Test your basic knowledge |

Comptia Security +

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. In PKI what is the name of the file that tracks expired certificates?
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1723
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
1. Signatures must be updated 2. Zero day exploits

2. HTTP port number
1. John the Ripper 2. Cain & Abel 3. THC Hydra
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
80
1. Authentication 2. Authorization 3. Accounting

3. IPSEC Encryption Modes
389
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
X.500 is the standard that covers LDAP
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate

4. Telnet port number
Yes a VLAN can provide scalability because it is configured via software not hardware.
1. Trust 2. Fear 3. Lack of konwledge
23
The integrity of a message.

5. What is the difference between an online UPS and a double conversion UPS?
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
Are the same thing.
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

6. Storage Types
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
Are the same thing.
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.

7. The 3 Ss
49
1. Something you know2. Something you have 3. Something you are
1. Trust 2. Fear 3. Lack of konwledge
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.

8. The 3 As
3389
1. Authentication 2. Authorization 3. Accounting
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

9. Symmetric Key Ciphers
Bastion Host
1723
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D

10. Weaknesses of Antivirus Software
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
1. Signatures must be updated 2. Zero day exploits
143
80

11. HTTPS port number
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
110
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
443

12. NNTP port number
1723
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
X.509 is the standard that covers PKI
119

13. Secure Email Protocols
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
389
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy

14. How does an online/double conversion UPS provide power?

15. Checksums
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1723
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
443

16. When was NTLMv2 first introduced?
Unsolicited Bulk Email or SPAM
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
In Windows NT 4 SP4.

17. What is the name of Vista's hard drive encryption technology?
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
BitLocker

18. How does an incremental backup work?
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
BitLocker
Yes because all hosts connected to a VLAN are in the same broadcast domain - and DHCP works based on broadcast packets.

19. Windows Password Authentication Protocols
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
X.509 is the standard that covers PKI
49
1. John the Ripper 2. Cain & Abel 3. THC Hydra

20. What is output validation?

21. What is a hotfix?
In Windows NT 4 SP4.
A combination of files geared - towards fixing one or more security issues with a given piece of software. Note that hotfixes are usually created shortly after a security hole is identified.
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D

22. User Account Control (UAC) is an Example of
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
1. Elevation Prompt 2. Privilege Elevation

23. A web server that is located outside the DMZ is known as a...
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
(2^number of host bits)-2 = number of hosts
Bastion Host
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.

24. Human Behaviors that Social Engineering Will Exploit
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
1. Trust 2. Fear 3. Lack of konwledge
143

25. PPTP port number
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1723
23

26. How could a shared virtual machine reduce the workload for IT staff?
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. Trust 2. Fear 3. Lack of konwledge
Use a solution that supports nonrepudiation

27. What is the standard that covers PKI?
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
X.509 is the standard that covers PKI
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro

28. Goals of Email Security
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
The integrity of a message.

29. Ways to Secure a WiFi Access Point
X.509 is the standard that covers PKI
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori
49
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs

30. Asymmetric Key Ciphers
443
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.

31. How does an offline UPS provide power?

32. Do all hosts on a VLAN have to be connected to the same switch?
1. Confidentiality 2. Integrity 3. Availability
A combination of files geared - towards fixing one or more security issues with a given piece of software. Note that hotfixes are usually created shortly after a security hole is identified.
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
25

33. How does a differential backup work?
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).

34. LDAP port number
A combination of files geared - towards fixing one or more security issues with a given piece of software. Note that hotfixes are usually created shortly after a security hole is identified.
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
389

35. What is PWDUMP?
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
22
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
110

36. Steps in the OVAL Assessment Process
(2^number of host bits)-2 = number of hosts
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
80

37. How do you ensure an email comes from the person it advertises as being the sender?
1. Trust 2. Fear 3. Lack of konwledge
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
Use a solution that supports nonrepudiation
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get

38. What is a Rootkit?
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
1. Trust 2. Fear 3. Lack of konwledge
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
25

39. SSH port number
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
Bastion Host
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
22

40. Can a VLAN provide scalability?
Yes a VLAN can provide scalability because it is configured via software not hardware.
1. Elevation Prompt 2. Privilege Elevation
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate
Unsolicited Bulk Email or SPAM

41. What is THC Hydra?
23
1. John the Ripper 2. Cain & Abel 3. THC Hydra
443
A fast network authentication password cracker that can go after many different services.

42. UPS Types
1. Authentication 2. Authorization 3. Accounting
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
The integrity of a message.

43. What is UBE?
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
Are the same thing.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
Unsolicited Bulk Email or SPAM

44. Asymmetric Key Ciphers
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
Use a solution that supports nonrepudiation

45. The Goals of Security
1. Confidentiality 2. Integrity 3. Availability
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack

46. POP3 port number
22
110
1. Authentication 2. Authorization 3. Accounting
Through the use of digital signatures

47. DHCP port number
443
67 - 68
C:Windowssystem32driversetcservices
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.

48. IDS/IPS Alerts
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.

49. Types of Firewalls
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall

50. What is a Trojan?
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.