Security+ Exam Cram

Having the documents shredded or incinerated before disposal makes dumpster diving less effective and mitigates the risk

Which term below refers to computer security exploit that takes advantage of vulnerabilities in a user's web browser app

Which type of attack allows for tricking a user into sending unauthorized commands to a web application?

Domain hijacking is a situation domain registrant due to unlawful actions of third parties loses control of their domain

You decided to install a proxy server on your network. Which type of proxy is also called a surrogate proxy?

Privacy filter (a.k.a. privacy screen)is one of the countermeasures against shoulder surfing.

Which of the attack types listed below relies on the amplification effect?

 Which of the following answers lists an example of spyware?

Collection of software tools used by a hacker to mask intrusion, obtain administrator-level access to a computer

What port is TACACS – Terminal Access Controller Access-Control System?

Attack exploiting vulnerability present in already released software but unknown to the software developer is called:

Type of exploit that relies on overwriting contents of memory to cause unpredictable results in an application is

Phishing scams targeting a specific group of people are referred to as:

 Malicious software collecting information about users without their knowledge/consent is known as:

 Malicious code activated by a specific event is called:

Which term listed applies to a collection of intermediary compromised systems that are used as platform for DDoS attack

Which type of Trojan enables unauthorized remote access to a compromised system?

Which router security feature drops inbound traffic with a forged source address of an internal network?

 In a session hijacking attack, a hacker takes advantage of the session ID stored in:

Which of the following statements regarding router ACLs is true?

Situation: an unauthorized person can view another user's display or keyboard to learn their password /confidential info

The practice of using a telephone system to manipulate user into disclosing confidential information is called:

Unauthorized practice of obtaining confidential information by manipulating people into disclosing sensitive data is

Phishing scams targeting people holding high positions in an organization or business are known as:

Which of the terms listed below refers to a platform used for watering hole attacks?

Harmful programs used to disrupt computer operation, gather sensitive information, or gain unauthorized access

Implement a router-based solution that allows inbound SSH traffic from a specific subnet. What should you configure?

 Which of the terms listed below refers to an example of a crypto-malware?

 A malware-infected networked host under remote control of a hacker is commonly referred to as:

Which network device transmits data between different networks by examining the destination network address in a packet?

 What is adware?

Which of the following facilitate(s) privilege escalation attacks?

What is tailgating?

Remapping a domain name to a rogue IP address is an example of what kind of exploit?

Entry fields of web forms lacking input validation are vulnerable to what kind of attacks?

Social engineering technique, attacker under disguise of legitimate request attempt to gain access to confidential info

Which social engineering attack relies on identity theft?

Which of the following attacks relies on intercepting and altering data sent between two networked hosts?

Clickjacking is a malicious technique tricking a user into clicking on something different from what they think they are

Which of the following is a security best practice for configuring an Ethernet switch?

 Which of the answers listed below refers to a common target of cross-site scripting (XSS)?