compTIA Security+ Certification Practice Exams

practice of registering misspelled domain name resembling other popular domain names in hope of getting Internet traffic

Situation in which an unauthorized person can view another's display/keyboard to learn their pw/other confidential info

The practice of using a telephone system to manipulate user into disclosing confidential information is known as:

Deliberate false statements: saying something wrong in the hopes that the person will correct the statement w true info

Harmful programs used to disrupt computer op, gather sensitive info, or gain unauthorized access to computer systems

Pretending to divulge confidential info in hopes of receiving confidential info in return is known as confidential bait

Which of the following answers refer to the characteristic features of pharming?

Pretending to be ignorant of a topic in order to exploit the person’s tendency to educate is feigned ignornace

Using praise to coax a person into providing information is known as flattery

Standalone malicious comp program that propagates itself over a network to adversely affect system resources/bandwidth

Malware that restricts access to a computer system by encrypting files/locking until the user performs requested action

Social engineering technique attackers under disguise of a legit request attempt to gain access to confidential info

Providing a high and low estimate in order to entice a more specific number is known as bracketing

Phishing scams targeting people holding high positions in an organization or business are known as:

Which of the following is used in data URL phishing?

Which of the terms listed below refers to a platform used for watering hole attacks?

Acts like a legit program, has all expected functionalities, but apart from that will also contain hidden malicious code

"Elicitation"- use of casual conversation to extract non-public info w/o them the feeling they are being interrogated

What is tailgating?

Shredding docs before disposal makes dumpster diving less effective & mitigates the risk of social engineering attacks

The practice of using a telephone system to manipulate user into disclosing confidential information is known as:

Email w/ warning related to a computer sec threat, asking user to delete system files falsely identified as malware

Which of the following answers refer to smishing?

Pretending to be ignorant of a topic in order to exploit the person’s tendency to educate

Which social engineering attack relies on identity theft?

Phishing scams targeting a specific group of people are referred to as:

What type of spam relies on text-based communication?