VCEGuide

1. 1A software developer needs to perform code-execution testing, black-box testing, and non-functional testing on a new product before its general release. Which of the following BEST describes the tasks the developer is conducting?

   1. AVerification
   2. BValidation
   3. CNormalization
   4. DStaging
2. 2Which of the following will the forensics investigator MOST likely determine has occurred? Some unusual log entries show users received an email for an unwanted mailing list and clicked on a link to attempt to unsubscribe. One of the users reported the email to the phishing team, and the forwarded email revealed the link to be:
   Click here to unsubscribe
   Which of the following will the forensics investigator MOST likely determine has occurred?

   1. ASQL injection
   2. BBroken authentication
   3. CXSS
   4. DXSRF
3. 3Which of the following would be BEST to prevent other devices on the network from directly accessing the laptop? A pharmaceutical sales representative logs on to a laptop and connects to the public WiFi to check emails and update reports. Which of the following would be BEST to prevent other devices on the network from directly accessing the laptop?
   (Choose two.)

   1. ATrusted Platform Module
   2. BA host-based firewall
   3. CA DLP solution
   4. DFull disk encryption
   5. EA VPN
   6. FAntivirus software
4. 4A security administrator suspects there may be unnecessary services running on a server. Which of the following tools will the administrator MOST likely use to confirm the suspicions?

   1. ANmap
   2. BWireshark
   3. CAutopsy
   4. DDNSEnum
5. 5An organization has a growing workforce that is mostly driven by additions to the sales department. Each newly hired salesperson relies on a mobile device to conduct business. The Chief Information Officer (CIO) is wondering if the organization may need to scale down just as quickly as it scaled up. The CIO is also concerned about the organization’s security and customer privacy. Which of the following would be BEST to address the CIO’s concerns?

   1. ADisallow new hires from using mobile devices for six months.
   2. BSelect four devices for the sales department to use in a CYOD model.
   3. CImplement BYOD for the sales department while leveraging the MDM.
   4. DDeploy mobile devices using the COPE methodology.
6. 6A security analyst reports a company policy violation in a case in which a large amount of sensitive data is being downloaded after hours from various mobile devices to an external site. Upon further investigation, the analyst notices that successful login attempts are being conducted with impossible travel times during the same time periods when the unauthorized downloads are occurring. The analyst also discovers a couple of WAPs are using the same SSID, but they have non-standard DHCP configurations and an overlapping channel. Which of the following attacks is being conducted?

   1. AEvil twin
   2. BJamming
   3. CDNS poisoning
   4. DBluesnarfing
   5. EDDoS
7. 7A security engineer at an offline government facility is concerned about the validity of an SSL certificate. The engineer wants to perform the fastest check with the least delay to determine if the certificate has been revoked. Which of the following would BEST meet these requirements?

   1. ARA
   2. BOCSP
   3. CCRL
   4. DCSR
8. 8A company is upgrading its wireless infrastructure to WPA2-Enterprise using EAP-TLS. Which of the following must be part of the security architecture to achieve AAA? (Choose two.)

   1. ADNSSEC
   2. BReverse proxy
   3. CVPN concentrator
   4. DPKI
   5. EActive Directory
   6. FRADIUS
9. 9Which of the following cryptographic concepts would a security engineer utilize while implementing non-repudiation? (Choose two.)

   1. ABlock cipher
   2. BHashing
   3. CPrivate key
   4. DPerfect forward secrecy
   5. ESalting
   6. FSymmetric keys
10. 10A smart switch has the ability to monitor electrical levels and shut off power to a building in the event of power surge of power surge or other fault situation. The switch was installed on a wired network in a hospital and is monitored by the facilities department via a cloud application. The security administrator isolated the switch on a separate VLAN and set up a patching routine. Which of the following steps should also be taken to harden the smart switch?

    1. ASet up an air gap for the switch.
    2. BChange the default password for the switch.
    3. CPlace the switch in a Faraday cage.
    4. DInstall a cable lock on the switch.

11. 11A cybersecurity administrator needs to add disk redundancy for a critical server. The solution must have a two-drive failure for better fault tolerance. Which of the following RAID levels should the administrator select?

    1. A0
    2. B1
    3. C5
    4. D6
12. 12Which of the following is the BEST reason to maintain a functional and effective asset management policy that aids in ensuring the security of an organization?

    1. ATo provide data to quantify risk based on the organization's systems
    2. BTo keep all software and hardware fully patched for known vulnerabilities
    3. CTo only allow approved, organization-owned devices onto the business network
    4. DTo standardize by selecting one laptop model for all users in the organization
13. 13Which of the following is the purpose of a risk register?

    1. ATo define the level or risk using probability and likelihood
    2. BTo register the risk with the required regulatory agencies
    3. CTo identify the risk, the risk owner, and the risk measures
    4. DTo formally log the type of risk mitigation strategy the organization is using
14. 14A network engineer has been asked to investigate why several wireless barcode scanners and wireless computers in a warehouse have intermittent connectivity to the shipping server. The barcode scanners and computers are all on forklift trucks and move around the warehouse during their regular use. Which of the following should the engineer do to determine the issue? (Choose two.)

    1. APerform a site survey
    2. BDeploy an FTK Imager
    3. CCreate a heat map
    4. DScan for rogue access points
    5. EUpgrade the security protocols
    6. FInstall a captive portal

Beschreibung

Security+ Security+ 0601 Quiz am VCEGuide, erstellt von dabbler c am 04/12/2022.

Autor

dabbler c

Sprache

English

Aufrufe

1

Schlagwörter

security+ 0601security+

Bewertung

Noch keine Bewertungen

Bewerte dieses Quiz

Bewerte dieses Quiz

Mehr zu CompTIA Security+ Practice Questions