stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec + Study questions Flashcards | StudBud
Explore
/
Sec + Study questions
Sec + Study questions
100 terms
·
StudBud Administration
·
15 plays
Questions taken from a Comptia site for studying.
Flashcards
100 cards
F
Practice quiz
P
Host live
L
Questions
100
Answers
1
Matt, an administrator, implement in a server room to help prevent
static electricity?
C. ESD straps
B. Humidity controls
A. GFI electrical outlets
D. EMI shielding
2
Which of the following can be implemented on a laptop hard drive to help prevent unauthorized
access to data?
D. Data loss prevention
B. Key escrow
C. Screen lock
A. Full disk encryption
3
Which of the following security tools can Jane, a security administrator, use to deter theft?
B. Cable locks
A. Visualization
D. Device encryption
C. GPS tracking
4
Which of the following protocols is used to authenticate the client and server's digital certificate?
B. DNS
D. ICMP
C. TLS
A. PEAP
5
Which of the following is often rated based on its ability to increase the time it takes to perform an
attack?
C. Patch management
B. Screen lock
A. Safe
D. Visualization
6
Which of the following combinations represents multifactor authentication?
B. Voice print analysis and facial recognition
A. Smart card and hard token
C. Username and PIN
D. Cipher lock combination and proximity badge
7
Pete, an administrator, use to verify the integrity of a downloaded
file?
A. CRL
D. MD5
B. CSR
C. AES
8
HR wants full access to resources of company, including finance. IT admin denies this because:
B. Separation of duties
C. Role authentication
D. Implicit deny
A. Conflict of interest
9
Which of the following is BEST utilized to actively test security controls on a particular system?
A. Port scanning
C. Vulnerability scanning
B. Penetration test
D. Grey/Gray box
10
Change what to help mitigate the risk
associated with war drivers discovering the wireless network?
C. MAC filtering
B. WEP encryption
D. AP power levels
A. WPA encryption
11
Following a security failure incident, the chain of custody must be followed in order to:
B. Securely lock down any compromised equipment.
C. Preserve and maintain evidence integrity.
D. Provide an accurate timeline detailing how the incident occurred.
A. Determine who accessed the compromised equipment pre-incident.
12
Which of the following concepts defines the requirement for data availability?
D. Encryption of email messages
A. Authentication to RADIUS
B. Non-repudiation of email messages
C. Disaster recovery planning
13
Unauthorized email that was sent to specific
VIPs in the company with a malicious attachment. Which type most likely is:
A. Vishing
B. Whaling
D. Pharming
C. DDoS
14
Which of the following is the MOST important security requirement for mobile devices storing PII?
A. Remote data wipe
D. WPA2 wireless
B. GPS location service
C. VPN pass-through
15
Which of the following will allow proper ventilation for servers in a data center?
B. Humidity controls
A. Hot/cold aisles
D. Load balancing
C. EMI shielding
16
A packet sniffer to troubleshoot remote authentication. Pete
detects a device trying to communicate to ports 1812 + 1813
B. LDAP
A. TACACS+
C. Kerberos
D. RADIUS
17
Which of the following provides the LEAST availability?
C. RAID 3
D. RAID 5
B. RAID 1
A. RAID 0
18
Which of the following are restricted to 64-bit block sizes? (Select TWO).
E. 3DES
C. AES256
B. DES
F. AES
19
Which of the following encrypts the body of a packet, rather than just the password, while sending
information?
A. LDAP
B. TACACS+
D. RADIUS
C. ACLs
20
Which of the following is MOST appropriate when storing backup tapes in a physically non-secure
room?
C. Encrypt the tapes with AES.
A. Use an in-tape GPS tracking device.
B. Store the tapes in a locked safe.
D. Securely wipe the tapes.
21
Upper management decides which risk to mitigate based on cost. This is an example of:
D. Quantitative risk assessment
A. Qualitative risk assessment
B. Business impact analysis
C. Risk management framework
22
Which of the following best practices is commonly found at the end of router ACLs?
D. Role-based access controls
B. Implicit deny
C. Implicit allow
A. Time of day restrictions
23
IT, in order to
allow employees to have secure remote access to certain internal network services such as file
servers:
D. Router
B. VPN gateway
C. Switch
A. Packet filtering firewall
24
Which of the following protocols is MOST likely associated with network audit logging?
