1 / 21
CompTIA Security+ (SY0-601) Practice Exam 2023 Questions and Answers 1.What can be done to reduce the success of phishing attacks?
(Choose 2): Email Security, User Training
2.Match the type of social engineering with its description or attribute: Targeting a significant target is called .: Whaling 3.Match the type of social engineering with its description or attribute: A phone based attack is called .: Vishing 4.Match the type of social engineering with its description or attribute: An incorrect website attack is called .: Typosquatting 5.Match the type of social engineering with its description or attribute: An email based attack is called .: Phishing 1 / 4
2 / 21
6.Which of the following are stated in the video as reasons why social engineering attacks work? (Choose all that apply) -Trust -Presumed Authority -Scarcity
-Intimidation: All of them
7.What are two items that users should do to protect themselves from
phishing attacks?: Don't click on any links in emails, don't open
attachments in emails.
8.Which of the following are indicators that an email is a phishing attack?-Sense of urgency -Has images in the context -Has an attachment -URL is incorrect by 1 or 2 characters
-Spelling and Grammar: All of the above
9.A user was going to their banking website but misspelled the URL when putting it in the browser. Credentials of the user were stolen. What attack caused the compromise?: Typo Squatting 2 / 4
3 / 21
10.A hacker in a lab coat was performing an experiment, and most partic- ipants agreed with all the requests of the attacker. What is the PRIMARY reason?a.Intimidation b.Authority c.Urgency d.Scarcity
e.Trust: a. Intimidation 3 / 4
4 / 21
11.Which attack primarily uses the telephone as means of compromising a victim?a.Phishing b.Spear Phishing c.Vishing d.SPIM
e.SPAM: c. Vishing
12.What would explain network traffic from a PC to an IP address that is happening between 2 and 4 am and out of the country.-RAT (Remote Access Trojan) -Botnet Malware -Virus
-Ransomware: RAT & Botnet Malware
13.Match the password attack type with its attribute/description:
Precomputed hashes is called a .: Rainbow table
14.Match the password attack type with its attribute/description:
- password against many accounts is called .: Spraying
15.Match the password attack type with its attribute/description:
A large list of passwords is called a .: Dictionary
- / 4