stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Domain 4.0 Application, Data, and Host Security Flashcards | StudBud
Explore
/
Domain 4.0 Application, Data, and Host Security
Domain 4.0 Application, Data, and Host Security
58 terms
·
StudBud Administration
·
67 plays
All-In-One CompTIA Security + Domain 4 SY0-401 Exam Guide Fourth Edition
Flashcards
58 cards
F
Practice quiz
P
Host live
L
Questions
58
Answers
1
Which of the following is a way to defend against buffer overflow attacks?
Use unbound string manipulation
Write fast code
Use pointers
Treat all input from nth w outside a function as hostile
2
Which of the following correctly describes hit listing ?
Denys access to specifically approved applications
Allows access to only specifically approved applications
Denys access to all applications
Allows access to unapproved access
3
Which is not a example of alternative environment ?
SCADA and automation systems
embedded systems/mainframe
mobile devices (iOS and Android)/ game consoles
Jailbreaking
4
What is the primary security issue associated with embedded systems?
Cost
Lack of network connections
reduce set of functionality
Processing power
5
Which of the following is not a common use of XXS attacks?
Information theft
Website defacement
Seeion hijacking
Deploying maleware
6
Which of the allowing is the least favorable location for security checks?
Server-side input validation
Client-side code
Server-side output validation
Sever-side code
7
Which is not apart of a static enicoirmment?
Wrappers
Manual updates
Network segerartion
TLS
8
What is the most important thing to remember regarding performing forensics on a mobile device?
The device will change the state onCe the battery is off
Mobile devices will retain state when powered off
Mobile device forensics is similar to standard workstations
It is best to rely on specially trained personnel
9
Application firewalls operate at what layer?
3
4
7
1
10
What is an issue associated with jailbreaking of a mobile device ?
Geo;oactnokn is more accurate
Encryption firm the vendor will work more efficiently
Vendor updates to the OS may no longer be properly a[plied
Applications will rn more efectinelth
11
What's the best way to prevent users from running programs you don't want them to run?
Trusted OS
Application whitelisting
Application blacklisting
Host-based firewall
12
Which of the following correctly describe s XXS?
Exploiting a trust relationship between a site has for user
Braking cryption systems
Overflowing the allocated storage area
Exploiting a trust relationship between a user and a site
13
What os the purpose of MDM?
It is a virus found in the wild
It provides high bandwidth
IT provides the capability to secure and support phones
It is malicious jailbreak tool
14
The best process to use for determining unexpected input validation problems is ....
LDAP injection
Fuzzing
SQL injection
PEAP
15
You use a virtual machine to test software to check for malicious activity. Is what practice ?
Security control testing
Application whitelisting
Snapshot testing
Sandboxing
16
Why is it important to terminate employee access upon employee termination?
The corporation has control of all terminated workers BYOD
It's know employees months after termination breach access
Terminated employees own their devices in a BYOD environment
Terminated employees can be trusted not to access corp apps
17
What kind of protective mechanism should you deploy to protect against Internet-abased threats?
Anti-malware Software
Host-based firewall
Host-based sandboxing
Anti-spam software
18
What is one reason that mobile devices can complicate support?
All devices implement required functions the same
The variety of devices can complicate support training
The vendor can provide required support 4 mobile devices
Mobile devices are written to specifications and reliability
19
Which is not a MDM policy requirement ?
Encryption of data on the device
APs to the network need CHAP
Auto and remote locking or wiping
Locking with strong password or if lost or stolen
20
What is not a network segmentation accomplishment ?
VLANs/ACMs
HMAC
Application layering
MAC filtering /IP addesss roil ting
21
The ______ defineS the proper configuration settingS or an application?
Application configuration baleine
Web application firewall
NoSQL
Fuzzing
22
What should you apply to physical secure the laptops you've placed in the cafe setup?
Cable locks
Locking cabinets
Locking USB ports
Password-protected screensaver
23
Which of the following correctly describes XSRF?
Attacks a system with malicious code, executes via victim
Attacks a system with script code, execute via victim
Breaks a cryptography system
Enhanced cryptography encapsulation method
24
Which of the following is one of the most common web attacks methodologies?
XXS
Buffer overflows
XSRF
RPC erros
25
Which of the following correctly defines SQL injection?
Process by which app programS manipulate e string
Modifying a database query through false input
Inputs to web appS that are oppressed by different parsers
Charter code sets that allow mulititgginG capability
26
Is an example of this unique risks associated with an alternative environment ?
It permits access on the internet
it manipulates network configurations
It allows total control of a physical system
It allows data losses of corporate data
27
You want to use a special chip that has encryption keys with BitLocker. What is this?
TPM
PKI module
BitLocker encryption module
FIPS 140 chip
28
Which not a strategy that should be considered regarding BYOD devices?
Antenna placement / VoIP connection
Automatic / Device locking
Strong passwords / Encryption
Automatic/ Remote wiping
29
What type of protection should you install before you allow access to guest who'll use APs?
Pop-up blocker
Antivirus software
Anti-spam software
Virtualization
30
What is the most fundamental security practices that should be followed the use of bluetooth?
