COMPTIA SECURIT 2 UPDATED ACTUAL EXAM QUESTIONS CORRECT ANSWERS GRADED A
PLUS
Question:
Information Systems Security.
Answer:
Protecting the systems that hold and process our critical data (can be a computer, server, network
device, cell phone, etc.).
Question:
CIA Triad.
Answer:
Confidentiality, Integrity, Availability -- (without all three, there is a vulnerability that can be
exploited. when all three are present, our information has good security).
Question:
Confidentiality.
Answer:
Ensures that unauthorized entities cannot access data. Encryption and access controls help to protect
against loss of this.
Question:
Integrity.
Answer:
Provides assurance that data or system configurations have not been modified. Audit Logs and
hashing are two methods used to ensure this. Ensures that the information has not been modified or
altered without proper authorization.
, Question:
Availability.
Answer:
Ensures that systems and data are up and operational when needed. Ensures that the information is
able to be stored, accessed, and protected at all times.
Question:
AAA of Security.
Answer:
Authentication, Authorization, Accounting
Question:
Authentication.
Answer:
The process that occurs when a user proves an identity, such as with a password. When a person's
identity is established with proof and confirmed by a system (ex. 2FA)
Question:
5 Methods of Authentication.
Answer:
1. Something you know 2. Something you are 3. Something you have 4. Something you do 5.
Somewhere you are
Question:
Authorization.
Answer:
The process of granting access to resources for users who prove their identity (such as with a
username and password), based on their proven identity. Occurs when a user is given access to a
PLUS
Question:
Information Systems Security.
Answer:
Protecting the systems that hold and process our critical data (can be a computer, server, network
device, cell phone, etc.).
Question:
CIA Triad.
Answer:
Confidentiality, Integrity, Availability -- (without all three, there is a vulnerability that can be
exploited. when all three are present, our information has good security).
Question:
Confidentiality.
Answer:
Ensures that unauthorized entities cannot access data. Encryption and access controls help to protect
against loss of this.
Question:
Integrity.
Answer:
Provides assurance that data or system configurations have not been modified. Audit Logs and
hashing are two methods used to ensure this. Ensures that the information has not been modified or
altered without proper authorization.
, Question:
Availability.
Answer:
Ensures that systems and data are up and operational when needed. Ensures that the information is
able to be stored, accessed, and protected at all times.
Question:
AAA of Security.
Answer:
Authentication, Authorization, Accounting
Question:
Authentication.
Answer:
The process that occurs when a user proves an identity, such as with a password. When a person's
identity is established with proof and confirmed by a system (ex. 2FA)
Question:
5 Methods of Authentication.
Answer:
1. Something you know 2. Something you are 3. Something you have 4. Something you do 5.
Somewhere you are
Question:
Authorization.
Answer:
The process of granting access to resources for users who prove their identity (such as with a
username and password), based on their proven identity. Occurs when a user is given access to a
