Which of the following statements concerning physical ("dedicated") servers is true?

Physical servers are more powerful than virtual servers.

Which of the following statements concerning virtualiz servers is true?

Are more scalable than physical servers.

studbud

Security+ SY0-501 Final Exam Review (variance 2)

91 termsStudBud Administration59 plays

Virtualization, Risk Reduction, Physical Security/Identity&Access Management Security+ SY0-501: Security+ SY0-501 Virtualization, Risk Reduction, and Physical Security Security+ SY0-501: Security+ SY0-501

Flashcards91 cardsFPractice quizPHost liveL

Questions 91

Answers

1
Measures the probability of the biometric system accepting access efforts by unauthorized user
FAR
FRR
CRR
CER
2
With regard to multifactor authentication, _____ are an example of somewhere you are.
locations
biometrics
signatures
smart card
3
What represents multi-layer defense?
controlled redundancy
control security
vendor diversity
layered security
4
Protocol allowing token-based authorization on the Internet from web mobile&desktop application
Shibboleth
SAML
OAuth
OpenID
5
_____ _____ provides a means of authenticating machines on a network.
Key filtering
Token filtering
MAC filtering
Signal filtering
6
Authentication is easier by allowing different clients to get info about authenticated sessions
SAML
OpenID
OAuth
Shibboleth
7
What proxy server examine each client request and compares the request to an AUP?
anonymizing proxy
content-filtering proxy
caching proxy
open proxy
8
What terms is used to describe the allocation of requests across multiple resources?
redundancy
replication
distributive allocation
fanning
9
Which of the following statements concerning physical ("dedicated") servers is true?
Physical servers are more powerful than virtual servers.
Physical servers are less scalable than virtual servers.
Physical servers are easier to manage than virtual servers.
Physical servers are less expensive than virtual servers.
10
The trust relationship extended to one domain will be extended to any other trusted domain.
transitive trust
single sign-on
federation services
identity federation
11
With regard to identity & AAA _ is determining what someone has access to after authentication.
Accountability
Authentication
Authorization
Identity
12
A type ____ hypervisor runs on an OS with other "guest" OS running as processes on the host OS.
IV
II
III
I
13
With regard to _____, authentication, authorization, and accounting are separated.
LDAP
Kerberos
TACACS+
RADIUS
14
Tool sets designed to assist hackers w/tasks associated w/exploiting vulnerabilities in systems
Root kits
Exploitation frameworks
Vulnerability frameworks
Malware kits
15
With regard to identity and AAA, _____ is who you claim to be.
Authorization
Authentication
Accountability
Identity
16
Separating specific groups of physical equipment to handle different classes of traffic
virtual segregation
air gaps
physical segregation
segment isolation
17
Cloud model provides companies with common interests the ability to share a cloud environment?
public
hybrid
private
community
18
A premade, fully-patched image of a system that can be configured and deployed within seconds.
primary
key
controlling
master
19
L2TP/IPsec and PPTP are examples of _____ protocols.
leveling
covering
tunneling
layering
20
Network _____ can offer increased throughput and less network disruption.
webs
protocols
trees
fabrics
21
A strategy of implementing multiple layers of security is referred to as "_____ _____ _____."
defense in depth
layered combat strategy
intrusion prevention strategy
intrusion in depth
22
Which of the following statements concerning virtualiz servers is true?
Provide higher levels of performance than physical servers
Are harder to manage than physical servers.
Are more scalable than physical servers.
Are more powerful than physical servers.
23
A secure _____ service issues, validates, renews, and cancels security tokens.
protocol
Algorithm
token
Key
24
_____ systems are platforms on which services are run.
Resource
Operating
Networking
Authorization
25
Defined as "the practice of managing endpoints on a case-by-case basis as they connect"
NPC
NAC
DLP
CIP
26
Enables SSO for federated identity-based authentication and authorization across networks.
Shibboleth
OpenID
SAML
OAuth
27
With regard to identity and AAA, _ is a process by which you prove you are who you say you are.
