Test your basic knowledge |

Comptia Security +: Cyber Ops

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. When moving from an internally controlled environment to a fully outsourced infrastructure environment - such as cloud computing - it is MOST important to...






2. River Tam and Starbuck - users - are reporting an increase in the amount of unwanted email that they are receiving each day. Which of the following would be the BEST way to respond to this issue without creating a lot of administrative overhead?






3. Which of the following reduces the likelihood of a single point of failure when a server fails?






4. Hashing algorithms are used to address which of the following?






5. Which of the following is the BEST solution to securely administer remote servers?






6. In a wireless network - which of the following components could cause too much coverage - too little coverage - and interference?






7. The IT Security Department has completed an internal risk assessment and discovered the use of an outdated antivirus definition file. Which of the following is the NEXT step that management should take?






8. Which of the following describes the ability for a third party to verify the sender or recipient of a given electronic message during authentication?






9. The public key is used to perform which of the following?






10. Which of the following commands can Jayne - an administrator - use to create a forensically sound hard drive image?






11. After setting up a root CA. which of the following can Mal - a security administrator - implement to allow intermediate CAs to handout keys and certificates?






12. Jayne - the security administrator - notices a spike in the number of SQL injection attacks against a web server connected to a backend SQL database. Which of the following practices should be used to prevent an application from passing these attacks






13. River Tam - a security administrator - has generated a key pair for the company web server. Which of the following should she do next to ensure all web traffic to the company web server is encrypted?






14. Which of the following BEST explains the security benefit of a standardized server image?






15. An example of a false negative






16. While River Tam is logging into the server from her workstation - she notices Mal watching her enter the username and password. Which of the following social engineering attacks is Mal executing?






17. River Tam - a network security administrator - has been tasked with setting up a guest wireless network for her corporation. The requirements for this connection state that it must have password authentication - with passwords being changed every wee






18. Jayne - a security administrator - is responsible for provisioning role-based user accounts in an enterprise environment. A user has a temporary business need to perform multiple roles within the organization. Which of the following is the BEST solut






19. Which of the following risks could IT management be mitigating by removing an all-in-one device?






20. Which of the following allows active exploitation of security vulnerabilities on a system or network for the purpose of determining true impact?






21. Which of the following accurately describes the STRONGEST multifactor authentication?






22. Which of the following malware types is BEST described as protecting itself by hooking system processes and hiding its presence?






23. Marketing creates a new folder and requests the following access be assigned: Sales Department - Read Marketing Department - Full Control Inside Sales - Read Write This is an example of which of the following?






24. Starbuck - a security administrator - has completed the imaging process for 20 computers that were deployed. The image contains the operating system and all required software. Which of the following is this an example of?






25. Which of the following password policies is the MOST effective against a brute force network attack?






26. Which of the following is based on X.500 standards?






27. While traveling Jayne - an employee - decides he would like to download some new movies onto his corporate laptop. While installing software designed to download movies from multiple computers across the Internet. Jayne agrees to share portions of hi






28. Which of the following attacks is manifested as an embedded HTML image object or JavaScript image tag in an email?






29. Which of the following is an attack where Mal spreads USB thumb drives throughout a bank's parking lot in order to have malware installed on the banking systems?






30. River Tam - a user - on a public Wi-Fi network logs into a webmail account and is redirected to a search engine. Which of the following attacks may be occurring?






31. Jayne - a systems security engineer - is determining which credential-type authentication to use within a planned 802.1x deployment. He is looking for a method that does not require a client certificate - has a server side certificate - and uses TLS






32. Which of the following is similar to a smurf attack - but uses UDP instead to ICMP?






33. Which of the following are restricted to 64-bit block sizes?






34. Starbuck - a VPN administrator - was asked to implement an encryption cipher with a MINIMUM effective security of 128-bits. Which of the following should Starbuck select for the tunnel encryption?






35. Which of the following network solutions would BEST allow Starbuck - a security technician - to host an extranet application for her company?






36. Which of the following controls mitigates the risk of Jayne - an attacker - gaining access to a company network by using a former employee's credential?






37. River Tam - an IT administrator - wants to protect a cluster of servers in a DMZ from zero day attacks. Which of the following would provide the BEST level of protection?






38. Which of the following authentication protocols forces centralized wireless authentication?






39. Which of the following will help Jayne - an administrator; mitigate the risk of static electricity?






40. Jayne - a system administrator - wants to establish a nightly available SQL database. Which of the following would be implemented to eliminate a single point of failure in storage and servers?






41. Which of the following multifactor authentication methods uses biometrics?






42. Which of the following should Starbuck - the security administrator - do FIRST when an employee reports the loss of a corporate mobile device?






43. Traffic has stopped flowing to and from the company network after the inline IPS hardware failed. Which of the following has occurred?






44. A company is performing internal security audits after a recent exploitation on one of their proprietary applications. River Tam - the security auditor - is given the workstation with limited documentation regarding the application installed for the






45. Which of the following may cause Starbuck - the security administrator - to seek an ACL work around?






46. Which of the following allows a server to request a website on behalf of Starbuck - a user?






47. Which of the following implements two factor authentication based on something you know and something you have?






48. Which of the following can Mal - an administrator - use to verify that a downloaded file was not corrupted during the transfer?






49. Which of the following administrative controls BEST mitigates the risk of ongoing inappropriate employee activities in sensitive areas?






50. River Tam - a security guard - reports that the side of the company building has been marked with spray paint. Which of the following could this be an example of?






?:?:)

Search BasicVersity Tests



OR

Browse BasicVersity