A+ Security Quiz: Core 2 Domain 2 Practice

1. Asymmetric encryption uses two keys. What are they called?

Primary and secondary keys

Public and private keys

Encryption and decryption keys

Master and slave keys

2. Data loss prevention (DLP) tools are designed to prevent what?

Unauthorized access to networks

Sensitive data from being transmitted outside the organization

Malware infections

System crashes

3. Which backup strategy stores copies of data in multiple geographic locations?

Incremental backup

Differential backup

Geo-redundant backup

Full backup

4. What is the purpose of a security patch?

Improve system performance

Fix software vulnerabilities

Increase storage capacity

Add new user features

5. Which of the following best describes a security audit?

Monitoring user activity in real-time

Systematic review of security controls and policies

Encrypting sensitive data

Installing antivirus software

6. A hash function produces what type of output?

Reversible encrypted text

A fixed-length unique value

Random encryption keys

Plaintext representation

7. What does HTTPS provide that HTTP does not?

Faster data transmission

Encryption of data in transit

Better website performance

Increased bandwidth capacity

8. Which security principle ensures that users can only access resources necessary for their job?

Principle of least privilege

Defense in depth

Separation of duties

Non-repudiation

9. What is the primary function of a firewall in network security?

Prevent malware installation

Control incoming and outgoing network traffic

Encrypt all user data

Monitor system performance

10. Which attack involves tricking users into revealing sensitive information through deception?

Brute force attack

Social engineering

Denial of service

Man-in-the-middle

11. Which authentication method uses a time-based algorithm to generate temporary access codes?

Multi-factor authentication

Time-based one-time password (TOTP)

Biometric authentication

Single sign-on

12. Which of the following is a characteristic of a strong password policy?

Passwords expire every 90 days

Users can reuse previous passwords

Complexity requirements including uppercase, numbers, and symbols

Passwords are written down for backup purposes

13. What is the minimum recommended password length for strong security compliance?

4 characters

8 characters

12 characters

16 characters

14. Which protocol provides secure remote access by encrypting login credentials and session data?

Telnet

SSH

HTTP

FTP

15. A certificate authority (CA) is responsible for which primary function?

Issuing and validating digital certificates

Encrypting all network traffic

Managing user passwords

Blocking malicious websites

16. What does PKI stand for in the context of encryption and digital certificates?

Public Key Infrastructure

Private Key Integration

Personal Keychain Interface

Protocol Key Identification

17. Which malware type replicates itself without user interaction and spreads across networks?

Trojan horse

Ransomware

Worm

Spyware

18. A user's account is locked after five failed login attempts. This is an example of which security control?

Account lockout policy

Password complexity requirement

Multi-factor authentication

Biometric verification

19. Which encryption standard is considered the most secure for protecting sensitive data at rest?

DES

AES-256

MD5

SHA-1

20. What is the primary purpose of implementing role-based access control (RBAC)?

Encrypt all user data automatically

Assign permissions based on job function and responsibilities

Prevent all unauthorized access attempts

Monitor user activity in real-time

A+ Security Quiz: Can You Ace Core 2 Domain 2?