Quiz
Security+ Part 2
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (57)
1A retired employee did not return a company issued mobile device and may have company data on the device. Which of the following portions of the company's mobile device management solutions could be used together to remove the company data from the employee's device?
- AFull device encryption
- BApplication Whitelisting
- CAsset tracking
- DRemote Wiping
- EStorage segmentation
- FInventory Control
2A bank requires tellers to get manager approval when a customer wants to open a new account. A recent audit shows that there have been 4 cases in the previous year where tllers opened accounts without management approval. The bank president thought separation of duties would prevent this from happending. In order to implement a true separation of duties approach the bank could.
- ARequire the use of two different passwords held by two different individuals to open an account
- BAdminister account creation on a role based access control approach
- CRequire all new accounts to be handled by someone else other an a teller since they have different duties
- DAdminister account creation on a rule based access control approach
3A server administrator is investigating a breach and determines that an attacker modified the application log to obfuscate the attack vector. During the lessons learned activity the facilitator asks for a mitigation response to protect the integrity of the logs should a similar attack occur. Which of the following mitigations would be MOST appropriate to fulfill the requirement?
- AHost based-IDS
- BAutomated log analysis
- CEnterprise SIEM
- DReal-time event correlation
4An auditor is conducting a security audit and contacts the service desk at the target organization pretending to be a peer of the service desk employee. After engaging the employee in small talk the auditor reports getting locked out of the organization's webmail system and requests that the employee reset the webmail password. Which of the following principles of social engineering is the auditor attempting to leverage this attempted attack?
- AUrgency
- BConsensus
- CAuthority
- DFamiliarity
5Which of the following remote authentication methods uses a reliable transport layer protocol for communication?
- ARADIUS
- BLDAP
- CTACACS+
- DSMAL
6A server administrator discovers the web farm is using weak ciphers and wants to ensure that only stronger ciphers are accepted. Which of the following ciphers should the administrator implement in the load balancer?
- ASHA-192
- BDES
- CMD5
- DRC4
- ECRC-32
7A rusk assessment team is concerned about hosting data with a could service provider (CSP) which of the following findings would justify this concern?
- AThe CSP utilizes encryption for data at rest and in motion
- BThe CSP takes into account multinational privacy concerns
- CThe financial review indicates the company is a startup
- DSLA state service tickets will be resolved in less than 15 minuets
8A user contacts the help desk after being unable to log into a corporate website. The user can log into the site from another computer in the next office but not from the PC. The user's PC was able to connect earlier in the day. The help desk has user restart the NTP service. Afterwards the user is able to log into the website. The MOST likely reason for the initial failure was that the website was configured to use which of the following authentication mechanisms?
- ASecure LDAP
- BRADIUS
- CNTLMv2
- DKerberos
9Which of the following types of malware, attempts to circumvent malware detection by trying to hide its true location on the infected system?
- AArmored virus
- BRansomware
- CTrojan
- DKeylogger
10A company wants to ensure that the validity of publicly trusted certificates used by its web server can be determined even during an extended internet outage. Which of the following should be implemented?
- ARecovery agent
- BOCSP
- CCRL
- DKey escrow
11In order to establish a connection to a server using secure LDAP, which of the following must be installed on the client?
- AServer public Key
- BSubject alternate names certificate
- CCA anchor of trust
- DCertificate signing request
12Which of the following actions would help prevent SQL injection on a web application?
- ABlocking direct access to the SQL server's management port
- BUsing exception handling to detect buffer overflows
- CValidating client input inside the application's source code
- DRegularly applying patches to the database management system
13Several computers in an organization are running below the normal performance baseline. A security administrator inspects the computers and finds the following pieces of information:
-Several users and uninstall the antivirus software
-Some users have installed unauthorized software
-Several users have installed pirated software
-Some computers have had automatic updating disabled after being deployed
-Users have experienced slow responsiveness when using the internet browser
-Users have complete control over critical system properties- AUsing snapshots to revert unwanted user changes
- BUsing an IPS instead of an antivirus
- CPlacing users in appropriate security groups
- DDisabling unnecessary services
- EUtilizing an application whitelist
- FUtilizing an application blacklist
14Which of the following can be used to control specific commands that can be executed on a network infrastructure device?
