stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Check on Learning: CompTIA Sec+ Flashcards | StudBud
Explore
/
Check on Learning: CompTIA Sec+
Check on Learning: CompTIA Sec+
40 terms
·
StudBud Administration
·
111 plays
Imported from external platform
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
Pretending to be the proper owner of an address or the provider of a service, when another system actually is:
Zombie attack
Man in the middle
Denial of service
Spoofing
2
Which of the following protocols allow(s) for secure file transfer? (Select all that apply)
FTPS
SCP
FTP
SFTP
3
The capability of a hardware or software system to process increasing workload without decrease in performance is
Multitasking
Fault Tolerance
Scalability
Redundancy
4
The three step process of authentication, authorization, and accounting, is usually referred to as
The AAA model
Nonrepudiation
Multi-factor authentication
Ticket-granting
5
FTP, HTTP, IMAP4, LDAP, POP3, SNMPv1, SNMPv2, & Telnet are all examples of netwk protocols that send data in clear text
True
False
6
Choose the biometric authentication method that uses nodal points to identify the user.
Facial recognition
Retinal scanner
All of these
Iris scanner
7
Which of the protocols listed below was designed as a secure replacement for Telnet?
FTP
CHAP
SSH
SNMP
8
What kind of general term is used to describe the process of securing a computer system?
Auditing
Hardening
Baselining
Patching
9
One of the goals of mandatory vacations policy is to mitigate the occurrence of fraudulent activity w/in a company
True
False
10
A cloud computing service model offering remote access to applications based on monthly or annual subscription fee is
IaaS
SaaS
PaaS
MaaS
11
Attack involves re-transmitting intercepted data to the web server hoping the server will respond with useful info.
Cross-site scripting
Bluejacking
Injection
Replay
12
Deploying least functionality along with disabling unnecessary ports and services are two methods of
Secure system design
Software trust
Attestation
HSM
13
Which of the following protocols are used for securing HTTP connections? (Select 2 answers)
SCP
SSL
EFS
TLS
14
Refers to a security countermeasure that allows to erase data on a lost or stolen mobile device?
Mobile wipe
Low-level formatting
Remote wipe
Degaussing
15
A type of trusted third party that issues digital certs used for creating digital signatures and public-private keys
PKI
CA
IKE
CSP
16
Which of the following acronyms is used as a unique identifier for a WLAN (a wireless network name)?
BSS
SSID
IBSS
HIDS
17
You have a multi-layer switch. Which layers does it operate at?
2 and 3
1 and 2
3 and 4
5 and 6
18
A cloud deployment model consisting of two or more interlinked cloud infrastructures is referred to as a hybrid cloud.
True
False
19
Which of three security measures listed below would be effective against the malicious insider threat?
Usage auditing and review
Principle of least privilege
Strong authentication
DLP system
20
How many layers are in the OSI model?
4
5
7
8
21
Ports for NetBIOS
TCP/UDP 136, 138, and 149
TCP/UDP 137, 138, and 139
TCP/UDP 132, 138, and 139
TCP/UDP 137, 158, and 139
22
FTPS is an extension to the Secure Shell protocol (SSH) and runs by default on port number 22.
False
True
23
Which one of the listed tools scans for known security threats on groups of computers?
Port scanner
Vulnerability scanner
Risk scanner
Packet sniffer
24
Which methods would generally speaking be the most basic method to mitigate security risks on a network?
Updates
Network segmentation and security layers
Wrappers
Application firewalls
25
A valid type of evidence in a computer forensics investigation that proves innocence.
Exculpatory evidence
Demonstrative evidence
Inculpatory evidence
Documentary evidence
26
Which DOS attack sends a large number of new TCP requests to a server in order to overwhelm it with unused open sessions
Session hijacking
Spanning tree
SYN flood
DDos
27
What is it called if a freelance coding specialist tests it for security flaws?
Static code review
Code review
Regression testing
Dynamic code review
28
Which layer uses either a connection-less, or connect-oriented protocol?
Session
Application
Data Link
Transport
29
An authentication protocol which transmits passwords over the network in an unencrypted form and is therefore insecure
RADIUS
PAP
CHAP
TACACS+
30
Hash collision occurs when a cryptographic hash function produces two different digests for the same data input
True
False
31
A security solution designed to detect anomalies in the log and event data collected from multiple network devices is
HIDS
SIEM
PCAP
HIPS
32
The two factors that are considered important for creating strong passwords are:
Password complexity
Password history
Password length
Minimum password age
33
SOP for onboarding includes an agreement targeted at minimizing the security risks involving transmitted data.
Service Level Agreement (SLA)
Memorandum of Understanding (MOU)
Interconnection Security Agreement (ISA)
Non-Disclosure Agreement (NDA)
34
Which cryptographic attack relies on the concepts of probability theory?
Birthday
Dcitionary
Brute force
KPA
35
Which type of network penetration attack model requires an attacker to have the highest skill level?
Black box
Gray box
White box
None of these
36
LDAPS is an example of:
Authentication protocol
Address resolution protocol
File exchange protocol
Secure directory access protocol
37
Which of the following mobile connectivity methods provides the best coverage?
Cellular
SATCOM
Infrared
Wifi
38
A simple way to keep virus, spyware and other malware from attacking your network while allowing BYOD is to use which:
Guest network
Device Access Controls
Asset tracking
Application control
39
What option would create a new ACL entry that would deny any port 80 HTTP traffic?
Allow all but tcp 443
Deny tcp any server tcp 80
Deny all any server web
Allow tcp any server tcp 80
40
Which of the following options is a vendor neutral standard for message logging?
syslog
SNMP
Event Manager
SIEM