Test
Comptia Study Guide
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (43)
1An attacker tricks a host within a subnet into routing through an attacker's machine, rather than the legitimate default gateway, allowing the attacker to eavesdrop on communications and perform a Man-in-the-Middle (MitM) attack. Compare the types of routing vulnerabilities and conclude what the attacker is exploiting in this scenario.
- A1. Route injection
- B2. Denial of service
- C4. Source routing
- D3. ARP poisoning
2You have hired 10 new temporary workers who will be with the company for three months. You want to make sure that the user accounts cannot be used for login after that time period. What should you do?
- AConfigure account lockout in Group Policy.
- BConfigure account expiration in the user accounts.
- CConfigure account policies in Group Policy.
- DConfigure daytime restrictions in the user accounts.
3Your organization recently purchased 18 iPad tablets for use by the organization's management team. These devices have IOS pre-installed on them.
To increase the security of these devices, you want to apply a default set of security-related configuration settings.
What is the best approach to take to accomplish this? (select two)- AJoin the tablets to a windows domain.
- BEnroll the devices in a mobile device management system
- CConfigure and apply security policy settings in a mobile device management system
- DConfigure security settings in a Group Policicy
4Which of the following are differences between RADIUS and TACACS+?
- ARADIUS combines authentication and authorization into a single function; TACACS+ allows these services to be split between different servers.
- BRADIUS uses TCP, TACACS+ uses UDP
- CRADIUS encrypts the entire packet contents, TACACS+ only encrypts
5Francine is concerned about employees in her company jailbreaking their COPE devices. What would be the most critical security concern for jailbroken devices?
- AThey would no longer get security patches.
- BIt would disable FDE.
- CUnauthorized applications could be installed.
- DData could be exfiltrated on these devices.
6Some users on your network use Acme Bank for their personal banking. Those users have all recently been the victim of an attack, wherein they visited a fake Acme Bank website and their logins were compromised. They all visited the bank website from your network, all of them insist they typed the correct URL. What is the most likely explanation?
- ATrojan Horse
- BIP Spoofing
- CClickjacking
- DDNS Poisoning
7Which cloud service model provides the consumer the infrastructure to create applications and host them?
- ASaaS
- BPaaS
- CIaaS
- DCaaS
8You work for a large bank. One of your responsibilities is to ensure that web banking
logins are as secure as possible. You are concerned that a customer's account login could
be compromised and someone else would use that login to access the customer's account.
What is the best way to mitigate this threat?- ARequire strong passwords.
- BDo not allow customers to log on from any place other than their home computer.
- CEncrypt all traffic via TLS.
- DUse SMS authentication for any logins from an unknown location or computer.
9You are responsible for technical support at your company. Users are all complaining of very slow internet connectivity. When you examine the firewall, you find a large number of incoming connections that are not completed, all packets are coming from a single IP address. What best describes this attack?
- ADDoS
- BSYN Flood
- CBuffer Overflow
- DARP Poisoning
10Jared is responsible for network security at his company. He has discovered behavior on one computer that certainly appears to be a virus. He has even identified a file he thinks might be the virus. However, using three separate antivirus programs, he finds that none can detect the file. Which of the following is most likely to be occurring?
- AThe computer has a zero-day exploit
- BThe computer has a RAT
- CThe computer has a rootkit
- DThe computer has a logic Bomb
11A sales manager at your company is complaining about slow performance on his computer. When you thoroughly investigate the issue, you find spyware on his computer. He insists that the only thing he has downloaded recently was a freeware stock trading application. What would best explain this situation?
- ATrojan horse
- BLogic horse
- CMacro Virus
- DRootkit
12You have used firewalls to create a demilitarized zone. You have a web server that needs to be accessible to internet users. The web server must communicate with a database server for retrieving product, customer, and order information. How should you place devices on the network to best protect the servers?
- Aput the database server on the private network
put the web server inside the DMZ - Bput the webserver on the private network
put the database server inside the DMZ
- Aput the database server on the private network
13Your networking closet contains your network routers, switches, bridges, and some servers. You want to make sure an attacker is not able to gain physical access to the equipment in the networking closet and prevent anyone from reconfiguring the network to set up remote access or backdoor access.
Which of the following measures is the best way to secure your networking equipment from unauthorized physical access? (Select two. Each measure is part of a complete solution.)- APlace your networking equipment in a locked cage
Place your networking equipment in a room that requires key card entry - BPlace your networking equipment in a TEMPEST cage
Place your networking equipment in a room that requires key card entry
Place your networking equipment in a Faraday Cage
- APlace your networking equipment in a locked cage
14While using the Internet, you type the URL of one of your favorite sites in the browser. Instead of going to the correct site, however, the browser this place a completely different website. When you use the IP address of the webserver, the correct site is displayed.