- ALDAP
- BKerberos
- CSAML
- DTACACS+
15A classroom utilizes workstations running visualization software for a maximum of one virtual machine per working station. The network setting on the virtual machines are set to bridged. Which of the following describes how the switch in the classroom should be configured to allow for the virtual machines and host workstation to connect to network resources?
- AThe maximum-mac settings of the ports should be set to 0
- BThe maximum-mac settings of the ports should be set to 1
- CThe maximum-mac settings of the ports should be set to 2
- DThe maximum-mac settings of the ports should be set to 3
16A network was down for several hours due to a contractor entering the premises and plugging both ends of a network cable into adjacent network jacks. Which of the following would have prevented the network outage?
- APort Security
- BLoop Protection
- CImplicit deny
- DLog analysis
- EMac Filtering
- FFlood Guards
17A company has noticed a recent increase in machines that have been exploited using vulnerabilities via third party software. Which of the following would BEST help the company reduce the likelihood of vulnerabilities within the software creating future problems?
- APatch management
- BHost-based firewalls
- CAntivirus software
- DWhite-listing applications
18A system administrator is configuring a site-to-site IPSec VPN tunnel. Which of the following should be configured on the VPN concentrator for payload encryption?
- AECDHE
- BSHA256
- CHTTPS
- D3DES
19A large retail vendor provides access to a heating, ventilation, and air conditioning vendor for the purpose of issuing billing statements and receiving payments. A security administrator wants to prevent attackers from using compromised credentials to access the billing system, moving laterally to the point-of-sale (POS) system, and installing malware to skim credit card data. Which of the following is the MOST important security architecture consideration the retail vendor should impose?
- AData encryption
- BNetwork Segregation
- CVirtual private networking
- DApplication Firewalls
20An administrator has configured a new Linux server with the FRP service. Upon verifying that the service was configured correctly, the administrator has several users test the FTP service. Users report that they are able to connect to the FTP service and download their personal files, however they cannot transfer new files to the server. Which of the following will most likely fix the uploading issue for the users?
- ACreate an ACL to allow the FTP service write access to user directories
- BSet the Boolean selinux value to allow FTP home directory uploads
- CReconfigure the ftp daemon to operate without utilizing the PSAV mode
- DConfigure the FTP daemon to utilize PAM authentication pass through user permissions
21Which of the following should identify critical systems and componenets?
- AMOU
- BBPA
- CITCP
- DBCP
22A new help desk employee at a cloud services provider receives a call from a customer. The customer is unable to log into the provider's web application database. The help desk employee is unable to find the customer's user account in the directory services console, but see the customer information in the application database. The application does not appear to have any fields for a password. The customer then remembers the password and is able to log in. The help desk employee still does not see the user account in directory services. Which of the following is MOST likely?
- AA bug has been discovered in the application
- BAn application uses a weak encryption cipher
- Ca federated authentication model is being used
- DThe application uses single sign on
23After correctly configureing a new wireless enabled thermostat to control the temperature of the company's meeting room, Joe, a network administrator determines that the thermostat is not connecting to the internet-based control system. Joe verifies that the thermostat received the expected network parameters and it is associated with the AP. Additionally the other wireless mobile devices connected to the same wireless network are functioning properly. The network administrator verified that the thermostat works when tested at his residence. Which of the following is the MOST likely reason the thermostat is not connecting to the internet?
- AThe company implements a captive portal
- BThe thermostat is using the incorrect encryption algorithm
- CThe WPA2 shared key likely is incorrect
- DThe company's DHCP server scope is full
24During a company wire initiative to harden network security, it is discovered that end users who have laptops cannot be removed from the local administrator group. Which of the following could be used to help mitigate the risk of these machines becoming compromised?
- ASecurity log auditing
- BFirewalls
- CHIPS
- DIDS
25An organization receives an email that provides instruction on how to protect a system from being a target of new malware that is rapidly infecting systems. The incident response team investigates the notification and determine it to invalid and notifies users to disregard the email. Which of the following BEST describes this occurrence?
- APhishing
- BScareware
- CSPAM
- DHoax
26Which of the following is important to reduce risk?
- ASeparation of duties
- BRisk acceptance
- CRisk Transference
- DThreat Modeling
27The security administrator receives a service ticket saying a host based firewall is interfering with the operation of a new application that is being tested in development. The administrator asks for clarification on which ports need to be open. The software vendor replies that it could use up to 20 ports and many customers have disabled the host based firewall After examining the system the administrator sees several ports that are open for database and application servers that only use locally. The vendor continues to recommend disabling the host based firewall.
- AAllow ports used by the application through the network firewall
- BAllow ports used externally through the host firewall
- CFollow the vendor recommendations and disable the host firewall
- DAllow ports used locally through the host firewall
28Which of the following is a best practice when setting up a client to use the LDAPS protocol with a server?
- AThe client should follow LDAP referrals to other secure servers on the network
- BThe client should trust the CA that signed the server's certificace
- CThe client should present a self signed certificate to the server
- DThe client should have access to port 389 on the server
29A chief information security officer (CISO) is providing a presentation to a group of network engineers. In the presentation, the CISO presents information regarding exploit kits. Which of the following might the CISO present?
- AExploit kits are tools capable of taking advantage of multiple CVEs
- BExploit kits are vulnerability scanners used by penetration testers
- CExploit kits are WIFI scanning tools that can find new honeypots
- DExploit kits are a new type of malware that allow attackers to control their computers
30A corporate wireless guest network uses an open SSID with a captive portal to authenticate guest users. Guests can obtain their portal password at the service desk. A security consultant alerts the administrator that the captive portal is easily bypassed, as long as one other wireless guest user is on the network. Which of the following attacks did the security consultant use?
- AARP poisoning
- BDNS cache poisoning
- CMAC spoofing
- DRouge DHCP server
31A security analyst is working on a project team responsible for the integration of an enterprise SSO solution. The SSO solution requires the use of an open standard for the exchange of authentication and authorization across numerous web based applications. Which of the following solutions is most appropriate for the analyst to recommend in this scenario?
- ASAML
- BXTACACS
- CRADIUS
- DTACACS+
- ESecure LDAP
32A company requires that all wireless communication be compliant with the advanced encryption standard (AES). The current wireless infrastructure implements WEP + TKIP. Which of the following wireless protocols should be implemented?
- ACCMP
- B802.1x
- C802.3
- DWPA2
- EAES
33A switch is set up to allow only 2 simultaneous MAC addresses per switch port. An administrator is reviewing a log and determines that a switch port has been deactivated in a conference room after it detected 3 or more MAC addresses on the same port. Which of the following reasons could have caused this port to be disabled?
- AA pc had a NIC replaced and reconnected to the switch
- BAn ip telephone has been plugged in
- CA rouge access point was plugged in
- DAn arp attack was launched from a pc on this port
34A chief information officer (CIO) is concerned about PII contained in the organization's various data warehouse platforms. Since not all of the PII transferred to the organization is required for proper operation of the data warehouse application, the CIO requests the needed PII data be parsed and securely discarded. Which of the following controls would be MOST appropriate in this scenario?
- AExecution of PII data identification assessments
- BImplementation of data sanitization routines
- CEncryption of data-at-rest
- DIntroduction of education programs and awareness training
- ECreation of policies and procedures
35During a recent audit, the auditors cited the company's current virtual machine infrastructure as a concern. The auditors cited the fact that servers containing sensitive customer information reside on the same physical host as numerous virtual machines that follow less stringent security guild lines. Which of the following would be the best choice to implement to address this audit concern while maintain the current infrastructure?
