CompTIA Security+ part 2

How can a teardrop attack be prevented?

Multiple branches - assigned task granting access to second branch leads to resources on main site. Which method?

What can be done to prevent receiving email from phishYou.org.pl?

New station more vulnerable than others and will bait attackers. It will be continuously monitored. Which of following

Obj is to get login credentials for one of systems. Office has wide-open space and some computers are locked. What do?

To prevent server failure, execute a full system backup. After, which of following is recommended for future backups?

Your manager asks you to build a secure network. Which of the following devices should you use?

Linda wants to install app on her iPhone not authorized Apple’s App Store. Which of following allow her to do this.

Setup network for new org prevent internet users from reaching sensitive places in company’s databases. Which use?

Firewall on each server controls incoming/outgoing network traffic and determines whether should pass to specific device

To protect and secure your company’s database, which of the following would you focus on?

What technique should be used to access networks in a company that can’t be reached via external connections?

CEO wants to track and analyze data to detect threats. Which of the following systems should be used?

David attempts to access his company’s internal information on his personal laptop but fails. Which answer could explain

New company wants to setup network save costs. Have network that is flexible, secure, configured for auto software upd.

Which of following security strategy involves combining different security controls form a defense against cyber threats

Your organization experiences information leak. Which of following tools can you use to prevent it from happening again?

What is the purpose of security benchmarks?

Website team is developing is currently vulnerable to buffer overflow attack. What would be the best method to prevent?

Notice a programmer asked for user input w/o proper length requirement. You ask them to do some reading about which of?

used by engineers, and developers to design, debug, test their designs thru the entire development of a hardware product

Which of following protocols designed to provide strong authN for client-server apps using secret key cryptography?

Sharing of packages among users access to package change history can retrieve previous versions, which of the following

Msg on computer saying drive was encrypted. To restore files must send $5,000 in cryptocurrency. Type of attack?

What type of malware can be used to record all information a user enters into a computer?

Provide isolated tunnel across company network for employees to connect remotely/send receive data private/secure way.

Operational risks involve possible loss to improper process implementation, failed systems, external events. Caused by?

Harden security by adding cryptographic signatures to existing DNS records. Which of following protocols should he use?

Verify that network not vulnerable to known attacks. Which device add to network to identify and prevent such attacks?

Which of following is correct term for preserving integrity of digital evidence, preventing it from being compromised?

What can be implemented on a computer to ensure that a local or remote connection will be available in the future?

Purchase new computer set it up to operate on your home network. To protect it, which of following should you implement

You must protect your company from bandwidth denial-of-service attacks. To do so, what should you implement?

Which of the following is the most volatile wrt digital forensics data capture?

While working in a cybersecurity company, which of the following would you choose to prevent brute-force attacks?

IDS is a security service, but to detect events, the IDS must also (choose two answers):

What can secure coding standards prevent?

Which of the following describes the process of giving a user permission to access a specific resource or function?

Shredding docs before disposal makes dumpster diving less effective & mitigates the risk of social engineering attacks

David wants to create an environment for his employees to connect remotely to the on-premises servers from any device.

John discovers new type of ransomware. Which of following environments should he use to inspect the ransomware safely?

Define long passwords, set 2FA, detect multiple login attempts, detect logins at unusual hours. What preventing?

What is a single point of failure?

As a company employee, which of the following tools would you use to avoid the risk of a disaster?

check computer IPs in company. Can be done manually each computer, but can also do automatically using which of tools?

You are asked to secure the company against advanced malware. Which of the following solutions should you implement?

New policy at workplace requires limiting plain-text passwords. Which of the following protocols can be used to encrypt?

Which of the following is an open platform protocol used for directory service authentication?

manage creation of new accounts, deletion of inactive accounts, synchronization of user attributes, privileges updated.

Intrusion detection system (IDS) detects a brute-force attack attempted on the network. How will IDS act at this point?

Some unauth users can add users/components, shut down servers, remove logs, etc. What is correct term for this issue?

On which of the following layers of the OSI model does TLS encryption take place?

Want to create layer of protection between DMZ and internal network. Which of following architectures should they use?

David wants to prevent social engineering attacks in his organization. Which method should he use to prevent them?

Unauthorized software increases risk of outsiders gaining access to sensitive data. Which of following can prevent it?

Which of the following could likely be the cause of an information leak?

Which of following responsible for routing client requests/redirecting traffic to remaining online servers if one fails?

Which of the following uses biometric encryption?

David wants to connect to a website using encrypted traffic to evade tracking. Which of following tools should he use?

Divide depts in org so each subnet not have access to others, each subnet will have different rules/permissions. Which?

Wi-Fi signals do not reach far part of office. Product can strengthen Wi-Fi signals and receive feed directly from hub?

Which of the following is a system that tracks user activity on an IP-based network and controls user access?

You set up a dedicated email address for work. What can you do to receive email only from the work domain?

Which of the following work environments will allow team to test products without damaging organizational environment?

Wi-Fi public access based on shop’s name. Obtain bank accounts/social data by doing MITM attack. Which method?