stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Comptia Sec+ Bootcamp Flashcards | StudBud
Explore
/
Comptia Sec+ Bootcamp
Comptia Sec+ Bootcamp
25 terms
·
StudBud Administration
·
76 plays
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Which of the following standards must the company comply with before accepting credt cards on its e-commerce platform?
NIST CSF
PCI DSS
ISO 22301
ISO 27001
2
Which of the following protocols is used to securely transfer files over a network?
SFTP
FTP
HTTPS
SSH
3
Which of the following should be monitored by threat intelligence researchers who search for leaked credentials?
Common Weakness Enumeration
OSINT
Dark web
Vulnerability databases
4
Which of the following is a method for ensuring data is not altered during transmission?
Non-repudiation
Integrity
Confidentiality
Availability
5
Which of the following best describes a brute force attack?
Sending a large volume of traffic to overwhelm a system
Attempting all possible password combinations
Tricking users into revealing confidential information
Exploiting software vulnerabilities to gain access
6
Which of the following is a quantitative method used to assess risk?
SWOT analysis
Qualitative analysis
Annual Loss Expectancy (ALE)
Risk matrix
7
Which of the following best describes a data retention policy?
Identifies the most critical data for backup purposes
Ensures data is backed up regularly and stored offsite
Defines how long data should be kept and how it should be disposed of
Ensures data is encrypted during storage
8
Which of the following security measures is designed to prevent unauthorized access to a network?
IDS
IPS
Firewall
Honeypot
9
Which of the following ?
Acceptance
Transference
Mitigation
Avoidance
10
Which of the following methods is commonly used to protect data in transit?
HTTPS
Firewall
Antivirus software
Disk encryption
11
Which of the following is used to verify the integrity and authenticity of a message?
Salting
Hashing
Obfuscation
Encryption
12
Which type of attack attempts to gain access to a system by trying a large number of possible password combinations?
Brute Force
Phishing
Cross-Site Scripting (XSS)
SQL Injection
13
Which of the following attacks involves overwhelming a system with a flood of network traffic to render it unusable?
SQL Injection
Denial of Service (DoS)
Man-in-the-Middle (MitM)
Phishing
14
Which of the following is an example of multi-factor authentication?
Email and security question
Password and PIN
Smart card and fingerprint
Username and password
15
Which of the following is considered a form of social engineering?
Man-in-the-middle attack
Spoofing
Phishing
Denial of Service (DoS)
16
Which of the following is a primary concern when implementing data retention policies?
Data integrity
Data compression
Data privacy compliance
Data encryption
17
An attacker injecting malicious scripts into a trusted website that is then executed by the user's browser, this is ...?
Cross-Site Scripting (XSS)
Buffer Overflow
Denial of Service (DoS)
SQL Injection
18
In which of the following risk management strategies would cybersecurity insurance be used?
Acceptance
Avoidance
Transference
Mitigation
19
Which of the following security controls is a detective control?
Intrusion Detection System (IDS)
Intrusion Prevention System (IPS)
Encryption
Security Awareness Training
20
Which of the following is the MOST likely motivation for a script kiddie threat actor?
Political expression
Notoriety
Financial gain
Corporate espionage
21
Which type of malware is designed to replicate itself and spread to other systems without needing user interaction?
Worm
Virus
Trojan
Spyware
22
Which of the following is the best practice for securely disposing of physical docments containing senstive information?
Storing them in a locked drawer
Throwing them in the regular trash
Shredding them
Recycling them
23
Waht is updated version of Comptia Sec+ Exam ?
SY0-701
SY0-901
SY0-601
SY0-801
24
Which of the following attacks specifically targets data in transit?
Man-in-the-Middle (MitM)
SQL Injection
Phishing
Ransomware
25
Which of the following is a common method used to secure wireless networks?
DHCP
WPA2
WEP
FTP
