What is the difference between a threat and a vulnerability?

c) Threat is potential harm, vulnerability is weakness

What is the purpose of a security baseline?

a) Establish minimum security requirements

What is the primary goal of risk management?

b) Reduce risk to acceptable level

What is the primary focus of the CIA triad?

b) Confidentiality, Integrity, Availability

What is the primary goal of incident response?

a) Contain and eradicate threat

What is the primary function of a DMZ?

b) Provide external access to services

What is the primary goal of confidentiality in information security?

a) Protect data from unauthorized access

What is the purpose of a Business Continuity Plan (BCP)?

a) Ensure business operations during disruption

What is the difference between a standard and a guideline?

a) Standard is mandatory, guideline is optional

What is the purpose of risk management?

b) Reduce risk to acceptable level

What is the purpose of a disaster recovery plan (DRP)?

a) Ensure business operations during disruption

What is the primary goal of security awareness training?

a) Educate users on security best practices

studbud

CompTIA Security Plus 701 Objectives

50 termsStudBud Administration227 plays

Test your knowledge and prepare for the CompTIA Security+ SY0-701 certification exam with this comprehensive practice quiz!

Flashcards50 cardsFPractice quizPHost liveL

Questions 50

Answers

1
Which security control type prevents unauthorized access?
Corrective
Preventive
Compensating
Detective
2
What is the purpose of intrusion detection systems (IDS)?
d) Conduct vulnerability scans
c) Prevent malware infections
b) Detect potential intrusions
a) Block unauthorized access
3
What is the purpose of a security information and event management (SIEM) system?
d) All of the above
c) Analyze security logs
b) Monitor network traffic
a) Conduct vulnerability scans
4
What is the benefit of network segmentation?
a) Improves performance
d) All of the above
b) Reduces risk
c) Enhances security posture
5
Which security framework provides guidelines for incident response?
a) NIST 800-61
b) ISO 27035
d) All of the above
c) COBIT
6
Which security process involves identifying and classifying assets?
c) Incident response
a) Risk management
d) Asset management
b) Vulnerability management
7
What type of malware steals sensitive information?
Virus
Worm
Spyware
Trojan
8
What is the difference between a threat and a vulnerability?
c) Threat is potential harm, vulnerability is weakness
a) Threat exploits vulnerability
b) Vulnerability is a type of threat
d) Vulnerability is external, threat is internal
9
Which security technology provides email security?
All of the above
Spam filter
Firewall
IDS
10
What type of security control involves physical access?
d) All of the above
b) Administrative
c) Physical
a) Technical
11
What type of attack involves sending malicious emails?
Phishing
Spear phishing
Whaling
Smishing
12
What is the purpose of a security baseline?
c) Conduct vulnerability scans
d) Implement Access controls
b) Define security incident response
a) Establish minimum security requirements
13
What is the primary goal of risk management?
b) Reduce risk to acceptable level
d) Ignore risk
c) Transfer risk to third party
a) Eliminate all risks
14
What is the primary focus of the CIA triad?
a) Confidentiality, Integrity, Authentication
d) Integrity, Availability, Authentication
b) Confidentiality, Integrity, Availability
c) Confidentiality, Access, Authentication
15
Which security process involves monitoring for potential threats?
c) Incident response
a) Continuous monitoring
b) Vulnerability management
Risk management
16
What is the primary goal of incident response?
a) Contain and eradicate threat
c) Implement security patches
b) Conduct vulnerability scans
d) Conduct risk assessments
17
Which security technology provides secure remote access?
SSL/TLS
All of the above
SSH
VPN
18
What type of security testing involves reviewing logs?
a) Penetration testing
d) Log analysis
c) Compliance testing
b) Vulnerability scanning
19
What is the primary goal of penetration testing?
a) Identify vulnerabilities
c) Improve incident response
d) Conduct risk assessments
b) Exploit vulnerabilities
20
What is the purpose of a secure protocol?
all of the above
a) Encrypt data in transit
c) Authorize access
b) Authenticate users
21
What is the primary function of a DMZ?
c) Improve network performance
b) Provide external access to services