Authorization
Identity
Accountability
Authentication
28
Described as a switch's ability to "learn" MAC addresses when the switch connects to a network.
static learning
interactive learning
sticky learning
dynamic learning
29
Wireless access points typically operate at layers _____ and _____ of the OSI model.
1 : 2
2 : 3
2 : 4
1 : 3
30
Protocol allowing anyone to locate resources on a network, whether on the Internet/intranet.
TACACS+
RADIUS
Kerberos
LDAP
31
Which of the following is not a tunneling protocol?
PPTP
L2TP/IPsec
SSTP
HTTP
32
A(n) _____ is a type of DoS attack.
blockade
flood
APT
inrush
33
A portion of a network where systems will be accessed regularly from an untrusted network.
intranet
extranet
WAN
DMZ
34
Access control model only used in environments w/ different levels of security classifications?
attribute-based access control (ABAC)
mandatory access control (MAC)
rule-based access control
discretionary access control (DAC)
35
What security features - located on a motherboard - assists with key generation and storage?
HSM
UEFI
TPM
SED
36
RAID level _____ only provides the ability to read from and write to muliple disks in an array.
0
6
1
5
37
The practice of _____ makes a system more resistant to an attack.
unifying
incorporating
solidifying
hardening
38
The art & science of adding watermarks to files so the files can be traced to a specific user.
Calligraphy
Brandology
Steganography
Phraseology
39
_____ is a connectionless protocol that uses UDP.
Kerberos
RADIUS
LDAP
TACACS+
40
_____ an applications means that the applications is not allowed to run on a system.
Whitelisting
Blacklisting
Greenlisting
Redlisting
41
___ refers to technology employed to detect and prevent transfers of data across an enterprise.
CIP
CLP
DIP
DLP
42
The primary function of a(n) _ is to control the flow of network traffic in & out of a network.
host
firewall
switch
repeater
43
Monitors networks for inappropriate/ unauthorized use but not configured to respond to threats.
HIPS
NIPS
NIDS
HIDS
44
Monitors networks for inappropriate/ unauthorized & are configured to respond to threats.
HIDS
NIDS
HIPS
NIPS
45
A network that sends packets without using a central router or switch.
securely dynamic
securely centralized
ad hominem
ad hoc
46
A(n) _____ _____ is a hardware or software tool used to analyze network traffic.
packet sniffer
frequency generator
frequency counter
packet counter
47
Implemented by shutting down device interfaces or blocking traffic to and from specific devices
Segmentation
Isolation
Compartmentalization
Segregation
48
What proxy servers reduce bandwidth usage/increases network performance by keeping local copies
content-filtering proxy
caching proxy
anonymizing proxy
open proxy
49
A VPN _____ provides a means of managing multiple separate VPN conversations.
amplifier
concentrator
generator
repeater
50
With regard to multifactor authentication, _____ are an example of something you are.
biometrics
locations
smart cards
signatures
51
__ is an XML-based protocol that provides for a single sign-on to be used for web applications.
SAML
OAuth
Shibboleth
OpenID
52
Controls the interaction between VMs and the hardware on which the virtual machines reside.
OS
switch
application
hypervisor
53
_____ are instantaneous savepoints in time on virtual machines.
Snapshots
Images
Imprints
Backups
54
_____ decide whether or not traffic is allowed to enter a network.
MPIs
BPDs
NALs
ACLs
55
_____ _____ are used to search for open ports on a network.
Port sniffers
Network scanners
Protocol analyzers
Packet sniffers
56
Occur when someone tries to access network resources that they do not have permission to access
Authorization violations
Authentication violations
Access violations
Permissions violations
57
____ needs to be performed before a system is retired and disposed of.
Sampling
Sanitization
Decryption
Tracking
58
Protocol for authenticating service requests between trusted hosts across an untrusted network
Kerberos
RADIUS
LDAP
TACACS+
59
Which of the following is not an advantage of honeypots?
Honeypots identify attack patterns.
Honeypots consume large amounts of an attacker's time.
Honeypots are relatively easy to manage.
Honeypots could open organizations to litigation.
60
What enables network engineers to reconfigure a network via software w/o the need for recabling
software-defined networking
