Quiz
Security + practice exam
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (100)
1Which of the following policies applies to any requests that fall outside the criteria defined in an ACL?
- ANon-repudiation
- BImplicit deny policy
- CAcceptable use policy
- DPost-admission NAC
2A lightly protected subnet placed on the outside of the company's firewall consisting of publicly available servers is known as:
- AVPN
- BAccess Point (AP)
- CVLAN
- DDMZ
3Which part of the 192.168.1.5/24 address identifies its network ID?
- A192
- B192.168
- C192.168.1
- D192.168.1.5
4Which of the following acronyms refers to a solution allowing companies to cut costs related to managing of internal calls?
- APBX
- BPOTS
- CP2P
- DPSTN
5A solution that allows to make phone calls over a broadband Internet connection instead of typical analog telephone lines is known as:
- AIMAP
- BVoIP
- CPOTS
- DITCP
6Which of the following answers lists a /27 subnet mask?
- A255.255.255.0
- B255.255.255.128
- C255.255.255.192
- D255.255.255.224
7What type of system can be compromised through phreaking?
- AATX
- BPGP
- CPBX
- DBIOS
8Which of the following terms refers to a logical grouping of computers that allow computer hosts to act as if they were attached to the same broadcast domain, regardless of their physical location?
- ADMZ
- BVirtualization
- CVLAN
- DSNMP
9Which security measure is in place when a client is denied access to the network due to outdated antivirus software?
- ANAC
- BDMZ
- CVLAN
- DNAT
10Which of the following terms refers to a technology that allows multiple operating systems to work simultaneously on the same hardware?
- AHyperthreading
- BVirtualization
- CMulti core
- DCombo drive
11A security stance whereby a host is being granted / denied permissions based on its actions after it has been provided with the access to the network is known as:
- ANetwork separation
- BPre-admission NAC
- CQuarantine
- DPost-admission NAC
12Which of the following solutions is used to hide the internal IP addresses by modifying IP address information in IP packet headers while in transit across a traffic routing device?
- ANAC
- BACL
- CNAT
- DDMZ
13VLAN membership can be set through: (Select all that apply)
- ATrunk port
- BGroup permissions
- CEncryption
- DMAC address
14In which of the cloud computing infrastructure types clients, instead of buying all the hardware and software, purchase computing resources as an outsourced service from suppliers who own and maintain all the necessary equipment?
- AIaaS
- BSaaS
- CP2P
- DPaaS
15Which of the following cloud service types would provide the best solution for a web developer intending to create a web app?
- ASaaS
- BAPI
- CPaaS
- DIaaS
16A cloud computing infrastructure type where applications are hosted over a network (typically Internet) eliminating the need to install and run the software on the customer's own computers is called:
- AThick client
- BSaaS
- CVirtualization
- DIaaS
17The biggest advantage of public cloud is that all services provided through this type of cloud computing service model are offered free of charge.
- ATrue
- BFalse
18A concept of effective security posture employing multiple tools and different techniques to slow down an attacker is known as: (Select 2 answers)
- AVulnerability scanning
- BLayered security
- CAuthorization
- DPrinciple of least privilege
- EDefense in depth
19Which of the IPsec modes provides entire packet encryption?
- ATunnel
- BPayload
- CTransport
- DDefault
20Which of the following protocols is used in network management systems for monitoring network-attached devices?
- ARTP
- BSNMP
- CIMAP
- DSTP
21Which of the following protocols transmit data in an unencrypted form? (Select all that apply)
- ASCP
- BIPsec
- CSNMPv1
- DFTP
- ETelnet
- FSFTP
22A group that consists of SNMP devices and one or more SNMP managers is known as:
- ASNMP trap
- BNetwork Management System (NMS)
- CSNMP community
- DManagement Information Base (MIB)
23Which of the following protocols was designed as a secure replacement for Telnet?
