stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec+ Flashcards | StudBud
Explore
/
Sec+
Sec+
50 terms
·
StudBud Administration
·
536 plays
Security Plus test prep
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
Which concept adds a single, simple number one time for integrity purposes?
Salt
Nonce
Hash
IV
2
Zero Day attacks are scary because ________?
Multi-faceted attacks
China
New New attacks, like never before seen
Massive encryption involved
3
SHA-3 Gets up to how many bits in size?
512
1200
128
448
4
ALE equation?
AV x EF
SLE x ARO
Y=MX+B
24 x ALE = 2
5
Fraggle Attacks use ______ for DoS
TCP
UDP
ARP
IP
6
Which malware type doesn't require a human to spread the nasty?
Virus
Worm
Malware
Adware
7
Orchestrating SIEM device info logs means using
SOAR
SAML
HTML
EAP TTLS
8
Using proximity card readers would mitigate :
Tailgating
Impersonation
Dumpster Diving
Shoulder Surfing
9
Which allows a security tech. the most secure wireless implementation?
Enable MAC Filtering
Disable SSID
Implement WPA
Implement WEP
10
Which of the following should Pete implement to reduce risk of employees embezzling funds?
privacy policy
mandatory vacations
least privilege
acceptable use
11
Which is a list of revoked certs?
CRT
CIR
KRA
CRL
12
What term defines looking at search history to find trends about a user?
Yahoo Hamous
Browser Sherlocking
Google Dorking
Web Browser Archaeology
13
Which changes private to public IP's?
Reverse Proxy
Forward Proxy
NAT
PAT
14
Create a custom size packet with-
curl
theHarvester
tcpreplay
hping
15
Which protects the address of the user?
NAT
PAT
Reverse Proxy
Forward Proxy
16
Layer 4 OSI is?
Routers
Segments/Datagrams
Data Link
Session
17
HACKERboi is talking to HR to get a list of VIPs, what technique will heckerboi try to perform?
Whaling
Privilege Escalation
Spoofin'
Vishing
18
IDS sees: <script>source=http//www.evilsite.co/evil/js<script What's that thing describe?
XML Injection
SQL Injection
Redirection Attack
XSS
19
Cloud type that I'd use to build an OS
XaaS
IaaS
PaaS
SaaS
20
PHI deals with what kind of secure information?
Health
Horticulture
Personal Information
Ham
21
Enabling "Remote Disabling" is part of which?
Onboarding
Hardening
Offboarding
Inboarding
22
Which mail port downloads to the host device?
S/MIME
SMTP
POP3
IMAP4
23
Which method looks for experiential input?
Anomaly Based
Heuristics
Behavior Based
Signature Based
24
mode of operation for symmetric-key block ciphers: IV, AES, advanced version of Counter
CBC
GCM
Counter
ECB
25
Which is not a vulnerability in a browser?
Plug-In
Collision
Extension
Add-On
26
Firewalls that use application layer data?
WAF
Layer 4 Firewall
NGFW
NIDS
27
Transport Layer OSI is?
Layer 5
Packets
Layer 3
Layer 4
28
Which cert works for more than one website type within a single domain? (Including subdomains)
Wildcard Cert
Sec+ Cert
EV Cert
Domain Cert
29
Accepting use of certain devices based on physical address is?
Stateless Firewall
IP Spoofing
MAC Filtering
Wardriving
30
A weakness of MD, and the reason we use it together with SHA and S/MIME in e-mail?
Collisions
Jitters
DoS
Weak Sauce
31
Which encrypts port 21 for files?
SLogin
SSH
FTPS
SFTP
32
Which mail protocol goes server to server?
IMAP4
S/MIME
SMTP
POP3
33
Using multiple types of products to enhance security is considered Product __________?
Obscurity
Limiting
Diversity
Layering
34
Hardware encryption?
AES
RC4
TPM
SHA
35
Most restrictive Access Control method?
RBAC
ABAC
MAC
DAC
36
Which is asymmetric encryption?
MF Doom
RSA
3DES
AES
37
Event monitoring software for a whole network...?
SIEM
HIDS
NIPS
Nessus
38
Which secure protocol deals with database vulnerabilities?
SRTP
S/MIME
LDAPS
FTPS
39
HVAC Layout for server room?
Hot Aisle Cold Aisle
2 Post / 4 Post
Central Cooling
Ice Cube - Laugh Now, Cry Later
40
Access Control for roles based on certain uses/ specific rules?
RBAC
RB-RBAC
DBAC
ABAC
41
Which is NOT a trait of malware?
Payload
Circulation
Infection
Incredulation
42
Best way to get rid of a rootkit?
DDoS Attack Back
Uninstall the Game Noob
Restart
Reimage
43
Sara logged on with a username, password, and 4-digit PIN. How many methods?
Dual Factor
Triple Factor
Single Factor
Four Factor
44
Virtual components of a network allowing you to use one desktop in many places?
VDE
VDI
.Paak
VTD
45
Which gains access to SEH?
Cookie Stealing
Directory Traversal
Buffer Overflow
XML Injection
46
What do I use to protect specific individual files with PII if I'm using Windows?
EFS
Partition Encryption
BitLocker
FDE
47
When analyzing firewall logs, you see requests from Port 49 outside the LAN- which AAA service?
TACACS+
SAML
Kerberos
RADIUS
48
Which encrypts port 22 for files?
SFTP
TLS/SSL
FTPS
SSH
49
How would you see a Zero Pixel iFrame?
Hit Tab a bunch
Check the cache
Would ya just look at it?
Just look at it.
50
SSL decryptors exist for what reason?
Funsies
Speed of Use
Mitigating SPOF
Resource Conservation