stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Homework Questions 16-17-18 Flashcards | StudBud
Explore
/
Homework Questions 16-17-18
Homework Questions 16-17-18
42 terms
·
StudBud Administration
·
8 plays
Imported from external platform
Flashcards
42 cards
F
Practice quiz
P
Host live
L
Questions
42
Answers
1
The building will house a number of servers contained within a secure room and network racks. You have recommended...
Rogue Admin
Accidental Insider
All of the above
Social Engineering
2
What type of cryptographic key is delivered in a digital certificate?
Private
One-time pad
Symmetric
Public
3
In AAA architecture, what type of device might a RADIUS client be?
A router or switch for administrative access
Wireless access point
AAA server
End user device such as a laptop
4
A company wants to minimize the number of devices and mobile OS versions that it must support but allow use of a device-
CYOD
BYOD
COBO
COPE
5
Using a browser’s incognito mode will prevent sites from recording the user’s IP address.
True
False
6
What type of account management policy can protect against password guessing attacks?
Lock out
Kerberos authentication
Password hashing
Two factor authentication
7
What primary indicator must be verified in the browser before using a web form?
Ad-blocker
A lock icon in the URL bar
Incognito mode/private browsing
User is logged into the browser
8
Updates are not necessary for iOS devices because the OS is closed source.
True
False
9
Advanced malware can operate covertly with no easily detectable symptoms that can be obtained by scanning the device...
Suspiscious network port use
High resource utilization
Leaked data
Ransomware
10
You are assisting with the design of a new campus building for a multinational firm. On the recommendation of a security
To ward away passers-by
To restrict entry to only authorized personnel
To prevent vehicles from driving near or crashing into the building
To block unauthorized people from leaving the building in case of theft
11
A security consultant has recommended more frequent monitoring of the antivirus software on workstations. What sort of-
Only has authorized exclusions enabled
Anti-virus has up to date definitions and components
Both of the above
12
You are reviewing a secure deployment checklist for home router wireless configuration. Following the CompTIA A+...
Content filtering
DHCP
Diabling guest access
VPN
13
You are completing a checklist of security features for workstation deployments. Following the CompTIA A+ objectives...
Configure Real-time protection
Data at rest encryption
Disable USB ports
None of the above
14
A security consultant has recommended blocking end-user access to the chrome://flags browser page. Does this prevent...
False
True
15
The level of risk from zero-day attacks is only significant with respect to EOL systems.
False
True
16
Confidentiality and integrity are two important properties of information in a secure retrieval system. The third is-
Accounting
Availability
Authentication
Authorization
17
An organization should rely on automatic screen savers to prevent lunchtime attacks.
True
False
18
You are assisting with the development of end-user security awareness documentation. What is the difference between...
Tailgating involves vehicle access, Shoulder surfing is building access
Tailgating involves physical entry, Shoulder surfing is digital entry
Tailgating involves login spoofing, Shoulder surfing is login cracking
Tailgating involves physical entry, Shoulder surfing is covert observation
19
You receive a support call from a user who is “stuck” on a web page. She is trying to use the Back button to return to-
True
False
20
You have selected a secure location for a new home router, changed the default password, and verified the WAN IP address
Configure Wi-Fi security
Configure DHCP
Update firmware
Disable guest access
21
WPA3 personal mode is configured by selecting a passphrase shared between all users who are permitted to connect.
True
False
22
TKIP represents the best available wireless encryption and should be configured in place of AES if supported.
True
False
23
A threat actor recovers some documents via dumpster diving and learns that the system policy causes passwords to be...
Brute force
Cross-site scripting
Hashing
Dictionary
24
A company must deploy custom browser software to employees’ workstations. What method can be used to validate the...
Trusted source
None of the above
Synchronized installation
Developer certificate
25
Early in the day, a user called the help desk saying that his computer is running slowly and freezing up. Shortly after-
False
True
26
Why might you need to use a virus encyclopedia?
To look up what a virus is
To assess symptoms and potential bad effects
To verify the correct anti-virus software to run
To update anti-virus software
27
You are assisting a user with setting up Internet access to a web server on a home network. You want to configure...
False
True
28
A factory reset preserves the user's personal data.
True
False
29
What factor,
aside from a certificate
, must a user present to authenticate to a wireless network secured by EAP-TLS?
A device authorization (PIN, password, etc.)
A private key
A TPM
A public key
30
You are assisting with the configuration of MDM software. One concern is to deny access to devices that might be able...
All of the above
Rooted devices
Devices with NFC disabled
BYOD devices
31
Another user calls to say he is trying to sign-on to his online banking service, but the browser reports that the...
The bank service has been hacked and should be reported to the police
The bank should renew their certificate as the old one has been compromised
A bank is not likely to let their cert expire, this is likely a redirect
It's common for certificates to expire, the bank should renew it ASAP
32
What two types of biometric authentication mechanism are supported on smartphones?
Facial recognition and Draw Pattern
Fingerprint and PIN
Draw Pattern and PIN
Fingerprint and facial recognition
33
Why is DNS configuration a step in the malware remediation process?
Compromised DNS could result in malicious redirects
All of the above
Insecure DNS could be a network entry vulnerability
Rogue DNS servers could contain malware themselves
34
You discover that a threat actor has been able to harvest credentials from some visitors connecting to the company’s...
Evil Twin
On Path
Phishing
Footprinting
35
You are updating an internal support knowledge base with advice for troubleshooting mobile devices. What is the first...
Perform a backup of app data
Perform a force stop and/or reboot
Uninstall and reinstall the app
Perform a factory reset
36
You are troubleshooting a user device that keeps powering off unexpectedly. You run hardware diagnostics and confirm...
All of the above
Verify the device has sufficient storage space available
See if you can trace the issue to a single faulty app
Check for updates
37
The marketing department has refitted a kitchen area and provisioned several smart appliances for employee use...
False
True
38
Why might a PC infected with malware display no obvious symptoms?
Anti-virus software has mitigated its effects
Malware infection does not usually show symptoms
The malware has badly written code
Some malware is designed to 'lay low' in order to snoop
39
A user reports that a new device is not sustaining a battery charge for more than a couple of hours. What type of...
App spoofing
Cryptomining
DDoS bot
Trojan app
40
A threat actor crafts an email addressed to a senior support technician inviting him to register for free...
Spam
Phishing
Spoofing
Phreaking
41
A different user wants to configure a multiplayer game server by using a router's DMZ feature. Is this the best option?
False
True
42
Katie works in a high-security government facility. When she comes to work in the morning, she places her hand on a...
Biometric lock
Biometric entry-control
Magnetometer
Entry-control token
