501 PreTest 100q 20190220

What's best to gather intel on attack methods against your network?

Which of the following is used to authenticate the client and server's digital certificates?

team has no experience with an application but has to test it. What's being performed?

to ensure parties have a clear understanding of the controls needed to protect data, what is it

What tool does an Admin uses to view network traffic?

what ensures encryption of user credentials to authenticate to the network?

A CRL is comprised of

After data breach, customer data was lost. What's better way to protect the privacy of data?

Which encryption will help in protecting files on a PED?

The SysAdmin has deployed updated sec controls. What term helps him see how effective he is?

to increase server fault tolerance, what can we do to ensure servers w/stand hardware failure?

What should be accessible locally from every site to ensure users w/ bad certs cant have access

a customer receives an error that the application has an unexpected issue and must be shutdown.

As an admin, what is BEST to address saving data on company provided mobile devices?

when deploying a role-based access control model, what is MOST likely required?

Which of the following means of wireless authentication is easily vulnerable to spoofing?

What should a SecAdmin perform before a hard drive is analyzed with forensic tools?

Which of the following can be used to mitigate risk if a mobile device is lost?

Tokens that have a set of #s that automatically change every 30 seconds is called?

What length SSL and TLS keys are generally considered to be strong?

What would best prove the success of a security awareness program?

what protocol validates trust by returning responses of good, unknown, or revoked?

To ensure validity of public trusted certs during a power outage. What should be implemented?

Which sec strategies allows a company to limit damage to internal sys and provides loss control

What mitigates the risk of developers having acess without going through an approval process?

Which protocols allows for secure transfer files? (Select two)

what net device forwards packets across diff cmptr nets by reading destination addresses?

What process addresses how long data must be kept and how it is secured?

What is used when a higher lvl of security is desired for encryption key storage?

What kind of digital cert is typically used to ensure authenticity of a web server to a client

Which would be MOST effective in reducing data leaks?

Name 4 a cumulative package of all patches & hotfixes as well as additional features?

When implementing a solution to improve sec. that emails originated form the CO, what's best?

most secure method for password storage against brute force? (choose 2)

What MUST be updated immediately when an employee is terminated to prevent unauthorized access?

Certificates are sued for: (Select TWO)

Which of the following is the primary security concern when deploying a mobile device on a net?

Configuring the mode, encryption methods, & Sec associations are part of which?

Key negotiation keywords

What protocol should be used instead of telnet?

An Admin detects a device trying to communicate to TCP port 49. Which auth methods is attempted

whats a location that provides office space, but customer must provide equipment to continue OP

What allows a technician to provide the MOST secure wireless implementation?

protects users/services that's provided to external clients w/o elim access for internal users?

Which best explains the use of an HSM w/in a company server?

Which of the following MOST interferes with net-based detection techniques?

SecMan decides to force expiration of all passwords by COB. What BEST supports this reasoning?

What's a passive way to identify sec issues within a new network?

Which preventative controls is best for reducing the attack surface of a specific host?

Which password is LEAST complex?

Which describes a type of malware which is difficult to reverse engineer in a lab?

Which is an XML based open standard used in Xchange of authentication/zation btwn 2 parties?

disposal of paperwork containing confidential customer info in a recycling bin is called?

An authentication mechanism tht allows users a psswrd for a predefined time interval is called:

Data passing between two points over an IP based network for security is best implemented with?

What protocol supports two encryption modes: tunnel and transport?

Which of the following firewall rules only denies DNS zone transfers

ensuring only devices authorized to access the network be allowed to login is done by?

What cluster type is a standby server exists only 2 take over 4 another in event of failure?

Which of the following algs has well documented collisions? (Select two)

What port # is SSh

Where are MAC addresses stored for future reference?

What's the difference between TFTP and FTP?

which implementation steps would be appropriate for a public wireless hot-spot?

If you're worried about Lyr 2 switches in the net suffering from DoS attacks, what should U do?

Used to support single DES, but now what's a simple upgrade to improve in-transit protection?

Which is the MOST secure protocol to transfer files?

Which transportation encryption protocols ensure maximum security btwn web browser/server?

If a question says firewall and access control, it's always _____________.

A certificate authority takes which of the following actions in PKI?

Servers are rebooting unplanned and versions are behind the version w/all crrnt sec fixes. fix?

a SecAdmin has observed repeated attempts to break into a server. Which is designed to stop it?

Which is BEST to prevent disclosure of customer data in the event a tablet is lost or stolen?

Which can be implemented with multiple bit strength?

Sara Claims she never sent the message. Which aspect of PKI best ensures the identity of sender

Which of the following should an admin implement to research current attack methodologies?

What term best represents the resiliency of a cryptographic key to attacks?

which cipher will encrypt 8 bits at a time before sending data across the network?

IT needs to establish host based security for company workstations. what will work BEST?

Which of the following is the MOST specific plan for various problems that can arise w/in a sys

a NetAdmin has been asked to passively monitor network traffic. What should he use?

What app sec testing technique is used when an auto system generates random input data?

Which types of authorization could be utilized to trigger write access for Joe when Ann is gone

Which of the following is an enhanced type of domain digital certificate?

HVAC system for a datacenter is MOST concerned with which of the following?

a new NetAdmin sets up a new file server. What is best way to manage folder security?

If you notice more devices are connecting to your wireless net than should be. WhatMinimizes it

Addressing risks uncovered by a recent pen test, what most likely affects day to day operations

Which of the following is an example of multifactor authentication?

SecAdmin uses access controls based on the sec class of data. Which BEST describes thiscontrol?

a SecAdmin installed a new KDC. What auth protocol should be implemented across the net?

What would a SecAdmin implement to discover security threats on a network?