CompTia ITF+ Security Exam Questions
And Answers
Implicitly Deny - - correct answer ✅A principle stating that unless there
is a rule specifying that access should be granted (explicit
authorization), any request for access is denied. This is often seen in
firewall policies.
Least Privilege Principle - - correct answer ✅A principle stating that
users are only granted the permissions needed to perform a job and
nothing more. This reduces risk by limiting the allocation of privileges as
much as possible.
Discretionary Access Control (DAC) - - correct answer ✅An owner
acting as the central authority with full control over who can access a
resource is characteristic of an authorization access model
Role-Based Access Control (RBAC). - - correct answer ✅Grouping users
based on administrative function and assign a template of permissions
is an authorization access model
Single-factor authentication - - correct answer ✅uses only one of the
three factors of authentication: something you know, something you
have, or something you are. In this example, a website requiring a
username, a password, and a PIN number only satisfies one factor
("something you know") and is therefore single-factor authentication.
, CompTia ITF+ Security Exam Questions
And Answers
Multi-factor authentication (MFA) - - correct answer ✅"something you
have," "something you are" and "something you know." Ex: A smart
card is considered "something you have," and the PIN number is
considered "something you know." OR A thumbprint is considered
"something you are," and a PIN number is considered "something you
know." OR An RFID badge is considered "something you have," and a
thumbprint is considered "something you are."
Rule-based access control - - correct answer ✅is a term that can refer
to any sort of access control model where access control policies are
determined by system-enforced rules rather than system users. As such,
Role-Based Access Control (RBAC) and Mandatory Access Control (MAC)
are both examples of rule-based (or non-discretionary) access control.
Mandatory Access Control (MAC) - - correct answer ✅Access that is
based on security clearance levels or compartments is characteristic of
an authorization access model
biometric authentication - - correct answer ✅This device uses
physiological identifiers to prove that a person was genuinely the one
operating an account and that the account was not hijacked such as a
fingerprint, retina, etc.
video surveillance camera - - correct answer ✅This device can prove
that someone was in a particular area but it cannot prove that a person
was genuinely operating a user account
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Cindellera. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.49. You're not tied to anything after your purchase.