stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Check on Learning: CompTIA Sec+ Flashcards | StudBud
Explore
/
Check on Learning: CompTIA Sec+
Check on Learning: CompTIA Sec+
40 terms
·
StudBud Administration
·
111 plays
Imported from external platform
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
Which of the following mobile connectivity methods provides the best coverage?
Infrared
SATCOM
Cellular
Wifi
2
LDAPS is an example of:
Address resolution protocol
Secure directory access protocol
File exchange protocol
Authentication protocol
3
Which of three security measures listed below would be effective against the malicious insider threat?
Usage auditing and review
Strong authentication
Principle of least privilege
DLP system
4
A valid type of evidence in a computer forensics investigation that proves innocence.
Exculpatory evidence
Inculpatory evidence
Documentary evidence
Demonstrative evidence
5
Which of the protocols listed below was designed as a secure replacement for Telnet?
SSH
FTP
CHAP
SNMP
6
Choose the biometric authentication method that uses nodal points to identify the user.
Facial recognition
All of these
Iris scanner
Retinal scanner
7
Which of the following protocols allow(s) for secure file transfer? (Select all that apply)
FTP
SFTP
FTPS
SCP
8
Pretending to be the proper owner of an address or the provider of a service, when another system actually is:
Denial of service
Man in the middle
Zombie attack
Spoofing
9
A cloud deployment model consisting of two or more interlinked cloud infrastructures is referred to as a hybrid cloud.
True
False
10
FTPS is an extension to the Secure Shell protocol (SSH) and runs by default on port number 22.
False
True
11
Which type of network penetration attack model requires an attacker to have the highest skill level?
Gray box
Black box
White box
None of these
12
Ports for NetBIOS
TCP/UDP 137, 138, and 139
TCP/UDP 137, 158, and 139
TCP/UDP 132, 138, and 139
TCP/UDP 136, 138, and 149
13
How many layers are in the OSI model?
5
7
8
4
14
The two factors that are considered important for creating strong passwords are:
Minimum password age
Password length
Password complexity
Password history
15
A cloud computing service model offering remote access to applications based on monthly or annual subscription fee is
SaaS
MaaS
IaaS
PaaS
16
A security solution designed to detect anomalies in the log and event data collected from multiple network devices is
HIDS
PCAP
SIEM
HIPS
17
Attack involves re-transmitting intercepted data to the web server hoping the server will respond with useful info.
Bluejacking
Replay
Cross-site scripting
Injection
18
What kind of general term is used to describe the process of securing a computer system?
Hardening
Baselining
Patching
Auditing
19
Deploying least functionality along with disabling unnecessary ports and services are two methods of
Secure system design
HSM
Software trust
Attestation
20
What is it called if a freelance coding specialist tests it for security flaws?
Dynamic code review
Code review
Regression testing
Static code review
21
Hash collision occurs when a cryptographic hash function produces two different digests for the same data input
False
True
22
Which of the following acronyms is used as a unique identifier for a WLAN (a wireless network name)?
SSID
HIDS
IBSS
BSS
23
Which layer uses either a connection-less, or connect-oriented protocol?
Session
Data Link
Application
Transport
24
Which methods would generally speaking be the most basic method to mitigate security risks on a network?
Updates
Network segmentation and security layers
Application firewalls
Wrappers
25
FTP, HTTP, IMAP4, LDAP, POP3, SNMPv1, SNMPv2, & Telnet are all examples of netwk protocols that send data in clear text
True
False
26
An authentication protocol which transmits passwords over the network in an unencrypted form and is therefore insecure
RADIUS
CHAP
TACACS+
PAP
27
The capability of a hardware or software system to process increasing workload without decrease in performance is
Multitasking
Scalability
Fault Tolerance
Redundancy
28
A simple way to keep virus, spyware and other malware from attacking your network while allowing BYOD is to use which:
Application control
Asset tracking
Guest network
Device Access Controls
29
Which of the following protocols are used for securing HTTP connections? (Select 2 answers)
TLS
SCP
SSL
EFS
30
Refers to a security countermeasure that allows to erase data on a lost or stolen mobile device?
Low-level formatting
Degaussing
Remote wipe
Mobile wipe
31
Which of the following options is a vendor neutral standard for message logging?
Event Manager
SNMP
syslog
SIEM
32
Which DOS attack sends a large number of new TCP requests to a server in order to overwhelm it with unused open sessions
Spanning tree
DDos
Session hijacking
SYN flood
33
What option would create a new ACL entry that would deny any port 80 HTTP traffic?
Allow all but tcp 443
Allow tcp any server tcp 80
Deny all any server web
Deny tcp any server tcp 80
34
A type of trusted third party that issues digital certs used for creating digital signatures and public-private keys
CSP
IKE
PKI
CA
35
One of the goals of mandatory vacations policy is to mitigate the occurrence of fraudulent activity w/in a company
True
False
36
Which one of the listed tools scans for known security threats on groups of computers?
Packet sniffer
Port scanner
Risk scanner
Vulnerability scanner
37
The three step process of authentication, authorization, and accounting, is usually referred to as
Multi-factor authentication
The AAA model
Nonrepudiation
Ticket-granting
38
You have a multi-layer switch. Which layers does it operate at?
1 and 2
3 and 4
5 and 6
2 and 3
39
SOP for onboarding includes an agreement targeted at minimizing the security risks involving transmitted data.
Service Level Agreement (SLA)
Non-Disclosure Agreement (NDA)
Memorandum of Understanding (MOU)
Interconnection Security Agreement (ISA)
40
Which cryptographic attack relies on the concepts of probability theory?
Dcitionary
KPA
Brute force
Birthday