Which type of attack has likely occurred?- ADNS poisoning
- BMan-in-the-middle
- Cspoofing
- DHijacking
15You are responsible for incident response at a mid-sized bank. You have discovered that someone was able to successfully breach your network and steal data from your database server. All servers are configured to forward logs to a central logging server. However, when you examine that central log, there are no entries after 2:13 a.m. two days ago. You check the servers, and they are sending logs to the right server, but they are not getting there. Which of the following would be most likely to explain this?
- AYour log server has a backdoor
- BYour log server has been hit with a buffer overflow attack
- CYour switches have been hit with ARP poisoning
- DYour IDS is malfunctioning and blocking log transmissions
16You are a network security administrator for a bank. You discover that an attacker has exploited a flaw in OpenSSL and forced some connections to move to a weak cipher suite version of the TLS, which the attacker could breach. What type of attack was this?
- ADisassociation Attack
- BDowngrade Attack
- CSession Hijacking
- DBrute Force
17Which action is taken when the private key associated with a digital certificate becomes compromised?
- AThe certificate is revoked and added to the Certificate Revocation List.
- BThe CA retracts all previously issued copies of the certificate.
- CThe RA requests a reissued digital signature based on the existing
- DAll certificates are revoked from parties known to possess the matching public key.
18You are responsible for incident response at Acme bank. The Acme bank website has been attacked. The attacker used the login screen, but rather than enter login credentials, he or she entered some odd text: ' or '1' = '1. What is the best description of this attack?
- ACross-site Scripting
- BCross-site Request Forgery
- CSQL Injection
- DARP Poisoning
19One of your users cannot recall the password for their laptop. You want to recover that password for them. You intend to use a tool/technique that is popular with hackers, and it consists of searching tables of precomputed hashes to recover the password. What best describes this?
- Arainbow table
- BBackdoor
- CDictionary Attack
- DSocial engineering
20Hanz is responsible for the e-commerce servers at his company. He is concerned about how they will respond to a DoS attack. Which software testing methodology would be most helpful in determining this?
- AStress testing
- BFuzz testing
- Cintegration testing
- Dregression testing
21Shella is concerned that some users on her network may be accessing files that they should not especially files that are not required for their job tasks. Which of the following would be most effective in determining if this is happening?
- AUsage auditing and review
- BPolicy review
- CAccount maintenance
- DPermission auditing and review
22Lisa is responsible for security at a mid-sized company. She wants to prevent users on her network from visiting job-hunting sites while at work. Which of the following would be the best device to accomplish this goal?
- AProxy server
- BFirewall
- CNat
- DNips
23Jack is a network administrator for an insurance company. His company has a number of transaction salespeople. He is concerned about confidential data on their Laptop. What is the best way to address this?
- ASDN
- BDMZ
- CTPM
- DFDE
24If a user's BYOD device, such as a tablet or phone, is infected with malware, that malware can be spread if that user connects to your organization's network. One way to prevent this event is to use a network access control (NAC) system.
- AThe NAC notify users that personally owned devices are subject to random searches if brought on site.
- BThe NAC remediates devices before allowing them to connect to your network.
25You are responsible for database security at your company. You are concerned that programmers might pass badly written SQL commands to the database, or that an attacker might exploit badly written SQL in applications. What is the best way to mitigate this threat?
- AStored procedures
- BProgrammer policies
- CProgrammer training
- DAgile programming
26 Lilly is a network administrator for a medium-sized financial services company. She wants
to implement company-wide encryption and digital signing of emails. But she is concerned
about cost since there is a very limited budget for this. What would be her best choice?- ASMTPS
- BS/MIME
- CIMAPS
- DPGP
27Teresa is a security officer at ACME Inc. She has discovered an attack where the attacker sent multiple broadcast messages to the network routers, spoofing an IP address of one of the network servers. This caused the network to send a flood of packets to that server and it is no longer responding. What is this attack called?
- ADDoS Attack
- BTCP SYN Flood Attack
- CSmurf Attack
- DTCP Hijacking Attack
28You have installed anti-virus software on the computers on your network. You update the definition and engine files and configure the software to update those files every day.
What else should you do to protect your systems from malware? (Select two.)- ASchedule regular full system scans.
Educate users about malware. - BEnable account lockout
- ASchedule regular full system scans.
29Dominik is responsible for security at a medium-sized insurance company. HE is very concerned about detecting intrusions. The IDS he has purchased states that he must have an IDS on each network segment. what type of IDS is this?
- Ainline
- BActive
- CPassive
- DIPS
30Which of the following security solutions would prevent a user from reading a file which she did not create?
