COMPTIA Certification
Quiz yourself by thinking what should be in
each of the black spaces below before clicking
on it to display the answer.
Help!
|
|
||||
|---|---|---|---|---|---|
| show | SSL
🗑
|
||||
| show | USB token and PIN
🗑
|
||||
| QUESTION NO: 3 Which of the following can a security administrator implement on mobile devices that will help prevent unwanted people from viewing the data if the device is left unattended? | show 🗑
|
||||
| show | Protocol analyzer
🗑
|
||||
| QUESTION NO: 5 Which of the following can result in significant administrative overhead from incorrect reporting? | show 🗑
|
||||
| show | Vulnerability scan
🗑
|
||||
| show | Vulnerability scan
🗑
|
||||
| show | ALE
🗑
|
||||
| show | Rogue machine detection
🗑
|
||||
| QUESTION NO: 9 Three of the primary security control types that can be implemented are. | show 🗑
|
||||
| QUESTION NO: 10 The helpdesk reports increased calls from clients reporting spikes in malware infections on their systems. Which of the following phases of incident response is MOST appropriate as a FIRST response? | show 🗑
|
||||
| show | SCP
🗑
|
||||
| QUESTION NO: 12 Joe, the system administrator, has been asked to calculate the Annual Loss Expectancy (ALE) for a $5,000 server, which often crashes. In the past year, the server has crashed 10 times, requiring a system reboot to recover with only 10% | show 🗑
|
||||
| show | Honeypot
🗑
|
||||
| QUESTION NO: 14 Which of the following can be implemented in hardware or software to protect a web server from cross-site scripting attacks? | show 🗑
|
||||
| QUESTION NO: 15 Which of the following means of wireless authentication is easily vulnerable to spoofing? | show 🗑
|
||||
| The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) are to: (Select TWO). | show 🗑
|
||||
| show | LEAP
🗑
|
||||
| show | Chain of custody
🗑
|
||||
| show | Group based privileges
🗑
|
||||
| QUESTION NO: 20 Which of the following is being tested when a company’s payroll server is powered off for eight hours? | show 🗑
|
||||
| QUESTION NO: 21 A security analyst, Ann, is reviewing an IRC channel and notices that a malicious exploit has been created for a frequently used application. She notifies the software vendor and asks them for remediation steps, but is alarmed to find t | show 🗑
|
||||
| show | Social networking
🗑
|
||||
| QUESTION NO: 23 A network administrator is responsible for securing applications against external attacks. Every month, the underlying operating system is updated. There is no process in place for other software updates. Which of the following process | show 🗑
|
||||
| show | Job rotation
🗑
|
||||
| show | IPsec
🗑
|
||||
| QUESTION NO: 26 Which of the following implementation steps would be appropriate for a public wireless hot-spot? | show 🗑
|
||||
| show | Install a digital certificate on the authentication server
🗑
|
||||
| show | 802.1x
🗑
|
||||
| show | Disabling unnecessary services
🗑
|
||||
| show | Establishing baseline reporting
🗑
|
||||
| show | Reduce the certificate management burden.
🗑
|
||||
| show | Access control lists
🗑
|
||||
| QUESTION NO: 33 Which of the following ports is used for SSH, by default? | show 🗑
|
||||
| QUESTION NO: 34 A network administrator has been tasked with securing the WLAN. Which of the following cryptographic products would be used to provide the MOST secure environment for the WLAN? | show 🗑
|
||||
| show | DDoS
🗑
|
||||
| show | RC4
🗑
|
||||
| show | Single factor authentication
🗑
|
||||
| QUESTION NO: 38 After analyzing and correlating activity from multiple sensors, the security administrator has determined that a group of very well organized individuals from an enemy country is responsible for various attempts to breach the company ne | show 🗑
|
||||
| QUESTION NO: 39 Which of the following is true about input validation in a client-server architecture, when data integrity is critical to the organization? | show 🗑
|
||||
| show | Database field encryption
🗑
|
||||
| QUESTION NO: 41 A bank has a fleet of aging payment terminals used by merchants for transactional processing. The terminals currently support single DES but require an upgrade in order to be compliant with security standards. Which of the following is | show 🗑
|
||||
| show | WAF
🗑
|
||||
| QUESTION NO: 43 Which of the following is BEST used to capture and analyze network traffic between hosts on the same network segment? | show 🗑
|
||||
| QUESTION NO: 44 After a number of highly publicized and embarrassing customer data leaks as a result of social engineering attacks by phone, the Chief Information Officer (CIO) has decided user training will reduce the risk of another data leak. Which | show 🗑
|
||||
| QUESTION NO: 45 Which of the following functions provides an output which cannot be reversed and converts data into a string of characters? | show 🗑
|
||||
| show | Stream cipher
🗑
|
||||
| show | SHA
🗑
|
||||
| show | SCP
SSH
SFTP
🗑
|
||||
| show | the security controls on the USB drive can be bypassed.
🗑
|
||||
| show | Packet sniffing
🗑
|
||||
| show | DMZ
🗑
|
||||
| show | LDAP
🗑
|
||||
| show | Black box testing
🗑
|
||||
| show | TPM
🗑
|
||||
| QUESTION NO: 55 A datacenter requires that staff be able to identify whether or not items have been removed from the facility. Which of the following controls will allow the organization to provide automated notification of item removal? | show 🗑
|
||||
| QUESTION NO: 56 A malicious person gained access to a datacenter by ripping the proximity badge reader off the wall near the datacenter entrance. This caused the electronic locks on the datacenter door to release because the: | show 🗑
|
||||
| QUESTION NO: 57 The concept of rendering data passing between two points over an IP based network impervious to all but the most sophisticated advanced persistent threats is BEST categorized as which of the following? | show 🗑
|
||||
| show | The Remote Authentication Dial-In User Service server certificate has expired.
