stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security+ Questions Including PP&A Flashcards | StudBud
Explore
/
Security+ Questions Including PP&A
Security+ Questions Including PP&A
63 terms
·
StudBud Administration
·
6 plays
Imported from external platform
Flashcards
63 cards
F
Practice quiz
P
Host live
L
Questions
63
Answers
1
Port 445
SNMP
SMTP
STP
SMB
2
Port 88
FTPS
SMTPS
IMAPS
Kerberos
3
ASYMMETRIC
SHA
AES
TWOFISH
RSA
4
Port 3389
SMTP
SNMP
RDP
RADIUS
5
SYMMETRIC
DSA
MD5
ECC
DES
6
SYMMETRIC
DSA
RSA
MD5
AES
7
Port 23
SMB
FTP
Telnet
SCP
8
Due to regulatory requirements, a sec analyst must implement full drive encryption on server.
Ensure the HW supports VT-X, and enable it in the BIOS.
Enable and configure EFS on the file system.
Ensure the hardware supports TPM and enable it in the BIOS.
Enable and configure DFS across the file system.
9
ASYMMETRIC
ECC
RIPMED
IDEA
TWOFISH
10
control to use to prevent other patron from accessing your laptop directly at a café
full-disk encryption
Current antivirus definitions
Host-based firewall
Latest OS updates
11
SYMMETRIC
MD5
DSA
IDEA
ECC
12
a secure method of file transfer when communicating with outside organizations
SNMP
FTP
TFTP
FTPS
13
Implementing IPSec VPN access for remote users. Which IPSec mode is most secure?
Tunnel mode
ESP-only mode
Transport mode
AH-only mode
14
Sending sensitive infor using PKI. Sender encrypts message hash with the sender's private key
Transport security
Steganography
Email content encryption
Non-repudiation
15
A group of non-profit agencies wants to implement a cloud service to share resources with each other and minimize costs.
Hybrid
Private
Community
Public
16
Which of the following describes the key difference between vishing and phishing attacks?
Vishing attacks require knowledge of the target attack.
Phishing is a category of social engineering attack.
Phishing is used by attackers to steal a person's identity.
Vishing attacks are accomplished using telephony services.
17
HASH
3DES
DES
RSA
MD5
18
Port 443
DNS
HTTP
HTTPS
SHTTP
19
Port 143
IMAP
FTPS
SMPT
POP3
20
conducting secure transactions; before encrypting and exchanging the data files, ensure a secure exchange of keys.
DES
Diffie-Hellman
Blowfish
DSA
21
a secure method of file transfer when communicating with outside organizations
SNMP
SCP
FTP
TFTP
22
Sending sensitive infor using PKI. Sender encrypts message hash with the sender's private key
Transport security
Message integrity
Steganography
Email content encryption
23
describes the case in which the tool incorrectly identifies the vulnerability
False negative
False positive
True negative
True positive
24
Port 15
FTPS
NetBios
SFTP
Netstat
25
Ports 989/990
FTP
SFTP
FTPS
TFSP
26
Due to regulatory requirements, a sec analyst must implement full drive encryption on server.
Enable and configure EFS on the file system.
Enable and configure BitLocker on the drives.
Ensure the HW supports VT-X, and enable it in the BIOS.
Enable and configure DFS across the file system.
27
Port 110
IMAP
Telnet
POP3
SMTP
28
ASYMMETRIC
DIFFIE-HELLMAN
RC
RC4
RIPMED
29
Port 53
LDAPS
Kerberos
LDAP
DNS
30
Port 465/587
SMTPS
S/MIME
IMAPS
LDAPS
31
ASYMMETRIC
IDEA
PERFECT FORWARD SECRECY
RIPMED
AES
32
a project that requires the implementation of a stream cipher
Hash function
Public key cryptography
Elliptic curve
Symmetric algorithm
33
Port 161, 162
SNMP
SSH
NetBIOS
SMTP
34
Port 993
IMAPS
LDAPS
SMTPS
LDAP
35
configuring a firewall to block external DNS traffic from entering a network. Wjhat port should be blocked?
80
143
443
53
36
to encrypt the files in several sensitive directories of a file server with a symmetric key.
Diffie-Hellman
RSA
RIPEMD
TwoFish
37
allowing organizations with similar structures to capitalize on the benefits of shared storage and resources
Private
Public
Community
Hybrid
38
Port 137, 138, 139
NetBIOS
IMAP
POP3
DNS
39
Port 80
TFTP
HTTPS
HTTP
SMTP
40
HASH
AES
DSA
DES
SHA-1
41
An in-house penetration tester is using a packet capture device to listen in on network communications.
Passive reconnaissance
Escalation of privileges
Persistence
Exploiting the switch
42
Port 1,812
RDP
SMTP
RADIUS
SNMP
43
MINIMIZES the risk from network attacks directed at MFD as well as the impact on functionality at the same time
Enabling full disk encryption
Isolating the systems using VLANs
Implementing a unique user PIN access functions
Installing a software-based IPS on all devices
44
SYMMETRIC
ECC
SHA-1
RIPMED
3DES
45
HASH
RIPMED
IDEA
RC4
DIFFIE-HELLMAN
46
Port 143
ICMP
S/MIME
POP3
IMAP
47
a site-to-site VPN requires SSL certificates and MAC address to be visible across the tunnel
L2TP
Transport mode VPN IPSec
Tunnel mode IPSec
SSL VPN
48
The IT department needs to prevent users from installing untested applications. Which is the best solution?
Job rotation
Antivirus
Account lockout
Least privilege
49
When systems are not supported by the vendor, it is a vulnerability known as:
system sprawls
end-of-life systems
resource exhaustion
a default configuration
50
Port 22
IMAP
SSH/SCP/SFTP
FTP
Telnet
51
IT Department needs to encrypt several smart phones that will be going into the field.
Elliptic curve
AES
One-time pad
3DES
52
a method of securing internal routing
NAT
VPN
DMZ
PAT
53
SYMMETRIC
BLOWFISH
DIFFIE-HELLMAN
RSA
DSA
54
testing the collision resistance of different hashing algorithms.
Find two identical messages with the same hash
Find a common hash between a specific message and a random message
Find two identical messages with different hashes
Find a common hash between two specific messages
55
Port 69
TFTP
SMTP
HTTP
HTTPS
56
Port 636
LDAPS
FTPS
RDP
Kerberos
57
Port 389
RDP
IMAPS
IMAP
LDAP
58
Port 25
FTP
Telnet
Netstat
SMTP
59
SYMMETRIC
DSA
PERFECT FORWARD SECRECY
SHA-1
RC
60
Port 20
FTP
TFTP
DNS
SNMP
61
simplifying the configuration of mobile clients connecting to an encrypted wireless network.
TKIP
WPA2-PSK
802.1x
WPS
62
ASYMMETRIC
SHA-1
DSA
BLOWFISH
3DES
63
Works by implanting software on systems but delays execution until set of conditions are met?
ransomeware
scareware
trojan
logic bomb