Test your basic knowledge |

Comptia Security +: Cyber Ops

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Which of the following can Mal - an administrator - use to verify that a downloaded file was not corrupted during the transfer?
Proxy server
Separation of duties
Loop protection
MD5 checksum

2. Which of the following should Mal - an administrator - use to verify the integrity of a downloaded file?
MD5
Input validation
Continuous monitoring
Risk avoidance

3. Starbuck - the administrator - is tasked with deploying a strong encryption cipher. Which of the following ciphers would she be the LEAST likely to choose?
NIPS
Two fish
Protocol analyzers
Encrypt all confidential data.

4. Which of the following password policies is the MOST effective against a brute force network attack?
Trust model
Account lockout
Proxies
Rogue access point

5. A company notices that there is a flaw in one of their proprietary programs that the company runs in-house. The flaw could cause damage to the HVAC system. Which of the following would the company transfer to an insurance company?
Botnets
Risk
Proxy server
TACACS+

6. Which of the following BEST allows Mal - a security administrator - to determine the type - source - and flags of the packet traversing a network for troubleshooting purposes?
Spam filter
Rogue access point
Port forwarding
Protocol analyzers

7. The corporate NIPS requires a daily download from its vendor with updated definitions in order to block the latest attacks. Which of the following describes how the NIPS is functioning?
Group based privileges
Disable unused ports
Vishing
Signature based

8. The Chief Information Security Officer (CISO) tells the network administrator that a security company has been hired to perform a penetration test against their network. The security company asks the CISO which type of testing would be most beneficia
The security company is provided with no information about the corporate network or physical locations.
Mandatory Access Controls
MD5 checksum
Sanitization using appropriate software

9. Which of the following is Starbuck - a security administrator - MOST likely implementing when deleting all the unneeded files and modules of a newly install application?
Application hardening
TACACS+
Antenna placement; Power-level control
SNMPv3

10. River Tam - an administrator - suspects a denial of service attack on the network - but does not know where the network traffic is coming from or what type of traffic it is. Which of the following would help River Tam further assess the situation?
Update the CRL; Deploy OCSP
Protocol analyzer
Image hashes
Clustering

11. Starbuck - a user - has reported an increase in email phishing attempts. Which of the following can be implemented to mitigate the attacks?
Change management
Clean desk policy
Anti-spam
Failsafe

12. Which of the following is a feature of Kerberos?
Device encryption
Confidentiality
Vulnerability scan
Single sign-on

13. Jayne's CRL is over six months old. Which of the following could Jayne do in order to ensure he has the current information?
Update the CRL; Deploy OCSP
Validate the identity of an email sender;Encrypt messages;Decrypt messages
Anti-spam
Install application updates

14. River Tam - an IT administrator - wants to protect a cluster of servers in a DMZ from zero day attacks. Which of the following would provide the BEST level of protection?
NIPS
Antenna placement; Power levels
The capacity of a system to resist unauthorized changes to stored information
Risk

15. Which of the following is a policy that would force all users to organize their areas as well as help in reducing the risk of possible data theft?
Penetration testing
Clean desk policy
Accounting should be given read/write access to network share A and read access to network share B. River Tam should be given read access for the specific document on network share A.
Zero day exploit

16. Which of the following is BEST used to break a group of IP addresses into smaller network segments or blocks?
DES;3 DES
Deploy an anti-spam device to protect the network.
Subnetting
Spam fitters

17. Which of the following may cause Starbuck - the security administrator - to seek an ACL work around?
Separation of duties
Cross-site scripting
Passive finger printing
Zero day exploit

18. Which of the following BEST describes a software vulnerability that is actively being used by River Tam and Starbuck - attackers - before the vendor releases a protective patch or update?
Zero day attack
Firewall
Validate the identity of an email sender;Encrypt messages;Decrypt messages
Shoulder surfing

19. Which of the following encrypts the body of a packet - rather than just the password - while sending information?
Humidity controls
Discretionary access control
TACACS+
Mandatory access control

20. While performing basic forensic analysis of a hard drive in River Tam's - the security administrator - possession - which of the following should be verified during the analysis?
Image hashes
Spam fitters
Server-side input validation results in a more secure system than client-side input validation.
The intermediate CA's public key

21. Mal - a security administrator - wants to secure remote telnet services and decides to use the services over SSH. Which of the following ports should Mal allow on the firewall by default?
22
VLAN mismatch is occurring.
Logic bomb
Account lockout

22. Which of the following will help Jayne - an administrator; mitigate the risk of static electricity?
LDAP
Humidity controls
dcfldd
Personally owned devices

23. Starbuck - an IT security technician working at a bank - has implemented encryption between two locations. Which of the following security concepts BEST exemplifies the protection provided by this example?
Confidentiality
Cold site
Subnetting
Zero day

24. Which of the following is the MAIN benefit of server-side versus client-side input validation?
Fail state of the system
Verify the user's identity
Server-side input validation results in a more secure system than client-side input validation.
Detective

25. Which of the following would MOST likely be implemented in order to prevent employees from accessing certain websites?
Rootkit
MAC filtering
SSH
Proxy server

26. A data loss prevention strategy would MOST likely incorporate which of the following to reduce the risk associated with data loss?
Business impact assessment
Vishing
Enforced acceptable usage policy - encryption of confidential emails - and monitoring of communications leaving the organization.
Disable unused ports

27. 3DES is created when which of the following scenarios occurs?
The DES algorithm is run three consecutive times against the item being encrypted.
Full disk encryption
Antenna placement; Power-level control
Validate the identity of an email sender;Encrypt messages;Decrypt messages

28. Which of the following does Starbuck - a software developer - need to do after compiling the source code of a program to attest the authorship of the binary?

29. River Tam - a user - on a public Wi-Fi network logs into a webmail account and is redirected to a search engine. Which of the following attacks may be occurring?
DES;3 DES
P2P
ARP poisoning
Evil twin

30. River Tam - a security guard - reports that the side of the company building has been marked with spray paint. Which of the following could this be an example of?
Mandatory access control
War chalking
Clustering
River Tam - the attacker - overwhelms a system or application - causing it to crash and bring the server down to cause an outage.

31. Jayne - a server administrator - sets up database forms based on security rating levels. If a user has the lowest security rating then the database automatically determines what access that user has. Which of the following access control methods does
Port scanner
Log reviews
Mandatory access control
Vulnerability scan

32. Which of the following is BEST associated with PKI?
PEAP-MSCHAPv2
Risk
Private key
Rootkit

33. Which of the following has a default port of 22?
The DES algorithm is run three consecutive times against the item being encrypted.
Update the CRL; Deploy OCSP
Memory dump - ARP cache
SSH

34. When used alone - which of the following controls mitigates the risk of River Tam - an attacker - launching an online brute force password attack?
Zero day attack
Account lockout
Humidity controls
MD5 checksum

35. Which of the following risks could IT management be mitigating by removing an all-in-one device?
TPM
Spam filter
Input validation
Single point of failure

36. Which of the following malware types is MOST commonly associated with command and control?
Cold site
Device encryption
Botnets
Subnetting

37. Which of the following security tools can Starbuck - a security administrator - use to deter theft?
TPM
Cable locks
Remotely initiate a device wipe
Fraggle attack

38. Mal - a security engineer - is trying to inventory all servers in a rack. The engineer launches RDP sessions to five different PCs and notices that the hardware properties are similar. Additionally - the MAC addresses of all five servers appear on th
80
Business impact assessment
Full disk encryption
The system is virtualized

39. Which of the following elements makes up the standard equation used to define risk?
Impact; Likelihood
Cross-site scripting
Accounting should be given read/write access to network share A and read access to network share B. River Tam should be given read access for the specific document on network share A.
Trust model

40. Which of the following is a best practice when securing a switch from physical access?
Vulnerability scan
Spam filter
Disable unused ports
AP power levels

41. River Tam - an attacker - calls the company's from desk and tries to gain insider information by providing specific company information to gain the attendant's trust. The front desk immediately alerts the IT department about this incident. This is an
WPA2-PSK
Subnetting
Impersonation
Improper input validation

42. Which of the following is used to verify the identity of the sender of a signed email?
Port forwarding
Public key
Full disk
Remotely initiate a device wipe

43. Which of the following multifactor authentication methods uses biometrics?
Something you are
Firewall
Fail state of the system
RAID 5 and a storage area network

44. Which of the following control types is video monitoring?
Anti-spam
Change management
Detective
The intermediate CA's public key

45. Which of the following should be done before resetting a user's password due to expiration?

46. Mal - a security administrator - has configured and implemented an additional public intermediate CA. Which of the following must Mal submit to the major web browser vendors in order for the certificates - signed by this intermediate - to be trusted?

47. River Tam - the software security engineer - is trying to detect issues that could lead to buffer overflows or memory leaks in the company software. Which of the following would help River Tam automate this detection?
Fuzzing
Server-side input validation results in a more secure system than client-side input validation.
GSM phone card and PIN
Compare hashes of the original source and system image.

48. A computer is put into a restricted VLAN until the computer's virus definitions are up-to-date. Which of the following BEST describes this system type?
Clean desk policy
NAC
Full disk
The security company is provided with no information about the corporate network or physical locations.

49. Which of the following mitigates the risk of proprietary information being compromised?
Full disk encryption
File encryption
Fuzzing
SSH

50. River Tam - a network security administrator - has been tasked with setting up a guest wireless network for her corporation. The requirements for this connection state that it must have password authentication - with passwords being changed every wee
Error handling
ARP poisoning
WPA2-PSK
Botnets