D. SNMP
A. ICMP
C. DNS
B. FTPS
25
The use of social networking sites introduces the risk of:
B. Data classification issues
A. Disclosure of proprietary information
C. Data availability issues
D. Broken chain of custody
26
Which data encryption would Jane, a security administrator, use if MBR
and the file systems needed to be included?
A. Full disk
B. Individual files
C. Database
D. Partial disk
27
Which malware type is BEST described as protecting itself by hooking system
processes and hiding its presence?
D. Virus
C. Logic bomb
A. Botnet
B. Rootkit
28
Which of the following web application security weaknesses can be mitigated by preventing the
use of HTML tags?
D. Cross-site scripting
B. SQL injection
A. LDAP injection
C. Error and exception handling
29
A developer installs the
new application on a production system to test the functionality. Which is MOST
likely affected
A. Application design
B. Application security
C. Initial baseline configuration
D. Management of interfaces
30
Which of the following would be implemented to create a network inside a network?
C. NAC
D. VPN
B. NAT
A. VLAN
31
Which of the following authentication services uses a ticket granting system to provide access?
D. Kerberos
B. LDAP
A. RADIUS
C. TACACS+
32
Forensic image of harddrive. Which of the following can be used to
demonstrate the image has not been tampered with?
C. Encrypt the image file
B. Document the image file's size and time stamps
A. Chain of custody
D. Hash of the image file
33
Which of the following network devices allows web traffic to be distributed amongst servers?
D. Routers
C. NIDS
B. Load balancers
A. Web security gateway
34
Which of the following password policies is the MOST effective against a brute force network
attack?
D. Account lockout
C. 30 day password expiration
B. Password recovery
A. Password complexity
35
Which of the following can Pete, the security administrator, implement to filter Internet traffic?
A. Warning banners
D. Command shell restrictions
C. Host-based firewalls
B. Spam filters
36
Which of the following uses TCP / UDP port 53 by default?
D. NetBIOS
B. SFTP
C. SSH
A. DNS
37
Which of the following security controls enforces user permissions based on a job role?
C. Account policy enforcement
B. Group based privileges
D. User assigned privileges
A. Single sign-on access
38
Which of the following is BEST associated with PKI?
A. Private key
C. Stream ciphers
D. NTLMv2
B. Block ciphers
39
Sara, a security guard, reports that the side of the company building has been marked with spray
paint =
D. War dialing
B. War driving
A. Interference
C. War chalking
40
BEST be used by Sara, the security administrator, to calculate the
likelihood of an event occurring?
D. ARO
A. SLE
C. ROI
B. ALE
41
Which best practices makes a wireless network more difficult to find?
B. UseWPA2-PSK
D. Power down unused WAPs
A. Implement MAC filtering
C. Disable SSD broadcast
42
Account lockout is a mitigation strategy used by the administrator, to combat which of the
following attacks? (Select 2)
E. Privilege escalation
D. Brute force
C. Dictionary
A. Spoofing
43
Which security tool can an administrator implement to mitigate the risks of
theft?
B. Host based firewalls
A. Visualization
D. Device encryption
C. HIPS
44
Which the following flags are used to establish a TCP connection? (Select TWO).
C. SYN
A. PSH
D. URG
B. ACK
45
Grandfather-Father-Son and Tower of Hanoi are common:
C. Penetration testing best practices.
B. Backup tape rotation strategies.
D. Failover practices in clustering.
A. Trojans that collect banking information.
46
Which of the following describes an LDAP injection attack?
B. Manipulating an application's LDAP query to gain or alter access rights
C. Sending buffer overflow to the LDAP query service
A. Creating a copy of user credentials during the LDAP auth session
D. Using XSS to direct the user to a rogue LDAP server
47
Which of the following network devices allows Jane, a security technician, to perform malware
inspection?
B. VPN concentrator
A. Load balancer
C. Firewall
D. NIPS
48
Which of the following combinations represents multifactor authentication?
A. Key and proximity badge
D. Password and PIN
B. Fingerprint and proximity badge
C. Retina scan and voice analysis
49
Sec admin needs to assign permissions for network. Which would allow minimum necessary?
D. Least privilege
B. Job rotation
C. Privilege escalation
A. Separation of duties
50
Which of the following identifies certificates that have been compromised or suspected of being
compromised?
D. Certificate authority
A. Certificate revocation list
B. Access control list
C. Key escrow registry
51
BEST reason to have a formal and exercised incident management
plan?
