View Full CompTIA Tech+ FC0-U71 Exam Dumps and Practice Test Dumps

 

Question 261.

Which type of account should normally be used for day-to-day computer activities to reduce security risk?

1. Standard user account
   2. Shared administrator account
   3. Guest account with no password
   4. Root account for all tasks

Correct Answer: 1. Standard user account

Explanation:

A standard user account should normally be used for routine activities because it provides fewer privileges than an administrator account. This limits the damage that malware, accidental changes, or compromised credentials can cause. Administrative access should be used only when a task specifically requires elevated permissions. Shared administrator or root accounts also reduce accountability because multiple people may use the same credentials. This practice follows the principle of least privilege, which grants only the permissions necessary to perform assigned tasks.

Question 262.

Which authentication method combines a password with a one-time code from a phone or security token?

1. Single-factor authentication
   2. Multifactor authentication
   3. Anonymous access
   4. Guest authentication

Correct Answer: 2. Multifactor authentication

Explanation:

Multifactor authentication, or MFA, requires authentication evidence from more than one category. A password represents something the user knows, while a one-time code from a phone or security token represents something the user has. Combining factors makes account compromise more difficult because stealing only the password may not be enough. MFA is widely used for email, cloud services, remote access, and administrator accounts and is one of the most effective defenses against stolen credentials.

Question 263.

Which type of biometric authentication uses a physical characteristic of a person?

1. Password
   2. Security token
   3. Fingerprint scan
   4. PIN

Correct Answer: 3. Fingerprint scan

Explanation:

A fingerprint scan is a biometric authentication method based on something the user is. Other examples include facial recognition, iris scanning, and voice recognition. Passwords and PINs are knowledge factors, while security tokens are possession factors. Biometrics can improve convenience and security, but they should be implemented with appropriate privacy, recovery, and fallback procedures because biometric characteristics cannot simply be changed like passwords if compromised.

Question 264.

Which security principle requires users to receive only the access they need to perform their responsibilities?

1. Maximum privilege
   2. Open access
   3. Shared administration
   4. Least privilege**

Correct Answer: 4. Least privilege

Explanation:

Least privilege limits users, applications, and systems to the permissions required for legitimate tasks. This reduces the potential impact of mistakes, malware, or account compromise. For example, a user who only needs to edit documents should not have unrestricted administrative access to the entire computer. Open access and excessive privileges increase risk. Organizations should also review permissions periodically so users do not retain access that is no longer required.

Question 265.

Which security concept confirms the identity of a user before access is granted?

1. Authentication
   2. Authorization
   3. Availability
   4. Compression

Correct Answer: 1. Authentication

Explanation:

Authentication is the process of verifying identity. Common authentication methods include passwords, PINs, security tokens, certificates, and biometrics. Authorization occurs after authentication and determines what the verified user is permitted to access or do. Availability is a security objective related to keeping systems accessible, while compression reduces data size. Understanding the distinction between authentication and authorization is important because a user can be successfully authenticated without being authorized for every resource.

Question 266.

Which security concept determines what an authenticated user is allowed to access?

1. Authentication
   2. Authorization
   3. Hashing
   4. Availability

Correct Answer: 2. Authorization

Explanation:

Authorization determines the permissions granted to an authenticated identity. For example, two users may both successfully log in, but one may be authorized to edit a file while the other can only read it. Authentication verifies identity, while authorization defines allowed actions. Access-control lists, roles, group memberships, and permissions are common ways to enforce authorization. Proper authorization supports least privilege and helps prevent users from accessing resources they do not need.

Question 267.

Which security objective is concerned with preventing unauthorized disclosure of information?

1. Availability
   2. Integrity
   3. Confidentiality
   4. Redundancy

Correct Answer: 3. Confidentiality

Explanation:

Confidentiality protects information from being viewed or disclosed to unauthorized people or systems. Encryption, access controls, strong authentication, and physical security can all support confidentiality. Integrity focuses on preventing unauthorized modification, while availability ensures that systems and data remain accessible when required. These three objectives are commonly known as the CIA triad and form a basic framework for understanding information security.

