Quiz
CASP+ Study
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (142)
1What is a technical security control?
- AAccess control vestibule
- BSeparation of duties
- CSmart card authentication
- DUser training
2What are the clues to watch for to determine if an email message is legitimate or not?
- ADigital Signature
- BEmail address
- CCompany Name
- DGrammar
3What physical security mechanism opens a second internal door only after external door has been closed and locked?
- ABollards
- BCCTB cameras
- CAccess control vestibule
- DSecurity guards
4What type of hardware device can capture user keystrokes and remains undetected by antivirus software?
- AWi-fi royter
- BKey fob
- CKeylogger
- DUSB thumb drive
5What serves as a centralized list of risks, impacts, mitigations, and severity ratings?
- ARisk management framework
- BRisk register
- CDisaster recovery plan
- DIncident response plan
6What is the correct sequence for the risk management lifecycle?
- AAnalyze risk, treat risk, monitor risk, identify risk
- Bidentify risk, Analyze risk, treat risk, monitor risk
- Ctreat risk, monitor risk, identify risk, Analyze risk
- Didentify risk, monitor risk, Analyze risk, treat risk
7Which type of threat actor promotes an ideology?
- AScript kiddie
- BOrganized crime
- CHacktivist
- DNation state
8What is the purpose of social engineering?
- APromote ideology
- BDenial of service
- CData exfiltration
- DDeception
9You have decided to purchase cybersecurity insurance to cover DDoS or ransomware events. Which type of risk treatment is this?
- ARisk acceptance
- BRisk avoidance
- CRisk mitigation
- DRisk transfer
10How is the annualized loss expectancy (ALE) calculated?
- AExposure factor × single loss expectancy
- BAnnual rate of occurrence × single loss expectancy
- CAnnual rate of occurrence × asset value
- DExposure factor × annual rate of occurrence
11Which physical security mechanism opens a second internal door only after the external door has been closed and locked?
- ACCTV cameras
- BAccess control vestibule
- CSecurity guards
- DBollards
12Separation of duties
- ASeparation of duties
- BJob rotation
- CLeast privilege
- DMandatory vacation
13You have been awarded a government contract that will last two years. You must share IT systems and data with a business partner to fulfil the contract. You need to ensure specific rules are followed when linking the networks of both companies together. What must be signed by both parties?
- AMOA
- BISA
- CSLA
- DMOU
14What is an example of OSINT?
- AFinancial records
- BLinkedIn profiles
- CMedical history
- DFirewall logs
15What are clues to watch for to determine if an email message is legitimate or not?
- AGrammar
- BCompany name
- CEmail address
- DDigital signature
16Which type of hardware device can capture user keystrokes and remains undetected by antivirus software?
- AKey fob
- BUSB thumb drive
- CKeylogger
- DWi-Fi router
17Which Docker CLI command is used to download a container image?
- Adocker push
- Bdocker pull
- Cdocker down
- Ddocker up
18What should you do to harden a hypervisor host?
- ADisable unnecessary services
- BPlace all NICs on the production VLAN
- CConfigure a dedicated management NIC on its own VLAN
- DInstall a RAID controller
19Which Linux command can you use to display the VM IP address?
- Aifconfig
- Btracert
- Cping
- Dipconfig
20You need to deploy an HTTP-based application container into the cloud. What must you do to ensure port 80 in the container is in a listening state?
- ANothing
- BMap port 80 in the container to port 80 in the cloud
- CMap port 80 in the container to a public IP address
- DMap port 80 in the container to a virtual machine
21You are deploying an on-premises virtual machine that requires a bi-directional connection to the production network. What type of network connection should you configure?
- APrivate
- BHost-only
- CNAT
- DBridged
22Which benefit is derived from using application containers instead of virtual machines?
- ARegulatory compliance
- BFaster startup time
- CBetter app performance
- DIncreased security
23You are setting up a server to run multiple virtual machine guests. You have installed the OS which is designed specifically as a hypervisor. What type of hypervisor is this?