C. Patches are not made without testing
D. All parties understand their role in the process
B. Users do not maintain excessive permissions
A. All vulnerabilities are mitigated
52
BEST be implemented on a mobile phone to help prevent any sensitive
data from being recovered if the phone is lost?
C. Device encryption
B. Screen locks
A. Voice encryption
D. GPS tracking
53
How often, at a MINIMUM, should Sara, an administrator, review the accesses and right of the
users on her system?
A. Annually
D. Every time they patch the server
C. Every five years
B. Immediately after an employee is terminated
54
Pete, a security administrator, do to limit a wireless signal from
penetrating the exterior walls?
B. Consider antenna placement
C. Disable the SSID broadcast
D. Disable WPA
A. Implement TKIP encryption
55
A security analyst, must authenticate himself and his company when obtaining a certificate. What should he use?
C. Registration authority
D. Trust model
B. Key escrow
A. Certification authority
56
Which of the following secure protocols is MOST commonly used to remotely administer
Unix/Linux systems?
C. SFTP
D. SNMP
A. SSH
B. SCP
57
The security administrator, do FIRST when an employee
reports the loss of a corporate mobile device?
A. Remotely lock the device with a PIN
C. Remotely uninstall all company software
D. Remotely initiate a device wipe
B. Enable GPS location and record from the camera
58
Users in the marketing department are given a different level of access to files than users in the
accounting department
A. Standard access control
D. Discretionary access control
B. Role based access control
C. Mandatory access control
59
Which of the following time periods is a best practice for requiring user awareness training?
A. Every 5 years
B. Every 3 years
C. Every 2 years
D. Annually
60
If Pete, an administrator, is blocking port 22, which of the following protocols will this affect?
(Select TWO)
B. SSH
A. SNMP
C. SMTP
F. SCP
61
Below is pseudo-code an example of?
IF VARIABLE (CONTAINS NUMBERS = TRUE) THEN EXIT
B. Input validation
D. Cross-site scripting prevention
A. Buffer overflow prevention
C. CSRF prevention
62
A user has reported an increase in email phishing attempts. Which can be
implemented to mitigate the attacks?
A. Anti-spyware
B. Anti-adware
C. Anti-virus
D. Anti-spam
63
An example of authentication using something Jane, a user, has and
something she knows?
D. Fingerprint scan and signature
C. Username and PIN
B. Username and password
A. GSM phone card and PIN
64
A security analyst, discovers JavaScript being used to
send random data to another service on the same system. This is:
D. Distributed denial of service
C. SQL injection
A. Buffer overflow
B. XML injection
65
Which of the following concepts is BEST described as developing a new chain of command in the
event of a contingency?
D. Succession planning
A. Business continuity planning
B. Continuity of operations
C. Business impact analysis
66
Employee leaves company. What is updated to ensure security?
A. RSA
B. CA
C. PKI
D. CRL
67
Which of the following is an attack designed to steal cell phone data and contacts?
B. Smurfing
A. Bluesnarfing
D. Bluejacking
C. Fuzzing
68
Malicious DNS traffic on the network. Which of the following tools
would be used to analyze the nature of this attack?
D. Application firewall
B. Zone transfer
A. Sniffer
C. Network tap
69
Which of the following is a system designed to lure attackers away from production systems?
C. Honeypot
B. Spam filter
A. Proxy server
D. Flood guard
70
By default, which of the following ports would Pete, an administrator, block to prevent incoming
RDP connections to a WS
D. 5631
C. 3389
B. 161
A. 22
71
Which of the following devices is BEST suited for servers that need to store private keys?
D. Hardened host firewall
B. Hardened network firewall
C. Solid state disk drive
A. Hardware security module
72
Which of the following symmetric key algorithms are examples of block ciphers? (Select THREE)
F. Blowfish
C. AES
A. RC4
B. 3DES
73
Which should be used when a business needs a block cipher with minimal key
size for internal encryption?
D. 3DES
C. RC5
B. Blowfish
A. AES
74
In which of the following locations would Sara, a forensic analyst, look to find a hooked process?
A. BIOS
D. Rootkit
C. RAM
B. Slack space
75
Which of the following types of data encryption would Matt, a security administrator, use to encrypt
a specific table?
C. Database
A. Full disk
B. Individual files
D. Removable media Definition
76
Matt, the Chief Information Officer (CIO), wants to protect laptop users from zero day attacks. How should he do this?