protocol layering
virtual layering
software-provided networking
61
described as uncontrolled & disorganized spreading caused by a lack of organizational structure
VM hopping
VM escape
VM Sprawl
VM Considering
62
Banner _____ is the act of capturing information provided by banners.
monitoring
analysis
poaching
grabbing
63
Which of the following statements concerning SIEM systems is false?
SIEM systems contain and manage incidents as they occur.
SIEM systems are relatively inexpensive to implement.
SIEM systems help identify trends and patterns over time.
SIEM systems can gather info from switches,routers,firewalls
64
What security features has as its primary goal the protection of storage media?
UEFI
TPM
SED
HSM
65
With regard to identity and AAA, _____ deals with knowing who did what and when then did it.
Authentication
Identity
Accountability
Authorization
66
In the case of _____ _____, credentials are transferred across multiple systems.
single sign-on
identity federation
federation services
transitive trust
67
Which of the following is an example of a non-regulatory environment?
PCI DSS
HIPAA
SOX
NIST
68
_____ could be defined as increasing workload capacity by adding more resources.
Replication
Scalability
Elasticity
Redundancy
69
In a(n) _____ configuration, all load balancers are active and share the load evenly.
active-active
passive-active
passive-passive
active-passive
70
_____ gateways translate and convertmedia streams between different technologies.
Encryption
Media
Mail
Translation
71
With regard to security devices, _____ can either be a sensor or a group of sensors.
accelerators
collectors
filters
concentrators
72
Hubs and bridges are still in use, but _____ have basically replaced them.
repeaters
switches
firewalls
servers
73
Defines policies, protocols, & practices to manage identities across systems and organizations.
federation services
single sign-on
identity federation
transitive trust
74
Mail _____ process e-mail packets, filter spam, manage data loss, and handle encryption.
gateways
switches
servers
hubs
75
___ environment is one in which an organization is controlled by laws, rules, or regulations.
regulatory
guidance
informational
policy
76
_____ compliance focuses on the protection, trustworthiness, and accessibility of data.
Judicial
Compulsory
Regulatory
Mandatory
77
Providing employees w/ the least access to network resources required to meet business needs.
permission auditing and review
account maintenance
group-based access control
least privilege
78
Refers to components needed to set up hosting of a desktop environment on a centralized server
VDN
VDE
VDI
VDC
79
_____ are small computer programs that provide for automated courses of action.
Stenographics
Scripts
Streams
Loops
80
What entity enforces security between cloud service providers and customers?
access and security mediator
customer advocate
cloud access security broker
vendor advocate
81
VM _____ is described as when an attacker uses software to jump from a VM to the underlying OS.
escape
sprawl
hopping
condensing
82
helps resolve IPV4 exhaustion by translating private IP addresses into routable IP addresses.
SSH
TLS
NAT
DNS
83
Deploying multiple elements across a network, when one fails another is there to take its place
Elasticity
Scalability
Replication
Redundancy
84
Refers to mirroring data & hardware systems so if a fault occurs a mirrored system takes over
High availability
Distributive tolerance
Distributive allocation
Fault tolerance
85
Refers to maintaining the availability of data and services despite a disrupting event.
Distributive tolerance
Distributive allocation
Fault tolerance
High availability
86
_____ could be defined as increasing workload capacity by adding more hardware.
Elasticity
Replication
Redundancy
Scalability
87
Which of the following commands will show a list of "listening" port numbers?
arp
tcpdump
netstat
tracert
88
What cloud model allows companies to contract for computing on an "as needed" basis?
PaaS
IaaS
SaaS
public
89
Protocols providing integrity, authentication & privacy with message authentication/encryption.
COMPSec
IPSec
VPNSec
OPSec
90
The outsourcing of security functions to a vendor is known as _____ as a service.
security
platform
infrastructure
software
91
Network located outside of an organization but still partially controlled by that organization
distributed
hosted
On-premises
cloud

