Security+ Review

 You discover several obsolete hard drives labeled unclassified and awaiting destruction. The BEST disposal method is...

Which of the following encryption algorithms is used primarily to secure data at rest?

 Two companies are merging and must transfer files over the web in a secure manner. Which protocol is best utilized?

The best method for contractors to access the internal network without having access to other systems beyond their scope

You're assessing internal servers against recommended security practices. Which should you do to conduct the assessment?

Which of the following development models entails several iterative and incremental software development methodologies?

Ann, a security analyst, wants to implement a secure exchange of email. Which is the BEST option for freakin Ann to use?

Which BEST describes the importance of properly positioning servers in the rack to maintain availability?

You want to add TLS to the public web server. Which would be the FIRST step to implement the SSL certificate?

The period following a disaster that an individual IT system may remain offline is...

An application has allowed some users to bypass authentication. Which type of malware allows this to take place?

If a mobile device is lost, any sensitive information on the device could be accessed by third parties. Best prevention?

Which of the following are considered among the BEST indicators that a received message is a hoax?

Employees have PCs that log their time based on when they sign on/off the network. What account type do they have?

In addition to fingerprints and passwords, which addition would be best to create three-factor authentication?

A wireless authentication system must integrate with the directory back end. Which is a AAA solution providing this?

You want to determine if the web servers have the latest OS and application patches installed. The best type of scan is:

Each department should have its resources isolated but be able to communicate back to central servers. Best option is...

An email appears to be from the CFO asking for money to be wired to a vendor. This social engineering is based on...

To get the most accurate results on the security posture, which of the following should you do prior to scanning?

Which of the following are used to substantially increase the computation time required to crack a password?

Which of the following is a technical preventive control?

Which is an attacker MOST interested in when placing a malicious file in the Windows/CurrentVersion/Run registry key?

Which of the following would provide the BEST defense from an account password being discovered through brute forcing?

Joe wants to implement a solution that will reduce the restoration time of physical servers. Which is the BEST method?