Question 268.

Which security objective focuses on ensuring that information remains accurate and is not modified improperly?

1. Confidentiality
   2. Availability
   3. Scalability
   4. Integrity**

Correct Answer: 4. Integrity

Explanation:

Integrity means protecting data from unauthorized or accidental modification and maintaining its accuracy and completeness. Controls such as permissions, hashing, digital signatures, version control, and logging can help support integrity. Confidentiality protects against unauthorized disclosure, while availability focuses on keeping systems accessible. Integrity is important in financial records, databases, software, configuration files, and any other situation where unauthorized changes could cause harm.

Question 269.

Which security objective ensures that systems and information are accessible when authorized users need them?

1. Availability
   2. Confidentiality
   3. Obfuscation
   4. Hashing

Correct Answer: 1. Availability

Explanation:

Availability means keeping systems, applications, and data accessible to authorized users when needed. Controls that support availability include backups, redundant systems, UPS devices, failover, disaster recovery planning, monitoring, and protection against denial-of-service attacks. Confidentiality and integrity address different security goals. Organizations should balance all three major objectives because highly secure data is not useful if authorized users cannot access it when required.

Question 270.

Which security technology transforms readable information into ciphertext that can be restored with the proper key?

1. Hashing
   2. Encryption
   3. Compression
   4. Defragmentation

Correct Answer: 2. Encryption

Explanation:

Encryption converts readable plaintext into ciphertext using a cryptographic algorithm and key. Authorized users with the correct key can decrypt the information and restore it to readable form. Encryption can protect data stored on devices and data transmitted over networks. Hashing is generally one-way and is commonly used for integrity verification or password protection. Compression reduces file size, while defragmentation reorganizes storage data.

Question 271.

Which security technique creates a fixed-length value that can be used to detect whether data has changed?

1. Compression
   2. Encryption only
   3. Hashing
   4. Virtualization

Correct Answer: 3. Hashing

Explanation:

Hashing processes data through a mathematical function and produces a fixed-length value called a hash or digest. If the original data changes, the resulting hash should also change, making hashing useful for integrity verification. Hashing is generally not designed to be reversed, unlike encryption. Software vendors may publish file hashes so users can verify that downloads have not been altered. Hashes are also used in password storage and other security applications.

Question 272.

Which security attack attempts to make a service unavailable by overwhelming it with excessive requests or traffic?

1. Phishing
   2. Credential stuffing
   3. Shoulder surfing
   4. Denial-of-service attack**

Correct Answer: 4. Denial-of-service attack

Explanation:

A denial-of-service attack attempts to prevent legitimate users from accessing a system or service by exhausting resources or flooding it with traffic. Distributed denial-of-service attacks use many systems simultaneously. Phishing relies on deception, credential stuffing uses stolen credentials, and shoulder surfing involves direct observation. Defenses may include rate limiting, traffic filtering, redundancy, monitoring, and specialized mitigation services.

Question 273.

Which attack relies on deceptive emails, messages, or websites to trick users into revealing sensitive information?

1. Phishing
   2. Defragmentation
   3. Virtualization
   4. Patch management

Correct Answer: 1. Phishing

Explanation:

Phishing uses deception to persuade users to reveal passwords, financial information, authentication codes, or other sensitive data. Attackers often impersonate trusted organizations and create urgency to make the victim act quickly. Users should verify unexpected requests through trusted channels, avoid suspicious links, and report questionable messages. Multifactor authentication can reduce the impact of stolen passwords, although some phishing techniques also attempt to capture additional authentication factors.

Question 274.

Which attack uses stolen username-and-password combinations against multiple unrelated services?

