CompTIA Security+ Free Sample Questions

Zero Trust Architecture focuses on continuous verification of each user and device, ensuring access control is maintained at all times.

IaC allows for automated and consistent system configuration, reducing errors and increasing deployment speed.

SIEM systems are used to aggregate and analyze security alerts in real time, helping organizations respond to potential threats quickly.

DNS Spoofing is an attack that exploits vulnerabilities in DNS services to redirect users to malicious sites without their knowledge.

SASE combines network security functions with WAN capabilities to support dynamic secure access needs of modern organizations.

Risk Management is the process of identifying, assessing, and mitigating risks to minimize potential negative impacts on an organization.

The principle of least privilege involves providing users with the minimal level of access necessary to perform their job functions, reducing the risk of unauthorized access.

Honeypots are used in cybersecurity to attract attackers to decoy systems, allowing organizations to collect intelligence on their activities.

A DDoS attack involves flooding a target with traffic from multiple sources, causing disruption and potential service outages.

Symmetric encryption uses a single key for both encryption and decryption, making it simpler and faster than asymmetric methods.

The CIA triad in cybersecurity stands for Confidentiality, Integrity, and Availability, which are the core principles for securing information.

A Trojan Horse is a type of malware that disguises itself as legitimate software, providing unauthorized access to a system once executed.

Confidentiality is a security principle that ensures only authorized individuals can access sensitive information, protecting it from unauthorized disclosure.

A security guard is a physical security control that helps protect facilities and personnel by monitoring access and deterring unauthorized entry.

Steganography is the practice of hiding data within another file, such as an image or video, to conceal its presence.

Security operations tasks typically include vulnerability scanning and incident response, both of which are essential for maintaining system security.

Cloud-native security tools provide increased flexibility and can often lead to lower costs due to their scalable and efficient nature.

Code reviews and penetration testing are critical practices in secure software development, helping to identify and address vulnerabilities.

Data encryption, geolocation, and legal compliance are essential elements for maintaining data sovereignty in cloud computing.

This scenario perfectly describes a DNS amplification and reflection attack. The 'reflection' part comes from the attacker spoofing the victim's IP address and sending queries to third-party DNS servers (reflectors). The 'amplification' part comes from crafting a small query that elicits a very large response. The reflectors then send these large responses to the victim, overwhelming its network bandwidth and resources. The key indicators are the use of DNS and the response size being much larger than the query.