- AICMP
- BFTP
- CIPv6
- DSSH
24A system used to convert a computer's host name into an IP address on the Internet is known as:
- ADNS
- BNetBIOS
- CTLS
- DICMP
25DNS database AAAA record identifies:
- AMail server
- BIPv4 address
- CCanonical name
- DIPv6 address
26Which of the following protocols are used for securing HTTP connections? (Select 2 answers)
- ASCP
- BTelnet
- CSSL
- DSNMP
- ETLS
27Which of the following answers refers to a suite of protocols used for connecting hosts on the Internet?
- ANetBIOS
- BIPv4
- CTCP/IP
- DLAN
28FTPS is an extension to the FTP that adds support for the Transport Layer Security (TLS) and the Secure Sockets Layer (SSL) cryptographic protocols.
- ATrue
- BFalse
29The SCP protocol is used for:
- ADirectory access
- BSecure file transfer
- CNetwork addressing
- DSending emails
30Which of the protocols listed below is used by the PING utility?
- ATLS
- BSNMP
- CFCoE
- DICMP
31Which of the following answers lists the IPv6 loopback address?
- A::/128
- BFF00::/8
- C::1
- D127.0.0.1
32Which of the following answers refers to a networking standard for linking data storage devices over an IP network?
- AiSCSI
- BSSD
- CTPM
- DLDAP
33Which of the following protocols facilitate communication between SAN devices? (Select 2 answers)
- AMTBF
- BTFTP
- CiSCSI
- DHTTPS
- EFCoE
34The FTP protocol is designed for:
- ASending email messages between servers
- BServing web pages
- CTranslating domain names into IP addresses
- DFile exchange
35Which of the protocols listed below does not provide authentication?
- AFTP
- BTFTP
- CSCP
- DSFTP
36Which of the following protocols was designed as a secure replacement for Telnet?
- AFTP
- BIPv6
- CSSH
- DICMP
37FTP runs by default on ports: (Select 2 answers)
- A25
- B23
- C20
- D21
- E22
38Which of the following protocols run(s) on port number 22? (Select all that apply)
- AFTP
- BSSH
- CSMTP
- DSCP
- ESFTP
39Port number 23 is used by:
- ASMTP
- BSSH
- CTelnet
- DTFTP
40Which of the following TCP ports is used by SMTP?
- A25
- B53
- C80
- D23
41DNS runs on port:
- A139
- B53
- C443
- D22
42Which of the following ports enables HTTP traffic?
- A110
- B88
- C143
- D80
43Which of the following ports enable(s) retrieving email messages from a remote server? (Select all that apply)
- A80
- B139
- C110
- D443
- E143
44Which of the port numbers listed below are used by NetBIOS? (Select all that apply)
- A137
- B161
- C138
- D162
- E139
45IMAP runs on TCP port:
- A143
- B25
- C443
- D110
46Which of the following TCP ports is used by HTTPS?
- A80
- B443
- C53
- D143
47Which of the following answers lists the default port number for a Microsoft-proprietary remote connection protocol?
- A139
- B443
- C3389
- D53
48Which of the following protocols operate(s) at layer 3 (the network layer) of the OSI model? (Select all that apply)
- AIPSec
- BIPv6
- CHTTP
- DIPv4
- EIMAP
- FICMP
49In the OSI model, TCP resides at the:
- APhysical layer
- BNetwork layer
- CApplication layer
- DTransport layer
50A network protocol for secure file transfer over secure shell is called:
- AFCoE
- BSFTP
- CTelnet
- DTFTP
51Which of the following wireless encryption schemes offers the highest level of protection?
- AWEP
- BWPA2
- CWAP
- DWPA
52Which of the wireless security protocols listed below has been deprecated in favor of newer standards due to known vulnerabilities?
- APEAP
- BCCMP
- CWPA2
- DWEP
53Which of the following answers refers to an authentication framework frequently used in wireless networks and point-to-point connections?
- ADLP
- BOCSP
- CEAP
- DLDAP
54A network access control method whereby the 48-bit address assigned to each network card is used to determine access to the network is known as:
- AEMI shielding
- BHardware lock
- CMAC filter
- DQuality of Service (QoS)
55Which of the following acronyms refers to a wireless network name?