D. Anti-spyware
A. Host based firewall
B. Host based IDS
C. Anti-virus
77
A business has paper forms on hand in the event of a credit processing system failure. This is an
example of:
A. Business process re-engineering
C. Continuity of operations
B. Disaster recovery
D. Enterprise resource planning
78
User downloads pirated software. Performance slows down and antivirus alerts are being displayed. This malware is:
B. Worm
C. Trojan
A. Logic bomb
D. Adware
79
Which of the following security concepts can Matt, a security administrator, implement to support
integrity?
C. Key escrow
A. Digital signatures
B. Trust models
D. Recovery agents
80
Which of the following authentication services uses the AAA architecture and runs on TCP?
B. Kerberos
A. LDAP
C. RADIUS
D. TACACS+
81
Blocking external attackers from gaining
information on remote employees by scanning their laptops. Best plan =
D. Anti-virus software
A. Host IDS
C. Anti-spam software
B. Personal firewall
82
Which of the following is MOST likely to result in data loss?
A. Accounting transferring confidential staff details via SFTP 2 payr dep
C. Encrypted backup tapes left unattended at reception for offsite storage
B. Back office staff accessing and updating details on the mainframe via SS
D. Developers copying data from production to the test environments via USB
83
Which of the following is an example of multifactor authentication?
D. Fingerprint and retina scan
C. Password and PIN
B. Username and password
A. Credit card and PIN
84
Matt, an administrator, change FIRST when installing a new access
point?
D. Default password
A. SSID broadcast
C. DHCP addresses
B. Encryption
85
A policy that would force all users to organize their area as well as help
in reducing the risk of possible data theft:
D. Data disposal
A. Password behaviors
C. Data handling
B. Clean desk policy
86
Which of the following risk related concepts BEST supports the identification of fraud?
B. Job rotation
A. Risk avoidance
D. Clean desk policy
C. ALE calculation
87
Sec admin needs to deploy a wireless network where the wireless encryption
key is negotiated automatically. Use:
B. 802.1n
C. MAC filtering
D. WPA enterprise
A. WPA2-PSK
88
Isolation mode on an AP provides which of the following functionality types?
B. Disallows all users from communicating directly with the AP
C. Hides the service set identifier
D. Makes the router invisible to other routers
A. Segmentation of each wireless user from other wireless users
89
Which mitigates the risk of Matt, an attacker, gaining access to a company
network by using a former employee's credenti
A. Account expiration
B. Password complexity
D. Dual factor authentication
C. Account lockout
90
Which of the following security concepts would Sara, the security administrator, use to mitigate the
risk of data loss?
D. Routine log review
C. Cloud computing
A. Record time offset
B. Clean desk policy
91
A targeted email attack sent to Sara, the company's Chief Executive Officer (CEO), is known as
which of the following?
D. Dumpster diving
B. Bluesnarfing
A. Whaling
C. Vishing
92
MUST implement to verify both the integrity
and authenticity of a message while requiring a shared secret?
D. HMAC
A. RIPEMD
C. SHA
B. MD5
93
Which would allow Pete, a network administrator, to allow or deny access
to a specific list of network clients?
D. MAC filtering
A. Content filtering
B. Flood guard
C. URL filtering
94
Which of the following creates ciphertext by replacing one set of characters for another?
B. Elliptical cryptography
A. Substitution cryptography
C. Digital signatures
D. Transposition cryptography
95
Which of the following creates ciphertext by changing the placement of characters?
B. Hashing
D. Digital signatures
A. Transposition cryptography
C. Elliptical cryptography
96
Which of the following should Matt, a security administrator, include when encrypting
smartphones? (Select TWO).
C. Master boot records
A. Steganography images
B. Internal memory
D. Removable memory cards
97
Which of the following mitigates the risk of proprietary information being compromised?
C. File encryption
B. Digital signatures
A. Cloud computing
D. Visualization
98
Which of the following is a way to gain access to a protected system while another user is entering
credentials?
C. DDoS
D. Backdoor
B. Shoulder surfing
A. Spim
99
An exploit security vulnerability on a system or network
for the purpose of determining true impact?
A. Port scanning
B. Penetration testing
C. Vulnerability scanning
D. Performing risk analysis
100
Which of the following is a valid server-role in a Kerberos authentication system?
A. Token issuing system
D. Ticket granting server
B. Security assertion server
C. Authentication agent