Security+ SY0-501 Final Exam Review (variance 2) Flashcards | StudBud

Security+ SY0-501 Final Exam Review (variance 2)

91 termsStudBud Administration59 plays

Flashcards91 cardsFPractice quizPHost liveL

Questions 91

Answers

1
Measures the probability of the biometric system accepting access efforts by unauthorized user
FAR
FRR
CRR
CER
2
With regard to multifactor authentication, _____ are an example of somewhere you are.
locations
biometrics
signatures
smart card
3
What represents multi-layer defense?
controlled redundancy
control security
vendor diversity
layered security
4
Protocol allowing token-based authorization on the Internet from web mobile&desktop application
Shibboleth
SAML
OAuth
OpenID
5
_____ _____ provides a means of authenticating machines on a network.
Key filtering
Token filtering
MAC filtering
Signal filtering
6
Authentication is easier by allowing different clients to get info about authenticated sessions
SAML
OpenID
OAuth
Shibboleth
7
What proxy server examine each client request and compares the request to an AUP?
anonymizing proxy
content-filtering proxy
caching proxy
open proxy
8
What terms is used to describe the allocation of requests across multiple resources?
redundancy
replication
distributive allocation
fanning
9
Which of the following statements concerning physical ("dedicated") servers is true?
Physical servers are more powerful than virtual servers.
Physical servers are less scalable than virtual servers.
Physical servers are easier to manage than virtual servers.
Physical servers are less expensive than virtual servers.
10
The trust relationship extended to one domain will be extended to any other trusted domain.
transitive trust
single sign-on
federation services
identity federation
11
With regard to identity & AAA _ is determining what someone has access to after authentication.
Accountability
Authentication
Authorization
Identity
12
A type ____ hypervisor runs on an OS with other "guest" OS running as processes on the host OS.
IV
II
III
I
13
With regard to _____, authentication, authorization, and accounting are separated.
LDAP
Kerberos
TACACS+
RADIUS
14
Tool sets designed to assist hackers w/tasks associated w/exploiting vulnerabilities in systems
Root kits
Exploitation frameworks
Vulnerability frameworks
Malware kits
15
With regard to identity and AAA, _____ is who you claim to be.
Authorization
Authentication
Accountability
Identity
16
Separating specific groups of physical equipment to handle different classes of traffic
virtual segregation
air gaps
physical segregation
segment isolation
17
Cloud model provides companies with common interests the ability to share a cloud environment?
public
hybrid
private
community
18
A premade, fully-patched image of a system that can be configured and deployed within seconds.
primary
key
controlling
master
19
L2TP/IPsec and PPTP are examples of _____ protocols.
leveling
covering
tunneling
layering
20
Network _____ can offer increased throughput and less network disruption.
webs
protocols
trees
fabrics
21
A strategy of implementing multiple layers of security is referred to as "_____ _____ _____."
defense in depth
layered combat strategy
intrusion prevention strategy
intrusion in depth
22
Which of the following statements concerning virtualiz servers is true?
Provide higher levels of performance than physical servers
Are harder to manage than physical servers.
Are more scalable than physical servers.
Are more powerful than physical servers.
23
A secure _____ service issues, validates, renews, and cancels security tokens.
protocol
Algorithm
token
Key
24
_____ systems are platforms on which services are run.
Resource
Operating
Networking
Authorization
25
Defined as "the practice of managing endpoints on a case-by-case basis as they connect"
NPC
NAC
DLP
CIP
26
Enables SSO for federated identity-based authentication and authorization across networks.
Shibboleth
OpenID
SAML
OAuth
27
With regard to identity and AAA, _ is a process by which you prove you are who you say you are.
Authorization
Identity
Accountability
Authentication
28
Described as a switch's ability to "learn" MAC addresses when the switch connects to a network.
static learning
interactive learning
sticky learning
dynamic learning
29
