Quiz
Security+ Test
Dieses Quiz enthält Fragetypen, die sich im gewohnten Player öffnen.
Fragen in diesem Quiz (133)
1Joe , the security administrator, sees this in a vulnerability scan report.
"The server 10.1.2.232 is running Apache 2.2.20 which may be vulnerable to a mod_cgi exploit."
Joe verifies that the mod_cgi module is not enable on 10.1.2.232. This message is an example:- AA threat
- BA risk
- CA false negative
- DA false positive
2A company hires a consulting firm to crawl its Active Directory network with a non-domain account looking for unpatched systems. Actively taking control of systems is out of scope, as is the creation of new administrator accounts. For which of the following is the company hiring the consulting firm?
- AVulnerability scanning
- BPenetration testing
- CApplication fuzzing
- DUser permission auditing
3The administrator installs database software to encrypt each field as it is written to disk.
Which of the following describes the encrypted data?- AIn-transit
- BIn-use
- CEmbedded
- DAt-rest
4Given the log output:
Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user:msmith][Source: 10.0.12.45]
[localport:23] at 00:15:23:431 CET Sun Mar 15 2015.
Which of the following should the network administrator do to protect data security?- AConfigure port security for logons
- BDisable tenet and enable SSH
- CConfigure an AAA server
- DDisable password and enable RSA authentication
5Multiple employees receive an email with a malicious attachment that begins to encrypt their hard drives and mapped shares on their devices when it is opened. The network and security teams perform the following actions:
- Shutdown all network shares
- Run an email search identifying all employees who received the malicious message.
- Reimage all devices belonging to users who opened the attachment.
Next, the teams want to re-enable the network shares. Which of the following BEST describes this phase of the incident response process?- AEradication
- BContainment
- CRecovery
- DLessons learned
6An organization has hired a penetration tester to test the security of its ten web servers. The penetration tester is able to gain root/administrative access in several servers by exploiting vulnerabilities associated with the implementation of SMTP, POP, DNS, FTP, Telnet, and IMAP.
Which of the following recommendations should the penetration tester provide to the organization to better protect their web services in the future?- AUse a honeypot
- BDisable unnecessary service
- CImplement transport layer security
- DIncrease application event logging
7A business has recently deployed laptops to all sales employees. The laptops will be used primarily from home offices and while traveling, and a high amount of wireless mobile use is expected.
To protect the laptops while connected to untrusted wireless networks, which of the following would be the BEST method for reducing the risk of having the laptops compromised?- AMAC filtering
- BVirtualization
- COS hardening
- DApplication white-listing
8During a monthly vulnerability scan, a server was flagged for being vulnerable to an Apache Struts exploit. Upon further investigation, the developer responsible for the server informs the security team that Apache Struts is not installed on the server. Which of the following BEST describes how the security team should reach to this incident?
- AThe finding is a false positive and can be disregarded
- BThe Struts module needs to be hardened on the server
- CThe Apache software on the server needs to be patched and updated
- DThe server has been compromised by malware and needs to be quarantined
9A network technician is setting up a segmented network that will utilize a separate ISP to provide wireless access to the public area for a company. Which of the following wireless security methods should the technician implement to provide basic accountability for access to the public network?
- APre-shared key
- BEnterprise
- CWi-Fi Protected Setup
- DCaptive portal
10A penetration tester finds that a company's login credentials for the email client were being sent in clear text. Which of the following should be done to provide encrypted logins to the email server?
- AEnable IPSec and configure SMTP
- BEnable SSH and LDAP credentials
- CEnable MIME services and POP3
- DEnable an SSL certificate for IMAP services
11A security analyst captures forensic evidence from a potentially compromised system for further investigation. The evidence is documented and securely stored to FIRST:
- AMaintain the chain of custody
- BPreserve the data
- CObtain a legal hold
- DRecover data at a later time
12Which of the following BEST describes an attack where communications between two parties are intercepted and forwarded to each party with neither party being aware of the interception and potential modification to the communications?
- ASpear phishing
- BMan-in-the-middle
- CURL hijacking
- DTransitive access
13Which of the following would verify that a threat does exist and security controls can easily be bypassed without actively testing an application?
- AProtocol analyzer
- BVulnerability scan
- CPenetration test
- DPort scanner
14Which of the following BEST describes an important security advantage yielded by implementing vendor diversity?
- ASustainability
- BHomogeneity
- CResiliency
- DConfigurability
15Ann, a security administrator has been instructed to perform fuzz-based testing on the company's applications.
