Virtualization, Risk Reduction, Physical Security/Identity&Access Management Security+ SY0-501

Question 1

Separating specific groups of physical equipment to handle different classes of traffic

Accepted Answer

physical segregation

Question 2

In a(n) _____ configuration, all load balancers are active and share the load evenly.

Accepted Answer

active-active

Question 3

The primary function of a(n) _ is to control the flow of network traffic in & out of a network.

Accepted Answer

firewall

Question 4

___ refers to technology employed to detect and prevent transfers of data across an enterprise.

Accepted Answer

DLP

Question 5

What represents multi-layer defense?

Accepted Answer

layered security

Question 6

_____ systems are platforms on which services are run.

Accepted Answer

Operating

Question 7

Which of the following commands will show a list of "listening" port numbers?

Accepted Answer

netstat

Question 8

___ environment is one in which an organization is controlled by laws, rules, or regulations.

Accepted Answer

regulatory

Question 9

Defined as "the practice of managing endpoints on a case-by-case basis as they connect"

Accepted Answer

NAC

Question 10

What security features has as its primary goal the protection of storage media?

Accepted Answer

SED

Question 11

Which of the following is an example of a non-regulatory environment?

Accepted Answer

NIST

Question 12

With regard to security devices, _____ can either be a sensor or a group of sensors.

Accepted Answer

collectors

Question 13

L2TP/IPsec and PPTP are examples of _____ protocols.

Accepted Answer

tunneling

Question 14

Which of the following is not a tunneling protocol?

Accepted Answer

HTTP

Question 15

_____ gateways translate and convertmedia streams between different technologies.

Accepted Answer

Media

Question 16

What enables network engineers to reconfigure a network via software w/o the need for recabling

Accepted Answer

software-defined networking

Question 17

Occur when someone tries to access network resources that they do not have permission to access

Accepted Answer

Access violations

Question 18

Described as a switch's ability to "learn" MAC addresses when the switch connects to a network.

Accepted Answer

dynamic learning

Question 19

Monitors networks for inappropriate/ unauthorized use but not configured to respond to threats.

Accepted Answer

NIDS

Question 20

Mail _____ process e-mail packets, filter spam, manage data loss, and handle encryption.

Accepted Answer

gateways

Question 21

Monitors networks for inappropriate/ unauthorized & are configured to respond to threats.

Accepted Answer

NIPS

Question 22

_____ _____ provides a means of authenticating machines on a network.

Accepted Answer

MAC filtering

Question 23

A network that sends packets without using a central router or switch.

Accepted Answer

ad hoc

Question 24

Implemented by shutting down device interfaces or blocking traffic to and from specific devices

Accepted Answer

Isolation

Question 25

A strategy of implementing multiple layers of security is referred to as "_____ _____ _____."

Accepted Answer

defense in depth

Question 26

Which of the following is not an advantage of honeypots?

Accepted Answer

Honeypots are relatively easy to manage.

Question 27

_____ decide whether or not traffic is allowed to enter a network.

Accepted Answer

ACLs

Question 28

Network _____ can offer increased throughput and less network disruption.

Accepted Answer

fabrics

Question 29

A(n) _____ _____ is a hardware or software tool used to analyze network traffic.

Accepted Answer

packet sniffer

Question 30

A(n) _____ is a type of DoS attack.

Accepted Answer

flood

Question 31

The art & science of adding watermarks to files so the files can be traced to a specific user.

Accepted Answer

Steganography

Question 32

_____ an applications means that the applications is not allowed to run on a system.

Accepted Answer

Blacklisting

Question 33

Wireless access points typically operate at layers _____ and _____ of the OSI model.

Accepted Answer

1 : 2

Question 34

What proxy servers reduce bandwidth usage/increases network performance by keeping local copies

Accepted Answer

caching proxy

Question 35

_____ compliance focuses on the protection, trustworthiness, and accessibility of data.

Accepted Answer

Regulatory

Question 36

What security features - located on a motherboard - assists with key generation and storage?

Accepted Answer

TPM

Question 37

Protocols providing integrity, authentication & privacy with message authentication/encryption.

Accepted Answer

IPSec

Question 38

helps resolve IPV4 exhaustion by translating private IP addresses into routable IP addresses.

Accepted Answer

NAT

Question 39

_____ _____ are used to search for open ports on a network.

Accepted Answer

Network scanners

Question 40

Tool sets designed to assist hackers w/tasks associated w/exploiting vulnerabilities in systems

Accepted Answer

Exploitation frameworks

Question 41

____ needs to be performed before a system is retired and disposed of.

Accepted Answer

Sanitization

Question 42

A portion of a network where systems will be accessed regularly from an untrusted network.

Accepted Answer

DMZ

Question 43

The practice of _____ makes a system more resistant to an attack.

Accepted Answer

hardening

Question 44

Hubs and bridges are still in use, but _____ have basically replaced them.

Accepted Answer

switches

Question 45

Banner _____ is the act of capturing information provided by banners.

Accepted Answer

grabbing

Question 46

What proxy server examine each client request and compares the request to an AUP?

Accepted Answer

content-filtering proxy

Question 47

A VPN _____ provides a means of managing multiple separate VPN conversations.

Accepted Answer

concentrator

Question 48

Which of the following statements concerning SIEM systems is false?

Accepted Answer

SIEM systems are relatively inexpensive to implement.

Virtualization, Risk Reduction, Physical Security/Identity&Access Management Security+ SY0-501

Questions 48

Virtualization, Risk Reduction, Physical Security/Identity&Access Management Security+ SY0-501

Questions 48