Wireless access points typically operate at layers _____ and _____ of the OSI model.
1 : 2
2 : 3
2 : 4
1 : 3
30
Protocol allowing anyone to locate resources on a network, whether on the Internet/intranet.
TACACS+
RADIUS
Kerberos
LDAP
31
Which of the following is not a tunneling protocol?
PPTP
L2TP/IPsec
SSTP
HTTP
32
A(n) _____ is a type of DoS attack.
blockade
flood
APT
inrush
33
A portion of a network where systems will be accessed regularly from an untrusted network.
intranet
extranet
WAN
DMZ
34
Access control model only used in environments w/ different levels of security classifications?
attribute-based access control (ABAC)
mandatory access control (MAC)
rule-based access control
discretionary access control (DAC)
35
What security features - located on a motherboard - assists with key generation and storage?
HSM
UEFI
TPM
SED
36
RAID level _____ only provides the ability to read from and write to muliple disks in an array.
0
6
1
5
37
The practice of _____ makes a system more resistant to an attack.
unifying
incorporating
solidifying
hardening
38
The art & science of adding watermarks to files so the files can be traced to a specific user.
Calligraphy
Brandology
Steganography
Phraseology
39
_____ is a connectionless protocol that uses UDP.
Kerberos
RADIUS
LDAP
TACACS+
40
_____ an applications means that the applications is not allowed to run on a system.
Whitelisting
Blacklisting
Greenlisting
Redlisting
41
___ refers to technology employed to detect and prevent transfers of data across an enterprise.
CIP
CLP
DIP
DLP
42
The primary function of a(n) _ is to control the flow of network traffic in & out of a network.
host
firewall
switch
repeater
43
Monitors networks for inappropriate/ unauthorized use but not configured to respond to threats.
HIPS
NIPS
NIDS
HIDS
44
Monitors networks for inappropriate/ unauthorized & are configured to respond to threats.
HIDS
NIDS
HIPS
NIPS
45
A network that sends packets without using a central router or switch.
securely dynamic
securely centralized
ad hominem
ad hoc
46
A(n) _____ _____ is a hardware or software tool used to analyze network traffic.
packet sniffer
frequency generator
frequency counter
packet counter
47
Implemented by shutting down device interfaces or blocking traffic to and from specific devices
Segmentation
Isolation
Compartmentalization
Segregation
48
What proxy servers reduce bandwidth usage/increases network performance by keeping local copies
content-filtering proxy
caching proxy
anonymizing proxy
open proxy
49
A VPN _____ provides a means of managing multiple separate VPN conversations.
amplifier
concentrator
generator
repeater
50
With regard to multifactor authentication, _____ are an example of something you are.
biometrics
locations
smart cards
signatures
51
__ is an XML-based protocol that provides for a single sign-on to be used for web applications.
SAML
OAuth
Shibboleth
OpenID
52
Controls the interaction between VMs and the hardware on which the virtual machines reside.
OS
switch
application
hypervisor
53
_____ are instantaneous savepoints in time on virtual machines.
Snapshots
Images
Imprints
Backups
54
_____ decide whether or not traffic is allowed to enter a network.
MPIs
BPDs
NALs
ACLs
55
_____ _____ are used to search for open ports on a network.
Port sniffers
Network scanners
Protocol analyzers
Packet sniffers
56
Occur when someone tries to access network resources that they do not have permission to access
Authorization violations
Authentication violations
Access violations
Permissions violations
57
____ needs to be performed before a system is retired and disposed of.
Sampling
Sanitization
Decryption
Tracking
58
Protocol for authenticating service requests between trusted hosts across an untrusted network
Kerberos
RADIUS
LDAP
TACACS+
59
Which of the following is not an advantage of honeypots?
Honeypots identify attack patterns.
Honeypots consume large amounts of an attacker's time.
Honeypots are relatively easy to manage.
Honeypots could open organizations to litigation.
60
What enables network engineers to reconfigure a network via software w/o the need for recabling
software-defined networking
protocol layering
virtual layering
software-provided networking
61
described as uncontrolled & disorganized spreading caused by a lack of organizational structure