Which of the following best describes what she will do?- AEnter random or individual data into the application in an attempt to cause it to fault
- BWork with the developers to eliminate horizontal privilege escalation opportunities
- CTest the applications for the existence of built-in backdoors left by the developers
- DHash the application to verify it won't cause a false positive on the HIPS
16A security administrator determined that users within the company are installing unapproved software. Company policy dictates that only certain applications may be installed or ran on the user's computers without exception.
Which of the following should the administrator do to prevent all unapproved software from running on the user's computer?- ADeploy antivirus software and configure it to detect and remove pirated software
- BConfigure the firewall to prevent the downloading of executable files
- CCreate an application whitelist and use OS controls to enforce it
- DPrevent users from running as administrator so they cannot install software
17A datacenter manager has been asked to prioritize critical system recovery priorities.
Which of the following is the MOST critical for immediate recovery?- ACommunications software
- BOperating system software
- CWeekly summary reports to management
- DFinancial and production software
18When considering a third-party cloud service provider, which of the following criteria would be the BEST to include in the security assessment process? (Select two.)
- AUse of performance analytics
- BAdherence to regulatory compliance
- CData retention policies
- DSize of the corporation
- EBreadth of applications support
19Despite having implemented password policies, users continue to set the same weak passwords. Which of the following technical controls would help prevent these policy violations? (Select two.)
- APassword expiration
- BPassword length
- CPassword complexity
- DPassword history
- EPassword lockout
20Which of the following is the LEAST secure hashing algorithm?
- ASHA1
- BRIPEMD
- CMD5
- DDES
21An auditor has identified an access control system that can incorrectly accept an access attempt from an unauthorized user. Which of the following authentication systems has the auditor reviewed?
- APassword-based
- BBiometric-based
- CLocation-based
- DCertificate-based
22A network administrator wants to ensure that users do not connect any unauthorized devices to the company network. Each desk needs to connect a VoIP phone and computer.
Which of the following is the bEST way to accomplish this?- AEnforce authentication for network devices
- BConfigure the phones on one VLAN, and computers on another
- CEnable and configure port channels
- DMake users sign an Acceptable use Agreement
23Which of the following specifically describes the exploitation of an interactive process to access otherwise restricted areas of the OS?
- APrivilege escalation
- BPivoting
- CProcess affinity
- DBuffer overflow
24Which of the following techniques can be bypass a user or computer's web browser privacy settings? (Select two.)
- ASQL injection
- BSession hijacking
- CCross-site scripting
- DLocally shared objects
- ELDAP injection
25Which of the following strategies should a systems architect use to minimize availability risks due to insufficient storage capacity?
- AHigh availabilty
- BScalability
- CDistributive allocation
- DLoad balancing
26An application developer is designing an application involving secure transports from one service to another that will pass over port 80 for a request.
Which of the following secure protocols is the developer MOST likely to use?- AFTPS
- BSFTP
- CSSL
- DLDAPS
- ESSH
27An organization wishes to provide better security for its name resolution services. Which of the following technologies BEST supports the deployment of DNSSEC at the organization?
- ALDAP
- BTPM
- CTLS
- DSSL
- EPKI
28A system administrator wants to provide balance between the security of a wireless network and usability. The administrator is concerned with wireless encryption compatibility of older devices used by some employees. Which of the following would provide strong security and backward compatibility when accessing the wireless network?
- AOpen wireless network and SSL VPN
- BWPA using a preshared key
- CWPA2 using a RADIUS back-end for 802.1x authentication
- DWEP with a 40-bit key
29A network technician is trying to determing the source of an ongoing network based attack.
Which of the following should the technician use to view IPv4 packet data on a particular internal network segment?- AProxy
- BProtocol analyzer
- CSwitch
- DFIrewall
30Which of the following should identify critical systems and components?
- AMOU
- BBPA
- CITCP
- DBCP
31A company wants to host a publicly available server that performs the following functions:
- Evaluates MX record lookup
- Can perform authenticated requests for A and AAA records
- Uses RRSIG
Which of the following should the company use to fulfill the above requirements?- ADNSSEC
- BSFTP
- Cnslookup
- Ddig
- ELDAPS
32Which of the following allows an application to securely authenticate a user by receiving credentials from a web domain?
- ATACACS+
- BRADIUS
- CKerberos
- DSAML
33A technician has installed new vulnerability scanner software on a server that is joined to the company domain. The vulnerability scanner is able to provide visibility over the patch posture of all company's clients.
Which of the following is being used?- AGray box vulnerability testing
- BPassive scan
- CCredentialed scan
- DBypassing security controls
34A supervisor in your organization was demoted on Friday afternoon. The supervisor had the ability to modify the contents of a confidential database, as well as other managerial permissions. On Monday morning, the database administrator reported that log files indicated that several records were missing from the database.