Devices should be exit from BYOD polices
Devices should always be kept in discoverable mode
devices should be used in TCP mode
Always have discoverable mode turned off unless in use
31
Your in the process of securing a Windows Server 2012, what process should you perform?
Production system preparation
OS hardening
{Patch management
Security control testing
32
Two challenges that you'll face with BYOD and your corporation is?
Corporations have ownership of BYODs and the data
Blurs the line for ownership of BYODs and sharing data
Companies has ownership of BYODs and employees own the data
Blurs the line for security of BYODs and sharing devices
33
What is http://cwe.mitre.org/top25/ and how does it compare to software errors?
A list matted by NASA of the top 100 most Microsoft errors
A list matted by MITRE of the top 25 most dangerous errors
A list matted by SCADA of the top 20 most cloud errors
A list matted by CCMP of the top 25 most valued errors
34
The two elements of application hardening are ___ and ___?
Data integrity with Input / Validation of confidentiality
Removing unneeded services / options; securing configuration
Patch management / NoSQL
Error / Exception handling
35
What is the concept of transitive trust?
A's authentication for A/B trusts the authentication for B/C
A's authentication for A/B trusts the authentication for C/A
A's authentication for A/B trusts the authentication for G/B
A's authentication for A/B trusts the authentication for C/A
36
Which one his suited for input validation ?
XXS/XSRF
Buffer overflow
Fuzzing
Path traversal
37
The difference between XXS vs XSRF is?
XXS= exploits trust 4 HTS and XSRF= exploits trust 4 STH
XXS= exploits trust 4 PPP and XSRF= exploits trust 4 PTP
XXS= exploits trust 4 STH and XSRF= exploits trust 4 PPP
XXS= exploits trust 4 EAP and XSRF= exploits trust 4 TLS
38
A wrapper can be used by?
Provide authentication services for data
Packet size decrees or increases for transport
be a firewall function in static systems
Provide network segregation in an alternative system
39
What is not a protection for mobile devices to access critical data on the network?
Device encryption
Security of key store
File sharing for scalability
Application security
40
Why it important to disable geo-tagging on your mobile device?
Geo-tagging can expose the location where the photo was
Geo-tagging can enable correlation of photos and location
Geo-tagging makes your friends confirm your photos
Geo-tagging is a great hobby
41
When dat A is storend on a hard drive and isn't currently being accessed, this is referred to :
Data in storage
Data in transit
Data in use
Data was rest
42
A threat with respect to loss of data when connecting your mobile device to your corporation ?
MDM attacks
Shoulder surfing
Power outage
SQL injections
43
Firmware updates in static systwens?
Run automatted and unattended
None of the above
Managed by a manual , tightly controlled process
unesscary
44
Error and exception handling should be performed in what fashion ?
Errors/Exceptions should be trapped and handled in proGram
Errors/Exceptions should be logged : handling is optional
All erros/exceptions should be trapped and handled in POT
Erros/Exceptions should never be handled
45
Why is it important to disable used features on mobile devices?
Enabling unused features reduces the avenues of attack
Disabling unused features reduces the avenues of attack
Enabling unused features increases the avenues of attack
Disabling unused features increases the avenues of attack
46
Which of the following best defines static systems?
They are configured for specific functions/ run unaltered
they do not have a user interface
They are designed for only one task
They have no memory
47
The process of ensuring the configurations of system are correct is known as...
Host software baselining
Host OS hardening
Host application whitelisting
Host image configuration
48
You are reminded there is a new vulnerability. Your certain your protected because you employed
Quality assurance
Trusted OS
Application blacklisting
Patch management
49
What virtualization capability will help testing and rollback requirements for systems set up?
Baselining
Host elasticity
Snapshots
Sandboxing
50
If a operating system is certified for use in multilevel security environments?
Resistant OS
Secure OS
Trusted OS
SElinuX
51
Which of the following technologies is used to help secure access to "big data"?
Kerberos-based authentication
Secure protocol methodologies
Account whtelisiting
HSM encryption
52
What the of testing should be performed to ensure your network systems with mobile devices?
Regression testing
Disaster recover testing
Load testing
Both blah-box and white-box testing
53
Which of the following describes a characteristic of an alternative environment ?
Embedded security functions that prevents hacks
Using Linux makes them more secure
Designed without typical security functions to their system
Only runs Windows
54
What is unique about mainframes with respect too security?
they are isolated form the internet
Highly flexible
they have all been retired abide op ti longer in function
Run on OS that doesn't have vulnerability
55
Which of the following describes fuzzing?
Systematic application malformed inputs
iterative development
Removing and not using old code
Buffer overflows
56
What should you develop to help prevent runaway accumulation of log files in your corporation?
Data encryption
Customer service policy
HSM policy
Data retention policy
57
Which of the following capabalilites could you recommend to a friend for a possible threat?
host-based intrusion section system
Host-based vulbveavjilty scanner
host-based pop-up-blocker
Host-based anti-spyware
58
What is not a significant issue associated with jailbroken or rooted mobile devices ?
Allows configuration for live wallpapers
Unknown state of internal protection mechanisms
Legal issues with respect to licensing
Failure to accept new updates