VM hopping
VM escape
VM Sprawl
VM Considering
62
Banner _____ is the act of capturing information provided by banners.
monitoring
analysis
poaching
grabbing
63
Which of the following statements concerning SIEM systems is false?
SIEM systems contain and manage incidents as they occur.
SIEM systems are relatively inexpensive to implement.
SIEM systems help identify trends and patterns over time.
SIEM systems can gather info from switches,routers,firewalls
64
What security features has as its primary goal the protection of storage media?
UEFI
TPM
SED
HSM
65
With regard to identity and AAA, _____ deals with knowing who did what and when then did it.
Authentication
Identity
Accountability
Authorization
66
In the case of _____ _____, credentials are transferred across multiple systems.
single sign-on
identity federation
federation services
transitive trust
67
Which of the following is an example of a non-regulatory environment?
PCI DSS
HIPAA
SOX
NIST
68
_____ could be defined as increasing workload capacity by adding more resources.
Replication
Scalability
Elasticity
Redundancy
69
In a(n) _____ configuration, all load balancers are active and share the load evenly.
active-active
passive-active
passive-passive
active-passive
70
_____ gateways translate and convertmedia streams between different technologies.
Encryption
Media
Mail
Translation
71
With regard to security devices, _____ can either be a sensor or a group of sensors.
accelerators
collectors
filters
concentrators
72
Hubs and bridges are still in use, but _____ have basically replaced them.
repeaters
switches
firewalls
servers
73
Defines policies, protocols, & practices to manage identities across systems and organizations.
federation services
single sign-on
identity federation
transitive trust
74
Mail _____ process e-mail packets, filter spam, manage data loss, and handle encryption.
gateways
switches
servers
hubs
75
___ environment is one in which an organization is controlled by laws, rules, or regulations.
regulatory
guidance
informational
policy
76
_____ compliance focuses on the protection, trustworthiness, and accessibility of data.
Judicial
Compulsory
Regulatory
Mandatory
77
Providing employees w/ the least access to network resources required to meet business needs.
permission auditing and review
account maintenance
group-based access control
least privilege
78
Refers to components needed to set up hosting of a desktop environment on a centralized server
VDN
VDE
VDI
VDC
79
_____ are small computer programs that provide for automated courses of action.
Stenographics
Scripts
Streams
Loops
80
What entity enforces security between cloud service providers and customers?
access and security mediator
customer advocate
cloud access security broker
vendor advocate
81
VM _____ is described as when an attacker uses software to jump from a VM to the underlying OS.
escape
sprawl
hopping
condensing
82
helps resolve IPV4 exhaustion by translating private IP addresses into routable IP addresses.
SSH
TLS
NAT
DNS
83
Deploying multiple elements across a network, when one fails another is there to take its place
Elasticity
Scalability
Replication
Redundancy
84
Refers to mirroring data & hardware systems so if a fault occurs a mirrored system takes over
High availability
Distributive tolerance
Distributive allocation
Fault tolerance
85
Refers to maintaining the availability of data and services despite a disrupting event.
Distributive tolerance
Distributive allocation
Fault tolerance
High availability
86
_____ could be defined as increasing workload capacity by adding more hardware.
Elasticity
Replication
Redundancy
Scalability
87
Which of the following commands will show a list of "listening" port numbers?
arp
tcpdump
netstat
tracert
88
What cloud model allows companies to contract for computing on an "as needed" basis?
PaaS
IaaS
SaaS
public
89
Protocols providing integrity, authentication & privacy with message authentication/encryption.
COMPSec
IPSec
VPNSec
OPSec
90
The outsourcing of security functions to a vendor is known as _____ as a service.
security
platform
infrastructure
software
91
Network located outside of an organization but still partially controlled by that organization
distributed
hosted
On-premises
cloud