Which of the following risk mitigation strategies should have been implemented when the supervisor was demoted?- AIncident management
- BRoutine auditing
- CIT governance
- DMonthly user rights reviews
35A security technician would like to obscure sensitive data within a file so that it can be transferred without cause suspicion.
Which of the following technologies would BEST be suited to accomplish this?- ATransport Encryption
- BStream Encryption
- CDigital Signature
- DSteganography
36A database backup schedule consists of weekly full backups performed on Saturday at 12:00am and daily differential backups also performed at 12:00am the database is restored on Tuesday afternoon, which of the following is the number of individual backups that would need to be applied to complete the database recovery?
- A1
- B2
- C3
- D4
37The security administrator has noticed cars parking just outside the building fence line.
Which of the following security measures can the administrator use to help protect the company's Wi-Fi network against war driving? (Select Two.)- ACreate a honeynet
- BReduce beacon rate
- CAdd false SSIDs
- DChange antenna placement
- EAdjust power level controls
- FImplement a warning banner
38Refer to the following code:
Which of the following vulnerabilities would occur if this is executed?
- APage exeption
- BPointer deference
- CNullPointerException
- DMissing null check
39A botnet has hit a popular website with a massive number of GRE-encapsulated packets to perform a DDoS attack. News outlets discover a certain type of refrigerator was exploited and used to send outbound packets to the website that crashed. To which of the following categories does the refrigerator belong?
- ASoC
- BICS
- CIoT
- DMFD
40An attacker wearing a building maintenance uniform approached a company's receptionist asking for access to a secure area. The receptionist asks for identification, a building access badge and checks the company's approved maintenance personnel prior to granting access to the secure area.
The controls used by the receptionist are in place to prevent which of the following types of attacks?- ATailgating
- BShoulder suffering
- CImpersonation
- DHoax
41Study this simulation!!
- AStudy!!
- BStudy!!!
42Which of the following is the proper way to qualify the total monetary damage resulting from an exploited vulnerability?
- ACalculate the ALE
- BCalculate the ARO
- CCalculate the MTBF
- DCalculate the TCO
43A chief Financial Officer (CFO) has asked the Chief Information Officer (CISO) to provide responses to a recent audit report detailing deficiencies in the organization security controls. The CFO would like to know ways in which the organization can improve its authorization controls.
Given the request by the CFO, which of the following controls should the CISO focus on in the report? (Select Three.)- APassword complexity policies
- BHardware tokens
- CBiometric systems
- DRole-based permissions
- EOne time passwords
- FSeparation of duties
- GMultifactor authentication
- HSingle sign-on
- ILease privilege
44A system administrator is reviewing the following information from a compromised server.
Given the above information, which of the following processes was MOST likely exploited via remote buffer overflow attack?
- AApache
- BLSASS
- CMySQL
- DTFTP
45Which of the following cryptographic attacks would salting of passwords render ineffective?
- ABrute force
- BDictionary
- CRainbow tables
- DBirthday
46Which of the following technologies would be MOST appropriate to utilize when testing a new software patch before a company-wide deployment?
- ACloud computing
- BVirtualization
- CRedudancy
- DApplication control
47A company researched the root cause of a recent vulnerability in its software. It was determined that the vulnerability was the result of two updates made in the latest release. Each update alone would not have resulted in the vulnerability.
In order to prevent similar situations in the future, the company should improve which of the following?- AChange management protections
- BJob rotation polocies
- CIncident response management
- DLeast privilege access controls
48A Security Officer on a military base needs to encrypt several smart phones that will be going into the field.
Which of the following encryption solutions should be deployed in this situation?- AElliptic curve
- BOne-time pad
- C3DES
- DAES-256
49A company is currently using the following configuration:
- IAS server with certificate-based EAP-PEAP and MSCHAP
- Unencrypted authentication via PAP
A security administrator needs to configure a new wireless setup with the following configurationsL
- PAP authentication method
- PEAP and EAP provide two-factor authentication.
Which of the following forms of authentication are being used? (Select Two.)- APAP
- BPEAP
- CMSCHAP
- DPEAP-MSCHAP
- EEAP
- FEAP-PEAP
50In an effort to reduce data storage requirements, some company devices to hash every file and eliminate duplicates. The data processing routines are time sensitive so the hashing algorithm is fast and supported on a wide range of systems.
Which of the following algorithms is BEST suited for this purpose?- AMD5
- BSHA
- CRIPEMD
- DAES
51Phishing emails frequently take advantage of high-profile catastrophes reported in the news.
