SECURITY+ NETWORK SECURITY FUNDAMENTALS 2025/2026
QUESTIONS WITH SOLUTIONS GRADED A+
✔✔which of the following is an attempt to influence a user by coercion - ✔✔intimidation
✔✔a user who installs a program that prints out coupons but in the background silently
collects her password has installed a - ✔✔trojan
✔✔what should you do to completely remove a rootkit from a computer - ✔✔reformat
the hard drive and reinstall the operating system
✔✔which of these could not be defined as a logic bomb - ✔✔Send spam email to all
users in the company on Tuesday.
✔✔what is it called when a user makes a typing error when entering a url that takes him
to an imposter website - ✔✔typo squatting
✔✔which of these is a general term used for describing software that gathers
information without the user's consent - ✔✔spyware
✔✔which statement regarding a keylogger is not true - ✔✔software keyloggers are easy
to detect
✔✔the preferred method today of bvot herders for command and control of zombies is
____ - ✔✔hypertext transport protocol (HTTP)
✔✔a watering hole attack is directed against ___ - ✔✔users who access a common
website
✔✔___________ sends messages to wealthy individuals - ✔✔whaling
✔✔what is unsolicited instant messaging called - ✔✔spam
✔✔michelle pretends to be the help desk manager and calls steve to trick him into
giving her his passworld what social engineering attack has michelle performed -
✔✔impersonation
✔✔how can an attacker us a hoax - ✔✔a hoax could convince a user that a bad trojan
is ciruclating and that he should change his securit settings
✔✔which of these items retrieved through dumpster diving would not provide useful
information - ✔✔books
,✔✔____ is following an authorized person through a secure door - ✔✔tailgating
✔✔each of these is a reason why adware is scorned except ____ - ✔✔it displays the
attacker's programming skills
✔✔what is the term used for an attakcer who controls multiple zombies in a botnet -
✔✔bot herder
✔✔which of these is not a reason why securing server-side web apllications is difficult -
✔✔although traditional network security devices can block traditional network attacks
they cannot always block web application attacks
✔✔which of these is not an HTTP header attack - ✔✔content-length
✔✔what is another name for a locally shared objecxt - ✔✔flash cookie
✔✔browser plug-ins ______ - ✔✔can be embedded inside a webpage but add-ons
cannot
✔✔an attacker who manipulates the maximum size of aninteger type would be
performing what kind of attack - ✔✔integer overflow
✔✔what kind of attack is performed by an attacker who takes advantage of the
inadvertent and unauthorized access built therough three succeeding systems that all
trust one another - ✔✔transitive
✔✔which statement is correct regarding why traditional network security devices cannot
be used to block web application attacks - ✔✔traditional network secureitty devices
ignore the content of http traffic, which is the viegicxle of web application attacks
✔✔what do attackers use buffer overflows to do - ✔✔point to another are in data
memory that contains the attacker's malware code
✔✔what is unique about a cross-site scripting (XSS) attack compared to other injection
attacks - ✔✔xss does not attack the web application sever to steal or corrupt its
information
✔✔what is a cookie that was not created by the website beingh viewed called -
✔✔third-part cookie
✔✔what is the basis of an SQL injection attack - ✔✔to inject SQL statements through
unfiltered user input
, ✔✔which actions cannot be performed through a successful SQL injection attack -
✔✔reformat the web application server's hard drive
✔✔which markup language is designed to carry data - ✔✔XML
✔✔what type of attack involved an attacker accessing files in directories other than the
root directory - ✔✔directory traversal
✔✔which type of attack modifies the fields that contain the different characteristics of
the data that is being trasnmitted - ✔✔HTTP header
✔✔what is a session token - ✔✔a random string assigned by a web server
✔✔which of these is not a DoS attack - ✔✔push flood
✔✔what type of attack intercepts legitimate communication and forges a fictitious
response to the sender - ✔✔man in the middle
✔✔a replay attack _____ - ✔✔makes a copy of the transmission for use at a later time
✔✔DNS poisoning _____ - ✔✔substitues DNS addresses so that the computer is
automatically redirected to another deivce
✔✔what type of controls are the processes for developing and ensuring that policies
and procedures are carried out - ✔✔administrative controls
✔✔which of the following is not an activity phase control - ✔✔resource control
✔✔which of the following is not designed to prevent indivuduals from entering sensitive
areas but instead is intended to direct traffic flow - ✔✔barricade
✔✔which of the following is not a motion detection method - ✔✔moisture
✔✔the residential lock most often used for keeping out intruders is the ____ - ✔✔keyed
lock
✔✔a lock that extends a solid metal bar into the door frame for extra secuirty is the
_____ - ✔✔deadbolt lock
✔✔which statement about a mantrap is true - ✔✔it monitors and controls two
interlocking doors to a room
QUESTIONS WITH SOLUTIONS GRADED A+
✔✔which of the following is an attempt to influence a user by coercion - ✔✔intimidation
✔✔a user who installs a program that prints out coupons but in the background silently
collects her password has installed a - ✔✔trojan
✔✔what should you do to completely remove a rootkit from a computer - ✔✔reformat
the hard drive and reinstall the operating system
✔✔which of these could not be defined as a logic bomb - ✔✔Send spam email to all
users in the company on Tuesday.
