CompTIA Cybersecurity Exam Study
Materials
Flashcards
Front:
What is the primary purpose of a SIEM?
Back:
To collect, analyze, and correlate security event logs for threat detection and compliance.
Front:
Difference between a vulnerability and an exploit?
Back:
A vulnerability is a weakness in a system; an exploit is a method used to take advantage of
that weakness.
Front:
Key components of a security program?
Back:
Policies, procedures, risk management, incident response, compliance, and training.
Front:
What is phishing?
Back:
A social engineering attack where attackers trick users into providing sensitive information.
Front:
Purpose of a firewall?
Back:
To filter network traffic and block unauthorized access.
Front:
What is multi-factor authentication?
Back:
Authentication requiring two or more verification methods (something you know, have, or
are).
Front:
Difference between IDS and IPS?
Back:
IDS detects intrusions and alerts; IPS detects and can prevent/block attacks.
Front:
What is a DDoS attack?
Back:
Distributed Denial of Service, overwhelming resources to make a system unavailable.
Front:
Role of vulnerability scanning?
Back:
Identify weaknesses in systems and networks before attackers exploit them.
Front:
Purpose of incident response plan?
Back:
Provide structured procedures to respond to and recover from security incidents.
25-Question Practice Test
1. Which tool is primarily used to detect and alert on suspicious network activity?
A) Firewall B) SIEM C) VPN D) LDAP
2. What is the main purpose of log monitoring?
A) Track network performance B) Detect anomalies C) Store backups D) Encrypt data
3. Which process ensures data integrity during transfer?
A) Hashing B) Encryption C) Compression D) Tokenization
4. What is the function of a SOC?
A) Manage IT helpdesk B) Monitor security events C) Install software D) Manage HR
records
5. Which device can block unwanted traffic at the network edge?
A) Switch B) Router C) Firewall D) Server
6. What does UBA (User Behavior Analytics) do?
A) Detects unusual user activity B) Manages passwords C) Monitors email D) Schedules
updates
7. Which tool correlates alerts from multiple sources?
A) SIEM B) VPN C) IDS D) Antivirus
8. What type of malware encrypts files and demands payment?
A) Virus B) Ransomware C) Spyware D) Worm
9. What is the purpose of a vulnerability scan?
A) Exploit a system B) Identify weaknesses C) Monitor traffic D) Install patches
10. Which attack involves overwhelming a system with traffic?
A) DDoS B) Phishing C) SQL Injection D) MITM
11. What is social engineering?
A) Coding exploit B) Manipulating people C) Firewall configuration D) Encrypting files
12. A zero-day vulnerability is:
A) Known patch available B) Unknown to vendor C) Old vulnerability D) Manual
misconfiguration
13. Which practice reduces phishing success?
A) Strong passwords B) Employee training C) VPN use D) Firewall rules
14. What is the main purpose of a security policy?
A) Technical configuration B) Guidelines and rules C) Encryption method D) Network
topology
15. Risk management primarily involves:
A) Identifying, assessing, mitigating risks B) Installing antivirus C) Monitoring logs D)
Hiring staff
16. Which document defines roles and responsibilities for security?
A) Incident response plan B) Business continuity plan C) Security policy D) Network
diagram
17. Compliance frameworks help organizations:
A) Meet legal/regulatory requirements B) Increase bandwidth C) Install firewalls D)
Encrypt data
18. Purpose of periodic security audits?
A) Identify gaps and ensure compliance B) Configure routers C) Encrypt traffic D) Block
malware
19. Which model defines access based on roles?
A) DAC B) MAC C) RBAC D) ABAC
20. What is defense-in-depth?
A) Single firewall B) Multiple layered security C) No antivirus D) Encrypted network
21. DMZ in network design is used for:
A) Isolating internal servers from public B) Increasing bandwidth C) Encrypting data D)
Load balancing
22. Which component validates identities before access?
A) IDS B) VPN C) Authentication server D) Proxy
23. Confidentiality ensures:
A) Data is accurate B) Data is accessible only to authorized users C) Network is fast D)
Data is compressed
24. Integrity ensures:
A) Data is correct and unaltered B) Data is encrypted C) Network is secure D) Passwords
are complex
25. Availability ensures:
A) Data is encrypted B) Systems and data are accessible when needed C) Data is hidden
D) Logs are analyzed