Which of the following principles BEST describes the weakness being exploited?- AIntimidation
- BScarcity
- CAuthority
- DSocial proof
52Which of the following types of keys is found in a key escrow?
- APublic
- BPrivate
- CShared
- DSession
53During a recent audit, it was discovered that several user accounts belonging to former employees were still active and had valid VPN permissions.
Which of the following would help reduce the amount of risk the organization in this situation in the future?- ATime-of-day restrictions
- BUser access reviews
- CGroup-based privileges
- DChange management policies
54Which of the following works by implanting software on systems but delays execution unit a specific set of conditions is met?
- ALogic bomb
- BTrojan
- CScareware
- DRansomware
55After a merger between two companies a security analyst has been asked to ensure that the organization's systems are secured against infiltration by any former employees that were terminated during the transition.
Which of the following actions are MOST appropriate to harden applications against infiltration by former employees> (Select Two.)- AMonitor VPN client access
- BReduce failed login out settings
- CDevelop and implement updated access control polocies
- DReview and address invalid login attempts
- EIncreased password complexity requirements
- FAccess and eliminate inactive accounts
56After user reports slow computer performance, a system administrator detects a suspicious file, which was installed as part of a freeware software package. The systems administrator reviews the output below:
Based on the above information, which of the following types of malware was installed on the user's computer?
- ARAT
- BKeylogger
- CSpyware
- DWorm
- EBot
57Company policy requires the use of passphrases instead of passwords.
Which of the following technical controls MUST be in place in order to promote the use of passphrases.- AReuse
- BLength
- CHistory
- DComplexity
58A technician must configure a firewall to block external DNS traffic from entering a network.
Which of the following ports should they block on the firewall?- A53
- B110
- C143
- D443
59Which of the following is the summary of loss for a given year?
- AMTBF
- BALE
- CSLA
- DARO
60A security administrator is reviewing the following network capture:
Which of the following malware is MOST likely to generate the above information?
- AKeylogger
- BRansomware
- CLogic bomb
- DAdware
61A computer on a computer network has infected with a zero-day exploit after an employee accidentally opened an email that contained malicious content. The employee recognized the email as malicious and was attempting to delete it, but accidentally opened it.
Which of the following should be done to prevent this scenario from occurring again in the future?- AInstall host-based firewalls on all computers that have an email client installed
- BSet the email program default to open messages in plain text
- CInstall end-point protection on all computers that access web email
- DCreate new email spam filters to delete all messages from that sender
62A company would like to prevent the use of a known set of applications from being used on company computers.
Which of the following should the security administrator implement?- AWhitelisting
- BAnti-malware
- CApplication hardening
- DBlacklisting
- EDisable removable media
63Two users need to securely share encrypted files via email. Company policy prohibits users from sharing credentials or exchanging encryption keys. Which of the following can be implemented to enable users to share encrypted data while abiding by company policies?
- AKey escrow
- BDigital signatures
- CPKI
- DHashing
64Malicious traffic from an internal network has been detected on an unauthorized port on an application server. Which of the following network-based security controls should the engineer consider implementing?
- AACLs
- BHIPS
- CNAT
- DMAC filtering
65A penetration tester is crawling a target website that is available to the public. Which of the following represents the actions the penetration tester is performing?
- AURL hijacking
- BReconnaissance
- CWhite box testing
- DEscalation of privilege
66See photo:
- A
- B
- C
- D
- A
67An employee receives an email, which appears to be from the Chief Executive Officer (CEO), asking for a report of security credentials for all users.
Which of the following types of attack is MOST likely occurring?- APolicy violation
- BSocial engineering
- CWhaling
- DSpear phishing
68A network administrator at a small office wants to simplify the configuration of mobile clients connecting to an encrypted wireless network. Which of the following should be implemented if the administrator does not want to provide the wireless password or the certificate to the employees?
- AWPS
- B802.1x
- CWPA2-PSK
- DTKIP
69An external contractor, who has not been given information about the software or network architecture, is conducting a penetration test. Which of the following BEST describes the test being performed?
- ABlack box
- BWhite box
- CPassive reconnaissance
- DVulnerability scan
70After surfing the internet, Joe, a user, woke up to find all his files were corrupted. His wallpaper was replaced by a message stating the files were encrypted he needed to transfer money to a foreign country to recover them. Joe is a victim of:
- AA keylogger
- BSpyware
- CRansomware
- DA logic bomb
71: 349
Which of the following penetration testing concepts is being used when an attacker uses public internet databases to enumerate and learn more about a target?- AReconnaissance
- BInitial exploitation
- CPivoting
- DVulnerability scanning
72The help desk is receiving numerous password change alerts from users in the accounting department. These alerts occur multiple times on the same day for each of the affected users' accounts.
