Quiz
ExamGuide Comptia
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (31)
1A user is attempting to navigate to a website from inside the company network using a desktop. When the user types in the URL, https://www.site.com, the user is presented with a certificate mismatch warning from the browser. The user does not receive a warning when visiting http://www.anothersite.com. Which of the following describes this attack?
- AOn-path
- BDomain hijacking
- CDNS poisoning
- DEvil twin
2A company recently experienced an inside attack using a corporate machine that resulted in data compromise. Analysis indicated an unauthorized change to the software circumvented technological protection measures. The analyst was tasked with determining the best method to ensure the integrity of the systems remains intact and local and remote boot attestation can take place. Which of the following would provide the BEST solution?
- AHIPS
- BFIM
- CTPM
- DDLP
3Which of the following would BEST provide a systems administrator with the ability to more efficiently identify systems and manage permissions and policies based on location, role, and service level?
- AStandard naming conventions
- BDomain services
- CBaseline configurations
- DDiagrams
4A security analyst is receiving numerous alerts reporting that the response time of an internet-facing application has been degraded. However, the internal network performance was not degraded. Which of the following MOST likely explains this behavior?
- ADNS poisoning
- BMAC flooding
- CDDoS attack
- DARP poisoning
5A company suspects that some corporate accounts were compromised. The number of suspicious logins from locations not recognized by the users is increasing.
Employees who travel need their accounts protected without the risk of blocking legitimate login requests that may be made over new sign-in properties. Which of the following security controls can be implemented?- AEnforce MFA when an account request reaches a risk threshold.
- BImplement geofencing to only allow access from headquarters.
- CEnforce time-based login requests that align with business hours.
- DShift the access control scheme to a discretionary access control.
6An organization wants to participate in threat intelligence information sharing with peer groups. Which of the following would MOST likely meet the organization's requirement?
- APerform OSINT investigations.
- BSubscribe to threat intelligence feeds.
- CSubmit RFCs.
- DImplement a TAXII server.
7An amusement park is implementing a biometric system that validates customers' fingerprints to ensure they are not sharing tickets. The park's owner values customers above all and would prefer customers' convenience over security. For this reason, which of the following features should the security team prioritize
FIRST?- ALow FAR
- BLow efficacy
- CLow FRR
- DLow CER
8Which of the following organizations sets frameworks and controls for optimal security configuration on systems?
- AISO
- BGDPR
- CPCI DSS
- DNIST
9An organization discovered files with proprietary financial data have been deleted. The files have been recovered from backup, but every time the Chief Financial
Officer logs in to the file server, the same files are deleted again. No other users are experiencing this issue. Which of the following types of malware is MOST likely causing this behavior?- ALogic bomb
- BCryptomalware
- CSpyware
- DRemote access Trojan
10A recent security breach exploited software vulnerabilities in the firewall and within the network management solution. Which of the following will MOST likely be used to identify when the breach occurred through each device?
- ASIEM correlation dashboards
- BFirewall syslog event logs
- CNetwork management solution login audit logs
- DBandwidth monitors and interface sensors
11A cloud service provider has created an environment where customers can connect existing local networks to the cloud for additional computing resources and block internal HR applications from reaching the cloud. Which of the following cloud models is being used?
- APublic
- BCommunity
- CHybrid
- DPrivate
12Data exfiltration analysis indicates that an attacker managed to download system configuration notes from a web server. The web-server logs have been deleted, but analysts have determined that the system configuration notes were stored in the database administrator's folder on the web server. Which of the following attacks explains what occurred? (Choose two.)
- APass-the-hash
- BDirectory traversal
- CSQL injection
- DPrivilege escalation
- ECross-site scripting
- FRequest forgery
13A junior security analyst is conducting an analysis after passwords were changed on multiple accounts without users' interaction. The SIEM have multiple login entries with the following text: suspicious event - user: scheduledtasks successfully authenticate on AD on abnormal time suspicious event - user: scheduledtasks failed to execute c:\weekly_checkups\amazing-3rdparty-domain-assessment.py suspicious event - user: scheduledtasks failed to execute c:\weekly_checkups\secureyourAD-3rdparty-compliance.sh suspicious event - user: scheduledtasks successfully executed c:\weekly_checkups\amazing-3rdparty-domain-assessment.py
Which of the following is the MOST likely attack conducted on the environment?- AMalicious script
- BPrivilege escalation
- CDomain hijacking
- DDNS poisoning
14Which of the following actions would be recommended to improve an incident response process?
- ATrain the team to identify the difference between events and incidents.
- BModify access so the IT team has full access to the compromised assets.
- CContact the authorities if a cybercrime is suspected.
- DRestrict communication surrounding the response to the IT team.
15A cybersecurity administrator needs to implement a Layer 7 security control on a network and block potential attacks. Which of the following can block an attack at
Layer 7? (Choose two.)- AHIDS
- BNIPS
- CHSM
- DWAF
- ENAC
- FNIDS
16Which of the following provides a calculated value for known vulnerabilities so organizations can prioritize mitigation steps?
