Timedora
Free Practice Quiz Question List

6 Core 2: Security Online Quiz Questions

Use this free practice quiz with 20 questions to review 6 Core 2: Security, test your knowledge, and prepare for your next test or exam.

20 questions
01
True or false
1 point

True or false: Using a browser's private-browsing mode makes a user anonymous to websites and network operators.

  1. A

    True

  2. B

    False

02
Written response
1 point

An organization records user activity so it can later review what happened. What security function is being performed?

03
Choose one
1 point

A malicious program is attached to a legitimate application and spreads when a user runs that application. Which type of malware best fits this description?

  1. A

    Worm

  2. B

    Virus

  3. C

    Trojan

  4. D

    Rootkit

04
Fill in the blank
1 point

On a workstation, the built-in control that filters network traffic according to configured rules is a host .

05
True or false
1 point

True or false: Disabling SSID broadcast is an adequate substitute for using wireless encryption and a strong passphrase.

  1. A

    True

  2. B

    False

06
Written response
1 point

A visitor connects to a malicious wireless access point that imitates the name and appearance of a legitimate nearby network. What is this attack called?

07
Choose all
1 point

Select all combinations that use at least two different authentication factor types and therefore can qualify as MFA.

  1. A

    A password and a security key

  2. B

    A password and a PIN

  3. C

    A fingerprint and a password

  4. D

    Two passwords

08
Fill in the blank
1 point

When a folder is shared over a network, both share and NTFS permissions apply; the more permission set governs effective access.

09
Choose one
1 point

A finance employee receives an unusual email from an address appearing to belong to an executive, requesting an urgent transfer. Which threat best describes this scenario?

  1. A

    Tailgating

  2. B

    Shoulder surfing

  3. C

    Business email compromise

  4. D

    Worm infection

10
Choose all
1 point

A small office is securing its SOHO wireless network. Select all recommended configuration choices.

  1. A

    Change the default router administrator password to a strong, unique credential.

  2. B

    Use WPA3 when supported, or WPA2 with AES for compatibility.

  3. C

    Hide SSID broadcast instead of configuring wireless encryption.

  4. D

    Use a separate guest network and isolate guest devices where supported.

11
Choose one
1 point

A company needs to make a web server publicly reachable while keeping it separate from the trusted internal LAN. Which network design best meets that goal?

  1. A

    Place the server on a screened subnet.

  2. B

    Connect the server directly to the trusted internal LAN.

  3. C

    Disable the firewall between the server and internal devices.

  4. D

    Hide the wireless network name.

12
Open ended
1 point

A company is reviewing protections for portable computers after a powered-off laptop is stolen. Recommend the control that most directly protects the files stored on its drive, and explain one important limitation of that control.

13
Choose one
1 point

An employee moves to a different job role. What is the best way to ensure the employee's access remains appropriate?

  1. A

    Keep all current permissions because the employee already has them.

  2. B

    Review the employee's access and remove permissions no longer needed for the new role.

  3. C

    Give the employee permanent administrator access during the transition.

  4. D

    Replace the employee's account with a shared team account.

14
Written response
1 point

An attacker exploits a software vulnerability before a fix is available or widely applied. What is this type of attack called?

15
Choose one
1 point

An employee receives a text message claiming to be from IT support and asking for a one-time sign-in code. What type of attack does this message represent?

  1. A

    Smishing

  2. B

    Tailgating

  3. C

    Shoulder surfing

  4. D

    DDoS

16
True or false
1 point

True or false: A valid website certificate proves that the website itself is honest.

  1. A

    True

  2. B

    False

17
Choose one
1 point

A small office is replacing its wireless security settings. Which configuration is the strongest choice among these options for a modern network?

  1. A

    WEP with a short shared key

  2. B

    WPA/TKIP

  3. C

    WPA3 with a strong unique passphrase

  4. D

    An open network with SSID broadcast disabled

18
Choose one
1 point

A browser shows a certificate warning when a user visits a banking site. What is the safest response?

  1. A

    Ignore the warning if the page looks familiar.

  2. B

    Continue and enter credentials to test whether the site works.

  3. C

    Stop and verify the address and connection through a trusted route before proceeding.

  4. D

    Disable certificate checking permanently.

19
Choose one
1 point

A technician must install a printer driver but should not give the user ongoing administrator access. What is the best approach?

  1. A

    Make the user a permanent administrator.

  2. B

    Use an approved elevation method for the task, then keep the user’s standard account.

  3. C

    Share an administrator password with the user.

  4. D

    Disable the firewall while installing the driver.

20
Written response
1 point

Which CIA triad principle is protected when controls help keep information accurate and ensure it is changed only in authorized ways?