Overview of Security | Practice Test / Quiz / MCQs

Home > CompTIA Security+ Certification > Quizzes > Overview of Security

Overview of Security

Fast practice, instant feedback. Timer auto-submits when time’s up.

Avg score: 49% • Most missed: “Threat category (1 of 4) Malware”

Study First Challenge a Friend Stats

Overview of Security

Time left 00:00

25 Questions

1. Mitigating Threats (Administrative)

2. Information Systems Security

The process of proving that a user performed an action.Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelPolicies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...

3. Hackers (5 of 5 types) - Elite

The process of proving that a user performed an action.Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

4. Non-repudiation

Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelThe process of proving that a user performed an action.Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).

5. AAA Security (authentication)

Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelWhen a persons identity is established with proof and confirmed by a system: Something you know, are, have, do, location.Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).

6. integrity

Keeping the integrity of data so it is not modified or altered without proper authorization. Thing that comes up time and time again is hashes.Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

7. Threat category (4 of 4) Social Engineering

Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelAct of manipulating users into revealing confidential information of performing other detrimental actions. Phishing, ex, paypal been hacked...with link, that takes you to log in, then the actor has your log in and now they can do harm. Ex, show up as a UPS man with a box, people will most likely let you in.Act of protecting the systems that hold and process our critical data. PC, network, phone, server...

8. AAA Security (authorization)

Occurs when a user is given access to a certain piece of data (certain folder...) or certain areas of a building (badge, key) or on an access listPolicies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelAct of protecting the systems that hold and process our critical data. PC, network, phone, server...

9. Threat actors skill levels

Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelBest to worst: APT>Organized Crime>Hacktivists>Script kiddiesPolicies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...

10. Confidentiality

The assurance that messages and information are available only to those who are authorized to view themAct of protecting the systems that hold and process our critical data. PC, network, phone, server...Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

11. Threat category (3 of 4) System Failure

Occurs when a computer crashes or an individual application fails.Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

12. Script Kiddies vs. Elite

Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Exact opposite of Elite. Just using tools and exploits of other hats to see if they can do something.Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

13. Threat category (1 of 4) Malware

14. Hackers (4 of 5 types) - Blue Hat

Hackers who attempt to hack into a network with permission of the company but are not employed by the company. Freelance hacker or bug bounty program. Bug bounty programs are picking up. Hackerone is a site where you can register i.e. permission based on ROE that allows company's to get a large pool of hackers to find problems.Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelAct of protecting the systems that hold and process our critical data. PC, network, phone, server...Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).

15. Threat category (2 of 4) Unauthorized Access

Occurs when accesses to computer resources and data happens without the consent of the owner. Get past a guard, or get someones passwordPolicies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

16. Availability

Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelPolicies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Data is available when needed. Can be set by hours of day, days of week. But you need to have authorization and access first. If you have the CI but not the A, no good. CIA works together.

17. Hackers (1 of 5 types) - White Hat

18. Threat Actor Main Groups (1 of 4) - Script Kiddie

Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Script kiddies have limited skill and only run other peoples exploits and tools. aka baby hackers. Ex, one click can do X such as DDOSHackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

19. Threat Actor Main Groups (4 of 4) - Advance Persistent Threats (APT)

Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Highly trained and funded groups of hackers (often by nation states) with covert and open-source intelligence at their disposal. Ex, Russia on elections, China on stealing intellectual property. They are good and sneaky and stay long periods w/o being detected.Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

20. Information Security

Act of protecting data and information from unauthorized access, unlawful modification and disruption, disclosure, corruption, and destruction. Simply put, the data systems hold, not the systemAct of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelPolicies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).

21. Hackers (3 of 5 types) - Gray Hat

Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelAct of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers w/o any affiliation to a company that attempts to break into a company's network but risk breaking the law by doing so. Gray is not necessary malicious, just to see if they can do it. Still breaking the law even if no attempt to steal. Sometimes can be considered good, ex, break into FB and then let them know they did it, which allows FB to fix the problem. Again, still breaking the law b/c they were not authorized to do so. i.e. not white, not black but Gray

22. Mitigating Threats (Technical)

Smart cards, encryption, access control list (ACLs), IDS, IPS, network authentication.Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelAct of protecting the systems that hold and process our critical data. PC, network, phone, server...

23. Threat Actor Main Groups (2 of 4) - Hacktivists

Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who are driven by a cause like social change, political agendas or terrorism. Anonymous if the most famous, anyone can join or drop out. Believe they are good and right, doesn't make it legal though.Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill level

24. Hackers (2 of 5 types) - Black Hat

Malicious hackers who break into PCs and networks w/o authorization or permission.Act of protecting the systems that hold and process our critical data. PC, network, phone, server...Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelPolicies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).

25. AAA Security (accounting)

Hackers who find and exploit vulnerabilities before anyone else does. Create their own tools and own programming. Develop tools that all other hats end up using. They can be both white and black, depends on what they do. 1 in 10000 are considered Elite. So Elite is considered the skill levelAct of protecting the systems that hold and process our critical data. PC, network, phone, server...Policies, procedures, SATE, contingency planning, disaster recovery plans. Broken down into 2 categories Procedural (choose to do and cost effective) regulatory controls (required by law, ex HIPPA, finance is Sarbanes Oxley).Tracking of data, computer usage and network resources are maintained. Put in a log file, where files go, downloaded or who access files. Non-repudiation falls under accounting and occurs when you have proof that someone has taken an action.

⚡ Recently practiced quizzes in this topic

Live quiz activity

Cybersecurity Assessment Test Physical Security CompTIA Cybersecurity Analyst Plus CySA+ CS0-001 Questions CompTIA Security+ Certification Exam CompTIA Security+ SY0-601 Certification Exam Terms To Know Hardening Pentest+ CySA+ (CS0-002) Review Questions Virtualization (And Security) Secure Software Development

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com