stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CompTIA A+ - Security Domain #2 (220 -1102) Flashcards | StudBud
Explore
/
CompTIA A+ - Security Domain #2 (220 -1102)
CompTIA A+ - Security Domain #2 (220 -1102)
24 terms
·
StudBud Administration
·
96 plays
CompTIA A+ - Core 2 Security - Domain #2 220-1102
Flashcards
24 cards
F
Practice quiz
P
Host live
L
Questions
24
Answers
1
You have been hired to assess a client's security. During your testing, you discover that users have access to other.. .
Certificate Manager
Bring Your Own Device
Principle of least privilege
Mobile device management
2
Which of the following door locks provides authentication to a specific lock over a Bluetooth connection?
Biometric
Smart card
Key fob
Standard lock
3
A company is working on a plan for a future bring your own device (BYOD) program for employees.
Preventing shoulder surfing
Increase in tailgating
Lack of a secure baseline configuration for personal devices
Non-compliant systems
4
While reviewing video files from your organization's security cameras, you notice a suspicious person using . . .
Door locks with card readers
Cable locks
Access control vestibule
Lo-jack recovery service
5
Company executives, like the Chief Information Officer (CIO), are the main target of which of the following attacks?
Whaling
Spear phishing
Vishing
Evil twin
6
A technician drafts a report on internet of things (IoT) security. What type of components uses an IoT network?
Wireless mesh networking
Hub/control system
Smart device types
Bring your own device
7
A cyber engineer is conducting an evaluation of current screen lock capabilities for corporate mobile devices.
Pattern
PIN code
Fingerprint recognition
Facial recognition
8
A public library has purchased new laptop computers to replace their older desktop computers and is concerned that . . .
Biometric authentication
Cable locks
An external encryption device
A multi-factor password policy
9
Which of the following can be paired with a motion sensor to improve security?
Cable lock
Lights
Magnetometer
Door lock
10
A person visits a local library frequently with their laptop to use the Wi-Fi to complete school assignments and . . .
On-path
Spoofing
Evil twin
Phishing
11
An IT support desk intern is learning about fundamental security concerns that any support desk should look to remediate
Underperforming system
Unprotected system
Unpatched system
End of life OS
12
A help desk technician assists an employee having issues with their corporate device. According to the employee, . . .
Antivirus/Anti-malware app blocking
Failed attempt locks
Security requirement enhancements
BYOD allowance
13
Which of the following security practices is the BEST example of the principle of least privilege (for a Windows OS)?
All users the workstation are Limited users except for one, who is an admin
The Guest user account on a Windows workstation has been disabled.
All users on a Windows workstation have been assigned strong passwords.
Autorun has been disabled on a Windows workstation.
14
On-path is an attack where the threat actor makes an independent connection between two victims . . .
False
True
15
An engineer reviews the organization's policy on mobile security software. What works as a content filter to . . .
OS update
Failed attempt restriction
Antivirus/Anti-malware app
Firewall
16
Which of the following attacks are successful since there are currently no known patches to prevent it from happening?
On-path attack
Dictionary attack
Zero-day attack
Brute-force attack
17
After a recent data breach, a company's IT department has concluded that the breach started with a laptop that . . .
Denial of service
Spoofing
On-path
Evil twin
18
After carrying out a campaign to gather data via e-mail and other electronic means, what else can an attacker do . . .
Initiate a distributed denial of service (DDoS) attack.
Shoulder surf after delivering food to the target.
Go dumpster-diving behind the corporate offices.
Use a structured query language (SQL) injection attack.
19
Tailgating is a social engineering tactic to obtain someone's password/PIN by observing their keystrokes when typing.
True
False
20
An attacker emailed many employees of a target company (that supports government organizations) with no success in . . .
Impersonate an employee.
Tailgate into the offices.
Spoof the software token.
Become an insider threat.
21
An employee receives an email from what looks to be the IT department informing the employee has a compromised password.
SQL injection
Brute-force
Vishing
Phishing
22
Vishing is an email-based social engineering attack. The attacker sends an email from a supposedly reputable source. . .
False
True
23
An engineer reviews the functionality and use of locator applications for mobile devices.
Use the app to lock the device remotely.
Use the app to find misplaced phones.
Use the app to reset to factory settings.
Use the app if the phone is lost or stolen.
24
A systems administrator is auditing the settings of a group of web servers. The administrator notices that a few . . .
Unprotected system
Unpatched system
Non-compliant system
End of life OS