- AMigrate the individual virtual machines that do not contain sensitive data to separate physical machines
- BImplement full disk encryption on all servers that do not contain sensitive customer data
- CMove the virtual machines that contain the sensitive information to a separate host
- DCreate new VLANs and segment the network according to the level of data sensitivity
36An administrator deploys a WPA2 Enterprise wireless network with EAP-PEAP-MSCHAPv2. The deployment is successful and company laptops are able to connect automatically with no user intervention. A year later, the company begins to deploy phones with wireless capabilities. Users report that they are receiving a warning when they attempt to connect to the wireless network from their phones. Which of the following is the MOST likely cause of the warning message?
- AMutual authentication on the phone is not compatible with the wireless network
- BThe phones do not support WPA2 Enterprise wireless networks
- CUser certificates were not deployed to the phones
- DThe phones' built in web browser is not compatible with the wireless network
- ESelf-signed certificates were used on the RADIUS servers
37A group of users from multiple departments are working together on a project and will maintain their digital output in a single location. Which of the following is the BEST method to ensure access is restricted to use by only these users?
- AMandatory access control
- BRule-based access
- CGroup based privileges
- DUser assigned privileges
38A project manager is working with an architectural firm that focuses on physical security. The project manager would like to provide requirements that support the primary goal of safely. Based on the project manager's desires, which of the following controls would the BEST to incorporate into the facility design?
- ABiometrics
- BEscape routes
- CReinforcements
- DAccess controls
39A company wishes to prevent unauthorized employee access to the data center. Which of the following is the MOST secure way to meet this goal?
- AUse Motion detectors to signal security whenever anyone entered the center
- BMount CCTV cameras inside the center to monitor people as they enter
- CInstall mantraps at every entrance to the data center in conjunction with their badges
- DPlace biometric readers at the entrances to verify employees' identity
40A technician has been assigned a service request to investigate a potential vulnerability in the organization's extranet platform. Once the technician performs initial investigative measures, it is determined that the potential vulnerability was a false-alarm. Which of the following actions should the technician take in regards to the findings?
- AWrite up the findings and disable the vulnerability rule in future vulnerability scans
- BRefer the issue to the server administrator for resolution
- CMark the finding as a false-negative and close the service request
- DDocument the results and report the findings according to the incident response plan
41A company hosts a web server that requires entropy in encryption initialization and authentication. To meet this goal, the company would like to select a block cipher mode of operation that allows an arbitrary length IV and supports authenticated encryption. Which of the following would meet these objectives?
- ACFB
- BGCM
- CECB
- DCBC
42An organization currently uses FTP for the transfer of large files, due to recent security enhancements, is now required to use a secure method of file transfer and is testing both SFTP and FTPS as alternatives. Which of the following ports should be opened on the firewall in order to test the two alternatives? (Select Two)
- ATCP 22
- BTCP 25
- CTCP 69
- DUDP 161
- ETCP 990
- FTCP 3380
43Users in an organization are experiencing when attempting to access certain websites. The users report that when they type in a legitimate URL, different boxes appear on the screen, making it difficult to access the legitimate sites. Which of the following would best mitigate this issue?
- APop-up blockers
- BURL filtering
- CAntivirus
- DAnti-spam
44The chief security officer (CSO) has reported a rise in data loss but no break-ins have occurred. By doing which of the following would the CSO MOST likely to reduce the number of incidents?
- AImplement protected distribution
- BEmploy additional firewalls
- CConduct security awareness training
- DInstall perimeter barricades
45The chief information officer (CIO) of a major company intends to increase employee connectivity and productivity by issuing employees mobile devices with access to their enterprise email, calendar, and contacts. The solution the CIO intends to use requires a PKI that automates the enrollment of mobile device certificates. Which of the following, when implemented and configured securely, will meet the CIO's requirement?
- AOCSP
- BSCEP
- CSAML
- DOSI
46A project team is developing requirements of the new version of a web application used by internal and external users. The application already features username and password requirements for login, but the organization is required to implement multifactor authentication to meet regulatory requirements. Which of the following would be added requirements will satisfy the regulatory requirement? (Select THREE.)