✔✔what is it called when a user makes a typing error when entering a url that takes him
to an imposter website - ✔✔typo squatting
✔✔which of these is a general term used for describing software that gathers
information without the user's consent - ✔✔spyware
✔✔which statement regarding a keylogger is not true - ✔✔software keyloggers are easy
to detect
✔✔the preferred method today of bvot herders for command and control of zombies is
____ - ✔✔hypertext transport protocol (HTTP)
✔✔a watering hole attack is directed against ___ - ✔✔users who access a common
website
✔✔___________ sends messages to wealthy individuals - ✔✔whaling
✔✔what is unsolicited instant messaging called - ✔✔spam
✔✔michelle pretends to be the help desk manager and calls steve to trick him into
giving her his passworld what social engineering attack has michelle performed -
✔✔impersonation
✔✔how can an attacker us a hoax - ✔✔a hoax could convince a user that a bad trojan
is ciruclating and that he should change his securit settings
✔✔which of these items retrieved through dumpster diving would not provide useful
information - ✔✔books
,✔✔____ is following an authorized person through a secure door - ✔✔tailgating
✔✔each of these is a reason why adware is scorned except ____ - ✔✔it displays the
attacker's programming skills
✔✔what is the term used for an attakcer who controls multiple zombies in a botnet -
✔✔bot herder
✔✔which of these is not a reason why securing server-side web apllications is difficult -
✔✔although traditional network security devices can block traditional network attacks
they cannot always block web application attacks
✔✔which of these is not an HTTP header attack - ✔✔content-length
✔✔what is another name for a locally shared objecxt - ✔✔flash cookie
✔✔browser plug-ins ______ - ✔✔can be embedded inside a webpage but add-ons
cannot
✔✔an attacker who manipulates the maximum size of aninteger type would be
performing what kind of attack - ✔✔integer overflow
✔✔what kind of attack is performed by an attacker who takes advantage of the
inadvertent and unauthorized access built therough three succeeding systems that all
trust one another - ✔✔transitive
✔✔which statement is correct regarding why traditional network security devices cannot
be used to block web application attacks - ✔✔traditional network secureitty devices
ignore the content of http traffic, which is the viegicxle of web application attacks
✔✔what do attackers use buffer overflows to do - ✔✔point to another are in data
memory that contains the attacker's malware code
✔✔what is unique about a cross-site scripting (XSS) attack compared to other injection
attacks - ✔✔xss does not attack the web application sever to steal or corrupt its
information
✔✔what is a cookie that was not created by the website beingh viewed called -
✔✔third-part cookie
✔✔what is the basis of an SQL injection attack - ✔✔to inject SQL statements through
unfiltered user input
, ✔✔which actions cannot be performed through a successful SQL injection attack -
✔✔reformat the web application server's hard drive
✔✔which markup language is designed to carry data - ✔✔XML
✔✔what type of attack involved an attacker accessing files in directories other than the
root directory - ✔✔directory traversal
✔✔which type of attack modifies the fields that contain the different characteristics of
the data that is being trasnmitted - ✔✔HTTP header
✔✔what is a session token - ✔✔a random string assigned by a web server
✔✔which of these is not a DoS attack - ✔✔push flood
✔✔what type of attack intercepts legitimate communication and forges a fictitious
response to the sender - ✔✔man in the middle
✔✔a replay attack _____ - ✔✔makes a copy of the transmission for use at a later time
✔✔DNS poisoning _____ - ✔✔substitues DNS addresses so that the computer is
automatically redirected to another deivce
✔✔what type of controls are the processes for developing and ensuring that policies
and procedures are carried out - ✔✔administrative controls
✔✔which of the following is not an activity phase control - ✔✔resource control
✔✔which of the following is not designed to prevent indivuduals from entering sensitive
areas but instead is intended to direct traffic flow - ✔✔barricade
✔✔which of the following is not a motion detection method - ✔✔moisture
✔✔the residential lock most often used for keeping out intruders is the ____ - ✔✔keyed
lock
✔✔a lock that extends a solid metal bar into the door frame for extra secuirty is the
_____ - ✔✔deadbolt lock
✔✔which statement about a mantrap is true - ✔✔it monitors and controls two
interlocking doors to a room
