Security+ Practice Quiz with Answer Key
Part A - Multiple Choice (Answers included)
1. The CIA triad stands for: A) Confidentiality, Integrity, Availability
2. Example of integrity protection: B) Using permissions so only certain users can edit files
3. Authentication is best described as: B) Checking who a person is
4. Which is not a type of malware: C) Firewall
5. A virus that changes itself every time it spreads: A) Polymorphic virus
6. Remote control of a computer by an attacker: B) Remote Access Trojan (RAT)
7. Ransomware typically: B) Encrypts files and demands payment for the key
8. Common attack vector: B) Software (downloads, email attachments, malicious sites)
9. Fileless malware mainly runs in: B) The computer's memory (RAM)
10. An open mail relay allows: B) Anyone on the Internet to send email through the server
Part B - True / False
11. A worm needs a user to open a file to spread. False
12. Whitelists contain trusted addresses; blacklists contain blocked addresses. True
13. Rootkits are easy to remove with a normal antivirus scan. False
14. Encryption protects confidentiality but not integrity. False
15. Botnets are collections of infected computers controlled by an attacker. True
Part C - Matching
16. Social engineering - Attack that tricks people into revealing information.
17. Backdoor - Hidden way to bypass security in software or systems.
18. Exploit kit - Script that runs automatically on web servers to find and use vulnerabilities.
19. Logic bomb - Malicious code that triggers when certain conditions are met.
20. Typosquatting - Registering similar website names to trick users.
Part D - Short Answers (Sample good answers)
21. Authentication factors: something you know (password), something you have (smart card),
something you are (fingerprint).
22. Virus symptoms: computer slow, strange pop-ups, antivirus disabled, new icons appear.
23. GPT is safer than MBR because GPT keeps multiple copies of partition data and does not rely
on one boot record.
24. Spam prevention: use spam filters/firewalls, hide emails with contact forms, train users.
25. Malware removal steps: back up data, isolate system, update AV, scan in Safe Mode, remove
threats, update system, create restore point.
Part E - Scenario
26. Problem: The computer is part of a botnet.
Actions: 1) Disconnect it from the network. 2) Scan the system using antivirus on a clean machine or
rescue media.
---
End of Key