Security+ Certification Preparation Practice Exam
Course Introduction
This course is designed to prepare students for the CompTIA Security+ certification exam by covering foundational principles of network security, risk management, threat analysis, and security infrastructure. Emphasizing real-world application, students will learn about essential security concepts, cryptography, identity and access management, and the implementation of secure systems. Through comprehensive lectures, hands-on labs, and practice exams, participants will gain the knowledge and practical skills needed to identify vulnerabilities, respond to security incidents, and support organizational security measures, ensuring readiness for both the certification exam and entry-level cybersecurity roles.
Recommended Textbook
CompTIA Security Guide to Network Security Fundamentals 6th Edition by Mark Ciampa
Available Study Resources on Quizplus
15 Chapters
750 Verified Questions
750 Flashcards
Source URL: https://quizplus.com/study-set/2311 Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45966
Sample Questions
Q1) In information security,which of the following is an example of a threat actor?
A)a force of nature such as a tornado that could destroy computer equipment
B)a virus that attacks a computer network
C)a person attempting to break into a secure computer network
D)all of the above
Answer: D
Q2) The Sarbanes-Oxley Act restricts electronic and paper data containing personally identifiable financial information.
A)True
B)False
Answer: False
Q3) As security is increased,convenience is often increased.
A)True
B)False
Answer: False
Q4) Why are there delays in updating products such as anti-virus software to resist attacks?
Answer: At the current rate of submissions of potential malware on a daily basis,updates for anti-virus software would need to be released every few seconds.
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45967
Sample Questions
Q1) Phishing is sending an email or displaying a web announcement that falsely claims to be from a legitimate enterprise in an attempt to trick the user into surrendering private information.
A)True
B)False
Answer: True
Q2) What type of malicious software technology is used to monitor user behavior or gather information about the user,sometimes including personally identifiable or other sensitive information?
A)automatic download software
B)automated software
C)system modifying software
D)tracking software
Answer: D
Q3) Which type of phishing attack targets specific users?
A)target phishing
B)whaling
C)vishing
D)spear phishing
Answer: D
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45968
Sample Questions
Q1) If Bob receives an encrypted reply message from Alice,whose private key is used to decrypt the received message?
A)Bob's private key.
B)Alice's private key.
C)Bob and Alice's keys.
D)Bob's private key and Alice's public key.
Answer: A
Q2) What is the Advanced Encryption Standard (AES)?
Answer: The Advanced Encryption Standard (AES)is a symmetric cipher that was approved by the NIST in late 2000 as a replacement for DES.AES performs three steps on every block (128 bits)of plaintext.Within step 2,multiple rounds are performed depending upon the key size: a 128-bit key performs 9 rounds,a 192-bit key performs 11 rounds,?and a 256-bit key,known as AES-256,uses 13 rounds.Within each round,bytes are substituted and rearranged,and then special multiplication is performed based on the new arrangement.To date,no attacks have been successful against AES.
Q3) Ciphertext is the scrambled and unreadable output of encryption.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Advanced Cryptography and PKI
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45969
Sample Questions
Q1) A document that describes in detail how a CA uses and manages certificates,as well as how end users register for a digital certificate,is known as?
A)Certificate practice statement (CPS)
B)Certificate policy (CP)
C)Lifecycle policy (LP)
D)Access policy (AP)
Q2) What length SSL and TLS keys are generally considered to be strong?
A)128
B)1024
C)2048
D)4096
Q3) Root digital certificates are should never be self-signed.
A)True
B)False
Q4) The Authentication Header (AH)protocol is a part of what encryption protocol suite below?
A)TLS 3.0
B)IPSec
C)GPG
D)SSL
Page 6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Networking and Server Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45970
Sample Questions
Q1) When an attack is designed to prevent authorized users from accessing a system,it is called what kind of attack?
A)MITM
B)spoofing
C)denial of service
D)blocking
Q2) An attack that takes advantage of the procedures for initiating a session is known as what type of attack?
A)DNS amplification attack
B)IP spoofing
C)smurf attack
D)SYN flood attack
Q3) Choose the SQL injection statement example below that could be used to find specific users:
A)whatever' OR full_name = '%Mia%'
B)whatever' OR full_name IS '%Mia%'
C)whatever' OR full_name LIKE '%Mia%'
D)whatever' OR full_name equals '%Mia%'
Q4) What is the basis for domain name resolution of names-to-IP addresses?
Q5) How does a cross-site scripting (XSS)attack work?
Page 7
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Network Security Devices, Design, and Technology
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45971
Sample Questions
Q1) What are the two TCP/IP protocols that are used by mail servers for clients accessing incoming mail?
Q2) The OSI model breaks networking steps down into a series of six layers.
A)True
B)False
Q3) An intranet is a separate open network that anyone can access without prior authorization.
A)True
B)False
Q4) Describe how Internet content filters are used.
Q5) How does a Unified Threat Management (UTM)security product help reduce administrative overhead?
Q6) A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?
A)Stateful frame filtering
B)Stateless frame filtering
C)Stateful packet filtering
D)Stateless packet filtering
8
Q7) List and describe two advantages of a proxy server.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45972
Sample Questions
Q1) What hardware component can be inserted into a web server that contains one or more co-processors to handle SSL/TLS processing?
A)SSL/TLS tap
B)SSL/TLS accelerator
C)SSL/TLS access point
D)SSL/TLS mirror
Q2) Describe the ways you can use FTP on a local host computer.
Q3) What device operates at the Network Layer (layer 3)of the OSI model and forwards packets across computer networks?
