Security+ Review

Which of the following is an attack where a program is placed on a server to bypass normal security procedures?

How does a user obtain a message authentication code (MAC)?

How many channels does the 802.11 standard define?

Individuals who specialize in the breaking of codes are known as ___________________

A __________ is used to provide EMI and RFI shielding for an entire room of computer or electronic equipment.

Which of the following will not contribute to network hardening?

Which of the following is an IPsec header used to provide a mix of security services in IPv4 and IPv6?

If SLE is calculated at $2,500 and there are an anticipated 4 occurrences a year (ARO), then ALE is:

The __________ backup method is based on the philosophy that a full backup should occur at regular intervals, such as mo

Computer room humidity should ideally be kept above ___________________ percent.

A(n) ___________________ is a broad term that applies to a wide range of systems used to manage information security.

The ___________________ method of backup keeps all data that has ever been on the system, regardless of its value.

Your company has given you a laptop to use as you travel. What category does this laptop fall under?

Which method of cryptography uses a sequence of photons to represent the encrypted data?

Which of the following is not one of the cloud delivery models recognized by NIST?

An attack is one in which a rogue wireless access point poses as a legitimate wireless service provider.

A certificate authority (CA) is an organization that is responsible for doing which three of the following:

originally developed by Netscape, is used to establish a secure communication connection between two TCP/IP machines.

Which of the following is not a routing protocol?

Which of the following is a single sign-on system used widely on the Internet?

Which organization is concerned with defining technology and other electrical standards?

A ___________________ is a system designed to fool attackers into thinking a system is unsecured so they will attack it.

Which fire extinguisher type is the best to be used on computer equipment in the case of a computer fire?

Which of the following is an internal threat?

Wireless Ethernet conforms to which IEEE standard?

Which of the following is not one of the three cloud service models recognized by the NIST?

A ___ is a repair made while the system being repaired remains in operation, usually on an emergency basis.

A major organization in the tracking and reporting of common computer and network security problems is ______________.

When assigning permissions to users, which principle should you adhere to?

The type of inspections occurs at all levels of the network and provide additional security using a state table.

Which encryption algorithm is based on Rijndael?

According to the TCP/IP model, HTTP functions at which layer?

____________ is the first step in the incident response cycle.

An attack that sends sends a frame to the AP with a spoofed address to make it look like it came from the victim

A simulation of a disaster is known as __________________

To prevent files from being copied on a workstation to removable media, you should disable which ports?

Which of the following is a passive method of threat response?

How many programs are traditionally run during vulnerability scanning?

An access control model is a static model that uses predefined access privileges that are assigned by the admin

Which of the following uses multiple transparent or opaque layers to trick a user into clicking a button or link?

Which hypervisor model needs the operating system to be up and cannot boot until it is?

What is it known as when it is possible to attack a system using another, compromised system?

Which authentication method uses a key distribution center (KDC)

Which remote access protocol, used almost exclusively by Cisco, is a central server providing remote access?

Which of the following devices are the first line of defense for networks connected to the Internet?

Which access control method model allows the owner of a resource to grant privileges to information they own?

A sophisticated series of related attacks taking place over an extended period of time

On the outer edge of physical security is the first barrier to entry. This barrier is known as a(n) ___________________.

Which type of risk strategy is undertaken when you attempt to reduce the risk?

Which of the following is recommended for incident response teams? (Choose the best answer.)

Which security standard is used to encrypt e-mails?

Which of the following is not necessary to back up?

Individuals who specialize in the making of codes are known as ___________________.

Your org. owns a computer worth $100,000. If it were damaged in a fire, it would be worth $8,000 in parts. What is SLE?

Which of the following attempts to detect exfiltration of data?

Which kind of security attack is a result of the trusting nature of human beings?

PEAP was developed by a consortium including:

What kind of cryptographic method replaces one character with another from a match-up list to produce the ciphertext?

Which access control method model grants rights or privileges based on their job function or position held?

Which of the following is not a component of Public Key Infrastructure (PKI)?

Which of the following is a type of attack that occurs when an attacker pretends to be a legitimate client?

Which U.S. government agency publishes lists of known vulnerabilities in operating systems?

A firewall operating as a _______ firewall will pass or block packets based on their application or TCP port number.

The process of making a computing environment more secure from attacks and intruders is known as:

Which organization is tasked with developing standards for, and tries to improve, the Internet?

Which U.S. government agency is responsible for creating and breaking codes?

In which of the following does the tester have significant knowledge of the system?

A ___________________is the term for an area in a building where access is individually monitored and controlled.

Whether your server operating system can force the change of a password is considered what kind of a security issue?

Which of the following is not an asymmetric encryption algorithm?

With which type of technology will allow a device to function only if it is within certain geographical locations?

Servers or computers that have two NICs, each connected to separate networks, are known as what type of computers?

Which of the following is a list of applications that are allowed on a given computer or network?

Which “X” standard defines certificate formats and fields for public keys?

Which hashing algorithm uses a 160-bit hash value

____ security devices use e biological characteristic of human beings to uniquely identify a person for authentication

___________________ are used to monitor a network for suspect activity.

A ________________ is a backup location that can provide services within hours of complete system failure.

The area of an application that is available to users is known as it's:

Separation of duties polices are designed to reduce the risk of what?

___________________ provide rules for expected behaviors to people in an organization.

Which is a wireless networking technology that uses two or more streams of data transmission to increase throughput?

Which document is used to propose a new standard?

Which encryption algorithm uses a 40- to 128-bit key and is used on many products from Microsoft and IBM?

______________is a slang term for unwanted commercial e-mail.

Which of the following is a hole created when code is executed with higher privileges than those of the user running

This is a series of standards that define procedures for implementing electronically secure industrial control systems.

If you wanted to connect two networks securely over the Internet, what type of technology could you use?

You have taken out an insurance policy on your data/systems to share some of the risk with another entity. What type of

In TCP/IP parlance, any computer or device with an IP address on a TCP/IP network is known as a(n):

When the entire network, including all security devices, is virtualized, this is known as:

The TCP protocol functions at which layer of the TCP/IP model?