- AType B
- BType 1
- CType 2
- DType A
24Which type of virtualization allows users to run productivity applications from a full operating system remotely through thin client?
- ADesktop virtualization
- BApplication virtualization
- CContainerized application
- DOperating system virtualization
25What benefit does a container registry provide?
- ARegulatory compliance
- BEncryption of application container images
- CCentralized container image repository
- DApplication container clustering
26Which security issue does virtual machine encryption address?
- AThe decryption passphrase must be known to mount VM disks while the VM is running
- BA hash of the virtual machine hard disks is generated
- CThe virtual machine is replicated to a secondary hypervisor for high availability
- DThe decryption passphrase must be known to start the VM
27Which cloud items can a network security group be associated with?
- AvNIC
- BVNet
- CSubnet
- DVPC
28Which types of rules can be configured with Azure Firewall?
- ADNAT
- BProxy
- CHTTP
- DApplication
29Which types of items can be stored in a cloud key vault?
- AWindows admin passwords
- BPKI certificates
- CLinux root passwords
- DEncryption keys
30What is the purpose of the STAR registry?
- AStorage of custom application container images
- BAssurance of cloud provider security accreditations
- CCloud provider SLA listing
- DCentralized cloud-based IAM
31What is used to determine the order in which cloud security group rules are processed?
- AIP address
- BPriority value
- CUDP port number
- DTCP port number
32Which cloud computing characteristic refers to paying for services used?
- APooled resources
- BMetered usage
- CBroad network access
- DRapid elasticity
33What is the benefit of VNet peering?
- AEnhanced security
- BVM connectivity using private IPs
- CRegulatory compliance
- DMore bandwidth
34Which statement best describes encrypting stored data?
- AProtecting data in process
- BProtecting data at rest
- CProtecting data in archives
- DProtecting data in transit
35Which type of cloud is owned and used by a single organization?
- APrivate
- BPublic
- CCommunity
- DHybrid
36Which term is the most closely associated with autoscaling?
- AHorizontal scaling
- BTemplate
- CAutomation
- DVertical scaling
37Which port is used to remotely manage Windows hosts?
- A80
- B22
- C3389
- D443
38What is the most common consequence of SLA uptime requirements violations?
- AService credits
- BFree unlimited service usage
- CLawsuit
- DDamages awarded
39You want all outbound subnet traffic to first be sent to a firewall appliance for inspection. Which IP address should you specify for the firewall?
- A127.0.0.0/0
- BFirewall public IP
- CFirewall private IP
- D0.0.0.0/0
40You are configuring a DNAT rule in Azure Firewall to allow incoming SSH management of Linux VMs. Which IP addresses should you specify in the DNAT rule?
- AFirewall private IP
- BVM private IP
- CFirewall public IP
- DVM public IP
41What is contained within a cloud-based virtual network?
- ANetwork security groups
- BSubnets
- CResource groups
- DRoute tables
42You have manually deployed a cloud-based Linux virtual machine. Which type of cloud service model is this?
- AIaaS
- BSaaS
- CPaaS
- DSECaaS
43Which network security protocol is normally used to enable HTTPS for websites?
- ASSL
- BIPsec
- CTLS
- DVPN
44Which authentication methods can be used with Windows IPsec?
- ADevice name
- BKerberos
- CCertificate
- DUser name
45You need to view all user certificates for a Windows user on her Windows 10 laptop. What should you do?
- AView the properties of the user account in Active Directory
- BUse the manage-bde command
- CUse MMC with the certificates snapin
- DUse MMC with the disk management snapin
46Which command line tool can be used to manage BitLocker?
- Acertutil
- Bcipher
- Cmanage-bde
- Dopenssl
47Which block cipher mode of operation makes a block cipher a stream cipher?
- AOFB
- BECB
- CCBC
- DGCM
48How does hashing differ from encryption?
