CompTIA Security+ Exam 2026 | Network Security & Threat
Management Q&A Latest Update
Q1. Malware & Network Impact
A user reports that files on a server are encrypted and a ransom note demands payment for
recovery. What type of attack is this?
A. Trojan
B. Worm
C. Ransomware
D. Rootkit
Answer: C — Ransomware
✔ Encrypts data and demands payment for decryption.
Q2. Threat Actor Identification
An attacker uses freely available tools and scripts from the internet with little technical skill.
What type of attacker is this?
A. Script kiddie
B. Nation-state
C. Insider threat
D. Organized crime
,Answer: A — Script kiddie
✔ Relies on pre-built tools without deep expertise.
Q3. Secure Network Design
Which technology divides a network into isolated segments to improve security?
A. NAT
B. VLAN
C. DHCP
D. DNS
Answer: B — VLAN
✔ Network segmentation reduces lateral movement.
Q4. Attack Type (Social Engineering)
An employee receives a phone call from someone claiming to be IT support requesting their
password. What attack is this?
A. Phishing
B. Smishing
C. Vishing
D. Spear phishing
,Answer: C — Vishing
✔ Voice-based phishing attack.
Q5. Firewall Rule Logic
To block a malicious IP (10.10.10.5) from accessing the internal network, which rule is
correct?
A. Allow all traffic to 10.10.10.5
B. Deny source 10.10.10.5 to any destination
C. Allow source 10.10.10.5 inbound
D. Deny internal traffic only
Answer: B
✔ Blocks traffic from attacker IP entirely.
Q6. Data Protection in Transit
Which technology protects data while it is being transmitted across a network?
A. Backup
B. Encryption
C. Hashing
, D. Compression
Answer: B — Encryption
✔ Ensures confidentiality during transmission.
Q7. Incident Response
What is the first step in the incident response process?
A. Containment
B. Detection
C. Recovery
D. Lessons learned
Answer: B — Detection
✔ You must first identify the incident.
Q8. Network Attack Type
An attacker intercepts communication between two parties without their knowledge. What
is this?
A. DoS attack
B. Man-in-the-middle (MITM)
Management Q&A Latest Update
Q1. Malware & Network Impact
A user reports that files on a server are encrypted and a ransom note demands payment for
recovery. What type of attack is this?
A. Trojan
B. Worm
C. Ransomware
D. Rootkit
Answer: C — Ransomware
✔ Encrypts data and demands payment for decryption.
Q2. Threat Actor Identification
An attacker uses freely available tools and scripts from the internet with little technical skill.
What type of attacker is this?
A. Script kiddie
B. Nation-state
C. Insider threat
D. Organized crime
,Answer: A — Script kiddie
✔ Relies on pre-built tools without deep expertise.
Q3. Secure Network Design
Which technology divides a network into isolated segments to improve security?
A. NAT
B. VLAN
C. DHCP
D. DNS
Answer: B — VLAN
✔ Network segmentation reduces lateral movement.
Q4. Attack Type (Social Engineering)
An employee receives a phone call from someone claiming to be IT support requesting their
password. What attack is this?
A. Phishing
B. Smishing
C. Vishing
D. Spear phishing
,Answer: C — Vishing
✔ Voice-based phishing attack.
Q5. Firewall Rule Logic
To block a malicious IP (10.10.10.5) from accessing the internal network, which rule is
correct?
A. Allow all traffic to 10.10.10.5
B. Deny source 10.10.10.5 to any destination
C. Allow source 10.10.10.5 inbound
D. Deny internal traffic only
Answer: B
✔ Blocks traffic from attacker IP entirely.
Q6. Data Protection in Transit
Which technology protects data while it is being transmitted across a network?
A. Backup
B. Encryption
C. Hashing
, D. Compression
Answer: B — Encryption
✔ Ensures confidentiality during transmission.
Q7. Incident Response
What is the first step in the incident response process?
A. Containment
B. Detection
C. Recovery
D. Lessons learned
Answer: B — Detection
✔ You must first identify the incident.
Q8. Network Attack Type
An attacker intercepts communication between two parties without their knowledge. What
is this?
A. DoS attack
B. Man-in-the-middle (MITM)
