Test your basic knowledge |

Comptia Security +

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. In PKI what is the name of the file that tracks expired certificates?
22
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate

2. When was NTLMv2 first introduced?
67 - 68
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
In Windows NT 4 SP4.

3. IMAP port number
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
Unsolicited Bulk Email or SPAM
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
143

4. Can a VLAN be used to SEGREGATE access to a DHCP server?
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
110
Yes because all hosts connected to a VLAN are in the same broadcast domain - and DHCP works based on broadcast packets.
1. Authentication 2. Authorization 3. Accounting

5. The Goals of Security
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
X.500 is the standard that covers LDAP
1. Confidentiality 2. Integrity 3. Availability
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.

6. How does an incremental backup work?
22
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).

7. Password Crackers
1723
1701
1. John the Ripper 2. Cain & Abel 3. THC Hydra
The integrity of a message.

8. Protocols Used for VPN
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
The integrity of a message.
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.

9. PPTP port number
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
1723
Through the use of digital signatures
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get

10. Human Behaviors that Social Engineering Will Exploit
Through the use of digital signatures
1. Trust 2. Fear 3. Lack of konwledge
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
Anything that impacts or edits the way in which a server/application responds/answers a user's request.

11. How could a shared virtual machine reduce the workload for IT staff?
53
1. Signatures must be updated 2. Zero day exploits
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.

12. The 3 Ss
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
1. Something you know2. Something you have 3. Something you are
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP

13. How does a differential backup work?
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D

14. Symmetric Key Ciphers
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro

15. How does an offline UPS provide power?

16. Password Attacks
80
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. Signatures must be updated 2. Zero day exploits

17. How do you ensure an email comes from the person it advertises as being the sender?
3389
Use a solution that supports nonrepudiation
Bastion Host
X.500 is the standard that covers LDAP

18. HTTPS port number
443
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel

19. TACACS port number
110
(2^number of host bits)-2 = number of hosts
143
49

20. DHCP port number
1. Signatures must be updated 2. Zero day exploits
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
67 - 68
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy

21. Types of Firewalls
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
Through the use of digital signatures
80

22. What is the difference between an online UPS and a double conversion UPS?
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori
Are the same thing.

23. What is output validation?

24. Does PGP rely on X.509 (Digital Certificates - PKI)?
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
49
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori

25. Telnet port number
23
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
67 - 68
443

26. Secure Email Protocols
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
In Windows NT 4 SP4.
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
110

27. Remote Desktop port number
Bastion Host
3389
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
1723

28. DNS port number
1. Authentication 2. Authorization 3. Accounting
1723
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
53

29. How can you introduce nonrepudiation and authentication to Mutual SSL client authentication?
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
80
Through the use of digital signatures

30. How does the MAC model work?
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
1. Trust 2. Fear 3. Lack of konwledge
Unsolicited Bulk Email or SPAM
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).

31. Do all hosts on a VLAN have to be connected to the same switch?
443
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
22
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.

32. Storage Types
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
1. Trust 2. Fear 3. Lack of konwledge
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get

33. What is PWDUMP?
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
67 - 68

34. What is the name of Vista's hard drive encryption technology?
BitLocker
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.

35. Types of L2TP Tunnels
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
Through the use of digital signatures
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel

36. Asymmetric Key Ciphers
Through the use of digital signatures
1. Something you know2. Something you have 3. Something you are
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
Use a solution that supports nonrepudiation

37. Steps in the OVAL Assessment Process
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
1. Elevation Prompt 2. Privilege Elevation

38. How does an online/double conversion UPS provide power?

39. What is the SLE (Single Loss Expectancy)?
25
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
X.500 is the standard that covers LDAP

40. Access Control Models
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
110
In Windows NT 4 SP4.
BitLocker

41. HTTP port number
1. Trust 2. Fear 3. Lack of konwledge
110
80
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.

42. In a Windows Doamin - How is a GPO Applied?
In Windows NT 4 SP4.
1. Something you know2. Something you have 3. Something you are
Through the use of digital signatures
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)

43. IPSEC Encryption Modes
1. Elevation Prompt 2. Privilege Elevation
1. Transport Mode - Packet data is encrypted but not the header information. 2. Tunnel Mode - Enitre packet (data & header information) is encrypted.
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.

44. What is the standard that covers PKI?
X.509 is the standard that covers PKI
Yes a VLAN can provide scalability because it is configured via software not hardware.
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
23

45. Can PGP be used to provide nonrepudiation?
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
53
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.

46. What is a Zombie?
443
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.

47. NNTP port number
67 - 68
119
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
Through the use of digital signatures

48. In Windows what is the path to the file that contains a list of well-known ports?
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
Bastion Host
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
C:Windowssystem32driversetcservices

49. Ways to Secure a WiFi Access Point
443
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
Anything that impacts or edits the way in which a server/application responds/answers a user's request.

50. Examples of Social Engineering Attacks
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power