- ADigital certificate
- BPersonalized URL
- CIdentity verification questions
- DKeystroke dynamics
- ETokenized mobile device
- FTime-of-day restrictions
- GIncreased password complexity
- HRule-based access control
47Jo an employee reports to the security manager that several files in a research and development folder that only Joe has access to have been improperly modified. The modified data on the files in recent and the modified by account is Joe's. The permissions on the folder have not been changed, and there is no evidence of malware on the server hosting the folder or on Joe's workstation. Several failed login attempts to Joe's account were discovered in the security log of the LDAP server. Given this scenario, which of the following should the security manager implement to prevent this in the future?
- AGeneric Account Prohibition
- BAccount Lockout
- CPassword Complexity
- DUser Access Reviews
48A network manager needs a cost-effective solution to allow for the restoration of information with a RPO of 24 hours. The disaster recovery plan also requires that backups occur within a restricted timeframe during the week and be take offsite weekly. Which of the following should the manager choose to BEST address these requirements?
- ADaily incremental backup to tape
- BDisk-to-disk hourly server snapshots
- CReplication of the environment at a hot site
- DDaily differential backup to tape
- EDaily full backup to tape
49A security analyst has been investigating an incident involving the corporate website. Upon investigation, it has been determined that users visiting the corporate website would be automatically redirected to a, malicious site. Further investigation on the corporate website has revealed that the home page on the corporate website has been altered to include an unauthorized item. Which of the following would explain why users are being redirected to the malicious site?
- ADNS poisoning
- BXSS
- CIframe
- DSession hijacking
50Which of the following forms of software testing can best be performed with no knowledge of how a system is internally structured or functions? (Select Two.)
- ABoundary testing
- BWhite box
- CFuzzing
- DBlack box
- EGrey Box
51a company is deploying an new video conferencing system to be used by the executive team for board meetings. The security engineer has been asked to choose the strongest available asymmetric cipher to be used for encryption of board papers, and chose the strongest available stream cipher to be configured for video streaming. Which of the following ciphers should be chosen? (Select two)
- ARSA
- BRC4
- C3DES
- DHMAC
- ESHA-256
52A user, Ann, has been issued a smart card and is having problems opening old encrypted email. Ann published her certificates to the local windows store and to the global address list. Which of the following would still need to be performed?
- ASetup the email security with her new certificates
- BRecover her old private certificate
- CReinstall her previous public certificate
- DVerify the correct email address is associated with her certificate
53In an effort to test the effectiveness of an organization's security awareness training, a penetrator tester crafted an email and sent it to all of the employees to see how many of them clicked on the enclosed links. Which of the following is being tested?
- AHow many employees are susceptible to a SPAM attack
- BHow many employees are susceptible to a cross-site scripting attack
- CHow many employees are susceptible to a phishing attack
- DHow many employees are susceptible to a vishing attack
54Joe noticed that there is a larger than normal amount of network load on the printer VLAN of his organization, causing users to have to wait a long time for a print job. Upon investigation Joe discovers that printers were ordered and added to the network without his knowledge. Which of the following will reduce the risk of this occurring again in the future?
- ALog analysis
- BLoop protection
- CAccess control list
- DRule-based management
55Which of the following technologies when applied to android and iOS environments, can an organization use to add security restrictions and encryption to existing mobile applications? (Select Two)
- AMobile device management
- BContainerization
- CApplication whitelisting
- DApplication wrapping
- EMobile application store
56A security administrator is using a software program to test the security of a wireless access point. After running the program for a few hours, the access point sends the wireless secret key back to the software program.
Which of the following attacks is this an example of?- AWPS
- BIV
- CDeauth
- DReplay
57Devices on the SCADA network communicate exclusively at Layer 2. Which of the following should be used to prevent unauthorized systems using ARP-based attacks to compromise the SCADA network?
- AApplication firewall
- BIPSec
- CHardware encryption
- DVLANS
Informationen
- Beschreibung
- Security+ Part 2
- Autor
- Mike Wen
- Sprache
- English
- Aufrufe
- 149
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz