Start learning →

CompTIA CySA+ Cybersecurity — practice questions

Explore 30 free Cybersecurity questions in CompTIA CySA+ Computer Science. Open each question or exercise to read its content, reference answers and available explanation.

Practise Cybersecurity with Quill →

Cybersecurity questions and exercises with answers

Showing questions 1–30 of 30.

The practice of protecting systems, networks, devices and data from online threats is called:Read the answer and worked solution →Confidentiality, integrity and availability together form the security model known as the:Read the answer and worked solution →An email pretending to come from a bank asks a user for login details. That attack is:Read the answer and worked solution →An attacker quietly alters rows in a customer database. The part of the triad breached is:Read the answer and worked solution →Turning a file into a fixed-size string of characters to detect tampering is called:Read the answer and worked solution →Applying SHA-256 to a file produces a hexadecimal value whose character count is:Read the answer and worked solution →A ransomware attack takes a hospital's records offline for a week. The part of the triad breached is:Read the answer and worked solution →The unique identifier that lets a computer be addressed across the internet is its:Read the answer and worked solution →The unique identifier used to address a computer inside a local area network is its:Read the answer and worked solution →An attacker probes a network to find an entry point and map connected devices. The technique is:Read the answer and worked solution →An IPv4 address is built from four 8-bit groups, so its total length in bits is:Read the answer and worked solution →An IPv6 address uses eight hexadecimal groups, giving a total length in bits of:Read the answer and worked solution →IPv6 is considered more secure than IPv4 because it was designed with built-in support for:Read the answer and worked solution →An attacker manipulates DNS so a user's traffic reaches a server the attacker controls. This is a:Read the answer and worked solution →Digitally signing and verifying DNS responses to stop such spoofing is done by:Read the answer and worked solution →Turning readable data into a coded format that outsiders cannot read is called:Read the answer and worked solution →A scheme where the same key both locks and unlocks the data is called:Read the answer and worked solution →A scheme using a public key and a private key together is called:Read the answer and worked solution →The standard symmetric algorithm used worldwide, known for its speed, is:Read the answer and worked solution →A login that needs a password plus a code from a phone is an example of:Read the answer and worked solution →A firewall blocks unwanted traffic while an IDS watches for anomalies, so the IDS is a measure that is:Read the answer and worked solution →A remote worker needs an encrypted tunnel across the public internet. The tool for that is a:Read the answer and worked solution →Catch the defencesRead the answer and worked solution →Pop the triad wordsRead the answer and worked solution →Run the security gatesRead the answer and worked solution →Slice the attacksRead the answer and worked solution →Attack or defenceRead the answer and worked solution →Sort the security wordsRead the answer and worked solution →Type the numberRead the answer and worked solution →Security bingoRead the answer and worked solution →

Worked practice questions

The practice of protecting systems, networks, devices and data from online threats is called:

  1. Cybersecurity
  2. Cyberstrategy
  3. Cyberspending
  4. Cybershopping
Show answer and solution

Correct answer: A. Cybersecurity

1. The target is anything digital that an attacker might reach. 2. The aim is defence against threats arriving online. 3. That practice is cybersecurity. _Source: OpenStax Foundations of Information Systems, Chapter 5, Information Systems Security Risk Management._

Open this question →

Confidentiality, integrity and availability together form the security model known as the:

  1. CRM triad
  2. CIA triad
  3. CPU triad
  4. CSS triad
Show answer and solution

Correct answer: B. CIA triad

1. Each word names one thing security must protect. 2. The three are treated as one framework, not separately. 3. They form the CIA triad. _Source: OpenStax Foundations of Information Systems, Chapter 5, Information Systems Security Risk Management._

Open this question →

An email pretending to come from a bank asks a user for login details. That attack is:

  1. Phishing
  2. Patching
  3. Pairing
  4. Pinging
Show answer and solution

Correct answer: A. Phishing

1. The attacker impersonates a trusted entity in a message. 2. The goal is to have the victim hand over credentials. 3. That is phishing. _Source: OpenStax Foundations of Information Systems, Chapter 5, Information Systems Security Risk Management._

Open this question →

How to practise

  1. Choose a Cybersecurity question and try to work out your answer.
  2. Open the question to check the correct answer and read its worked solution.
  3. Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.

More Computer Science topics

Computer ScienceNetwork Security