Practice CSFPC Exam Online

Question 1

Which principle states that controls need to define and enable operations that can positively be identified as being in accordance with a security policy and reject all others ?

A :

Penestration testing

B :

Complete Mediation

C : Open Design

D : Fail Safe Defaults

Answer: D

Question 2

Criminals exploit vulnerabilities in organizations websites they disagree with and use them to change the home page of the website to a politically charged one to spread their message. This hacktivism type is called

A : Denial of services

B :

Low Orbit Ion Cannon (LOIC) Program

C : Netstrickes

D :

Web Defacements

Answer: D

Question 3

One of the main benefits of analyzing the malware structure that may include the libraries and toolkits and coding techniques, we may find some important data that is possibly helpful to attribution.

A : Which means being able to identify the likely author and operator

B : To understand what damage can be done due to the malware program

C : To be able to know the amount of data that has been lost or corrupted

D : Both B and C are correct, and A is incorrect

Answer: A

Question 4

The Domain NAme System translates domain names, significantly bits of text to IP addresses needed for network communications . The DNS protocol is also a regular DDOs enhancer as it is likely for an attacker to impersonate the IP address of a target in a DNS request , this triggering the DNS server to send unwanted traffic to the target. What other protocols are prone to amplification.

A :

TCP /IP

B : NTP Network Time Protocol

C : S7 Signifing protocol

D : ARP

Answer: B

Question 5

What is the main problem with Domain Name System (DNS)

A : Confidentiality

B : Authorization

C : Integrity

D : Authentication

Answer: D

Name:	Cyber Security Foundation
Exam Code:	CSFPC
Certification:	Cyber Security Foundation
Vendor:	CertiProf
Total Questions:	110
Last Updated:	Oct 01, 2026

CertiProf CSFPC Answers