🗑
|
||||
| QUESTION NO: 59 Which of the following would BEST deter an attacker trying to brute force 4-digit PIN numbers to access an account at a bank teller machine? | show 🗑
|
||||
| show | Password history
Minimum password age
🗑
|
||||
| show | Password age
Password history
🗑
|
||||
| show | LDAP
🗑
|
||||
| show | Authentication
🗑
|
||||
| show | PAT
🗑
|
||||
| QUESTION NO: 65 Which of the following components of an all-in-one security appliance would MOST likely be configured in order to restrict access to peer-to-peer file sharing websites? | show 🗑
|
||||
| show | Incorporating diversity into redundant design
🗑
|
||||
| show | Matrix of job titles with required access privileges
🗑
|
||||
| show | Separation of duties
🗑
|
||||
| show | Encryption
🗑
|
||||
| QUESTION NO: 70 A company is trying to limit the risk associated with the use of unapproved USB devices to copy documents. Which of the following would be the BEST technology control to use in this scenario? | show 🗑
|
||||
| QUESTION NO: 71 A company is trying to implement physical deterrent controls to improve the overall security posture of their data center. Which of the following BEST meets their goal? | show 🗑
|
||||
| QUESTION NO: 72 A company’s employees were victims of a spear phishing campaign impersonating the CEO. The company would now like to implement a solution to improve the overall security posture by assuring their employees that email originated from the | show 🗑
|
||||
| QUESTION NO: 73 A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal? | show 🗑
|
||||
| show | Remote wiping
🗑
|
||||
| QUESTION NO: 75 Which of the following is the primary security concern when deploying a mobile device on a network? | show 🗑
|
||||
| QUESTION NO: 76 Which of the following technical controls is BEST used to define which applications a user can install and run on a company issued mobile device? | show 🗑
|
||||
| show | Patch management system
🗑
|
||||
| QUESTION NO: 78 A security administrator discovers an image file that has several plain text documents hidden in the file. Which of the following security goals is met by camouflaging data inside of other files? | show 🗑
|
||||
| show | 802.1x
🗑
|
||||
| QUESTION NO: 80 A company is preparing to decommission an offline, non-networked root certificate server. Before sending the server’s drives to be destroyed by a contracted company, the Chief Security Officer (CSO) wants to be certain that the data wil | show 🗑
|
||||
| QUESTION NO: 81 During the analysis of a PCAP file, a security analyst noticed several communications with a remote server on port 53. Which of the following protocol types is observed in this traffic? | show 🗑
|
||||
| QUESTION NO: 82 A compromised workstation utilized in a Distributed Denial of Service (DDOS) attack has been removed from the network and an image of the hard drive has been created. However, the system administrator stated that the system was left una | show 🗑
|
||||
| show | Preparation
🗑
|
||||
| show | WPA-TKIP
🗑
|
||||
| show | Ann’s private key
Joe’s public key
🗑
|
||||
| show | The CA’s public key
Joe’s public key
🗑
|
||||
| QUESTION NO: 87 A technician wants to implement a dual factor authentication system that will enable the organization to authorize access to sensitive systems on a need-to-know basis. Which of the following should be implemented during the authorizatio | show 🗑
|
||||
| show | OS Baseline comparison
🗑
|
||||
| show | Typo squatting
🗑
|
||||
| show | IDS
🗑
|
||||
| QUESTION NO: 91 An administrator has a network subnet dedicated to a group of users. Due to concerns regarding data and network security, the administrator desires to provide network access for this group only. Which of the following would BEST address | show 🗑
|
||||
| show | Lack of controls in place to ensure that the devices have the latest system patches and
signature files
🗑
|
||||
| QUESTION NO: 93 Due to issues with building keys being duplicated and distributed, a security administrator wishes to change to a different security control regarding a restricted area. The goal is to provide access based upon facial recognition. Which | show 🗑
|
||||
| QUESTION NO: 94 A security administrator has concerns regarding employees saving data on company provided mobile devices. Which of the following would BEST address the administrator’s concerns? | show 🗑
|
||||
| show | Risk acceptance
🗑
|
||||
| show | Continuous security monitoring
🗑
|
||||
| QUESTION NO: 97 A small company can only afford to buy an all-in-one wireless router/switch. The company has 3 wireless BYOD users and 2 web servers without wireless access. Which of the following should the company configure to protect the servers fro | show 🗑
|
||||
| show | Password breaches to the social media site affect the company application as well
🗑
|
||||
| QUESTION NO: 99 A security team has established a security awareness program. Which of the following would BEST prove the success of the program? | show 🗑
|
||||
| QUESTION NO: 100 A company needs to receive data that contains personally identifiable information. The company requires both the transmission and data at rest to be encrypted. Which of the following achieves this goal? (Select TWO). | show 🗑
|
Review the information in the table. When you are ready to quiz yourself you can hide individual columns or the entire table. Then you can click on the empty cells to reveal the answer. Try to recall what will be displayed before clicking the empty cell.
To hide a column, click on the column name.
To hide the entire table, click on the "Hide All" button.
You may also shuffle the rows of the table by clicking on the "Shuffle" button.
Or sort by any of the columns using the down arrow next to any column heading.
If you know all the data on any row, you can temporarily remove it by tapping the trash can to the right of the row.
To hide a column, click on the column name.
To hide the entire table, click on the "Hide All" button.
You may also shuffle the rows of the table by clicking on the "Shuffle" button.
Or sort by any of the columns using the down arrow next to any column heading.
If you know all the data on any row, you can temporarily remove it by tapping the trash can to the right of the row.
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Created by:
erma8585
Popular Computers sets