Which of the following controls should be implemented to curtail this activity?- APassword reuse
- BPassword complexity
- CPassword history
- DPassword minumum age
73A Chief Executive Office (CEO) suspects someone in the lab testing environment is stealing confidential information after working hours when no one else is around. Which of the following actions can help to prevent this specific threat?
- AImplement time-of-day restrictions
- BAudit file access times
- CSecretly install a hidden surveillance camera
- DRequire swipe-card access to enter the lab
74A system administrator wants to provide for and enforce wireless access accountability during events where external speakers are invited to make presentations to a mixed audience of employees and non-employees. Which of the following should the administrator implement?
- AShared accounts
- BPreshared passwords
- CLeast privilege
- DSponsored guest
75See photo:
- ARow 1
- BRow 2
- CRow 3
- DRow 4
76A network administrator is attempting to troubleshoot an issue regarding certificates on a secure website. During the troubleshooting process, the network administrator notices that the web gateway proxy on the local network has signed all of the certificates on the local machine.
Which of the following describes the type of attack the proxy has been legitimately programmed to perform?- ATransitive access
- BSpoofing
- CMan-in-the-middle
- DReplay
77A development team has adopted a new approach to projects in which feedback is iterative and multiple iterations of deployments are provided within an application's full life cycle. Which of the following software development methodologies is the development team using?
- AWaterfall
- BAgile
- CRapid
- DExtreme
78A security administrator has been tasked with improving the overall security posture related to desktop machines on the network. An auditor has recently that several machines with confidential information displayed in the screens are left unattended during the course of the day.
Which of the following could the security administrator implement to reduce the risk associated with the finding?- AImplement a clean desk policy
- BSecurity training to prevent shoulder surfing
- CEnable group policy based screensaver timeouts
- DInstall privacy screens on monitors
79A system administrator wants to protect data stored on mobile devices that are used to scan and record assets in a warehouse. The control must automatically destroy the secure container of mobile devices if they leave the warehouse. Which of the following should the administrator implement? (Select two.)
- AGeofencing
- BRemote wipe
- CNear-field communication
- DPush notification services
- EContainerization
80Which of the following is the GREATEST risk to a company by allowing employees to physically bring their personal smartphones to work?
- ATaking pictures of proprietary information and equipment in restricted areas
- BInstalling soft token software to connect to the company's wireless network
- CCompany cannot automate patch management on personally-owned devices
- DIncreases the attack surface by having more target devices on the company's campus
81A company is investigating a data compromise where data exfiltration occurred. Prior to the investigation, the supervisor terminates an employee as a result of the suspected data loss. During the investigation, the supervisor is absent for the interview, and little evidence can be provided from the role-based authentication system in use by the company.
The situation can be identified for future mitigation as which of the following?- AJob rotation
- BLog failure
- CLack of training
- DInsider threat
82An audit has revealed that database administrator are also responsible for auditing database changes and backup logs.
Which of the following access control methodologies would BEST mitigate this concern?- ATime of day restrictions
- BPrinciple of least privilege
- CRole-based access control
- DSeparation of duties
83A security analyst is investigating a security breach. Upon inspection of the audit an access logs, the analyst notices the host was accessed and the /etc/passwd file was modified with a new entry for username "gotcha" and user ID of 0. Which of the following are the MOST likely attack vector and tool the analyst should use to determine if the attack is still ongoing? (Choose two.)
- ALogic bomb
- BBackdoor
- CKeylogger
- DNetstat
- ETracert
- FPing
84Which of the following can be provided to an AAA system for the identification phase?
- AUsername
- BPermissions
- COne-time token
- DPrivate certificate
85An attacker compromises a public CA and issues unauthorized X.509 certificates for Company.com. In the future, Company.com wants to mitigate the impact of similar incidents. Which of the following would assist Company.com with its goal?
- ACertificate pinning
- BCertificate stapling
- CCertificate chaining
- DCertificate with extended validation
86See photo:
- AImplement separation of duties for the payroll department
- BImplement a DLP solution on the payroll and human resources servers
- CImplement rule-based access controls on the human resources server
- DImplement regular permission auditing and reviews
87Which of the following differentiates a collision attack from a rainbow table attack?
- AA rainbow table attack performs a hash lookup
- BA rainbow table attack uses the hash as a password
- CIn a collision attack, the hash and the input data are equivalent
- DIn a collision attack, the same input results in different hashes
88During a recent audit, it was discovered that many services and desktops were missing security patches.
Which of the following BEST describes the assessment that was performed to discover the issue?- ANetwork mapping
- BVulnerability scan
- CPort scan
- DProtocol analysis
89A software developer wants to ensure that the application is verifying that a key is valid before establishing SSL connections with random remote hosts on the internet.
Which of the following should be used in the code? (Select two.)- AEscrowed keys
- BSSL symmetric encryption key
- CSoftware code private key
- DRemote server public key
- EOCSP
90A user clicked an email link that led to a website than infected the workstation with a virus. The virus encrypted all the network shares to which the user had access. The virus was not deleted or blocked by the company's email filter, website filter, or antivirus. Which of the following describes what occurred?
- AThe user's account was over-privileged
- BImproper error handling triggered a false negative in all three controls
- CThe email originated from a private email server with no malware protection
- DThe virus was a zero-day attack
91A company wants to ensure that the validity of publicly trusted certificates used by its web server can be determined even during an extended internet outrage.
Which of the following should be implemented?- ARecovery agent
- BOcsp
- CCrl
- DKey escrow
92A security analyst is diagnosing an incident in which a system was compromised from an external IP address. The socket identified on the firewall was traced to 107.46.130.0.6666. Which of the following should the security analyst do to determine if the compromised system still has an active connection?
- ATracert
- BNetstat
- CPing
- DNslookup
93Anne, the Chief Executive Officer (CEO), has reported that she is getting multiple calls from someone claiming to be from the help desk. the caller is asking to verify her network authentication credentials because her computer is broadcasting across the network.
This is MOST likely which of the following types of attacks?- AVishing
- BImpersonation
- CSpim
- DScareware
94Multiple organizations operating in the same vertical want to provide seamless access for their employees as they visit the other organizations. Which of the following should be implemented if all the organizations use the native 802.1x client on their mobile devices?
- AShibboleth
- BRADIUS federation
- CSAML
- DOAuth
- EOpenID connect
95A technician needs to implement a system which will properly authenticate users by their username and password only when the users are logging in from a computer in the office building. Any attempt to authenticate from other than the office building should be rejected.
Which of the following MUST the technician implement?- ADual factor authentication
- BTransitive authentication
- CSingle factor authentication
- DBiometric authentication
96The Chief Executive Officer (CEO) of a major defense contracting company a traveling overseas for a conference. The CEO will be taking a laptop. Which of the following should the security administrator implement to ensure confidentiality of the data if the laptop were to be stolen or lost during the trip?
- ARemote wipe
- BFull device encryption
- CBIOS password
- DGPS tracking
97See photo:
Which of the following should be the NEXT step to determine if there is an unauthorized user on the network?
- AApply MAC filtering and see if the router drops any of the systems
- BPhysically check each of the authorized systems to determine if they are logged onto the netwrok
- CDeny the "unknown" host because the hostname is not known and MAC filtering is not applied to this host
- DConduct a ping sweep of each of the authorized systems and see if an echo response is receieved
98To reduce disk consumption, an organization's legal department has recently approved a new policy setting the data retention period for sent email at six months. Which of the following is the BEST way to ensure this goal is met?
- ACreate a daily encrypted backup of the relevant emails
- BConfigure the email server to delete the relevant emails
- CMigrate the relevant emails into an "Archived" folder
- DImplement automatic disk compression on email servers
99A website administrator has received an alert from an application designed to check the integrity of the company's website. The alert indicated that the hash value for a particular MPEG file has changed. Upon further investigation, the media appears to be the same as it was before the alert.
Which of the following methods has MOST likely been used?- ACryptography
- BTime of check/time of use
- CMan in the middle
- DCovert timing
- ESteganography
100A system administrator wants to implement an internal communication system that will allow employees to send encrypted messages to each other. The system must also support non-repudiation. Which of the following implements all these requirements?
- ABcrypt
- BBlowfish
- CPGP
- DSHA
101A company is developing a new system that will unlock a computer automatically when an authorized user sits in front of it, and then lock the computer when the user leaves. The user does not have to perform any action for this process to occur. Which of the following technologies provides this capability?
- AFacial recognition
- BFingerprint scanner
- CMotion detector
- DSmart cards
102The data backup window has expanded into the morning hours and has begun to affect production users. The main bottleneck in the process is the time it takes to replicate the backups to separate severs at the offsite data center.