- AIt is reversible
- BA key is used
- CIt is not reversible
- DNo keys are used
49What must be done when issuing certificates from a private CA to ensure certificates will work correctly in an organization?
- AEnable certificate pinning on all devices
- BJoin all devices to an Active Directory domain
- CAdd each issued certificate to all devices
- DAdd the private CA trusted root certificate to all devices
50Which PKI items issue certificates?
- ASubordinate CA
- BCertificate revocation list
- CCertificate template
- DRoot CA
51Which cryptographic solution is a network appliance that can perform cryptographic operations?
- AHSM
- BTPM
- CBitLocker
- DEFS
52Which command line tool is used to manage EFS file encryption?
- Acipher
- BGet-FileHash
- Ccertutil
- Dopenssl
53Which PowerShell cmdlet generates a file hash?
- ASet-Hash
- BGet-FileHash
- CGenerate-FileHash
- DNew-FileHash
54Which mechanism controls who can retrieve certificates from an Azure Key Vault?
- AFirewall ACL
- BAzure resource group RBAC roles
- CAzure AD conditional access policies
- DVault access policy
55What type of PKI certificate can be used for DNS subdomains that fall under a parent domain?
- ACode signing
- BWildcard
- CExtended validation
- DUser
56You have configured and enabled a custom certificate template for your Windows certification authority, yet users are unable to use the template to acquire a PKI certificate. What is the most likely cause of the problem?
- AThe template must be imported to Active Directory
- BUsers are not logged into their station with elevated permissions
- CUsers do not have the “Enroll” permission for the template
- DThe template must first be exported
57With asymmetric cryptography, which key is used to encrypt?
- APublic
- BSecret
- CPrivate
- DPre-shared
58Which type of storage area network solution uses standard network equipment and the TCP/IP protocol suite?
- ACluster shared storage
- BFC SAN
- CNAS
- DiSCSI
59You need to configure ten workgroup Windows servers with the same Windows Defender firewall settings. You must achieve this with the least amount of administrative effort. What should you do?
- ACreate the same firewall rules on each host manually
- BConfigure firewall settings in the domain Group Policy Object (GPO)
- CMirror the servers together then create the firewall rules
- DCreate the firewall rules on one host, export the configuration and import on other servers
60Which RAID level is disk mirroring?
- ARAID 5
- BRAID 1
- CRAID 6
- DRAID 0
61What makes a reverse proxy different from network address translation (NAT)?
- AReverse proxying and NAT are exactly the same
- BNAT applies to OSI layer 7
- CReverse proxying applies to OSI layer 7
- DReverse proxying applies to OSI layer 4
62You are configuring VPN client certificate authentication in the Microsoft Azure cloud. What must be provided for the Azure virtual network gateway?
- ARoot certificate public key
- BUser certificate private key
- CUser VPN password
- DUser VPN device MAC address
63Which Linux command can be used to create a mirrored disk volume?
- Amdadm
- Bgrep
- Cfdisk
- Difconfig
64How do jump boxes protect servers?
- AServers do not have to be directly exposed to the Internet
- BServer file systems are encrypted
- CServer file systems are hashed
- DServers have DLP policies applied
65Which type of firewall is considered firewall-friendly?
- ANAT
- BL2TP/IPsec
- CPPTP
- DSSL/TLS
66Which type of Azure Firewall rule allows standard packet filtering rules?
- ADNAT rules
- BApplication rules
- CNetwork rules
- DApplication rules_
67Which solution can ensure users accept the terms of use before allowing Internet access?
- ACaptive portal
- BMAC address filtering
- CEnable WPA3
- DDisable SSID broadcasting
68How do reverse shells defeat most firewall rules?
- AAttacker connectivity is done through the Tor network
- BConnections are initiated from the compromised host
- CFirewalls are compromised and rules are disabled
- DConnections are initiated from the attacker machine
69Which type of security is the result of enabling DNSSEC?
- AIntegrity
- BConfidentiality
- CCompliance
- DAvailability
70What is used to group disk devices together in the Windows Server operating system?
- AGRP
- BRAID 1
- CStorage pool
- DMBR
71Which standard is used for network access control?
- A802.15
- B802.1x
- C802.3
- D802.11x
72Which attributes are used to determine file system permissions when using Windows Dynamic Access Control?
- AActive directory users only
- BFile objects and directory objects only
- CActive directory users and devices only
- DActive directory users, devices, and file system objects
73Which Microsoft Azure configuration checks where users are authenticated from?
- AConditional Access policy
- BAzure policy
- CMFA
- DRBAC
74How are HMAC-based one-time passwords encrypted?
- AUsing a PKI certificate
- BUsing a symmetric key
- CUsing a public key
- DUsing a private key
75Which port does RADIUS authentication use by default?
- A1812
- B4532
- C3389
- D636
76Which tool can be used to discover RDP hosts on a network?
- Anetstat
- Bnmap
- Cnc
- Djohn
77Which methods are not available when configuring Google 2-Step Verification?
- AVoice calls
- BConditional access policies
- CText messages
- DSecurity keys
78Which command can be used to manually refresh Group Policy on a Windows host?
- Acertutil
- Bmmc
- Ccipher
- Dgpupdate
79You need to ensure Microsoft Azure cloud technicians can administer virtual machines in a specific resource group. What should you do?
- AAssign the Virtual Machine Contributor role to specific virtual machines
- BAssign the Virtual Machine Contributor role to the Azure subscription
- CAssign the Owner role to the resource group
- DAssign the Virtual Machine Contributor role to the resource group
80You need to view passwords cracked by the “John the Ripper” tool. Which command should you issue?
- Ajohn --viewer
- Bjohn --show
- Cjohn --passshow
- Djohn --crack
81Which term describes sensitive medical information?
- ASPI
- BPHI
- CPII
- DGDPR
82Where does Amazon Macie discover data?
- AWeb searches
- BBig data analytics
- CSQL databases
- DS3 buckets
83Which IT management item contains standardized configurations to ensure security and consistency?
- AGDPR
- BCI
- CITIL
- DCMDB
84Which term is synonymous with wiping a hard disk?
- APartitioning
- BScrubbing
- CFormatting
- DDeleting
85Who determines how data will be managed?
- AChief information officer
- BData protection officer
- CData custodian
- DData owner
86Which data privacy standard governs how EU citizen data is handled?
- APCI DSS
- BGDPR
- CCOPPA
- DHIPAA
87What is the maximum number of tags that can be added to a single Azure resource?
- A25
- B50
- C5
- D10
88You need to apply data labels to files on a Windows server. What should you use?
- AMicrosoft File Server Resource Manager
- BAzure Backup
- CAzure Information Protection
- DMicrosoft Internet Information Services
89Which type of business agreement focuses on a service provider guaranteeing a level of service to a consumer?
- ASLA
- BMOU
- CMOA
- DNDA
90You have created Azure data classification labels for use with Azure Information Protection. What must you create next to use the labels?
- AAzure App Service
- BAIP policy
- CAzure storage account
- DRBAC assignment
91What should be done to harden IoT devices that cannot be patched?
- APlace on an isolated network
- BIssue a PKI certificate
- CApply group policy
- DChange the default settings
92You have just registered a smartphone with an MDM tool. What is the next thing that will happen on the smartphone?
- AComplex passwords will be enabled
- BProcess inventory
- CThe authentication PIN will be reset
- DThe camera will be disabled
93You are searching for vulnerable RDP hosts using the shodan.io site. Which port should you search for?
- A25
- B3389
- C389
- D22
94You need Internet access for your laptop in a remote area where wired and wireless Internet are unavailable. You have a cell phone with data enabled. What should you enable to provide Internet access for your laptop?
- ABiometric authentication
- BJailbreaking
- CTethering
- DDebug bridge
95A smartphone technician requires full access to solve problems on a user smartphone. The phone is registered with an MDM solution that restricts smartphone access. What should the technician do?
