CompTIA Security+: Core Concepts

What type of malware self-replicates and spreads across a network without requiring human intervention or a host file?

A worm.

What social engineering attack involves an unauthorized person following an authorized employee into a secure physical location?

Tailgating.

Which encryption category uses a single shared key for both the encryption and decryption of data?

Symmetric encryption.

What are the three standard categories of authentication factors used in Multi-Factor Authentication (MFA)?

Something you know, something you have, and something you are.

What is the primary purpose of a hashing algorithm like SHA-256 in security operations?

To ensure data integrity by creating a unique, fixed-length digital fingerprint.

What type of malware encrypts a victim's files and demands a payment in exchange for the decryption key?

Ransomware.

What network security zone acts as a buffer between the internal private network and the untrusted public internet?

DMZ (Demilitarized Zone).

What is the main functional difference between a virus and a worm?

A virus requires human action or a host file to spread, whereas a worm spreads automatically.

How does an Intrusion Prevention System (IPS) differ from an Intrusion Detection System (IDS)?

An IDS only monitors and alerts on suspicious activity, while an IPS can actively block or drop malicious traffic.

What is Cross-Site Scripting (XSS)?

An attack where malicious scripts are injected into a trusted website to be executed in the victim's browser.