CompTIA Security+ Studying

Question 1

Which policy is designed to reduce the risk of fraud and prevent other losses in organizations?

Accepted Answer

Separation of Duties

Question 2

Which technology is most associated with web page authorization?

Accepted Answer

SAML

Question 3

(see image)

Accepted Answer

Load Balancer

Question 4

(see image, yes I know shut up)

Accepted Answer

Place the web server in a DMZ.

Question 5

Which IDS system uses algorithms to analyze the traffic passing thru

Accepted Answer

Heuristic

Question 6

Refer to the image, which of the following is the ARO for this scenario?

Accepted Answer

0.0167

Question 7

JOHN is a network admin for ACME company, JOHN is explainin least privledge, what is the basic?

Accepted Answer

Give users only the permissions they need to their work.

Question 8

Which smartcard is issued by the DoD as a general id/auth card for military personel?

Accepted Answer

CAC

Question 9

The structured approach that is followed to secure a company's assets?

Accepted Answer

Change Management

Question 10

What is a system that was made at MIT and uses tickets for authentication?

Accepted Answer

KERBEROS

Question 11

What technology is used to send data between phones that are in close proximity to eachother?

Accepted Answer

NFC

Question 12

Which two modes can IPSec work?

Accepted Answer

Tunneling and Transport

Question 13

Which device monitors network traffic in a passive manner?

Accepted Answer

IDS

Question 14

Which device stores information about destinations in a network. (the best one)

Accepted Answer

Router

Question 15

Which policy statement addresses who is responsible for ensuring that the policy is enforced?

Accepted Answer

Accountability

Question 16

(see image)(this question is rude)

Accepted Answer

No, this violates control diversity.

Question 17

(see image)

Accepted Answer

$2 million

Question 18

AP-based tech that can increase security dramatically by allowing or dying access based on MAC-

Accepted Answer

MAC filtering

Question 19

What is the size of the initialization vector (IV) that WEP uses for encryption?

Accepted Answer

24

Question 20

Yes?

Accepted Answer

No

Question 21

(see image)

Accepted Answer

BIA

Question 22

Which access control method would be ideal for training to performing server backups?

Accepted Answer

RBAC

Question 23

Child domains adopt all of the trust relations with other domains that existed with its parent.

Accepted Answer

Why? Transitive access

Question 24

Which strategy necessitates an identified risk, people knowing about said risk, and saying "ok"

Accepted Answer

Risk Acceptance

Question 25

How did Alarak learn of Amon's true plan?

Accepted Answer

His former First Ascendant, who lost to Malash in Rak'Shir.

Question 26

What is the caliber of round that should be kept in ones car?

Accepted Answer

50 caliber

Question 27

SLE is $25,000 and the ARO is once every four years, what's the ALE?

Accepted Answer

$6,250

Question 28

Which policy describes how the employees of a company can use their systems and resources?

Accepted Answer

Acceptable Use

Question 29

Which type of load balance scheduling is the 1st client sent to the 1st group of servers, etc.?

Accepted Answer

Round-Robin (it's not what you think it is)

Question 30

Are you READY?

Accepted Answer

*Air horn plays*, Yes, Maybe

Question 31

Strategy involving sharing some of the risk burden with someone else, like an INSURANCE COMPANY

Accepted Answer

Risk Transference

Question 32

(see image)

Accepted Answer

MAC

Question 33

If the SLE is $4,000 and that there will be 10 occurrences a year, what's the ALE?

Accepted Answer

$40,000

Question 34

Works by decrypting encrypted traffic, inspecting it, and then rencrypting it before sending it

Accepted Answer

SSL decryptors

Question 35

Refer to the image, which of the following amounts is the ALE for this scenario?

Accepted Answer

$33,333.33

Question 36

Which of the following should be a goal for any biometric?

Accepted Answer

Low CER

Question 37

(see image)

Accepted Answer

ISA

Question 38

Which protection implies that information, once written, cannot be modified?

Accepted Answer

WORM

Question 39

Which strategy involves identifying a risk and making a decision to stop engaging in the action

Accepted Answer

Risk Avoidance

Question 40

Which is a chipo that can store cryptographic keys, passwords, or certificates?

Accepted Answer

TPM

Question 41

(see image)

Accepted Answer

Switch

Question 42

Which of the following strategies is accomplished any time you take steps to reduce risk?

Accepted Answer

Risk Mitigation

Question 43

Term used for events that were mistakenly flagged although they weren't dangerous events.

Accepted Answer

False Positives

Question 44

Which authentication method provides credentials that are valid only during a single session?

Accepted Answer

Tokens

Question 45

Network devices that manage larger networks by sitting between two networks and dividing work?

Accepted Answer

Bridges

Question 46

Concern about your backup file becoming infected with malware are a thing, what can protect it?

Accepted Answer

Air-Gap

Question 47

Which one can be used to offload the publickey encryption to a seperate hardware plugin card?

Accepted Answer

SSL Accelerator

Question 48

(see image)

Accepted Answer

Prevents unauthorized packets from entering the network.

Question 49

Which method uses a KDC to accomplish authentication for users, programs, or systems?

Accepted Answer

Kerberos

Question 50

(see image)

Accepted Answer

DAC

Question 51

(see image)

Accepted Answer

Hardening

Question 52

What is a main concern regarding unauthorized software?

Accepted Answer

It might be copyrighted.

Question 53

In IDS vernacular, which account is responsible for setting the security policy for a company?

Accepted Answer

Administrator

Question 54

(see image) (this is getting old)

Accepted Answer

Exception

Question 55

Which tunnel config are only some (incoming) requests routed and encrypted over the VPN?

Accepted Answer

Split

Question 56

(see image)(the answer is in the question, in a way)

Accepted Answer

NIST 800-14

Question 57

Which policy should be used when assigning users permissions they need to work and no more?

Accepted Answer

Least Privilege

Question 58

(see image)

Accepted Answer

Loops

Question 59

What command would show the complete path to an originating server?

Accepted Answer

tracert

Question 60

(see image)

Accepted Answer

STP

Question 61

Which of the following are multiport devices that improve network efficiency?

Accepted Answer

Switches

Question 62

Why is Yi Qi unique in the maniraptoran family?

Accepted Answer

The only known to experiment with bat-like wings.

Question 63

Which command most likely made the output shown here?

Accepted Answer

arp -a

Question 64

What best describes a system that uses a password, pin, and a birthdate as authentication?

Accepted Answer

Single factor

CompTIA Security+ Studying

Questions 79

CompTIA Security+ Studying

Questions 79