COMPTIA SECURITY PLUS SYO 601 2026
PRACTICE QUESTIONS AND ANSWERS FULL
REVIEW
◉ Cryptomalware. Answer: Malware to remain in place for as long as
possible, quietly mining in the background.
◉ logic bomb. Answer: A computer program or part of a program
that lies dormant until it is triggered by a specific logical event.
◉ Spyware. Answer: Type of malware that infects your PC or mobile
device and gathers information about you, including the sites you
visit, the things you download, your usernames and passwords,
payment information, and the emails you send and receive.
◉ Keyloggers. Answer: software that tracks or logs the keys struck
on your keyboard, typically in a covert manner so that you don't
know that your actions are being monitored.
◉ Remote Access Trojan. Answer: type of malware that allows
covert surveillance, a backdoor for administrative control and
unfettered and unauthorized remote access to a victim's machine.
,◉ Rootkit. Answer: software program, typically malicious, that
provides privileged, root-level (i.e., administrative) access to a
computer while concealing its presence on that machine
◉ Backdoor. Answer: refers to any method by which authorized and
unauthorized users are able to get around normal security measures
and gain high level user access (aka root access) on a computer
system, network, or software application.
◉ Password Attack. Answer: Any type of attack in which the attacker
attempts to obtain and make use of passwords illegitimately.
◉ Spraying password attack. Answer:
◉ Dictionary password attack. Answer: An attack method that takes
all the words from a dictionary file and attempts to log on by
entering each dictionary entry as a password.
◉ brute force password attack (offline and online). Answer: an
attempt to guess a password by attempting every possible
combination of characters and numbers in it
◉ Rainbow Tables. Answer: an attack on a password that uses a
large pregenerated data set of hashes from nearly every possible
password
,◉ Plaintext/unencrypted password attack. Answer:
◉ Malicious universal serial bus (USB) cable. Answer:
◉ Malicious flash drive. Answer:
◉ Card cloning. Answer:
◉ Skimming. Answer:
◉ Adversarial artificial intelligence (AI). Answer: 1. Tainted training
for machine learning (ML)
2. Security of machine learning algorithms
◉ Supply-chain attacks. Answer:
◉ Cloud-based vs. on-premises attacks. Answer:
◉ Cryptographic attacks. Answer: 1. Birthday:
2. Collision:
3. Downgrade:
, ◉ Privilege escalation. Answer:
◉ Cross-site scripting. Answer:
◉ Injections. Answer:
◉ Structured query language (SQL). Answer:
◉ Dynamic link library. Answer:
◉ Lightweight directory access protocol (LDAP). Answer:
◉ Extensible markup language (XML). Answer:
◉ Pointer/object dereference. Answer:
◉ Directory traversal. Answer:
◉ Buffer overflows. Answer:
◉ Race conditions(Time of check/time of use). Answer:
PRACTICE QUESTIONS AND ANSWERS FULL
REVIEW
◉ Cryptomalware. Answer: Malware to remain in place for as long as
possible, quietly mining in the background.
◉ logic bomb. Answer: A computer program or part of a program
that lies dormant until it is triggered by a specific logical event.
◉ Spyware. Answer: Type of malware that infects your PC or mobile
device and gathers information about you, including the sites you
visit, the things you download, your usernames and passwords,
payment information, and the emails you send and receive.
◉ Keyloggers. Answer: software that tracks or logs the keys struck
on your keyboard, typically in a covert manner so that you don't
know that your actions are being monitored.
◉ Remote Access Trojan. Answer: type of malware that allows
covert surveillance, a backdoor for administrative control and
unfettered and unauthorized remote access to a victim's machine.
,◉ Rootkit. Answer: software program, typically malicious, that
provides privileged, root-level (i.e., administrative) access to a
computer while concealing its presence on that machine
◉ Backdoor. Answer: refers to any method by which authorized and
unauthorized users are able to get around normal security measures
and gain high level user access (aka root access) on a computer
system, network, or software application.
◉ Password Attack. Answer: Any type of attack in which the attacker
attempts to obtain and make use of passwords illegitimately.
◉ Spraying password attack. Answer:
◉ Dictionary password attack. Answer: An attack method that takes
all the words from a dictionary file and attempts to log on by
entering each dictionary entry as a password.
◉ brute force password attack (offline and online). Answer: an
attempt to guess a password by attempting every possible
combination of characters and numbers in it
◉ Rainbow Tables. Answer: an attack on a password that uses a
large pregenerated data set of hashes from nearly every possible
password
,◉ Plaintext/unencrypted password attack. Answer:
◉ Malicious universal serial bus (USB) cable. Answer:
◉ Malicious flash drive. Answer:
◉ Card cloning. Answer:
◉ Skimming. Answer:
◉ Adversarial artificial intelligence (AI). Answer: 1. Tainted training
for machine learning (ML)
2. Security of machine learning algorithms
◉ Supply-chain attacks. Answer:
◉ Cloud-based vs. on-premises attacks. Answer:
◉ Cryptographic attacks. Answer: 1. Birthday:
2. Collision:
3. Downgrade:
, ◉ Privilege escalation. Answer:
◉ Cross-site scripting. Answer:
◉ Injections. Answer:
◉ Structured query language (SQL). Answer:
◉ Dynamic link library. Answer:
◉ Lightweight directory access protocol (LDAP). Answer:
◉ Extensible markup language (XML). Answer:
◉ Pointer/object dereference. Answer:
◉ Directory traversal. Answer:
◉ Buffer overflows. Answer:
◉ Race conditions(Time of check/time of use). Answer:
