of these
devices could remotely be controlled and sent to other destinations with
the customer's packages. Which of the following is the company most
likely looking at using?
a. CAN bus
b. Drones
c. AIRV
d. IoT.
Answer: Drones
◉ Avery is a cybersecurity analyst for a large credit card company. He
is performing a manual audit of the logs for a web application server and
notices some entries out of the ordinary. As he starts to investigate, he
sees large amounts of traffic originating from one country, where the
credit card company currently does not process any credit cards from.
, Which of the following might best describe the threat actors which have
breached his company's security?
a. Script kiddies
b. Insider threat
c. Nation-state actors
d. Hacktivists.
Answer: Nation-state actors
◉ Aria has just returned from a cybersecurity conference. She met a
number of professionals like herself who worked for well-known
multinational organizations, as well as penetration testers who were
hired to hack for a living. Which of the following describes the group of
people described?
a. White hat
b. Black hat
c. Yellow hat
d. Green hat.
Answer: White hat
◉ Ricardo receives a visit from one of the directors of the sales
department. He states that the sales department has been using a cloud-
based customer relationship management system for a while now and
would like to start pulling in some data from the ERP. This is the first
that Ricardo or anyone in IT has heard about the sales department using
a cloud-based CRM. Which of the following best describes this
scenario?
NETWORK SECURITY QUIZ 2026
FINAL PAPER PRACTICE
QUESTIONS ANSWERS ACCURATE
A+
◉ Cristin wants to protect her database server from indirect attacks via
the web applications that her company has deployed. Which of the
following types of attacks might she want to protect against?
a. SQL stuffing
b. DBMS DDL
c. SQL injection
d. DBMS wrapping.
Answer: SQL injection
◉ Tavon is testing an application before it goes into production. As part
of his testing, he is entering various types of data into the form's text
fields in the application to see if he can get it to generate a system error
that isn't caught by the application's input validation. He tries to enter the
number 289 into a field that is being stored as an 8-bit number in the
database. Which of the following might be the result?
a. This will cause a buffer overflow.
b. This will cause a SQL injection.
c. There will not be an error and it will insert into the table correctly.
,d. This will cause an integer overflow..
Answer: This will cause an integer overflow.
◉ Elzbieta is a cybersecurity analyst at a water treatment utility. The
company is looking to automate some of the functions at the plants that
it operates to save on labor costs. Which of the following might she
suggest that they deploy?
a. BAS
b. ICS
c. IoT
d. RTOS.
Answer: ICS
◉ A pandemic has spread worldwide that has caused a number of health
issues, requiring many companies to ask their employees to work from
home. However, there are some concerns that some of the devices on
their employees' home networks easily could be compromised if not
developed with a strong security posture in mind. Which of the
following types of devices are the most likely concern?
a. IoT
b. FPGA
c. RTOS
d. SoC.
Answer: IoT
,◉ Isak works for a company that makes embedded systems for use in
the building and construction industry. Which of the following most
commonly is used by SoC technologies that he will most likely need to
be familiar with?
a. IoT
b. RTOS
c. FPGA
d. SCADA.
Answer: RTOS
◉ Emil works for a large online ecommerce site. The company is
looking to automate deliveries to its customers while avoiding the traffic
jams in large cities. However, they are concerned that some of these
devices could remotely be controlled and sent to other destinations with
the customer's packages. Which of the following is the company most
likely looking at using?
a. CAN bus
b. Drones
c. AIRV
d. IoT.
Answer: Drones
◉ Avery is a cybersecurity analyst for a large credit card company. He
is performing a manual audit of the logs for a web application server and
notices some entries out of the ordinary. As he starts to investigate, he
sees large amounts of traffic originating from one country, where the
credit card company currently does not process any credit cards from.
, Which of the following might best describe the threat actors which have
breached his company's security?
a. Script kiddies
b. Insider threat
c. Nation-state actors
d. Hacktivists.
Answer: Nation-state actors
◉ Aria has just returned from a cybersecurity conference. She met a
number of professionals like herself who worked for well-known
multinational organizations, as well as penetration testers who were
hired to hack for a living. Which of the following describes the group of
people described?
a. White hat
b. Black hat
c. Yellow hat
d. Green hat.
Answer: White hat
◉ Ricardo receives a visit from one of the directors of the sales
department. He states that the sales department has been using a cloud-
based customer relationship management system for a while now and
would like to start pulling in some data from the ERP. This is the first
that Ricardo or anyone in IT has heard about the sales department using
a cloud-based CRM. Which of the following best describes this
scenario?
