Device Security: Anti-Malware, Firewalls, Patching, Physical Security, Safe Browsing. IT-FUNDAMENTALS-ITF-CERTIFICATION Practice Questions (Page 2)

Questions 6–10

1. 6application · easy

   A small business owner uses a single Windows laptop for both email and accounting. The laptop has no security software installed. After clicking a link in an unsolicited email, the owner notices the system is running slowly and pop-ups appear. The owner wants to remove the malicious software and prevent future infections. What should the owner do first?

   • AUpdate the web browser to the latest version to stop the pop-ups.
   • BDisconnect from the internet and reinstall the operating system from scratch.
   • CInstall and run a reputable anti-malware program to scan and remove the threat.
   • DEnable the built-in firewall to block the pop-ups from appearing.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What should you do if a website warns that its security certificate is invalid?

   • AProceed to the site because the warning is usually a mistake
   • BDisable the browser's security features to continue
   • CEnter your information anyway because the site may be legitimate
   • DClose the site and avoid entering any personal information
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a server that hosts a website accessible to the public. The server also stores internal documents that should only be accessed by employees. The company wants to protect the internal documents from external access while keeping the website available. What should the company configure?

   • AA physical lock on the server room door.
   • BRegular operating system patches to fix vulnerabilities.
   • CA firewall rule that allows inbound traffic on port 80/443 but blocks access to the internal document folders.
   • DAnti-malware software that scans all incoming web traffic.
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A user receives an email that appears to be from their bank, asking them to verify their account by clicking a link and entering their password. The user is suspicious because the email address is not the bank's official domain. What is the safest action for the user to take?

   • ADelete the email and contact the bank directly using a known phone number or website.
   • BClick the link and enter the password to verify the account.
   • CReply to the email asking for verification of the request.
   • DForward the email to the IT department for analysis.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is it important to apply software updates and patches regularly?

   • ATo change the user interface of the software
   • BTo fix vulnerabilities that could be exploited by attackers
   • CTo remove all temporary files from the system
   • DTo increase the computer's processing speed
   Reveal Solution Discussion Select an answer first