- ACVSS
- BSIEM
- CSOAR
- DCVE
17A security analyst wants to fingerprint a web server. Which of the following tools will the security analyst MOST likely use to accomplish this task?
- Anmap -pl-65535 192.168.0.10
- Bdig 192.168.0.10
- Ccurl --head http://192.168.0.10
- Dping 192.168.0.10
18A penetration tester was able to compromise an internal server and is now trying to pivot the current session in a network lateral movement. Which of the following tools, if available on the server, will provide the MOST useful information for the next assessment step?
- AAutopsy
- BCuckoo
- CMemdump
- DNmap
19Field workers in an organization are issued mobile phones on a daily basis. All the work is performed within one city, and the mobile phones are not used for any purpose other than work. The organization does not want these phones used for personal purposes. The organization would like to issue the phones to workers as permanent devices so the phones do not need to be reissued every day. Given the conditions described, which of the following technologies would BEST meet these requirements?
- AGeofencing
- BMobile device management
- CContainerization
- DRemote wiping
20During a recent penetration test, the tester discovers large amounts of data were exfiltrated over the course of 12 months via the internet. The penetration tester stops the test to inform the client of the findings. Which of the following should be the client's NEXT step to mitigate the issue?
- AConduct a full vulnerability scan to identify possible vulnerabilities.
- BPerform containment on the critical servers and resources
- CReview the firewall and identify the source of the active connection.
- DDisconnect the entire infrastructure from the internet.
21 A security analyst is designing the appropriate controls to limit unauthorized access to a physical site. The analyst has a directive to utilize the lowest possible budget. Which of the following would BEST meet the requirements?
- APreventive controls
- BCompensating controls
- CDeterrent controls
- DDetective controls
22After gaining access to a dual-homed (i.e., wired and wireless) multifunction device by exploiting a vulnerability in the device's firmware, a penetration tester then gains shell access on another networked asset. This technique is an example of:
- Aprivilege escalation.
- Bfootprinting.
- Cpersistence.
- Dpivoting.
23 Which of the following components can be used to consolidate and forward inbound internet traffic to multiple cloud environments though a single firewall?
- ATransit gateway
- BCloud hot site
- CEdge computing
- DDNS sinkhole
24A Chief Security Officer (CSO) is concerned that cloud-based services are not adequately protected from advanced threats and malware. The CSO believes there is a high risk that a data breach could occur in the near future due to the lack of detective and preventive controls. Which of the following should be implemented to BEST address the CSO's concerns? (Choose two.)
- AA WAF
- BA CASB
- CAn NG-SWG
- DSegmentation
- EEncryption
- FContainerization
25Digital signatures use asymmetric encryption. This means the message is encrypted with:
- Athe sender's private key and decrypted with the sender's public key.
- Bthe sender's public key and decrypted with the sender's private key.
- Cthe sender's private key and decrypted with the recipient's public key.
- Dthe sender's public key and decrypted with the recipient's private key.
26 A systems administrator is troubleshooting a server's connection to an internal web server. The administrator needs to determine the correct ports to use. Which of the following tools BEST shows which ports on the web server are in a listening state?
- Aipconfig
- Bssh
- Cping
- Dnetstat
27A security analyst generated a file named host1.pcap and shared it with a team member who is going to use it for further incident analysis. Which of the following tools will the other team member MOST likely use to open this file?
- AAutopsy
- BMemdump
- CFTK imager
- DWireshark
28During a trial, a judge determined evidence gathered from a hard drive was not admissible. Which of the following BEST explains this reasoning?
- AThe forensic investigator forgot to run a checksum on the disk image after creation.
- BThe chain of custody form did not note time zone offsets between transportation regions.
- CThe computer was turned off, and a RAM image could not be taken at the same time.
- DThe hard drive was not properly kept in an antistatic bag when it was moved.
29A company is considering transitioning to the cloud. The company employs individuals from various locations around the world. The company does not want to increase its on premises infrastructure blueprint and only wants to pay for additional compute power required. Which of the following solutions would BEST meet the needs of the company?
- APrivate cloud
- BHybrid environment
- CManaged security service provider
- DHot backup site
30A company is receiving emails with links to phishing sites that look very similar to the company's own website address and content. Which of the following is the
BEST way for the company to mitigate this attack?- ACreate a honeynet to trap attackers who access the VPN with credentials obtained by phishing.
- BGenerate a list of domains similar to the company's own and implement a DNS sinkhole for each.
- CDisable POP and IMAP on all Internet-facing email servers and implement SMTPS.
- DUse an automated tool to flood the phishing websites with fake usernames and passwords.
31Security analysts are conducting an investigation of an attack that occurred inside the organization's network. An attacker was able to collect network traffic between workstations throughout the network. The analysts review the following logs:
The Layer 2 address table has hundreds of entries similar to the ones above. Which of the following attacks has MOST likely occurred?- ASQL injection
- BDNS spoofing
- CMAC flooding
- DARP poisoning
Information
- Description
- Security+ Comptia Security+ Quiz on ExamGuide Comptia, created by dabbler c on 05/12/2022.
- Author
- dabbler c
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz