SECURITY ACTUAL EXAM SCRIPT 2026
COMPREHENSIVE QUESTIONS AND
ANSWERS
◉ Billy receives a message from a stranger on a social media website
that simply says "I know where you live." Billy tried to think about
his online activities, and whether or not those activities could have
revealed his location.
Which of these online activities is least likely to have revealed his
location to the stranger?
Answer: Reading news sites in a browser with third-party cookies
enabled.
◉ A company develops a mobile app designed for parents to
monitor what their children are doing. The parents install the app on
the phone, and it can record details like who the child is conversing
with and what apps they're using. It can also record and store the
geolocation of the child.
Which of these questions from parents could not be answered by the
recorded geolocation data?
Answer: Did my child hang out in the park in a group of more than
20 people?
,◉ In 2019, a security research firm discovered that it was possible
to monitor the geographic location of users in four dating apps. All
they needed to know was their username and they could map the
most recent location of the user.
Which of the following risk becomes possible due to the accessibility
of the geolocation data?
Answer: A stalker could find a user that rejected them and follow
them around.
◉ Kimberly is trying to understand which of her devices and apps
can collect information about her location.
Answer: None of the above
◉ Mariana gives a social media website access to her geolocation so
that she can quickly see local events happening around her.
Which is NOT a risk of granting geolocation access?
Answer: The website could begin tracking Mariana's browsing
history as well.
◉ A company gives phones for business use to all of its salespeople.
The IT department installs a suite of security software on each
phone that includes a monitoring program that sends the phone's
current location back to company headquarters.
Assuming the employees always have their phone near them, which
of these questions could not be answered by the location data?
, Answer: How many customers did the employee go to lunch with?
◉ In 2018, more than a thousand data breaches were reported and
over 500 million data records were exposed in those breaches.
In one particular breach, a video making website discovered
unauthorized access to their database. The attackers were able to
access the following user details: first name, last name, username,
geolocation, gender, and date of birth.
Which of the following is an immediate risk of that data breach?
Answer: A stalker could go to the house of one of the website users.
◉ In 2019, a security research firm discovered that it was possible
to monitor the geographic location of users in four dating apps. All
they needed to know was their username and they could map the
most recent location of the user.
Which of the following risk becomes possible due to the accessibility
of the geolocation data?
Answer: A stalker could find a user that rejected them and follow
them around.
◉ In 2018, the housewares company OXO discovered that attackers
installed malware on their online store to steal customer
information. The malware had access to the customer's name, billing
and shipping addresses, and credit card information.
COMPREHENSIVE QUESTIONS AND
ANSWERS
◉ Billy receives a message from a stranger on a social media website
that simply says "I know where you live." Billy tried to think about
his online activities, and whether or not those activities could have
revealed his location.
Which of these online activities is least likely to have revealed his
location to the stranger?
Answer: Reading news sites in a browser with third-party cookies
enabled.
◉ A company develops a mobile app designed for parents to
monitor what their children are doing. The parents install the app on
the phone, and it can record details like who the child is conversing
with and what apps they're using. It can also record and store the
geolocation of the child.
Which of these questions from parents could not be answered by the
recorded geolocation data?
Answer: Did my child hang out in the park in a group of more than
20 people?
,◉ In 2019, a security research firm discovered that it was possible
to monitor the geographic location of users in four dating apps. All
they needed to know was their username and they could map the
most recent location of the user.
Which of the following risk becomes possible due to the accessibility
of the geolocation data?
Answer: A stalker could find a user that rejected them and follow
them around.
◉ Kimberly is trying to understand which of her devices and apps
can collect information about her location.
Answer: None of the above
◉ Mariana gives a social media website access to her geolocation so
that she can quickly see local events happening around her.
Which is NOT a risk of granting geolocation access?
Answer: The website could begin tracking Mariana's browsing
history as well.
◉ A company gives phones for business use to all of its salespeople.
The IT department installs a suite of security software on each
phone that includes a monitoring program that sends the phone's
current location back to company headquarters.
Assuming the employees always have their phone near them, which
of these questions could not be answered by the location data?
, Answer: How many customers did the employee go to lunch with?
◉ In 2018, more than a thousand data breaches were reported and
over 500 million data records were exposed in those breaches.
In one particular breach, a video making website discovered
unauthorized access to their database. The attackers were able to
access the following user details: first name, last name, username,
geolocation, gender, and date of birth.
Which of the following is an immediate risk of that data breach?
Answer: A stalker could go to the house of one of the website users.
◉ In 2019, a security research firm discovered that it was possible
to monitor the geographic location of users in four dating apps. All
they needed to know was their username and they could map the
most recent location of the user.
Which of the following risk becomes possible due to the accessibility
of the geolocation data?
Answer: A stalker could find a user that rejected them and follow
them around.
◉ In 2018, the housewares company OXO discovered that attackers
installed malware on their online store to steal customer
information. The malware had access to the customer's name, billing
and shipping addresses, and credit card information.
