Which of the following would BEST alleviate her concerns?

Create an approved application list and block anything not on it.

Which user account options were enforced?

Password complexity, Password Expiration

What risk mitigation strategy is supported by TACACS+ for controlling access to network equipment?

User rights and permissions review

Which of the following authentication technique is MOST appropriate?

Time-Based One Time Password (TOTP)

Which of the following should the security administrator do in regards to the application?

Accept the risk and continue to enable the accounts each month saving money

What's the best security control to prevent auditor access to password management applications?

Role-based access with read-only

Which of the following is the GREATEST security risk of 2 or more companies working together under a MOU?

MOUs may lack guidelines to protect sensitive data.

Which of the following should the user do NEXT?

Contact the help desk and/or incident response team to determine next steps

Which of the following is a difference between TFTP and FTP?

TFTP utilizes UDP and FTP uses TCP.

An admin wishes to add facial recognition to fix key copy threats. Which of the following will address this requirement?

Place a guard at the entrance to approve access.

A certificate authority takes which of the following actions in PKI?

Issues and signs all root certificates

Access mechanisms to data on encrypted USB hard drives must be implemented correctly otherwise:

the security controls on the USB drive can be bypassed.

studbud

Security+ SY0-601 Practice – Set L

90 termsStudBud Administration52 plays

Taken from https://exampremium.com/comptia-security/ Questions and answers had to be shorted to fit in Quiz character count

