SEC+ Study Guide A practice test with
correct questions and answer
1/100 Questions
QUESTION NO: 30 End users are complaining about receiving a lot of email from online vendors and
pharmacies. Which of the following is this an example of?
Trojan
Spam
Phishing
DNS poisoning
Start
SEC+ Study Guide A - Quiz
About This Quiz
This Sec+ study guide quiz assesses knowledge in network security, focusing on confidentiality protocols,
steganography, TCP\/IP hijacking, backup integrity, network topology, and penetration testing. It is
essential for learners preparing for the CompTIA Security+ certification.
Quiz Preview
2.
QUESTION NO: 88 Which of the following is an attack that is triggered by a specific event or by a date?
Logic bomb
,Spam
Rootkit
Privilege escalation
Correct Answer
A. Logic bomb
Explanation
A logic bomb is a type of attack that is triggered by a specific event or by a date. It is a malicious code
that is intentionally inserted into a computer system and remains dormant until a specific condition is
met. Once triggered, it can perform various malicious actions such as deleting files, corrupting data, or
disrupting the normal functioning of the system. Unlike other attacks like spam, rootkit, or privilege
escalation, a logic bomb is specifically designed to be activated based on a predetermined event or date.
Rate this question:
3.
QUESTION NO: 67 Which of the following attacks can be caused by a user being unaware of their
physical surroundings?
ARP poisoning
Phishing
Shoulder surfing
,Man-in-the-middle
Correct Answer
A. Shoulder surfing
Explanation
Shoulder surfing is the correct answer because it refers to the act of someone observing or
eavesdropping on another person's sensitive information, such as passwords or PIN numbers, by looking
over their shoulder or being in close proximity to them. This type of attack can be caused by a user being
unaware of their physical surroundings and not taking precautions to protect their information from
prying eyes.
Rate this question:
4.
QUESTION NO: 80 A malware incident has just been detected within a company. Which of the following
should be the administrators FIRST response?
Removal
Containment
Recovery
Monitor
Correct Answer
A. Containment
, Explanation
The administrator's first response should be containment. Containment involves isolating the infected
systems or network to prevent further spread of the malware. This is crucial in order to minimize the
impact and damage caused by the malware. Once the malware is contained, the administrator can then
proceed with removal, recovery, and monitoring to fully address the incident.
Rate this question:
5.
QUESTION NO: 23 An administrator is trying to secure a network from threats originating outside the
network. Which of the following devices provides protection for the DMZ from attacks launched from
the Internet?
Antivirus
Content filter
Firewall
Proxy server
Correct Answer
A. Firewall
Explanation
A firewall is a device that acts as a barrier between a private internal network and the public Internet. It
monitors incoming and outgoing network traffic and allows or blocks specific traffic based on
predetermined security rules. In the context of securing a network from threats originating outside the
network, a firewall is the most appropriate device. It can prevent unauthorized access to the DMZ
(Demilitarized Zone), which is a network segment that separates the internal network from the Internet.
By filtering and controlling the traffic, a firewall helps protect the DMZ from attacks launched from the
Internet.
correct questions and answer
1/100 Questions
QUESTION NO: 30 End users are complaining about receiving a lot of email from online vendors and
pharmacies. Which of the following is this an example of?
Trojan
Spam
Phishing
DNS poisoning
Start
SEC+ Study Guide A - Quiz
About This Quiz
This Sec+ study guide quiz assesses knowledge in network security, focusing on confidentiality protocols,
steganography, TCP\/IP hijacking, backup integrity, network topology, and penetration testing. It is
essential for learners preparing for the CompTIA Security+ certification.
Quiz Preview
2.
QUESTION NO: 88 Which of the following is an attack that is triggered by a specific event or by a date?
Logic bomb
,Spam
Rootkit
Privilege escalation
Correct Answer
A. Logic bomb
Explanation
A logic bomb is a type of attack that is triggered by a specific event or by a date. It is a malicious code
that is intentionally inserted into a computer system and remains dormant until a specific condition is
met. Once triggered, it can perform various malicious actions such as deleting files, corrupting data, or
disrupting the normal functioning of the system. Unlike other attacks like spam, rootkit, or privilege
escalation, a logic bomb is specifically designed to be activated based on a predetermined event or date.
Rate this question:
3.
QUESTION NO: 67 Which of the following attacks can be caused by a user being unaware of their
physical surroundings?
ARP poisoning
Phishing
Shoulder surfing
,Man-in-the-middle
Correct Answer
A. Shoulder surfing
Explanation
Shoulder surfing is the correct answer because it refers to the act of someone observing or
eavesdropping on another person's sensitive information, such as passwords or PIN numbers, by looking
over their shoulder or being in close proximity to them. This type of attack can be caused by a user being
unaware of their physical surroundings and not taking precautions to protect their information from
prying eyes.
Rate this question:
4.
QUESTION NO: 80 A malware incident has just been detected within a company. Which of the following
should be the administrators FIRST response?
Removal
Containment
Recovery
Monitor
Correct Answer
A. Containment
, Explanation
The administrator's first response should be containment. Containment involves isolating the infected
systems or network to prevent further spread of the malware. This is crucial in order to minimize the
impact and damage caused by the malware. Once the malware is contained, the administrator can then
proceed with removal, recovery, and monitoring to fully address the incident.
Rate this question:
5.
QUESTION NO: 23 An administrator is trying to secure a network from threats originating outside the
network. Which of the following devices provides protection for the DMZ from attacks launched from
the Internet?
Antivirus
Content filter
Firewall
Proxy server
Correct Answer
A. Firewall
Explanation
A firewall is a device that acts as a barrier between a private internal network and the public Internet. It
monitors incoming and outgoing network traffic and allows or blocks specific traffic based on
predetermined security rules. In the context of securing a network from threats originating outside the
network, a firewall is the most appropriate device. It can prevent unauthorized access to the DMZ
(Demilitarized Zone), which is a network segment that separates the internal network from the Internet.
By filtering and controlling the traffic, a firewall helps protect the DMZ from attacks launched from the
Internet.
