Free Security Essentials Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Security Essentials practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1Which security goal is violated when someone reads a private medical record without permission?

   1. A. Integrity
   2. B. Availability
   3. C. Confidentiality
   4. D. Non-repudiation

   Answer: C

   Explanation: LPI states, "Confidentiality focuses on safeguarding information from unauthorized access and disclosure". Reading the record without permission violates confidentiality; no alteration or service outage is required.

   Reference: LPI Security Essentials 021.1 Lesson 1 — Understanding Common Security Goals — The CIA Triad

2. 2What output does a cryptographic hash function produce from input data of varying lengths?

   1. A. A reversible copy of the input using a public key
   2. B. A digest whose length grows with the input
   3. C. A fixed-size digest derived from the input
   4. D. A secret key shared directly with the recipient

   Answer: C

   Explanation: LPI states, "A hash function is a cryptographic algorithm that converts input data of any length into a fixed-size string, known as the hash or digest." Hashing produces a digest; it is not reversible encryption or key exchange.

   Reference: LPI Security Essentials 022.1 Lesson 1 — Hash Functions, Ciphers, and Key Exchange Algorithms

3. 3Which computer component normally retains stored files when the computer is powered off?

   1. A. CPU cache
   2. B. Solid-state drive
   3. C. Main RAM
   4. D. Processor registers

   Answer: B

   Explanation: LPI states, "Unlike RAM, storage retains its data even after a system is powered off". An SSD is persistent storage; RAM, cache, and registers are working memory rather than the persistent file store.

   Reference: LPI Security Essentials 023.1 Lesson 1 — Major Components of a Computer — Storage devices

4. 4Which device normally forwards Ethernet frames within a local network using destination MAC addresses?

   1. A. A DNS resolver
   2. B. A DHCP server
   3. C. A layer-2 switch
   4. D. An internet proxy

   Answer: C

   Explanation: LPI states, "When a device sends data, the switch looks at the MAC address to see which device the data is meant for." Local frame forwarding is a switch function, rather than name resolution, address leasing, or proxying application requests.

   Reference: LPI Security Essentials 024.1 Lesson 1 — Network Devices — Switch

5. 5A service has already verified a user's identity and now checks whether that user may edit a protected file. Which function is being performed?

   1. A. Authentication
   2. B. Accounting
   3. C. Authorization
   4. D. Identification

   Answer: C

   Explanation: LPI states, "Authorization uses the authenticated identity to determine whether you have the right to gain access to some resource." The identity is already verified; the remaining question concerns permission, rather than identity proof or logging.

   Reference: LPI Security Essentials 025.1 Lesson 1 — Steps in Identification: Authentication, Authorization, and Accounting

6. 6An attacker changes an account balance without authorization. Which security goal specifically concerns preventing this alteration?

   1. A. Availability of account access
   2. B. Integrity of stored balances
   3. C. Confidentiality of account details
   4. D. Non-repudiation of account actions

   Answer: B

   Explanation: LPI states, "Integrity ensures that all information within a network, or passing through it, remains unchanged unless modifications are authorized by the appropriate individuals." The unauthorized change violates integrity, regardless of whether the balance remains readable.

   Reference: LPI Security Essentials 021.1 Lesson 1 — Understanding Common Security Goals — The CIA Triad

7. 7Which key arrangement characterizes symmetric encryption such as AES?

   1. A. The same secret key encrypts and decrypts the data
   2. B. A public key encrypts and a different private key decrypts
   3. C. The sender's private key encrypts and each reader's private key decrypts
   4. D. A newly generated unrelated key decrypts each encrypted message

   Answer: A

   Explanation: LPI states that symmetric ciphers "rely on the same key for both encryption and decryption." A single shared secret performs both operations. Public/private key pairs describe asymmetric cryptography; unrelated private keys or newly generated unrelated keys cannot substitute for the required shared key.

   Reference: LPI Security Essentials 022.1 Lesson 1 — Symmetric and Asymmetric Encryption — Symmetric Ciphers

8. 8What limitation does an operating-system login password have against physical access to unencrypted storage?

   1. A. It protects only files that were created before the password was set
   2. B. It encrypts user documents but leaves operating-system files readable
   3. C. It controls normal OS login but does not stop access through an alternate OS
   4. D. It binds the disk to its motherboard so another computer cannot read it

   Answer: C

   Explanation: LPI states, "Physical access can also lead to an attacker booting the system from external media, such as a USB drive or CD." A login password controls the installed OS, without itself encrypting the disk or preventing another OS from reading unencrypted files.

   Reference: LPI Security Essentials 023.1 Lesson 1 — Security Implications of Physical Access to a Computer

9. 9A computer has no more specific route for a destination outside its local network. Which configured address normally identifies the next hop?

   1. A. The default gateway's IP address
   2. B. The DNS resolver's IP address
   3. C. The computer's own IP address
   4. D. The subnet's directed broadcast address

   Answer: A

   Explanation: LPI states, "A default router is the device that your computer or other devices use to access external networks." Its configured gateway address identifies the next hop when no more specific route applies. The resolver, source address, and broadcast address do not identify that default router.

   Reference: LPI Security Essentials 024.1 Lesson 1 — Routing: How Data Finds Its Way — Default router

10. 10Which pair combines two different authentication factor categories?

    1. A. A password and a PIN
    2. B. A password and a possessed hardware security token
    3. C. A PIN and an answer to a secret question
    4. D. Two different memorized passwords

    Answer: B

    Explanation: LPI distinguishes "something you know", "something you have", and "something you are". A password is knowledge and a possessed token is possession; passwords, PINs, and secret answers are all knowledge factors.

    Reference: LPI Security Essentials 025.1 Lesson 1 — Concepts in Identity and Authentication — Authentication categories