Check to see if a patch is available

It reduces the device's attack footprint

Create an operating system security policy to block use of removable media

A horizontal privilege escalation attack

Spoofing the target's IP address

Deploy a monitored security camera system

Removing the system from inventory

Transfer the files to the phone

Ensuring the default password has been changed

studbud

Sec+ 701 (Domain 2) Part 2

41 termsStudBud Administration44 plays

CompTIA practice questions

Flashcards41 cardsFPractice quizPHost liveL

Questions 41

Answers

1
Question 65
Privilege escalation
Cross-site scripting
A race condition
A SQL injectioN
2
Question 70
Disable the service
Isolate the impacted systems
Install a host-based firewall
Check to see if a patch is available
3
Question 79
It reduces the number of logged events
It speeds up port scans
It reduces the device's attack footprint
It prevents using up default ports
4
Question 75
Magic key attacks
Collision attacks
Downgrade attacks
Birthday attacks
5
Question 82
Monitor removable media usage in host-based firewall logs
Create an operating system security policy to block use of removable media
Only allow applications that do not use removable media
Define a removable media block rule in the UTM
6
Question 81
A horizontal privilege escalation attack
A vertical privilege escalation attack
A forgery attack
A replay attack
7
Question 73
The security log
The application log
The system log
The setup log
8
Question 63
Conducting an on-path attack to send traffic to the target
Reversing the the target's IP address
Spoofing responses from the amplification system to the target
Spoofing the target's IP address
9
Question 56
Video cameras
Intrusion alarm systems
Log analysis
Temperature monitoring sensors
10
Question 44
Centralized logging
A SIEM
An IPS
An EDR
11
Question 72
Web-based attacks
Print-server attacks
Oracle database server attacks
Microsoft SQL Server attacks
12
Question 54
Cross-site request forgery
Bluejacking
Evil twin
Cross-site scripting
13
Question 77
Worms
Network-based attacks
Network packet capture
Evil twins
14
Question 60
Data exfiltration
Financial gain
Revenge
Blackmail
15
Question 52
ACLs
VLANs
A HIPS
Least privilege lists
16
Question 49
Conduct regular inspections of the facility
Deploy a monitored security camera system
Hire a guard to patrol the facility
Set up an alarm system
17
Question 64
Brute forcing
Password spraying
Account spinning
Limited login attacks
18
Question 80
It can be remotely controlled via a web interface
It can be remotely controlled via SSH
It has been infected with malware
It is jailbroken
19
Question 71
Removing memory
Removing the system from inventory
Wiping memory
Removing the system from management
20
Question 61
Phishing
Botnet
Adware
Trojan
21
Question 55
A keylogger
A virus
A Trojan
A rootkit
22
Question 57
Shadow IT
An inadvertent threat
An insider threat
Internal espionage actors
23
Question 69
Unusual network traffic
Network scanning
Displaying a ransom notice
Deletion of files
24
Question 78
Jailbreak the phone
Transfer the files to the phone
Disable antimalware protection
Install a package manager
25
Question 43
Remove the system from organizational inventory
Physically destroy the entire system
Physically destroy the drives
Reformat the drives
26
Question 45
Encryption
Host-based IPS
Disabling ports and protocols
Changing default passwords
27
Question 62
Nation-state actors
Insider threats
Hacktivists
Unskilled attacker
28
Question 46
A match-the-hash attack
A bingo
A birthday attack
A collision
29
Question 50
SMS-based phishing
SMS-delivered images
Malicious links
MFA exploits
30
Question 76
Directory traversal
XSS
XSRF
Buffer overflow
31
Question 74
Configuration enforcement
Segmentation
Decommissioning process
HIPS
32
Question 51
DLL injection
WinBuff attacks
A memory traversal attack
A SYRINGE attack
33
Question 59
Reformatting drives
Volume encryption
Minimizing cluster size
Firmware updates
34
Question 68
Target-of-evaluation
Time-of-change
Time-of-check
Time-of-use
35
Question 47
A disinformation campaign
A pretexting campaign
A misinformation campaign
An impersonation campaign
36
Question 67
Bluesnarfing
Bluejacking
A remote-access Trojan
An evil twin attack
37
Question 53
To preserve availability
To support physical security
To preserve least privilege
To preserve confidentiality
38
Question 58
Running a vulnerability scan
Removing unnecessary software
Ensuring that unneeded ports have been disabled
Ensuring the default password has been changed
39
Question 66
A slashdot attack
A directory traversal attack
A directory recursion attack
A web application buffer overflow
40
Question 48
Watering hole attacks
Unsecure Wi-Fi
Removable devices
Open service ports
41
Question 42
Resource inaccessibility
Impossible travel
Missing logs
Blocked content

Sec+ 701 (Domain 2) Part 2 Flashcards | StudBud