- AEFS
- BVPN
- CIP sec
- DBitlocker
31A user named Bob Smith has been assigned a new desktop workstation to complete his day-to-day work. The computer runs Windows 7. When provisioning Bob's user account in your organization's domain, you assigned an account name of BSmith with an initial password of bw2Fs3d At his fist logon, Bob is prompted to change his password, so he changes it to Fido, the name of his dog. What should you do to increase the security of Bob's account?
- ATrain users not to use passwords that are easy to guess
Use group policy to Require users to set a stronger password upon initial logon - BInteger Overflow
- ATrain users not to use passwords that are easy to guess
32You have conducted a risk analysis to protect a key company asset. You identify following values:
*Asset value = 400
*Exposure factor = 75
* Annualized Rate of Occurrence =.25
What is the Annualized Loss Expectancy (ALE)?- A25
- B75
- C100
- D175
- E475
33Your organization uses a web server to host an e-commerce site. Because this webserver handles financial transactions, you are concerned that it could become a prime target for exploits. You want to implement a network security control that will analyze the contents of each packet going to or from the webserver. The security control must be able to identify malicious payloads and block them. What should you do?
- AImplement an application-aware IDS in front of the webserver
- BImplement a packet-filtering firewall in front of the webserver
- CImplement an application-aware IPS in front of the webserver
34Which of the following are advantages of virtualization? ( Select two)
- A- Centralized administration.
- Easy system migration to different hardware. - BReduced utilization of hardware resources.
- Improved detection of host-based attacks.
- A- Centralized administration.
35Maria is a security engineer with a manufacturing company. During a recent investigation,
she discovered that an engineer's compromised workstation was being used to connect
to SCADA systems while the engineer was not logged in. The engineer is responsible
for administering the SCADA systems and cannot be blocked from connecting to them.
What should Maria do to mitigate this threat?- AImplement account usage auditing on the SCADA system.
- BImplement a NIPS on the SCADA system.
- CUse FDE on the engineer's system.
- Dinstall host-based antivirus software on the engineer's system.
36jack is responsible for security at a large financial services company. The company frequently uses SSL/ TLS for connecting to external resources. he has concerns that an insider might exfiltrate data using an SSL/TLS tunnel. What would be the best solution to this issue?
- ANIDS
- BSSL accelerator
- CNIPS
- DSSL decrytor
37Juan is responsible for the SIEM in his company. The SIEM aggregates logs from 12 servers. In the event that a breach is discovered, which of the following would be Juan's most important concern?
- ACorrelation
- Bevent duplication
- CImpact assessment
38John is analyzing strange behavior on computers in his network. He believes there is malware on the machines. The symptoms include strange behavior that persists, even if he boots the machine to a Linux Live CD. What is the most likely cause?
- Arootkit
- Bkey logger
- Cransomware
- DBoot Sector Virus
39You want to implement 802.1x authentication on your wireless network. Which of the following will be required?
- Awpa2
- BTKIP
- CRADIUS
- DWPA
40A salesperson in your organization spends most of her time traveling between customer sites. After a customer visit, she must complete various managerial tasks, such as updating your organization's order database.
Because she rarely comes back to your home office, she usually accesses the network from her notebook computer using Wi-Fi access provided by hotels, restaurants, and airports.
Many of these locations provide unencrypted public Wi-Fi access, and you are concerned that sensitive data could be exposed. To remedy this situation, you decide to configure her notebook to use a VPN when accessing the home network over an open wireless connection.
Which key steps should you take when implementing this configuration? ( Select two.)- A* Configure the VPN connection to use IPsec.
* Configure the browser to send HTTPS requests through the VPN connection. - B* Configure the browser to send HTTPS requests directly to the WI-FI
* Configure the VPN connection to use PPTP
- A* Configure the VPN connection to use IPsec.
41You want to identify all devices on a network along with a list of open ports on those devices. You want the results displayed in a graphical diagram. Which tool should you use?
- AOVAL
- BPort scanner
- CNetwork mapper
- DPing scanner
42You currently work for a large company and are concerned about ensuring all workstations have a common configuration, do not contain a rogue software installation, and all patches are kept up to date. Of the following, which would be most effective to accomplish this?
- AUse an image for all workstation
- BUse VDE
- CImplement strong policies
- DImplement strong patch management
43Your network devices are categorized into the following zone types: No trust zone; Low-trust zone; Medium-trust zone; high-trust zone. Your network architecture employs multiple VLANs for each of these network zones. Each zone is separated by a firewall that ensures only specific traffic is allowed. Which of the following is the security architecture that is being used on this network?
- ANetwork segmentation
- BTrust-zone networking
- Cvirtual local area networking
- DNetworking firewalling
Información
- Descripción
- Test sobre Comptia Study Guide, creado por caleb caleb el 29/09/2021.
- Autor
- caleb caleb
- Idioma
- English
- Visitas
- 2
- Valoración
- Aún sin valoraciones Valora este test