- AUnregister the smartphone device from the MDM tool
- BRequest a security code to temporarily disable the MDM security policy on the MDM server
- CRequest a security code to temporarily disable the MDM security policy on the smartphone
- DPerform a factory reset of the smartphone
96You need to ensure that lost or stolen phones can be located. What should you enable?
- AGoogle Play Protect
- BRooting
- CFacial recognition
- DFind My Mobile
97Which software development methodology is linear and depends on previous project phase deliverables?
- ADiamond
- BAgile
- CWaterfall
- DNIST
98What is used to ensure blockchain integrity?
- AHash of previous block for each new transaction
- BHash of next block for each new transaction
- CDigital signature of next block for each new transaction
- DDigital signature of previous block for each new transaction
99Which OWASP ZAP feature can send unanticipated data to a web app to observe its behaviour?
- AReporting
- BZapping
- CFuzzing
- DProxying
100Which type of testing occurs while software is running?
- ARegression
- BUnit
- CStatic
- DDynamic
101Which type of artificial intelligence uses neural networks?
- AMachine learning
- BBig data analytics
- CDeep web
- DDeep learning
102Which type of web application attack is most likely to result from improper input validation?Which type of web application attack is most likely to result from improper input validation?
- AARP cache poisoning
- BDirectory traversal
- CDDoS
- DCross-site scripting
103What provides real-time monitoring to ensure safety when hardware malfunctions in an industrial computing environment?
- ASIS
- BICS
- CSCADA
- DDNP3
104Which industrial computing protocol is commonly used for public utility networks, such as water and electricity?
- AModbus
- BICS
- CDNP3
- DCIP
105Which industrial control attack fed false readings for centrifuges to monitoring stations?
- ACode Red
- BSlammer
- CStuxNet
- DMichelangelo
106What term is used for an industry-specific specialized computer?
- APLC
- BModbus
- CSCADA
- DRTU
107Which Linux command is used to compile binaries from source code?
- Amake
- Bgrep
- Cchmod
- Dsudo
108Which Metasploit command allows querying?
- Asearchsploit
- Bfind
- Cupdatedb
- Dsearch
109Which type of tool is nmap?
- APenetration testing
- BNetwork scanner
- CPatch management
- DVulnerability assessment
110What is the default file format for Wireshark packet capture files?
- APCAP
- BHTML
- CXML
- DPDF
111What is the name of the Amazon Web Services centralized monitoring service?
- AS3
- BCloudWatch
- CCloudTrail
- DEC2
112Which Snort command line parameter can be used to test the Snort configuration?
- A-S
- B-T
- C-A
- D-U
113Which port is used for Linux syslog forwarding by default?
- A389
- B445
- C514
- D25
114What is the purpose of a honeypot?
- ATo gather statistics on packets in and out
- BTo track C&C servers
- CTo gather forensic evidence used to convict offenders
- DTo track malicious user activity
115Which tcpdump command line parameter saves captured packets to a file?
- A-w
- B-W
- C-P
- D-s
116You are writing a shell script to monitor Linux hosts. You need to use pattern matching to look for host names in specific cost centers using the format COSTCENTER3DIGITCODE-CITY. What should you do?
- AEnable Windows event viewer subscriptions
- BAdd regular expressions to your script
- CClear all Linux log filters
- DEnable Linux syslog forwarding
117You have become overwhelmed with the amount of log entries on your Windows servers. You would like a convenient way to view only critical and error log events. What should you do?
- ACreate a custom view that filters for critical and error events
- BFilter each log for critical and error events
- CForward the logs to a SIEM system
- DExport each log and filter the exported results
118You are planning the use of a SOAR system for incident response. Which item allows you to automate incident response?
- ARunbook
- BHeap overflow
- CIDS
- DSIEM
119What is the default location and name of the Snort configuration file?
- A/usr/share/snort.conf
- B/usr/share/snort.config
- C/etc/snort/snort.conf
- D/etc/snort/snort.config
120You need to filter captured Wireshark traffic so that only secured website traffic is shown. What should you filter on?