- ASSID
- BWAP
- CSSO
- DHVAC
56Which of the following protocols was introduced to strengthen existing WEP implementations without requiring the replacement of legacy hardware?
- APEAP
- BTKIP
- CCCMP
- DWPA2
57Disabling SSID broadcast:
- AIs one of the measures used for securing networks
- BMakes a WLAN harder to discover
- CBlocks access to WAP
- DPrevents wireless clients from accessing the network
58Which of the following protocols encapsulates EAP within an encrypted and authenticated TLS tunnel?
- ALDAP
- BPAP
- CTelnet
- DPEAP
59AES-based encryption mode implemented in WPA2 is known as:
- ACCMP
- BTPM
- CTKIP
- DMTBF
60An optimal WAP antenna placement provides a countermeasure against: (Select 2 answers)
- AWar chalking
- BTailgating
- CWar driving
- DShoulder surfing
- ESite survey
61Which of the following WAP configuration settings allows for adjusting the boundary range of the wireless signal?
- ABeacon frame
- BPower level controls
- CQuality of Service (QoS)
- DMAC filtering
62Which of the following answers refers to a solution allowing administrators to block Internet access for users until they perform required action?
- AAccess logs
- BMantrap
- CPost-admission NAC
- DCaptive portal
63Which of the following antenna types would provide the best coverage for workstations connecting to a WAP placed in a central point of a typical office? (Select all that apply)
- AOmnidirectional
- BUnidirectional
- CBidirectional
- DNon-directional
64Which of the following is an example of a wireless site survey?
- ABluejacking
- BSpear phishing
- CWar driving
- DShoulder surfing
65Which of the following examples falls into the category of technical security controls?
- AChange management
- BAcceptable use policy
- CIntrusion detection system
- DIncident response procedure
66An antivirus software identifying non-malicious file as a virus due to faulty virus signature file is an example of:
- AFault tolerance
- BFalse positive error
- CIncident isolation
- DFalse negative error
67Which of the following examples falls into the category of operational security controls?
- AChange management
- BEncryption
- CAntivirus software
- DMantrap
68Which of the following terms refers to a situation where no alarm is raised when an attack has taken place?
- AFalse negative
- BTrue positive
- CFalse positive
- DTrue negative
69A policy outlining ways of collecting and managing personal data is known as:
- AAcceptable use policy
- BAudit policy
- CPrivacy policy
- DData loss prevention
70Which of the following acronyms refers to a set of rules enforced in a network that restrict the use to which the network may be put?
- AOEM
- BAUP
- CUAT
- DARO
71One of the goals behind the mandatory vacations policy is to mitigate the occurrence of fraudulent activity within the company.
- ATrue
- BFalse
72Which of the following answers refers to a concept of having more than one person required to complete a given task?
- AAcceptable use policy
- BPrivacy policy
- CMultifactor authentication
- DSeparation of duties
73A security rule that prevents users from accessing information and resources that lie beyond the scope of their responsibilities is known as:
- AOrder of volatility
- BPrinciple of least privilege
- CPrivacy policy
- DSingle sign-on
74Which of the following acronyms refers to a risk assessment formula defining probable financial loss due to a risk over a one-year period?
