CompTIA Security+

When connected to a router, what encryption technology is most likely to be configured when using the WPA2-PSK option?

Which is a company doing if they purchase insurance to cover the cost of any potential loss because of new credit rules?

Which of the following attacks specifically impact data availability?

What subnet would best meet the requirements of the corporate firewall interfaces to use as a DMZ for 14 physical hosts?

Which choice is the best reason that the company added a Proprietary data type after adding Private & Public data types?

Which of the following can be provided to an AAA system for the identification phase?

Which of the following differentiates a collision attack from a rainbow table attack?

Which of the following technical controls would help prevent weak passwords and old passwords within a company network?

Which of the following characteristics best describes what a cost-effective, high demanding architecture would be?

Which of the following would a security specialist be able to determine upon examination of a server’s certificate?

Joe downloads an app not from the app store. Which of the choices allowed Joe to install the app? (There are 2 answers)

Which of the following certificate formats should an engineer use to obtain the information in an X.509 required format?

An employee receives an email from the CEO, asking for a report of credentials. What type of attack is likely occurring?

Which of the following categories does a smart refrigerator belong to?

Which of the following should an analyst implement to ensure LDAP traffic cannot be monitored and/or sniffed?

Which choice of network-based security controls should someone consider implementing for malicious traffic protection?

Which of the following methods should an administrator implement for securing internal routing?

Which access control model has been applied to user's accounts if they can't access data at a higher permissions level?

Which of the following would best accomplish full security of an FTP server while keeping the same port and protocol?

Which of the following best describes routine in which semicolons, dashes, quotes, and commas are removed from a string?

Which of the following describes the case in which a source code review tool incorrectly identifies a vulnerability?

Which of the following explains why vendors publish hash values when they provide software patches for their downloads?

An information security analyst should seek out which type of employee that can answer questions about specific data?

An attacker discovers a new vulnerability and takes advantage of it by developing new malware. What is being described?

When performing data acquisition on a desktop, what should be captured based on memory volatility? (There are 2 choices)

An attacker compromises a CA and issues unauthorized X.509 certificates. What would help the company fix the public CA?

During a routine audit, someone used a stale account for inappropriate websites. What could of have best prevented this?

What works by implanting software on a system but delays execution until a specific set of conditions is met?

A portable storage device has been determined to be malicious. What is the best course of action for confidentiality?

Which of the following best describes an important security advantage yielded by implementing vendor diversity?

While reviewing the internet usage there was a large spike in "unknown" traffic. What tool would help get info about it?

What should be implemented if an administrator does not want to provide the wireless password to any of his employees?

Which of the following allows third party applications to be installed onto a mobile device using a computer?

Which of the following types of keys is found in a key escrow?

Which of the following security controls does an iris scanner provide?

An organization has determined it can tolerate a maximum of three hours of downtime. Which choice has been specified?

An administrator wants to ensure that users don't use unauthorized devices. What is the best way to go about it?

What should a security analyst use to prevent random inputs of data on corporate web pages for security purposes (SQL)?

A technician has installed new vulnerability scanner, and is able to provide visibility of clients. What is being use?

Which of the following characteristics differentiate a rainbow table attack from a brute force attack?

If an administrator is encrypting a service, why should the administrator take advantage of the SAM of a certificate?

Which policy or procedure could have stopped an employee from deleting files from a server while the store was closed?

If a group of non-profit agencies wants to implement a cloud service to share resources with each other, which is best?

Which of the following actions should a security analyst take to resolve the, "This website cannot be trusted" message?

Which of the following should be implemented if multiple organizations use the native 802.1x client on their devices?

Which of the following should identify critical systems and components?

Which of the following threat actors is most likely to steal a company’s proprietary information to gain a market edge?

What has an application programmer failed to implement if a malicious user was able to carry an SQL injection attack?

Which of the following implements two-factor authentication?

A mobile application is being developed. What security activities should be used to discover it's vulnerabilities?

Company policy requires usage of passphrases. What must be in place in order to promote usage of passphrases?

Which of the following encryption methods does PKI typically use to securely project keys?

Which of the following is not a common means of securing machine learning algorithms?

Which of the following should a security analyst do to determine if a compromised system still has an active connection?

Which of the following types of cloud infrastructures would show organizations to realize the benefits of shared drives?

If company is making a new system that will unlock a computer automatically, what is the best choice for this scenario?

A web application is configured to target browsers and allow access to bank accounts. This is an example of what attack?

Which of the following can be provided to an AAA system for the identification phase?

To fix a domain controller an admin needs to provide the domain admin password, which account type is the admin using?

Which of the following actions is represented when a penetration tester is on a website that's available to the public?

If a database backs up every Saturday and it is restored on Tuesday, how many backups will it take for a full recovery?