- AL2TP
- BIPsec
- CHTTPS
- DSSH
121What is a zombie?
- AA proxy anonymization network
- BAn infected computer under malicious user control
- CA server that provides infected hosts with instructions
- DA nonresponsive computer
122What is the most effective way to mitigate compromises due to users clicking on links?
- AStateful firewall rules
- BAntivirus scanners
- CSpam filtering
- DUser training and awareness
123Your manager asks you to assess host vulnerabilities exposed to internal employees. What should you do?
- AUse Nmap against hosts
- BRun a pen test against hosts
- CRun a non-credentialed vulnerability scan
- DRun a credentialed vulnerability scan
124Why should C programmers stay away from the gets() function?
- AIt does not do array boundary checking
- BIt does not support strings
- CIt allows malicious code to be stored in a variable
- DIt is not object oriented
125Which type of testing uses red and blue teams?
- AVulnerability
- BRegression
- CPenetration
- DUnit
126Which command allows you to interact with the Metasploit Framework in Kali Linux?
- Amsfadmin
- Bmsfconsole
- Cntp
- Dsearchsploit
127Which solutions prevent stolen laptops from being compromised?
- APatch management
- BBiometric authentication
- CDisk encryption
- DPower-on password
128You are using various Wi-Fi reconnaissance tools and see references to a BSSID. What is this?
- AThe name of a connecting wireless client device
- BThe name of the wireless network
- CThe MAC address of a wireless access point
- DThe MAC address of a wireless client device
129In which attack phase would a malicious user use the Nmap tool?
- APersist
- BClear tracks
- CReconnaissance
- DEnumerate
130What do malicious users use to target many victims in an attempt to trick them into clicking a link to a fraudulent site?
- ASpim
- BDDoS
- CPhishing campaign
- DSpam
131Which type of network attack allows attacker access to VLAN traffic?
- ACross-site request forgery
- BVLAN trunking
- CDDoS
- DVLAN hopping
132What is one possible way to detect that steganography is being used with a file?
- ACompression
- BDigital signature
- CHashing
- DEncryption
133You have acquired a forensic image and hash. You must now analyze the storage media contents. What should you do?
- AMount the forensic copy, perform the analysis
- BMount the forensic copy, create an image
- CMount the original media, perform the analysis
- DMount the original media, place in a Faraday bag
134You need to acquire a disk image in Linux that can be read by FTK imager. Which Linux command should you use?
- Agrep
- Bchmod
- Cldd
- Ddd
135You need to acquire evidence according to the order of volatility. In which order will you do this?
- ASwap file, RAM, hard disk
- BHard disk, swap file, RAM
- CRAM, swap file, hard disk
- DRAM, CPU, hard disk
136How is developer mode enabled on an Android device?
- AInstall the Android Debug Bridge app
- BPlug a USB cable into the device
- CGain root access to the device
- DTap the software build number seven times
137Which component prevents writing to origin storage devices when acquiring storage device images?
- ASwitch port lock
- BHSM
- CTPM
- DWrite-blocker
138What benefits are derived from load balancing?
- AHigher application availability
- BImproved application performance
- CEncryption of data at rest
- DEncrypted network transmissions
139Which type of plan is enacted during a security event?
- AIncident response
- BBusiness continuity
- CDisaster recovery
- DEvacuation
140Which IP address do clients connect to for a load balanced application?
- AForward proxy server
- BReverse proxy server
- CLoad balancer
- DBack-end virtual machine
141What is required in Microsoft Azure to perform backups to the cloud?
- AEventbus hub
- BRecovery vault
- CStorage account
- DKey vault
142Which RAID level creates a copy of all data written to a primary disk?
- A1
- B6
- C3
- D5
Informationen
- Beschreibung
- Covers all objectives of the CASP+
- Autor
- Buddy Armstrong
- Sprache
- English
- Aufrufe
- 44
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz