Test your basic knowledge |

Comptia Security +

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. IDS/IPS Alerts
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
53
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate

2. IMAP port number
143
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
(2^number of host bits)-2 = number of hosts
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.

3. Human Behaviors that Social Engineering Will Exploit
1701
The integrity of a message.
1. Trust 2. Fear 3. Lack of konwledge
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.

4. Secure Email Protocols
53
Bastion Host
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall

5. Checksums
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy

6. HTTP port number
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
1. Elevation Prompt 2. Privilege Elevation
80

7. In PKI what is the name of the file that tracks expired certificates?
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
BitLocker

8. Versions of NAT
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
X.509 is the standard that covers PKI
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.

9. Do all hosts on a VLAN have to be connected to the same switch?
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
Yes a VLAN can provide scalability because it is configured via software not hardware.

10. Storage Types
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
X.509 is the standard that covers PKI
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
C:Windowssystem32driversetcservices

11. Steps in the OVAL Assessment Process
Unsolicited Bulk Email or SPAM
1. Signatures must be updated 2. Zero day exploits
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
A combination of files geared - towards fixing one or more security issues with a given piece of software. Note that hotfixes are usually created shortly after a security hole is identified.

12. The 3 As
1. Authentication 2. Authorization 3. Accounting
Yes a VLAN can provide scalability because it is configured via software not hardware.
A fast network authentication password cracker that can go after many different services.
Through the use of digital signatures

13. Can a VLAN provide scalability?
Yes a VLAN can provide scalability because it is configured via software not hardware.
389
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm

14. Examples of Social Engineering Attacks
BitLocker
A fast network authentication password cracker that can go after many different services.
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate

15. What is the difference between an online UPS and a double conversion UPS?
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
Are the same thing.
80
1. Trust 2. Fear 3. Lack of konwledge

16. How could a shared virtual machine reduce the workload for IT staff?
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
Yes a VLAN can provide scalability because it is configured via software not hardware.
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing

17. Types of Firewalls
119
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

18. POP3 port number
3389
110
1. Something you know2. Something you have 3. Something you are
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.

19. Asymmetric Key Ciphers
3389
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm

20. A web server that is located outside the DMZ is known as a...
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
Bastion Host
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
119

21. NNTP port number
119
(2^number of host bits)-2 = number of hosts
23
49

22. PPTP port number
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
Bastion Host
1723
119

23. When was NTLMv2 first introduced?
Bastion Host
443
389
In Windows NT 4 SP4.

24. Password Attacks
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
Unsolicited Bulk Email or SPAM
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.

25. How does an offline UPS provide power?

26. User Account Control (UAC) is an Example of
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
1. Elevation Prompt 2. Privilege Elevation
119

27. Access Control Models
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical

28. Password Crackers
1723
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
1. John the Ripper 2. Cain & Abel 3. THC Hydra

29. What is UBE?
Unsolicited Bulk Email or SPAM
1. Something you know2. Something you have 3. Something you are
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy

30. What is a Rootkit?
In Windows NT 4 SP4.
1. Trust 2. Fear 3. Lack of konwledge
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
(2^number of host bits)-2 = number of hosts

31. What is a hotfix?
Yes because all hosts connected to a VLAN are in the same broadcast domain - and DHCP works based on broadcast packets.
A combination of files geared - towards fixing one or more security issues with a given piece of software. Note that hotfixes are usually created shortly after a security hole is identified.
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP

32. What is THC Hydra?
A fast network authentication password cracker that can go after many different services.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.

33. The Primary Causes of Compromised Security
In Windows NT 4 SP4.
C:Windowssystem32driversetcservices
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice

34. LDAP port number
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
389
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
25

35. DNS port number
X.509 is the standard that covers PKI
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate
53
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).

36. How does a differential backup work?
1. Signatures must be updated 2. Zero day exploits
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
In Windows NT 4 SP4.
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.

37. How does an incremental backup work?
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
25

38. UPS Types
1701
Bastion Host
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

39. What is a Trojan?
119
443
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)

40. Telnet port number
X.500 is the standard that covers LDAP
23
1701
53

41. DHCP port number
67 - 68
110
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get

42. What is a Zombie?
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. Elevation Prompt 2. Privilege Elevation
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp

43. Asymmetric Key Ciphers
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
110
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results

44. What do digital signatures prove?
The integrity of a message.
80
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
53

45. In a Windows Doamin - How is a GPO Applied?
1. John the Ripper 2. Cain & Abel 3. THC Hydra
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
389

46. What is the name of Vista's hard drive encryption technology?
X.509 is the standard that covers PKI
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
BitLocker
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.

47. What formula is used to find the number of hosts?
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
143
(2^number of host bits)-2 = number of hosts
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori

48. How does an online/double conversion UPS provide power?

49. Protocols Used for VPN
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy

50. L2TP port number
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
BitLocker
1701
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.