Which of the following users of deduplication could be implemented to reduce the backup window?- AImplement deduplication at the network level between the two locations
- BImplement deduplication on the storage array to reduce the amount of drive space needed
- CImplement deduplication on the server storage to reduce the data backed up
- DImplement deduplication on both the local and remote severs
103An analyst wants to implement a more secure wireless authentication for office access points. Which of the following technologies allows for encrypted authentication of wireless clients over TLS?
- APEAP
- BEAP
- CWPA2
- DRADIUS
104An organization needs to implement a large PKI. Network engineers are concerned that repeated transmission of the OCSP will impact network performance. Which of the following should be security analyst recommend is lieu of an OCSP?
- ACSR
- BCRL
- CCA
- DOID
105An attacker discovers a new vulnerability in an enterprise application. The attacker takes advantage of the vulnerability by developing new malware. After installing the malware, the attacker is provided with access to the infected machine.
Which of the following is being described?- AZero-day exploit
- BRemote code execution
- CSession hijacking
- DCommand injection
106A company's user lockout policy is enabled after five unsuccessful login attempts. The help desk notices a user is repeatedly locked out over the course of a workweek. Upon contacting the user, the help desk discovers the user is on vacation and does not have network access. Which of the following types of attacks are MOST likely occurring? (Choose two.)
- AReplay
- BRainbow tables
- CBrute force
- DPass the hash
- EDictionary
107Which of the following attacks specifically impacts data availability?
- ADDoS
- BTrojan
- CMITM
- DRookit
108Six months into development, the core team assigned to implement a new internal piece of software must convene to discuss a new requirement with the stake holders. A stakeholder identified a missing feature critical to the organization, which must be implemented. The team needs to validate the feasibility of the newly introduced requirement and ensure it does not introduce new vulnerabilities to the software and other applications that will integrate with it.
Which of the following BEST describes what the company?- AThe system integration phase of the SDLC
- BThe system analysis phase of SSDSLC
- CThe system design phase of the SDLC
- DThe system development phase of the SDLC
109An information system owner ha supplied a new requirement to the development team that calls for increased non-repudiation within the application. After undergoing several audits, the owner determined that current levels of non-repudiation with insufficient.
Which of the following capabilities would be MOST appropriate to consider implementing is response to the new requirement?- ATransitive trust
- BSymmetric encryption
- CTwo-factor authentication
- DDigital signatures
- EOne-time passwords
110Study Photo:
- AStudy!!
- BStudy!!!
111A company is using a mobile device deployment model in which employees use their personal devices for work at their own discretion. Some of the problems the company is encountering include the following:
- There is no standardization
- Employees ask for reimbursement for their devices
- Employees do not replace their devices often enough to keep them running efficiently
- The company does not have enough control over the devices.
Which of the following is a deployment model that would help the company overcome these problems?- ABYOD
- BVDI
- CCOPE
- DCYOD
112Users report the following message appears when browsing the company's secure site: This website cannot be trusted. Which of the following actions should a security analyst take to resolve these messages? (Select two.)
- AVerify the certificate has not expired on the server
- BEnsure the certificate has a .pfx extension on the server
- CUpdate the root certificate into the client computer certificate into the client computer certificate store
- DInstall the updated private key on web server
- EHave users clear their browsing history and relaunch the session
113An employees uses RDP to connect back to the office network.
If RDP is misconfigured, which of the following security exposures would this lead to?- AA virus on the administrator's desktop would be able to sniff the administrator's username and password
- BResult in an attacker being able to phish the employee's username and password
- CA social engineering attack could occur, resulting in the employee's password being extracted
- DA man in the middle attack could occur, resulting the employee's username and password being captured
114A security auditor is putting together a report for the Chief Executive Officer (CEO) on personnel security and its impact on the security posture of the whole organization. Which of the following would be the MOST important factor to consider when it comes to personnel security?
- AInsider threats
- BPrivilege escalation
- CHacktivist
- DPhishing through social media
- ECorporate espionage
115While reviewing the security controls in place for a web-based application, a security controls accessor notices that there was no password strength requirements in place. Because of this vulnerability, passwords might be easily discovered using a brute force attack.
Which of the following password requirements will MOST effectively improve the security posture of the application against these attacks? (Select two.)- AMinimum complexity
- BMaximum age limit
- CMaximum length
- DMinimum length
- EMinimum age limit
- FMinimum re-use limit
116A company was recently audited by a third party. The audit revealed the company's network devices were transferring files in the clear. Which of the following protocols should the company use to transfer files?
- AHTTPS
- BLDAPS
- CSCP
- DSNMPv3
117An organization's primary datacenter is experiencing a two-day outage due to an HVAC malfunction. The node located in the datacenter has lost power and is no longer operational, impacting the ability of all users to connect to the alternate datacenter. Which of the following BIA concepts BEST represents the risk described in this scenario?
