CompTIA Security+ (SY0-601) Practice Exam #3

You discover that a co-worker of your company has installed spyware on 4 workstations with the aim to gather information about the company and send the information to another entity.

What type of threat you have just discovered?

Upon reviewing the server logs, you noticed that a user uses a list of common passwords for many accounts to attempt to log in. What type of attack you have just noticed?

A malicious user is trying to retrieve passwords by using software that attempts a number of passwords from a list of common passwords. What type of attack a malicious user is trying to perform?

Which of the following type of attacks exploits the unauthenticated nature of 802.11 management frames and prevent users from connecting to the WAP?

You want to download a piece of software that seems suspicious. After reading numerous reviews on the web claiming that the software is legitimate, you downloaded and installed it successfully. Later, you discover that the software was malicious and the developer of the software had made those fake reviews.

Which of the following principles of social engineering the malicious developer used?

You have just received an email advertising the newest version of the iPhone, which is not available elsewhere and it’s only one stock available. The email includes a “buy now” button which is a malicious link.

Which of the following principles is the email author using?

What type of attack is a birthday attack?

You have just released your new mobile app in the App Store. Your App went quickly viral and malicious actors started sending malicious traffic to the server which runs the app.

What type of denial-of-service attack is this?

In which type of denial-of-service attack belongs the DNS Amplification?