A)bridge
B)router
C)switch
D)hub
Q4) Select the TCP/IP protocol that resolves a symbolic name to its corresponding IP address using a database consisting of an organized hierarchy tree.
A)WINS
B)NIS
C)TACACS+
D)DNS
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45973
Sample Questions
Q1) The current Bluetooth version is Bluetooth 6.
A)True
B)False
Q2) What is the maximum number of characters that can exist within a SSID name?
A)10
B)12
C)26
D)32
Q3) What type of radio frequency transmissions are used by Bluetooth devices?
A)single-range radio
B)long-range radio
C)short-range radio
D)ultra-short-range radio
Q4) Bluetooth is an example of what type of technology below?
A)Small Area Network
B)Private Area Network
C)Personal Area Network
D)Limited Area Network
Q5) List and describe the major parts of an access point.
Q6) What is the most common type of wireless access control?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Client and Application Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45974
Sample Questions
Q1) Which of the following is an AV heuristic monitoring technique?
A)code emulation
B)environment scanning
C)code monitoring
D)OS simulation
Q2) What type of filtering software divides email messages that have been received into two piles,spam and non-spam and then analyzes every word in each email and determines how frequently a word occurs in the spam pile compared to the not-spam pile?
A)Blacklist filtering
B)Whitelist filtering
C)Bayesian filtering
D)Extension filtering
Q3) What specific process in application development removes a resource that is no longer needed?
A)deprovisioning
B)version control
C)change management
D)baselining
Q4) What are some of the advantages to an automated patch update service?
Page 11
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Mobile and Embedded Device Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45975
Sample Questions
Q1) What systems control locally or at remote locations by collecting,monitoring,and processing real-time data so that machines can directly control devices such as valves,pumps,and motors without the need for human intervention?
A)SCADA
B)HVAC
C)ICS
D)RTOS
Q2) Virtual machines store sensitive applications and data on a remote server that is accessed through a smartphone.
A)True
B)False
Q3) Which of the following is NOT an Android Smart Lock configuration option?
A)Trusted places detection
B)On-body detection
C)User device detection
D)Trusted face
Q4) What is the Internet of Things (IoT)?
Q5) Describe a notebook computer in relation to a laptop computer.
Q6) How does BYOD increase employee performance?
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45976
Sample Questions
Q1) If a user has more than one type of authentication credential,what type of authentication is being used?
A)pattern authentication
B)verified authentication
C)multifactor authentication
D)token authentication
Q2) Which of the following are key stretching password hash algorithms? (Choose all that apply. )
A)bcrypt
B)PBKDF2
C)seq02
D)SHA-256
Q3) Discuss the types of shortcuts that users take to help them recall their passwords.
Q4) The use of what item below involves the creation of a large pre-generated data set of candidate digests?
A)rainbow tables
B)randomized character list
C)word list
D)cascade tables
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Access Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45977
Sample Questions
Q1) Describe LDAP injection attacks.
Q2) Least privilege in access control means that only the minimum amount of privileges necessary to perform a job or function should be allocated.
A)True
B)False
Q3) List three major access control models.
Q4) Employee onboarding refers to the tasks associated with hiring a new employee.
A)True
B)False
Q5) With the Discretionary Access Control (DAC)model,no object has an owner;the system has total control over that object.
A)True
B)False
Q6) Describe the MAC lattice model.
Q7) Which access control model is considered to be the least restrictive?
A)Role Based Access Control
B)Mandatory Access Control
C)Rule Based Access Control
D)Discretionary Access Control
To view all questions and flashcards with answers, click on the resource link above.
Chapter 13: Vulnerability Assessment and Data Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45978
Sample Questions
Q1) The second step in a vulnerability assessment is to determine the assets that need to be protected.
A)True
B)False
Q2) Each packet/datagram contains a source port and destination port.
A)True
B)False
Q3) What type of reconnaissance is a penetration tester performing if they are using tools that do not raise any alarms?
A)active
B)passive
C)invasive
D)evasive
Q4) Which security procedure is being demonstrated if an administrator is using Wireshark to watch for specific inbound and outbound traffic?
A)application search
B)application control
C)firewall monitoring
D)virus control
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Business Continuity
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45979
Sample Questions
Q1) Which of the following is the sudden flow of electric current between two objects?
A)electromagnetic interference
B)Faraday interference
C)electrostatic discharge
D)electromagnetic pulse
Q2) What type of assessment can determine if a system contains PII,whether a privacy impact assessment is required,and if any other privacy requirements apply to the IT system?
A)privacy threshold
B)privacy impact
C)privacy availability
D)privacy identification
Q3) Which of the following is a location that provides office space,but the customer must provide and install all the equipment needed to continue operations?
A)cold site
B)hot site
C)spare site
D)warm site
To view all questions and flashcards with answers, click on the resource link above.
16
Chapter 15: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45980
Sample Questions
Q1) Which of the following is considered to be a common security issue? (Choose all that apply. )
A)management issues
B)certificate issues
C)encrypted credentials
D)authentication issues
Q2) Vendor-specific guides are useful for configuring web servers,operating systems,applications servers,and network infrastructure devices.
A)True
B)False
Q3) What is privilege management?
Q4) Select the option that best describes a policy:
A)A collection of requirements specific to the system or procedure that must be met by everyone
B)A collection of suggestions that should be implemented
C)A list of all items that have a positive economic value
D)A document that outlines specific requirements or rules that must be met
Q5) What is mean time to recovery (MTTR)?
Q6) What is a security control?
To view all questions and flashcards with answers, click on the resource link above. Page 17