- ASPoF
- BRRO
- CMTBF
- DMTTR
118A company's loss control department identifies theft as a recurring loss type over the past year. Based on the department's report, the Chief Information Officer (CIO) wants to detect theft of datacenter equipment,
Which of the following controls should be implemented?- ABiometrics
- BCameras
- CMotion dectectors
- DMantraps
119Ann, a college professor, was recently reprimanded for posting disparaging remarks re-grading her coworkers on a website. Ann stated that she was not aware that the public was able to view her remakes.
Which of the following security-related trainings could have made Ann aware of the repercussions of her actions?- AData labeling and disposal
- BUse of social networking
- CUse of P2P networking
- DRole-based training
120An administrator has configured a new Linux server with the FTP service. Upon verifying that the service was configured correctly, the administrator has several users test the FTP service. Users report that they are able to connect to the FTP service and download their personal files, however, they cannot transfer new files to the server.
Which of the following will most likely fix the uploading issue for the users?- ACreate an ACL to allow the FTP service write access to user directions
- BSet the Boolean selinux value to allow FTP home directory uploads
- CReconfigure the ftp daemon to operate without utilizing the PSAV mode
- DConfigure the FTP daemon to utilize PAM authentication pass through user permissions
121A security administrator is trying to encrypt communication. For which of the following reasons should administrator take advantage of the Subject Alternative Name (SAM) attribute of a certificate?
- AIt can protect multiple domains
- BIt provides extended site validation
- CIt does not require a trusted certificate authority
- DIt protects unlimited subdomains
122A security engineer is configuring a wireless network that must support mutual authentication of the wireless client and the authentication server before users provide credentials. The wireless network must also support authentication with usernames and passwords. Which of the following authentication protocols mUST the security engineer select?
- AEAP-FAST
- BEAP-TLS
- CPEAP
- DEAP
123See photo:
Which of the following commands should be used?
- Anbtstat
- Bnc
- Carp
- Dipconfig
124A security administrator is developing training for corporate users on basic security principles for personal email accounts.
Which of the following should be mentioned as the MOST secure way for password security?- AUtilizing a single Qfor password recovery
- BSending a PIN to a smartphone through text message
- CUtilizing CAPTCHA to avoid brute force attacks
- DUse a different e-mail address to recover password
125An in-house penetration tester is using a packet capture device to listen i on network communication. This is an example of:
- APassive reconnaissance
- BPersistance
- CEscalation of privileges
- DExploiting the switch
126Study photo:
- AStudy!!
- BStudy!!!
127Which of the following is an important step to take BEFORE moving any installation packages from a test environment to production?
- ARoll back changes in the test environment
- BVerify the hashes of files
- CArchive and compress the files
- DUpdate the secure baseline
128A user has attempted to access data at a higher classification level than the user's account is currently authorizes to access. Which of the following access control models has been applied to this user's account?
- AMAC
- BDAC
- CRBAC
- DABAC
129During a routine audit, it is discovered that someone has been using a stale administrator account to log into a seldom used server. The person has been using the server to view inappropriate websites that are prohibited to end users.
Which of the following could best prevent this from occurring again?- ACredential management
- BGroup policy management
- CAcceptable use policy
- DAccount expiration policy
130Which of the following technologies employ the use of SAML? (Select two.)
- ASingle sign-on
- BFederation
- CLDAP
- DSecure token
- ERADIUS
131A security analyst has set up a network tap monitor traffic vulnerabilities. Which of the following techniques would BEST describe the approach the analyst has taken?
- ACompliance scanning
- BCredentialed scanning
- CPassive vulnerability scanning
- DPort scanning
132A new mobile application is being developed in-house. Security reviews did not pick up any major flaws, however vulnerability scanning results show fundamental issues a the very end of the project cycle.
Which of the following security activities should also have been performed to discover vulnerabilities earlier in the lifecycle?- AArchitecture review
- BRisk assessment
- CProtocol analysis
- DCode review
133Which of the following explains why vendors publish MD5 values when they provide software patches for their customers to download over the internet?
- AThe recipient can verify integrity of the software patch
- BThe recipient can verify the authenticity of the site used to download the patch
- CThe recipient can request future updates to the software using the published MD5 value
- DThe recipient can successfully activate the new software patch
Informationen
- Beschreibung
- Information Technology Quiz am Security+ Test, erstellt von Airam Trevino am 14/12/2018.
- Autor
- Airam Trevino
- Sprache
- English
- Aufrufe
- 4
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz