Test your basic knowledge |

Comptia Security +

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. L2TP port number
1701
49
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
1. John the Ripper 2. Cain & Abel 3. THC Hydra

2. What is a hotfix?
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1723
A combination of files geared - towards fixing one or more security issues with a given piece of software. Note that hotfixes are usually created shortly after a security hole is identified.
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP

3. What is UBE?
1701
Unsolicited Bulk Email or SPAM
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).

4. How can you introduce nonrepudiation and authentication to Mutual SSL client authentication?
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
1723
Through the use of digital signatures

5. What is output validation?

6. NNTP port number
110
119
1701
22

7. Remote Desktop port number
3389
49
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori

8. Password Crackers
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1. John the Ripper 2. Cain & Abel 3. THC Hydra

9. What is the SLE (Single Loss Expectancy)?
80
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp

10. Types of L2TP Tunnels
X.500 is the standard that covers LDAP
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm

11. HTTPS port number
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
110
443
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy

12. What is the name of Vista's hard drive encryption technology?
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
BitLocker
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.

13. Symmetric Key Ciphers
Unsolicited Bulk Email or SPAM
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
1723
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

14. In Windows what is the path to the file that contains a list of well-known ports?
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
C:Windowssystem32driversetcservices
X.509 is the standard that covers PKI

15. IMAP port number
BitLocker
143
In Windows NT 4 SP4.
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.

16. UPS Types
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori

17. What is a Trojan?
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1723

18. DHCP port number
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
(2^number of host bits)-2 = number of hosts
67 - 68
Unsolicited Bulk Email or SPAM

19. Windows Password Authentication Protocols
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)

20. HTTP port number
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
80
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.

21. Types of Firewalls
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).

22. PPTP port number
1723
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
1. Trust 2. Fear 3. Lack of konwledge
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.

23. Does PGP rely on X.509 (Digital Certificates - PKI)?
X.500 is the standard that covers LDAP
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori
(2^number of host bits)-2 = number of hosts
The integrity of a message.

24. The 3 As
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
BitLocker
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. Authentication 2. Authorization 3. Accounting

25. In PKI what is the name of the file that tracks expired certificates?
X.509 is the standard that covers PKI
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D

26. TACACS port number
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
1. John the Ripper 2. Cain & Abel 3. THC Hydra
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
49

27. Can a VLAN be used to SEGREGATE access to a DHCP server?
Yes because all hosts connected to a VLAN are in the same broadcast domain - and DHCP works based on broadcast packets.
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
Yes a VLAN can provide scalability because it is configured via software not hardware.

28. What is a Zombie?
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
The integrity of a message.
C:Windowssystem32driversetcservices
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack

29. Password Attacks
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
49

30. DNS port number
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1701
53
1. Signatures must be updated 2. Zero day exploits

31. Asymmetric Key Ciphers
Bastion Host
80
1. Elevation Prompt 2. Privilege Elevation
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm

32. What is the standard that covers PKI?
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
49
53
X.509 is the standard that covers PKI

33. Can a VLAN provide scalability?
Yes a VLAN can provide scalability because it is configured via software not hardware.
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
Use a solution that supports nonrepudiation

34. SMTP port number
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
25
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get

35. SSH port number
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
X.509 is the standard that covers PKI
22

36. How does an online/double conversion UPS provide power?

37. Asymmetric Key Ciphers
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.

38. Weaknesses of Antivirus Software
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
1. Signatures must be updated 2. Zero day exploits
3389

39. When was NTLMv2 first introduced?
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
BitLocker
3389
In Windows NT 4 SP4.

40. Symmetric Key Ciphers
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori
(2^number of host bits)-2 = number of hosts

41. Human Behaviors that Social Engineering Will Exploit
143
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
X.509 is the standard that covers PKI
1. Trust 2. Fear 3. Lack of konwledge

42. In a Windows Doamin - How is a GPO Applied?
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
49
25

43. Protocols Used for VPN
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP
3389
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall

44. How does an offline UPS provide power?

45. User Account Control (UAC) is an Example of
1. Trust 2. Fear 3. Lack of konwledge
1. Elevation Prompt 2. Privilege Elevation
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.

46. The Goals of Security
1. Confidentiality 2. Integrity 3. Availability
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
Through the use of digital signatures
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.

47. How do you ensure an email comes from the person it advertises as being the sender?
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
Use a solution that supports nonrepudiation

48. Examples of Social Engineering Attacks
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
67 - 68

49. What formula is used to find the number of hosts?
(2^number of host bits)-2 = number of hosts
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
443
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.

50. What is PWDUMP?
143
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
1. Authentication 2. Authorization 3. Accounting
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.

?:?:)

Search BasicVersity Tests

Browse BasicVersity

3d Computer Modeling
Study | Quiz | Subjects: it-skills, multimedia | Questions: 150+
Actionscript
Study | Quiz | Subjects: it-skills, multimedia | Questions: 10+
Adobe Flash
Study | Quiz | Subjects: it-skills, multimedia, flash | Questions: 50+
Adobe Illustrator
Study | Quiz | Subjects: it-skills, multimedia | Questions: 100+
Adobe Illustrator Shortcuts
Study | Quiz | Subject: it-skills | Questions: 50+
Adobe Indesign Publishing
Study | Quiz | Subject: it-skills | Questions: 150+
Adobe Photoshop CS 2 - CS 3
Study | Quiz | Subject: it-skills | Questions: 70+
Adobe Photoshop CS 5
Study | Quiz | Subject: it-skills | Questions: 140+
Adobe Photoshop CS 5 Keyboard Shortcuts
Study | Quiz | Subject: it-skills | Questions: 170+
Adobe Photoshop Graphic Design
Study | Quiz | Subject: it-skills | Questions: 100+
Adobe Photoshop Tools And Commands
Study | Quiz | Subject: it-skills | Questions: 110+
Adobe Premiere Keyboard Shortcuts
Study | Quiz | Subject: it-skills | Questions: 50+
Adobe Premiere Pro
Study | Quiz | Subject: it-skills | Questions: 50+
After Effects Keyboard Shortcuts
Study | Quiz | Subject: it-skills | Questions: 170+
Agile Development
Study | Quiz | Subject: it-skills | Questions: 50+
Agile Scrum Methodology
Study | Quiz | Subject: it-skills | Questions: 10+
Ajax
Study | Quiz | Subject: it-skills | Questions: 30+
Android Programming
Study | Quiz | Subject: it-skills | Questions: 130+
Animation
Study | Quiz | Subject: it-skills | Questions: 60+
Asp.net Programming
Study | Quiz | Subject: it-skills | Questions: 100+

1 of 109 pages [Next] [Last Page]

Test your basic knowledge |

Comptia Security +

?:?:)

Search BasicVersity Tests

Browse BasicVersity

3d Computer Modeling

Actionscript

Adobe Flash

Adobe Illustrator

Adobe Illustrator Shortcuts

Adobe Indesign Publishing

Adobe Photoshop CS 2 - CS 3

Adobe Photoshop CS 5

Adobe Photoshop CS 5 Keyboard Shortcuts

Adobe Photoshop Graphic Design

Adobe Photoshop Tools And Commands

Adobe Premiere Keyboard Shortcuts

Adobe Premiere Pro

After Effects Keyboard Shortcuts

Agile Development

Agile Scrum Methodology

Ajax

Android Programming

Animation

Asp.net Programming