- AARO
- BALE
- CSLE
- DUAT
75Single Loss Expectancy (SLE) = Asset Value (AV) x Exposure Factor (EF)
The Exposure Factor (EF) used in the formula above refers to the impact of the risk over the asset, or percentage of asset lost when a specific threat is realized. Which of the following answers lists the EF value for an asset that is entirely lost?- A0
- B100
- C1.0
- D0.1
76A software or hardware that checks information coming from the Internet and depending on the applied configuration settings either blocks it or allows it to pass through is called
- AAntivirus
- BFirewall
- CAntispyware
- DMalware
77A device designed to forward data packets between networks is called
- ASwitch
- BHub
- CRouter
- DMAC filter
78Allowing a program through a firewall is known as creating
- ATunnel
- BEntry
- CAccess Point (AP)
- DException
79A network device designed for managing the optimal distribution of workloads across multiple computing resources is called
- ALoad balancer
- BHIDS
- CFirewall
- DCaptive portal
80The last default rule on a firewall is to
- ACreate an exception
- BAllow all traffic
- CDeny all traffic
- DUnblock all ports
81A computer network service that allows clients to make indirect network connections to other network services is called
- ALoad balancer
- BProxy
- CNetwork Access Control (NAC)
- DBackdoor
82A solution designed for filtering malicious / restricted content from entering corporate networks is known as
- AMAC filter
- BSubnetting
- CHIPS
- DWeb security gateway
83One of the measures for securing networking devices includes the practice of disabling unused ports
- ATrue
- BFalse
84What type of protocols ensure the privacy of a VPN connection?
- AOSPF
- BIPv6
- CTunneling
- DTelnet
85Which of the following answers refers to a dedicated device for managing secure connections established over an untrusted network, such as the Internet?
- ALoad balancer
- BVPN concentrator
- CSpam filter
- DWeb server
86Which of the following acronyms refers to a network or host based monitoring system designed to automatically alert administrators of known or suspected unauthorized activity?
- AIDS
- BAES
- CTPM
- DEFS
87A software tool used to monitor and examine contents of network traffic is known as: (Select all that apply)
- APort scanner
- BPacket sniffer
- CVulnerability scanner
- DProtocol analyzer
88Which of the following answers list the protocol and port number used by a spam filter? (Select 2 answers)
- AHTTPS
- B23
- CSMTP
- D443
- ETELNET
- F25
89Which of the following acronyms refers to a network security solution combining the functionality of a firewall with additional safeguards such as URL filtering, content inspection, or malware inspection?
- AMTU
- BSTP
- CUTM
- DXML
90Which of the following network security solutions inspects network traffic in real-time and has the capability to stop the ongoing attack?
- ANIPS
- BHIDS
- CHIPS
- DNIST
91Which of the following answers refers to a set of rules that specify which users or system processes are granted access to objects as well as what operations are allowed on a given object?
- ACRL
- BNAT
- CBCP
- DACL
92Which of the following actions can be taken by passive IDS? (Select 2 answers)
- AReconfiguring firewall
- BClosing down connection
- CLogging
- DTerminating process
- ESending an alert
93802.1x is an IEEE standard defining
- AToken ring networks
- BPort-based network access control
- CVLAN tagging
- DWireless networking
94An access control model in which access to resources is granted or denied depending on Access Control List (ACL) entries is also known as
- AMandatory Access Control
- BLattice-Based Access Control
- CRole-Based Access Control
- DRule-Based Access Control
95Which type of Intrusion Detection System (IDS) relies on the previously established baseline of normal network activity in order to detect intrusions?
- ASignature-based
- BURL filter
- CAnomaly-based
- DACL
96Which of the following security solutions provides a countermeasure against denial-of-service attack characterized by increasing number of half-open connections?
- AFlood guard
- BMAC filter
- CPort scanner
- DHoneypot
97Which of the following protocols protects against switching loops?
- AUTP
- BSSH
- CSTP
- DHMAC
98Which type of Intrusion Detection System (IDS) relies on known attack patterns to detect an intrusion?
- ALoad balancer
- BSignature-based
- CProtocol analyzer
- DAnomaly-based
99URL filtering restricts access to Internet sites based on which of the following criteria?
- AVirus signature
- BWeb address
- CBaseline
- DData content
100Which of the following acronyms refers to a firewall controlling access to a web server?
- AWPS
- BWEP
- CMTBF
- DWAF
Information
- Description
- CompTIA Security+ Exam SY0-401 All 12 practice tests in one spot
- Author
- Crozeph Rede
- Language
- English
- Views
- 422
- History
- Created on 9 Jun 2015 · updated on 18 Jan 2017
- Tags
- Rating
- 5.0 out of 5 · 2 ratings Rate this quiz