Security+ Domain 1: General Security Concepts Quiz

1. Which cryptographic approach uses the same key for encryption and decryption?

Asymmetric encryption

Symmetric encryption

Hashing

Digital signatures

2. What does 'least privilege' principle mean?

Grant users maximum access rights

Grant only minimum necessary permissions

Eliminate all user permissions

Require administrator approval for all actions

3. Which of the following is an example of a logical control?

Security guard

Firewall

Locked door

Surveillance camera

4. What is the primary goal of defense in depth?

Use only one strong security control

Implement multiple security layers

Eliminate all vulnerabilities

Monitor all network traffic

5. Which process determines the likelihood and impact of a security risk?

Risk assessment

Threat modeling

Vulnerability scanning

Compliance auditing

6. A DDoS attack aims to disrupt which aspect of the CIA triad?

Confidentiality

Integrity

Availability

Authentication

7. Which authentication factor involves something you know?

Biometric scan

Security token

Password

Smart card

8. What does CVSS stand for in vulnerability management?

Common Vulnerability Scoring System

Comprehensive Vulnerability Security System

Critical Vulnerability Severity Scale

Cyber Vulnerability Security Standard

9. Which of the following is NOT a common attack vector?

Email attachments

Unpatched software

Strong password policy

USB devices

10. What is the primary purpose of role-based access control (RBAC)?

Encrypt all data

Assign permissions based on user roles

Monitor user activity

Prevent malware infections

11. Which threat actor typically has the highest skill level and financial resources?

Script kiddies

Nation-state actors

Insider threats

Hacktivists

12. What is the primary function of a security policy?

Install security software

Establish rules and procedures for security practices

Conduct security audits

Create user accounts

13. Which of the following best describes a 'zero-day' vulnerability?

A vulnerability known for many years

An unknown vulnerability exploited before a patch exists

A vulnerability in legacy systems

A vulnerability found during penetration testing

14. What does 'zero trust' security model assume?

All users are trustworthy by default

No user or device is trusted by default

Only external threats matter

Firewalls provide complete protection

15. Which attack involves an attacker pretending to be a legitimate user to gain access?

Man-in-the-middle

Impersonation

Denial of service

Eavesdropping

16. What is the primary purpose of a penetration test?

Identify vulnerabilities by simulating attacks

Train employees on security

Monitor system performance

Update security policies

17. Which risk management framework is commonly used in government organizations?

ITIL

NIST

ISO 27001

CIS Controls

18. In the CIA triad, what does 'A' stand for?

Authentication

Availability

Accountability

Authorization

19. Which of the following is an example of a social engineering attack?

SQL injection

Phishing email

Buffer overflow

Cross-site scripting

20. What is the primary goal of a vulnerability assessment?

Exploit system weaknesses

Identify and document security weaknesses

Implement firewall rules

Monitor network traffic

Security+ Concepts Quiz: Can You Ace Domain 1?