1. Shoulder surfing
   2. Credential stuffing
   3. Encryption
   4. Malware scanning

Correct Answer: 2. Credential stuffing

Explanation:

Credential stuffing occurs when attackers use credentials stolen from one service to attempt logins on other services. It is effective because many people reuse passwords. Unique passwords for every account significantly reduce the risk. Multifactor authentication adds further protection. Password managers can help users generate and store long, unique credentials so they do not need to reuse one password across many websites.

Question 275.

Which type of malware encrypts or otherwise blocks access to data and then demands payment?

1. Worm
   2. Trojan
   3. Ransomware
   4. Adware only

Correct Answer: 3. Ransomware

Explanation:

Ransomware is malware that denies access to files or systems, commonly by encrypting data, and then demands payment. Paying does not guarantee recovery. Strong defenses include patched software, endpoint protection, phishing awareness, least privilege, network segmentation, and tested backups stored where ransomware cannot easily modify them. Recovery planning is especially important because organizations should be able to restore important data without depending on attackers.

Question 276.

Which type of malware is capable of spreading automatically between systems without requiring users to open infected files?

1. Trojan
   2. Keylogger
   3. Adware
   4. Worm**

Correct Answer: 4. Worm

Explanation:

A worm is malicious software that can propagate automatically across networks, often by exploiting vulnerabilities or weak configurations. This allows it to spread rapidly without requiring users to manually execute infected files. Trojans disguise themselves as legitimate software, while keyloggers capture keystrokes. Patching systems, using firewalls, segmenting networks, and maintaining endpoint security tools can reduce the risk of worm infections.

Question 277.

Which security control helps prevent unauthorized physical entry into a server room?

1. Badge-controlled door lock
   2. Disk encryption only
   3. Software firewall
   4. Antivirus software

Correct Answer: 1. Badge-controlled door lock

Explanation:

A badge-controlled door lock is a physical access-control mechanism that restricts entry to authorized personnel. Physical security is critical because someone with direct access to servers or network hardware may bypass some software-based controls. Disk encryption, firewalls, and antivirus tools provide different types of technical protection. Organizations may combine badges with cameras, visitor logs, escorts, alarms, and environmental monitoring for layered security.

Question 278.

Which power-protection device can provide temporary battery power during an outage?

1. Surge protector
   2. UPS
   3. Power strip
   4. Ethernet switch

Correct Answer: 2. UPS

Explanation:

An uninterruptible power supply, or UPS, contains a battery that can provide temporary power when utility power fails. This can keep equipment running during brief outages or allow systems to shut down safely. A surge protector helps protect against voltage spikes but typically does not provide battery backup. UPS devices are commonly used for servers, networking equipment, storage systems, and other devices where sudden power loss could cause data corruption or service interruption.

Question 279.

Which maintenance action is most appropriate when a desktop computer repeatedly overheats because air vents are blocked by dust?

1. Reinstall the operating system
   2. Replace the monitor
   3. Clean the vents and cooling components safely
   4. Disable the firewall

Correct Answer: 3. Clean the vents and cooling components safely

Explanation:

Dust can block airflow and reduce the effectiveness of cooling fans and heat sinks. Cleaning vents and cooling components using appropriate procedures can restore airflow and reduce overheating. The system should be powered down and disconnected before internal cleaning. Reinstalling the operating system, changing the monitor, or disabling security controls would not address a thermal problem. Persistent overheating should also prompt checks of fan operation, thermal interfaces, and ambient temperature.

Question 280.

A user says a computer became very slow immediately after several unfamiliar programs were installed. What should the technician do first?

1. Replace the CPU
   2. Format the drive immediately
   3. Disable all updates
   4. Identify the installed software, check running processes, and scan for malware**

Correct Answer: 4. Identify the installed software, check running processes, and scan for malware

Explanation:

The timing suggests that one or more newly installed programs may be consuming resources or introducing unwanted software. The technician should confirm what changed, review running processes and installed applications, and perform an appropriate malware scan. This follows a structured troubleshooting approach by gathering evidence before making major changes. Immediately replacing hardware or formatting the drive could destroy useful information and may be unnecessary if the problem can be isolated and corrected more safely.