Flashcards90 cardsFPractice quizPHost liveL

Questions 90

Answers

1
Which of the following authentications servers are configured to share secrets on servers and clients?
TACACS+
RADIUS
Kerberos
LDAP
2
What can be used to identify network security posture without exploiting weaknesses?
Brute Force scan
Code review
Penetration test
Vulnerability scan
3
Which of the following is a hardware-based security technology included in a computer?
Symmetric key
Asymmetric key
Whole disk encryption
Trusted platform module
4
Which of the following would BEST mitigate this issue?
Disabling unnecessary accounts
Disabling unnecessary services
Enabling time of day restrictions
Rogue machine detection
5
Unsolicited files sent to employee's Smartphone in taxi. Which of the following is this an example of?
Bluejacking
Vishing
SPIM
War Driving
6
Which of the following authentication methods is using a username, password, and four-digit PIN?
Four factor
Three factor
Two factor
Single factor
7
Which of the following is a notification that an unusual condition exists and should be investigated?
Trap
Trend
Alarm
Alert
8
What allows either unencrypted or encrypted authentication through TLS based on previous X.500 specification?
TACACS+
RADIUS
LDAP
Kerberos
9
Which metric is most important if the payroll system crashes?
Software Language and Engineering (SLE)
Mean Time Between Failures (MTBF)
Application Release Optimizer/Option (ARO)
Mean Time to Repair (MTTR)
10
Which of the following authentication services uses a ticket granting system to provide access?
Kerberos
TACACS+
RADIUS
LDAP
11
Multi-tenancy is a concept found in which of the following?
Cloud computing
Full disk encryption
Data loss prevention
Removable media
12
The developer adds text to passwords to prevent easy decryption. What is this technique called?
Salting.
Private key cryptography
Rainbow tables.
Symmetric cryptography.
13
What would a security admin implement to identify problem between two systems not communicating properly?
Baseline report
Risk assessment
Protocol analyzer
Vulnerability scan
14
Which of the following would BEST alleviate her concerns?
Maintain the baseline posture at the highest OS patch level.
Create an approved application list and block anything not on it.
Enable the pop-up blockers on the users’ browsers to prevent malware.
Deploy HIDS suite on user computers to prevent app installation.
15
Which user account options were enforced?
Group based privileges
Password complexity
Password Expiration
Lockout
16
What type of attack involves intercepting authentication traffic for network access?
Replay Attack
Evil Twin
IV attack
Near field communication
17
What's a customer concern if the offshore staff has data access?
Interoperability agreements
Service level agreements
Data ownership
Privacy considerations
18
What's the best method for assigning user rights to sales department with high turnover?
Group based privileges
Domain admin restrictions
Time of day restrictions
User assigned privileges
19
What is most likely affected if developer installs new application on production system to test functionality?
Initial baseline configuration
Management of interfaces
Application security
Application design
20
What can help determine the origin of an attack on a web server?
Network sniffing
Screenshots
Capture system image
Record time offset
21
What risk mitigation strategy is supported by TACACS+ for controlling access to network equipment?
User rights and permissions review
Data loss prevention
Implement procedures to prevent data theft
Change management
22
Which of the following BEST protects the credit card data?
Full disk encryption
Data loss prevention system
File-level encryption
Database field encryption
23
Which of the following concepts would enforce this process?
Job Rotation
Separation of Duties
Discretionary Access Control
Mandatory Vacations
24
Which of the following may significantly reduce data loss if multiple drives fail at the same time?
Server clustering
RAID
Load balancing
Virtualization
25
What's the term for removing accounts and services to reduce risk?
Application patch management
Cross-site script prevention
Application hardening
Error and exception handling
26
Which of the following types of interoperability agreement is this?
ISA
BPA
MOU
SLA
27
What can block you from a website on the work network?
Proxy server
Protocol analyzer
Firewall
Internet content filter
28
An admin, has observed repeated attempts to break into the network. What is designed to stop an intrusion on the network
NIDS
HIDS
NIPS
HIPS
29
Which of the following attacks does this describes?
Malicious add-on
Zero-day
SQL injection
Cross site scripting
30
Which of the following authentication technique is MOST appropriate?
Common Access Cards
HMAC based One Time Password Algorithm (HOTP)
Time-Based One Time Password (TOTP)
Single sign-on
31
Which of the following should the security administrator do in regards to the application?
Accept the risk and continue to enable the accounts each month saving money
Allow users to re-enable accounts to avoid risk.
Transfer the risk by replacing the application now instead of in five years
Patch app to mitigate risk and save money.
32
RC4 is a strong encryption protocol that is generally used with which of the following?
WEP
PEAP
EAP-TLS
WPA2 CCMP
33
Which of the following is the MOST intrusive type of testing against a production system?
Penetration Testing
White box testing
Vulnerability Testing
War Dialing
34
Which protocol is used by users who need more information about another user?
Kerberos
TACACS+
LDAP
RADIUS
35
Which of the following identifies certificates that have been compromised or suspected of being compromised?
Access control list
Certificate authority
Key escrow registry
Certificate revocation list
36
What's the best security control to prevent auditor access to password management applications?
Time of day restrictions
Role-based access with read-only
Mandatory access control
Create user accounts for the auditors and assign read-only access
37
Which of the following methods should the system administrator implement?
User access review
Credential management
Generic account prohibition
Group based privileges
38
What practice should be implemented to prevent software vulnerabilities prior to production release?
Patch regression testing
Input validation
Code review
Product baseline report
39
What encryption solution should a technician use to ensure strongest security with RC4 protocol?
WPA2-AES
WEP
WPA-TKIP
802.11ac
40
Which of the following is the GREATEST security risk of 2 or more companies working together under a MOU?
MOUs may lack guidelines to protect sensitive data.
MOU's lack of budget may result in unanticipated costs.
MOUs have strict policies and high penalties for breaches.
MOUs lack the same legal standards as SLAs
41
Which of the following controls could they implement to BEST meet this goal?
Spam Filter
Antivirus Software
Digital Signatures
Digital Certificates
42
Which of the following should the user do NEXT?
Contact their manager and request guidance on how to best move forward
Reply back to the requestor to gain their contact information and call them
Contact the help desk and/or incident response team to determine next steps
Give the requester email info since it'll be released soon.
43
Which of the following would mitigate this attack?
Certificate pinning
Public key infrastructure
Key escrow
Certificate revocation
44
Which of the following is a difference between TFTP and FTP?
TFTP utilizes TCP and FTP uses UDP.
TFTP is slower than FTP.
TFTP utilizes UDP and FTP uses TCP.
TFTP is more secure than FTP.
45
An admin wishes to add facial recognition to fix key copy threats. Which of the following will address this requirement?
Set up mantraps to avoid tailgating of approved users.
Implement proximity readers to scan users’ badges.
