Test your basic knowledge |

Comptia Security +

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. SSH port number
22
1701
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. Confidentiality 2. Integrity 3. Availability

2. UPS Types
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
A fast network authentication password cracker that can go after many different services.
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation

3. Protocols Used for VPN
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)

4. LDAP port number
A fast network authentication password cracker that can go after many different services.
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
389
The asset value multiplied by the exposure factor asset value x exposure factor = SLE

5. What is THC Hydra?
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
1. Authentication 2. Authorization 3. Accounting
A fast network authentication password cracker that can go after many different services.
The asset value multiplied by the exposure factor asset value x exposure factor = SLE

6. IPSEC Encryption Modes
1. Authentication 2. Authorization 3. Accounting
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
25
Yes a VLAN can provide scalability because it is configured via software not hardware.

7. When was NTLMv2 first introduced?
Yes because all hosts connected to a VLAN are in the same broadcast domain - and DHCP works based on broadcast packets.
In Windows NT 4 SP4.
1. Something you know2. Something you have 3. Something you are
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack

8. Versions of NAT
X.500 is the standard that covers LDAP
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical

9. In PKI what is the name of the file that tracks expired certificates?
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
80

10. What is UBE?
Unsolicited Bulk Email or SPAM
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
23
1723

11. In a Windows Doamin - How is a GPO Applied?
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
143
1723

12. What is a Trojan?
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
3389
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy

13. Types of L2TP Tunnels
1. Signatures must be updated 2. Zero day exploits
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
Bastion Host

14. How does the MAC model work?
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).

15. HTTPS port number
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
443
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
Are the same thing.

16. Secure Email Protocols
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
389
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy

17. Remote Desktop port number
443
1. Signatures must be updated 2. Zero day exploits
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
3389

18. Windows Password Authentication Protocols
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
(2^number of host bits)-2 = number of hosts

19. What is the difference between an online UPS and a double conversion UPS?
Are the same thing.
119
1. Elevation Prompt 2. Privilege Elevation
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)

20. DNS port number
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
53

21. Human Behaviors that Social Engineering Will Exploit
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
1. Confidentiality 2. Integrity 3. Availability
1. Trust 2. Fear 3. Lack of konwledge
(2^number of host bits)-2 = number of hosts

22. Symmetric Key Ciphers
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
23
1. Confidentiality 2. Integrity 3. Availability
80

23. How does an offline UPS provide power?

24. Storage Types
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
1. Trust 2. Fear 3. Lack of konwledge
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel

25. Checksums
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
Bastion Host
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. Authentication 2. Authorization 3. Accounting

26. Steps in the OVAL Assessment Process
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
3389
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing

27. A web server that is located outside the DMZ is known as a...
Bastion Host
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
1723

28. What is the name of Vista's hard drive encryption technology?
BitLocker
Through the use of digital signatures
(2^number of host bits)-2 = number of hosts
Bastion Host

29. Goals of Email Security
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
1. John the Ripper 2. Cain & Abel 3. THC Hydra
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
Are the same thing.

30. Examples of Social Engineering Attacks
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
443
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing

31. What is a Zombie?
Unsolicited Bulk Email or SPAM
23
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.

32. PPTP port number
1723
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
1. Confidentiality 2. Integrity 3. Availability
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation

33. The Goals of Security
22
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
1. Confidentiality 2. Integrity 3. Availability
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).

34. How do you ensure an email comes from the person it advertises as being the sender?
67 - 68
1. Elevation Prompt 2. Privilege Elevation
X.500 is the standard that covers LDAP
Use a solution that supports nonrepudiation

35. HTTP port number
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
80
23

36. What is the standard that covers PKI?
25
X.509 is the standard that covers PKI
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
The asset value multiplied by the exposure factor asset value x exposure factor = SLE

37. TACACS port number
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1. Something you know2. Something you have 3. Something you are
Unsolicited Bulk Email or SPAM
49

38. How can you introduce nonrepudiation and authentication to Mutual SSL client authentication?
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
Through the use of digital signatures
X.500 is the standard that covers LDAP
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp

39. IMAP port number
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
Yes a VLAN can provide scalability because it is configured via software not hardware.
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
143

40. The 3 Ss
1. Something you know2. Something you have 3. Something you are
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
143
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.

41. Does PGP rely on X.509 (Digital Certificates - PKI)?
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
23
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori
BitLocker

42. The 3 As
1. Authentication 2. Authorization 3. Accounting
1. Signatures must be updated 2. Zero day exploits
1. John the Ripper 2. Cain & Abel 3. THC Hydra
The integrity of a message.

43. Ways to Secure a WiFi Access Point
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs
1. Confidentiality 2. Integrity 3. Availability

44. How does an online/double conversion UPS provide power?

45. How can you identify a SQL Injection attack?
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
In Windows NT 4 SP4.
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.

46. Do all hosts on a VLAN have to be connected to the same switch?
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
22
1. John the Ripper 2. Cain & Abel 3. THC Hydra

47. Asymmetric Key Ciphers
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
443
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
1. Something you know2. Something you have 3. Something you are

48. Password Attacks
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. Elevation Prompt 2. Privilege Elevation
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.

49. Access Control Models
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical

50. The Primary Causes of Compromised Security
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
53
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.