Security+ Chapter 11

Question 1

Someone crafts a phishing link that seems legitimate, but goes to a different page than requested/stated. What happened?

Accepted Answer

URL redirection

Question 2

Protocol that handles authentication and key exchange for IPSec.

Accepted Answer

IKE

Question 3

What version of TLS is currently the latest version and is resistant to downgrade attacks?

Accepted Answer

TLS 1.3

Question 4

What uses PKI for authentication and confidentiality to prevent email spoofing and account compromise?

Accepted Answer

S/MIME

Question 5

Standard for secure data transfer across the internet that functions at the network layer.

Accepted Answer

IPSec

Question 6

What is the principal protocol for the actual delivery of real time data?

Accepted Answer

RTP

Question 7

What port does IMAPS use?

Accepted Answer

993

Question 8

What two statements correctly describes an SNMP monitor?

Accepted Answer

Displays alerts and pulls info from MIBs, A location from which network activity can be overseen

Question 9

What's a way of securing FTP through SSH?

Accepted Answer

SFTP

Question 10

What authentication type might an LDAP server use if you wanted to implement Kerberos?

Accepted Answer

SASL

Question 11

What allows a computer to establish a VPN whenever an Internet connection over a trusted network is detected?

Accepted Answer

Always-on VPN

Question 12

Which of the following is NOT a valid SSH server authentication method?

Accepted Answer

RADIUS

Question 13

What term refers to a DoS attack where the client requests IP addresses for many spoofed MAC addresses?

Accepted Answer

DHCP starvation

Question 14

IPSec protocol that performs a cryptographic hash on an IPSec packet + a shared key, and adds HMAC in its header.

Accepted Answer

Authentication Header

Question 15

Choose two recommended DNS safety measures:

Accepted Answer

DNSSEC, Only local hosts can make recursive queries

Questions 15