Install a fingerprint scanner at the entrance.
Place a guard at the entrance to approve access.
46
A certificate authority takes which of the following actions in PKI?
Issues and signs all private keys
Publishes key escrow lists to CRLs
Issues and signs all root certificates
Signs and verifies all infrastructure messages
47
Access mechanisms to data on encrypted USB hard drives must be implemented correctly otherwise:
data on the USB drive could be corrupted.
user accounts may be inadvertently locked out.
data on the hard drive will be vulnerable to log analysis.
the security controls on the USB drive can be bypassed.
48
Which of the following attack types is this?
Whaling
Hoax
Impersonation
Spear phishing
49
What types of cloud computing if an organization required complete control of the environment?
Public cloud
Private cloud
Hybrid Cloud
Community cloud
50
Which of the following would BEST protect the building from car bomb attacks? (Select two.)
Guards
Dogs
Bollards
Fencing
51
Which of the following is the second server?
VLAN
Honeynet
Honeypot
DMZ
52
Which of the following additional policies should be implemented based on the tool’s output?
Password complexity
Password age
Password length
Password history
53
Which of the following should the company configure to protect the servers from the user devices? (Select TWO).
Change the default HTTP port
Deny incoming connections to the outside router interface
Create an ACL to access the server
Create a server VLAN
54
What security goal is met by hiding data in files?
Integrity
Steganography
Availability
Confidentiality
55
Encryption used by RADIUS is BEST described as:
Symmetric
Elliptical Curve
Quantum
Asymmetric
56
What can be inferred from a firewall if users can't connect to IP 192.168.0.20?
It failed closed.
It implements bottom-up processing.
It implements an implicit deny.
It implements stateful packet filtering.
57
What should CIO be concerned with if they receives an anonymous threat?
Trojan
Smurf Attack
Virus
Logic Bomb
58
Which of the following is the BEST way to prevent Cross-Site Request Forgery (XSRF) attacks?
Disable Flash content
Use only HTTPS URLs
Check the referrer field in the HTTP header
Use only cookies for authentication
59
Which of the following attacks is occurring?
XSS
DoS
Xmas
DDoS
60
What would BEST mitigate risk of employees using easily guessed passwords or those susceptible to brute force attacks?
Enforce account lockout policies.
Increase the minimum password length.
Enforce password rules requiring complexity.
Shorten the maximum life of account passwords.
61
What is the secure wireless auth method for a remote RADIUS server?
CCMP
LEAP
WPA2-PSK
WEP-PSK
62
Which of the following will Ann need to use to verify that an email came from Peter and decrypt it?
Peter’s public key
The CA’s public key
Ann’s public key
Ann’s private key
63
A user has an error that his certificate is revoked. What's the name of the database repository for certificates?
OCSP
CA
CSR
CRL
64
Which of the following would be MOST effective in reducing data leaks in this situation?
Acceptable Use of IT Systems
Social Media and BYOD
Information Security Awareness
Data Handling and Disposal
65
Which of the following can result in significant administrative overhead from incorrect reporting?
False positives
Mandatory vacations
Acceptable usage policies
Job rotation
66
A security admin is concerend about message interception & modification during transit. Which concept does it relate to?
Integrity
Accounting
Availability
Confidentiality
67
Which of the following should the administrator use to test the patching process quickly and often?
Create an incremental backup of an unpatched PC
Create a full disk image to restore after each installation
Create an image of a patched PC and replicate it to servers
Create a virtualized sandbox and utilize snapshots
68
Which of the following would logically separate the VoIP phones, PCs, & printers on the same switch?
Install a firewall and connect it to the switch
Define subnets with unique IP range per device & connect to a router.
Install a firewall & connect it to a dedicated switch for each device type
Create three VLANs on the switch connected to a router
69
What authentication solution uses tickets for central access?
PKI
Biometrics
ACLs
Kerberos
70
To protect data in transit within an enterprise, what ensures encryption?
SHA1
TPM
SSH
MD5
71
What should a company implement to mitigate zero-day malicious code executing on employees’ computers?
Least privilege accounts
Intrusion Detection Systems
Application whitelisting
Host-based firewalls
72
Which of the following is the ALE that Emily should report to management for a security breach?
$15,000
$3,750
$1,500
$75,000
73
Three of the primary security control types that can be implemented are.
Mandatory, discretionary, and permanent.
Personal, procedural, and legal.
Supervisory, subordinate, and peer.
Operational, technical, and management.
74
Which documents outline the responsibility of both participants in an agreement between two organizations?
MOU
SLA
RFQ
RFC
75
Which of the following, if implemented, would BEST reassure the CSO?
Disk hashing procedures
Data retention policies
Full disk encryption
Disk wiping procedures
76
Which of the following BEST describes the compromised system?
It is being used in a man-in-the-middle attack
It is running a rogue web server
It is an ARP poisoning attack
It is participating in a botnet
77
A team can't print after several hours of work after working late. What is preventing them from printing?
Role-based access control
Mandatory access control
Time of Day access control
Discretionary access control
78
What validates programs before installing to avoid system lag?
MD5
Telnet
SSH
Whole disk encryption
79
Privilege creep among long-term employees can be mitigated by which of the following procedures?
Mandatory vacations
Job function rotation
Separation of duties
User permission reviews
80
Which of the following attacks allows access to contact lists on cellular phones?
Blue jacking
Bluesnarfing
Packet sniffing
War chalking
81
What does this describe?
Spyware
a MBR infection.
a rootkit.
an exploit kit.
82
Which of the following is MOST likely the reason for the sub-interfaces?
The network uses the subnet of 255.255.255.128.
The switch has several VLANs configured on it.
The sub-interfaces each implement quality of service.
The sub-interfaces are configured for VoIP traffic.
83
What's the most important step for an ISSO managing a classified peer-to-peer network?
A full scan must be run on the network after the DAT file is installed.
Hash values of signatures should match the vendor's site.
The definition file must be updated within seven days.
Log off all users before installing definition file.
84
Which of the following methods would MOST likely work?
Cloud storage
Wiping
TPM
Removal Media
85
Which of the following BEST describes the type of attack that is occurring?
Smurf Attack
Ping of Death
Xmas Attack
Replay
86
Which of the following can the administrator do to decrypt the file?
Retrieve the encryption key
Use the CA private key
Use the employee’s private key
Use the recovery agent
87
What authentication method meets the "something you do" security policy?
Password
Signature analysis
Swipe a badge
Fingerprint analysis
88
Which of the following should Peter implement to BEST achieve this goal?
Antivirus update system
A network-based intrusion detection system
A host-based firewall
A host-based intrusion prevention system
89
Which of the following risks could IT management be mitigating by removing an all-in-one device?
Single point of failure
Single sign on
Continuity of operations
Input validation
90
What's the likely attack if same hardware is used for all wireless access points?
Packet sniffing
Rogue access point
Evil Twin
WPS attack

Security+ SY0-601 Practice – Set L Flashcards | StudBud