COMPTIA SECURITY+ CERTMASTER
CE EXAM BANK | ACCURATE
CURRENTLY TESTING VERSIONS ALL
EXAM QUESTIONS AND ANSWERS |
EXPERT VERIFIED FOR GUARANTEED
PASS | CERTMASTER COMPTIA
NETWORK+ FINAL ASSESSMENT
LATEST UPDATE
Q1. Which security control is implemented through technology such as encryption,
firewalls, or antivirus software?
• A) Administrative control
• B) Physical control
• C) Technical control
• D) Operational control
Correct Answer: C) Technical controls are logical controls implemented through
technology. Training and policies are administrative, while guards and locks are
physical.
Q2. A user receives an email appearing to be from their bank, asking them to click
a link to verify account information. What type of attack is this?
• A) Brute force
• B) Phishing
• C) DDoS
• D) SQL injection
,Correct Answer: B) Phishing tricks users into revealing credentials through
deceptive communications appearing legitimate. Spoofing falsifies identity but is
often a component of phishing.
Q3. Which attack involves overwhelming a system with traffic from multiple
compromised sources?
• A) Phishing
• B) Spoofing
• C) Distributed Denial of Service (DDoS)
• D) SQL injection
Correct Answer: C) DDoS uses multiple compromised systems (botnet) to flood a
target, exhausting resources. A standard DoS uses a single source.
Q4.
What is a zero-day vulnerability?
• A) A patched security flaw
• B) A vulnerability unknown to the vendor with no available patch
• C) A known malware signature
• D) An outdated antivirus definition
Correct Answer: B) Zero-day vulnerabilities are unknown to vendors, meaning no
patch exists when attackers exploit them.
Q5. Which attack exploits trust in DNS responses to redirect users to malicious
sites?
• A) Brute force
, • B) DNS poisoning
• C) Man-in-the-middle
• D) Credential stuffing
Correct Answer: B) DNS poisoning corrupts DNS cache records, redirecting
users to malicious sites when accessing legitimate domains.
Q6. What type of malware disguises itself as legitimate software?
• A) Worm
• B) Ransomware
• C) Trojan horse
• D) Rootkit
Correct Answer: C) Trojan horses disguise themselves as legitimate software to
trick users into installation.
Q7. What is a characteristic of ransomware?
• A) It steals credentials
• B) It monitors user activity
• C) It encrypts files and demands payment for decryption
• D) It increases system performance
Correct Answer: C) Ransomware locks data through encryption and demands
ransom payment for decryption keys.
Q8
What cloud service model provides fully managed infrastructure where customers
manage operating systems and applications?
, • A) SaaS
• B) PaaS
• C) IaaS
• D) SECaaS
Correct Answer: C) IaaS gives customers raw virtualized computing resources,
placing responsibility for OS patching and applications on the customer.
Q9. What is a characteristic of a botnet?
• A) A single infected computer
• B) A network of compromised devices controlled remotely
• C) A firewall system
• D) An encryption protocol
Correct Answer: B) Botnets are collections of infected devices controlled
remotely by command and control (C2) servers.
Q10. Which type of social engineering attack targets high-profile executives?
• A) Whaling
• B) Dumpster diving
• C) Tailgating
• D) Shoulder surfing
Correct Answer: A) Whaling targets high-profile executives or specific high-value
individuals within an enterprise.
Q11.
. A worm is best described as:
CE EXAM BANK | ACCURATE
CURRENTLY TESTING VERSIONS ALL
EXAM QUESTIONS AND ANSWERS |
EXPERT VERIFIED FOR GUARANTEED
PASS | CERTMASTER COMPTIA
NETWORK+ FINAL ASSESSMENT
LATEST UPDATE
Q1. Which security control is implemented through technology such as encryption,
firewalls, or antivirus software?
• A) Administrative control
• B) Physical control
• C) Technical control
• D) Operational control
Correct Answer: C) Technical controls are logical controls implemented through
technology. Training and policies are administrative, while guards and locks are
physical.
Q2. A user receives an email appearing to be from their bank, asking them to click
a link to verify account information. What type of attack is this?
• A) Brute force
• B) Phishing
• C) DDoS
• D) SQL injection
,Correct Answer: B) Phishing tricks users into revealing credentials through
deceptive communications appearing legitimate. Spoofing falsifies identity but is
often a component of phishing.
Q3. Which attack involves overwhelming a system with traffic from multiple
compromised sources?
• A) Phishing
• B) Spoofing
• C) Distributed Denial of Service (DDoS)
• D) SQL injection
Correct Answer: C) DDoS uses multiple compromised systems (botnet) to flood a
target, exhausting resources. A standard DoS uses a single source.
Q4.
What is a zero-day vulnerability?
• A) A patched security flaw
• B) A vulnerability unknown to the vendor with no available patch
• C) A known malware signature
• D) An outdated antivirus definition
Correct Answer: B) Zero-day vulnerabilities are unknown to vendors, meaning no
patch exists when attackers exploit them.
Q5. Which attack exploits trust in DNS responses to redirect users to malicious
sites?
• A) Brute force
, • B) DNS poisoning
• C) Man-in-the-middle
• D) Credential stuffing
Correct Answer: B) DNS poisoning corrupts DNS cache records, redirecting
users to malicious sites when accessing legitimate domains.
Q6. What type of malware disguises itself as legitimate software?
• A) Worm
• B) Ransomware
• C) Trojan horse
• D) Rootkit
Correct Answer: C) Trojan horses disguise themselves as legitimate software to
trick users into installation.
Q7. What is a characteristic of ransomware?
• A) It steals credentials
• B) It monitors user activity
• C) It encrypts files and demands payment for decryption
• D) It increases system performance
Correct Answer: C) Ransomware locks data through encryption and demands
ransom payment for decryption keys.
Q8
What cloud service model provides fully managed infrastructure where customers
manage operating systems and applications?
, • A) SaaS
• B) PaaS
• C) IaaS
• D) SECaaS
Correct Answer: C) IaaS gives customers raw virtualized computing resources,
placing responsibility for OS patching and applications on the customer.
Q9. What is a characteristic of a botnet?
• A) A single infected computer
• B) A network of compromised devices controlled remotely
• C) A firewall system
• D) An encryption protocol
Correct Answer: B) Botnets are collections of infected devices controlled
remotely by command and control (C2) servers.
Q10. Which type of social engineering attack targets high-profile executives?
• A) Whaling
• B) Dumpster diving
• C) Tailgating
• D) Shoulder surfing
Correct Answer: A) Whaling targets high-profile executives or specific high-value
individuals within an enterprise.
Q11.
. A worm is best described as:
