CompTIA A+ Core 2 — Practice Exam
2.0 Security: practice questions
Our CompTIA A+ Core 2 bank has 78 questions on this topic. Here are 5 of them with answers; the full mock exam draws from every topic, like the real one.
Question 1
A card with an embedded chip that stores a certificate and requires a PIN to sign in is an example of which factor combination?
- Something you are and something you know
- Something you have and somewhere you are
- Something you have and something you know
- Something you know and something you are
Show the answer
C. Something you have and something you know — The smart card is possession (have); the PIN is knowledge (know).
Question 2
An attacker posts a comment containing a script that runs in other visitors' browsers when they view the page. What is this?
- Evil twin
- Cross-site scripting
- Whaling
- SQL injection
Show the answer
B. Cross-site scripting — XSS injects script into pages viewed by other users.
Question 3
Which security model assumes no user or device is trusted by default, even inside the network, and verifies every access request?
- Perimeter security
- Least privilege
- Defense in depth
- Zero Trust
Show the answer
D. Zero Trust — Zero Trust means 'never trust, always verify', based on identity, device and context for each request.
Question 4
A caller claims to be from the bank's fraud team and asks the user to read out a verification code. What is this?
- Smishing
- Whaling
- Vishing
- Spoofing
Show the answer
C. Vishing — Vishing is voice phishing over the phone.
Question 5
A user needs to allow one program through Windows Defender Firewall. What is the best approach?
- Create an allow rule for that application
- Set the network to Public
- Turn the firewall off for the current network profile
- Open every port from 1 to 1024
Show the answer
A. Create an allow rule for that application — An application-specific rule permits only that program, keeping the firewall active for everything else.