Quiz
Security+ Part 3
Perguntas do quiz (10)
1An administrator is configuring a new Linux web server where each user account is confined to a cheroot jail.
Which of the following describes this type of control?- ASysV
- BSandbox
- CZone
- DSegmentation
2A company must send sensitive data over a non-secure network via web services. The company suspects that competitors are actively trying to intercept all transmissions. Some of the information may be valuable to competitors, even years after it has been sent. Which of the following will help mitigate the risk in the scenario?
- ADigitally sign the data before transmission
- BChoose steam ciphers over block ciphers
- CUse algorithms that allow for PFS
- DEnable TLS instead of SSL
- EUse a third party for key escrow
3An administrator requests a new VLAN be created to support the installation of a new SAN. Which of the following data transport?
- AFibre Channel
- BSAS
- CSonet
- DISCSI
4Which of the following can be mitigated with proper secure coding techniques?
- AInput validation
- BError handling
- CHeader manipulation
- DCross-site scripting
5When implementing a mobile security strategy for an organization which of the following is the MOST influential concern that contributes to that organization's ability to extend enterprise policies to mobile devices?
- ASupport for mobile OS
- BSupport of mobile apps
- CAvailability of mobile browsers
- DKey management for mobile devices
6A recent audit has revealed that all employees in the bookkeeping department have access to confidential payroll information, while only two members of the bookkeeping department have job duties that require access to the confidential information. Which of the following can be implemented to reduce the risk of this information becoming compromised in this scenario? (Select TWO)
- ARule-based access control
- BRole-based access control
- CData loss prevention
- DSeparation of duties
- EGroup-based permissions
7A project manager is evaluating proposals for a cloud computing project. The project manager is particularly concerned about logical security controls in place at the service provider's facility. Which of the following sections of the proposal would be MOST important to review, given the project manager's concerns?
- ACCTV monitoring
- BPerimeter security lighting system
- CBiometric access system
- DEnvironmental system configuration
8Joe notices there are several user accounts on the local network generating spam with embedded malicious code. Which of the following technical control should Joe put in place to BEST reduce these incidents?
- AAccount lockout
- BGroup Based Privileges
- CLeast privilege
- DPassword complexity
9A forensics analyst is tasked identifying identical files on a hard drive. Due to the large number of files to be compared, the analyst must use an algorithm that is known to have the lowest collision rate. Which of the following should be selected?
- AMD5
- BRC4
- CSHA1
- DAES-256
10In an effort to reduce data storage requirements, a company devices to hash every file and eliminate duplicates. The data processing routines are time sensitive so the hashing algorithm is fast and supported on a wide range of systems. Which of the following algorithms is BEST suited for this purpose?
- AMD5
- BSHA
- CRIPEMD
- DAES
Informações
- Descrição
- Security+ Part 3
- Autor
- Mike Wen
- Idioma
- English
- Visualizações
- 117
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz