Test your basic knowledge |

Comptia Security +: Cyber Ops

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Which of the following should Starbuck - the security administrator - do FIRST when an employee reports the loss of a corporate mobile device?






2. Which of the following malware types is BEST described as protecting itself by hooking system processes and hiding its presence?






3. Account lockout is a mitigation strategy used by Starbuck - the administrator - to combat which of the following attacks?






4. Which of the following attacks is characterized by River Tam attempting to send an email from a Chief Information Officer's (CIO's) non-corporate email account to an IT staff member in order to have a password changed?






5. Starbuck - a security administrator - wants to prevent users in sales from accessing their servers after 6:00 p.m. - and prevent them from accessing accounting's network at all times. Which of the following should Starbuck implement to accomplish the






6. While performing basic forensic analysis of a hard drive in River Tam's - the security administrator - possession - which of the following should be verified during the analysis?






7. When used alone - which of the following controls mitigates the risk of River Tam - an attacker - launching an online brute force password attack?






8. River Tam - an attacker - is recording a person typing in their ID number into a keypad to gain access to the building. River Tam then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the follow






9. Which of the following is an example of authentication using something Starbuck - a user - has and something she knows?






10. When Mal - an employee - leaves a company - which of the following should be updated to ensure Pete's security access is reduced or eliminated?






11. Which of the following BEST allows Mal - a security administrator - to determine the type - source - and flags of the packet traversing a network for troubleshooting purposes?






12. Starbuck - the administrator - is tasked with deploying a strong encryption cipher. Which of the following ciphers would she be the LEAST likely to choose?






13. Which of the following should be done before resetting a user's password due to expiration?


14. Which of the following security tools can Starbuck - a security administrator - use to deter theft?






15. While traveling Jayne - an employee - decides he would like to download some new movies onto his corporate laptop. While installing software designed to download movies from multiple computers across the Internet. Jayne agrees to share portions of hi






16. After setting up a root CA. which of the following can Mal - a security administrator - implement to allow intermediate CAs to handout keys and certificates?






17. Which of the following technologies would allow the removal of a single point of failure?






18. Which of the following should Mal - an administrator - use to verify the integrity of a downloaded file?






19. Which of the following security concepts establishes procedures where creation and approval are performed through distinct functions?






20. Jayne - a system administrator - wants to establish a nightly available SQL database. Which of the following would be implemented to eliminate a single point of failure in storage and servers?






21. Which of the following is a best practice when securing a switch from physical access?






22. River Tam - a security administrator - is noticing a slow down in the wireless network response. River Tam launches a wireless sniffer and sees a large number of ARP packets being sent to the AP. Which of the following type of attacks is underway?






23. Which of the following is an attack where Mal spreads USB thumb drives throughout a bank's parking lot in order to have malware installed on the banking systems?






24. Which of the following could River Tam - an administrator - use in a workplace to remove sensitive data at rest from the premises?






25. River Tam - an administrator - suspects a denial of service attack on the network - but does not know where the network traffic is coming from or what type of traffic it is. Which of the following would help River Tam further assess the situation?






26. An example of a false negative






27. Which of the following has a default port of 22?






28. Which of the following ports would be blocked if Mal - a security administrator - wants to disable FTP?






29. Mal - a security engineer - is trying to inventory all servers in a rack. The engineer launches RDP sessions to five different PCs and notices that the hardware properties are similar. Additionally - the MAC addresses of all five servers appear on th






30. Which of the following security controls enforces user permissions based on a job role?






31. Hashing algorithms are used to address which of the following?






32. Which of the following allows active exploitation of security vulnerabilities on a system or network for the purpose of determining true impact?






33. Starbuck - a VPN administrator - was asked to implement an encryption cipher with a MINIMUM effective security of 128-bits. Which of the following should Starbuck select for the tunnel encryption?






34. Jayne - a security administrator - has noticed that the website and external systems have been subject to many attack attempts. To verify integrity of the website and critical files - Jayne should






35. Which of the following is BEST associated with PKI?






36. Which of the following is used to verify the identity of the sender of a signed email?






37. Which of the following will help Jayne - an administrator; mitigate the risk of static electricity?






38. Which of the following is the MOST important security requirement for mobile devices storing PII?






39. Which of the following is BEST utilized to actively test security controls on a particular system?






40. Which of the following does Starbuck - a software developer - need to do after compiling the source code of a program to attest the authorship of the binary?


41. Which of the following is an improved version of the LANMAN hash?






42. A packet filtering firewall can protect from which of the following?






43. A company is installing a wireless network in a building that houses several tenants. Which of the following should be considered to make sure none of the other tenants can detect the company's wireless network?






44. Which of the following malware types is MOST commonly associated with command and control?






45. River Tam - the software security engineer - is trying to detect issues that could lead to buffer overflows or memory leaks in the company software. Which of the following would help River Tam automate this detection?






46. The IT Security Department has completed an internal risk assessment and discovered the use of an outdated antivirus definition file. Which of the following is the NEXT step that management should take?






47. Jayne - the administrator - has been told to confirm what account an email was sent from. Which of the following is this an example of?






48. Which of the following administrative controls BEST mitigates the risk of ongoing inappropriate employee activities in sensitive areas?






49. To mitigate the adverse effects of network modifications - which of the following should Jayne - the security administrator - implement?






50. Which of the following activities should be completed in order to detect anomalies on a network?