CompTIA Network+ 2026 Prep Exam Questions & Answers (11–20)

Question 1

Which of the following is NOT primarily an attack on confidentiality?

TheoryPractice · Accepted Answer

DDoS attack. Answer: DDoS attack A DDoS attack targets availability by attempting to overwhelm a network or service, rendering it unavailable to legitimate users. On-path attacks, phishing, and man-in-the-middle attacks are all aimed at compromising confidentiality.

Question 2

Which of the following is NOT a commonly implemented firewall security best practice?

TheoryPractice · Accepted Answer

Disabling stateful inspection. Answer: Disabling stateful inspection Stateful inspection is a core feature of many firewalls that tracks the state of active connections and helps distinguish between legitimate and illegitimate traffic. Other best practices include enabling logging and alerting, implementing ACLs, and conducting regular vulnerability assessments.

Question 3

What type of attack involves overwhelming a network with excessive traffic causing legitimate users to experience delays or denied access?

TheoryPractice · Accepted Answer

Distributed denial of service. Answer: Distributed denial of service A distributed denial of service (DDoS) attack aims to disrupt normal traffic of a targeted server, service, or network by overwhelming the target or its surrounding infrastructure with a flood of Internet traffic. Such attacks often use multiple compromised computer systems as sources of attack traffic.

Question 4

Which of the following security practices helps in preventing an insider threat by ensuring critical tasks are distributed among multiple people?

TheoryPractice · Accepted Answer

Separation of duties. Answer: Separation of duties Separation of duties ensures that critical tasks, especially those prone to fraud or misuse, are divided among multiple individuals. This makes it harder for any single user to abuse their access. Least privilege grants users only the permissions necessary for their job functions, thereby minimizing the potential damage from compromised accounts. Zero trust is a security model that requires strict identity verification and assumes that threats could be both inside and outside the network. Role-based access controls assign permissions based on user roles, streamlining access management within an organization.

Question 5

Which of the following concepts are associated with ensuring the authenticity and integrity of emails using cryptographic techniques?

TheoryPractice · Accepted Answer

PGP. Answer: PGP Pretty Good Privacy (PGP) uses cryptographic techniques to provide security services such as email authentication and integrity verification. FTP is a protocol for transferring files, IPsec is used for securing internet communication, and SMTP is used for sending email, all of which do not directly provide email authentication or integrity.

Question 6

Which of the following tools can be used for creating and managing cryptographic keys for network security?

TheoryPractice · Accepted Answer

OpenSSL. Answer: OpenSSL OpenSSL is an open-source toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It provides various cryptographic functions including the management of cryptographic keys, certificate generation, and encryption. Wireshark is a network protocol analyzer, not a cryptographic toolkit. Splunk is a security information and event management (SIEM) system. A honeypot is a decoy system designed to detect and distract attackers.

Question 7

Which of the following protocols is utilized to securely exchange keys over an insecure network?

TheoryPractice · Accepted Answer

Internet Key Exchange (IKE). Answer: Internet Key Exchange (IKE) Internet Key Exchange (IKE) is a protocol used to set up a secure and authenticated communication channel over an insecure network by securely exchanging encryption keys. Transport Layer Security (TLS) ensures data privacy between client and server communication. Secure/Multipurpose Internet Mail Extensions (S/MIME) provides a way to send encrypted email messages. RSA (Rivest-Shamir-Adleman) is a public-key cryptosystem used for secure data transmission.

Question 8

Which of the following is NOT a valid ping command?

TheoryPractice · Accepted Answer

ping unknown. Answer: ping unknown ping 127.0.0.1, ping google.com, and ping -t are all valid commands. ping unknown is not a valid command.

Question 9

When fiber optic cables have their glass core fractured, resulting in loss of signal transmission, this is referred to as which of the following?

TheoryPractice · Accepted Answer

Break. Answer: Break When the glass core of a fiber optic cable is fractured, it results in a 'break', disrupting the signal transmission. An attenuation occurs when the signal strength decreases over distance. A reflection happens when light bounces back towards the source, causing loss of signal clarity. A dispersion is when light pulses spread out over time within the fiber, affecting the signal quality.

Question 10

Which command should you use with the ifconfig utility to bring down a network interface in a Linux system?

TheoryPractice · Accepted Answer

down. Answer: down The down command deactivates a network interface on a Linux system using ifconfig. The commands disable, stop, and deactivate are not valid for the ifconfig utility.

CompTIA Network+ 2026 Prep Exam Questions & Answers (11–20)

More CompTIA Network+ 2026 Prep practice questions

Free practice here. Timed mocks when you are ready.