a) Segment network for security
Conduct vulnerability scans
22
Which security technology provides intrusion prevention?
All of the above
IDS
IPS
Firewall
23
What type of security control involves policies and procedures?
b) Administrative
d) All of the above
c) Physical
a) Technical
24
What is the primary goal of confidentiality in information security?
b) Ensure data integrity
d) Detect security threats
a) Protect data from unauthorized access
c) Maintain data availability
25
What is the purpose of a security policy?
d) All of the above
a) Define incident response procedures
b) Establish security roles and responsibilities
c) Provide guidelines for secure configuration
26
What is the purpose of a firewall?
c) Detect intrusions
b) Allow authorized access
a) Block unauthorized access
d) All of the above
27
What is the purpose of a Business Continuity Plan (BCP)?
b) Conduct risk assessments
d) Conduct vulnerability scans
a) Ensure business operations during disruption
c) Implement security patches
28
Which mitigation technique reduces risk of social engineering?
c) Vulnerability patching
a) User education
b) Incident response planning
d) Network segmentation
29
Which security concept involves ensuring data remains unchanged?
Availability
Confidentiality
Integrity
Authenticity
30
What type of access control uses user identity?
MAC
RBAC
ABAC
DAC
31
What is the difference between a standard and a guideline?
b) Guideline is mandatory, standard is optional
c) Standard is industry-specific, guideline is organization-specific
a) Standard is mandatory, guideline is optional
d) Guideline is industry-specific, standard is organization-specific
32
What type of backup method stores data off-site?
a) On-site backup
b) Off-site backup
d) All of the above
c) Cloud backup
33
What is the benefit of implementing a security awareness program?
d) All of the above
c) Enhances security posture
b) Improves incident response
a) Reduces risk
34
What is the purpose of risk management?
d) Ignore risk
b) Reduce risk to acceptable level
a) Eliminate all risks
c) Transfer risk to third party
35
Which security process involves identifying and mitigating risks?
b) Vulnerability management
c) Incident response
d) Compliance testing
a) Risk assessment
36
Which security framework provides guidelines for security programs?
b) ISO 27001
d) All of the above
c) COBIT
a) NIST Cybersecurity Framework
37
What is the benefit of conducting regular security audits?
c) Enhances security posture
a) Identifies vulnerabilities
d) All of the above
b) Improves incident response
38
What type of encryption uses a single key?
b) Asymmetric
a) Symmetric
Digital signature
c) Hashing
39
What is the purpose of a security policy?
d) All of the above
c) Provide guidelines for secure configuration
b) Establish security roles and responsibilities
a) Define incident response procedures
40
What type of attack involves exploiting weak passwords?
All of the above
a) Brute force
c) Rainbow table attack
b) Dictionary attack
41
What type of malware encrypts files for ransom?
Trojan
Worm
Virus
Ransomware
42
What is the benefit of implementing patches and updates?
a) Reduces risk
b) Improves performance
c) Enhances security posture
All of the above
43
What is the purpose of a disaster recovery plan (DRP)?
b) Conduct risk assessments
c) Implement security patches
a) Ensure business operations during disruption
Restore IT systems
44
What is the benefit of continuous monitoring?
All of the above
Improves incident response
Enhances security posture
Reduces risk
45
Which security process involves reviewing and updating security policies?
b) Vulnerability management
d) Security governance
c) Incident response
a) Risk management
46
What type of security testing involves evaluating security controls?
c) Compliance testing
b) Vulnerability scanning
d) Log analysis
a) Penetration testing
47
What is the primary goal of security awareness training?
c) Implement security patches
d) Conduct vulnerability scans
b) Conduct risk assessments
a) Educate users on security best practices
48
Which vulnerability scanning technique identifies potential exploits?
d) Penetration testing
c) Vulnerability scanning
a) Network scanning
b) Port scanning
49
Which security model focuses on mandatory access control?
a) Bell-LaPadula
non-interference
b) Biba
c) Clark-Wilson
50
What type of encryption uses public and private keys?
Digital signature
c) Hashing
a) Symmetric
b) Asymmetric

CompTIA Security Plus 701 Objectives Flashcards | StudBud