Test your basic knowledge |

Comptia Security +

Subjects : certifications, comptia-security-+, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Do all hosts on a VLAN have to be connected to the same switch?
X.509 is the standard that covers PKI
1. Elevation Prompt 2. Privilege Elevation
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get

2. Symmetric Key Ciphers
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D
Unsolicited Bulk Email or SPAM
Use a solution that supports nonrepudiation

3. Secure Email Protocols
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).
BitLocker
Bastion Host
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy

4. What is the name of Vista's hard drive encryption technology?
The integrity of a message.
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
BitLocker

5. L2TP port number
Bastion Host
1701
80
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate

6. HTTP port number
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.
80

7. When was NTLMv2 first introduced?
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate
1723
In Windows NT 4 SP4.

8. Can PGP be used to provide nonrepudiation?
PGP can be used to both encrypt and digitally sign emails - because it can be used to digitally sign emails it provides nonrepudiation.
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
110
1. Something you know2. Something you have 3. Something you are

9. The Goals of Security
1. Confidentiality 2. Integrity 3. Availability
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing

10. How do you ensure an email comes from the person it advertises as being the sender?
1. Authentication 2. Authorization 3. Accounting
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
Use a solution that supports nonrepudiation
X.509 is the standard that covers PKI

11. Storage Types
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
143
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
1. Diffe-Hellman 2. Elliptic Curve (EC) 3. ElGamal 4. RSA - Rivest - Shamir - Aldeman 5. DSA - Digital Signature Algorithm

12. Human Behaviors that Social Engineering Will Exploit
1. Trust 2. Fear 3. Lack of konwledge
119
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy

13. How could a shared virtual machine reduce the workload for IT staff?
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
In Windows NT 4 SP4.
The name of the file that tracks expired certificates is the CRL (Certificate Revocation List).

14. HTTPS port number
BitLocker
1. Confidentiality 2. Integrity 3. Availability
443
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall

15. Telnet port number
Yes because all hosts connected to a VLAN are in the same broadcast domain - and DHCP works based on broadcast packets.
1. Elevation Prompt 2. Privilege Elevation
23
1. Authentication 2. Authorization 3. Accounting

16. UPS Types
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)
1. John the Ripper 2. Cain & Abel 3. THC Hydra
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

17. In Windows what is the path to the file that contains a list of well-known ports?
119
C:Windowssystem32driversetcservices
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
1. Trust 2. Fear 3. Lack of konwledge

18. Can a VLAN provide scalability?
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
Yes a VLAN can provide scalability because it is configured via software not hardware.
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

19. What is PWDUMP?
1. Signatures must be updated 2. Zero day exploits
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
Earlier versions of PGP relied on public key cryptography but not X.509 - it used a web of trust instead. Current versions of PGP include both models through a key management server - X.509 using a hierarchical approach based on a Certificate Authori

20. IMAP port number
143
443
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.

21. User Account Control (UAC) is an Example of
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
1. Elevation Prompt 2. Privilege Elevation
It can be identified by the use of a single quote character which is used to signal to the web server that what follows is a SQL query.
Are the same thing.

22. Protocols Used for VPN
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.
1. PPTP - Point to Point Tunneling Protocol 2. L2TP - Layer 2 Tunneling Protocol 3. IPSEC - Internet Protocol Security used to provide encryption for L2TP
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
C:Windowssystem32driversetcservices

23. The 3 Ss
1. Something you know2. Something you have 3. Something you are
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
A tool used to extract NTLM and LANMAN hashes from a Windows based targeted host.
An online or double conversion UPS will charge it's battery and provide power to any connected devices at the same time.

24. What is a Rootkit?
1. SPI - Stateful Packet Inspection firewall 2. Stateless firewall
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation
A rootkit is a form of malicious software that grants full system control to the user. The term comes from the UNIX/Linux environment - where the highest level of system administrator is called the root user.

25. What is the SLE (Single Loss Expectancy)?
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.

26. IDS/IPS Alerts
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
Unsolicited Bulk Email or SPAM
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate

27. What is the standard that covers LDAP?
X.500 is the standard that covers LDAP
389
C:Windowssystem32driversetcservices
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp

28. What formula is used to find the number of hosts?
BitLocker
(2^number of host bits)-2 = number of hosts
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing

29. How does an incremental backup work?
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results
1. Offline/Standby - Power is taken from the AC source (wall) until a power failure occurs then it is switched to the battery. 2. Online (Double Conversion/Delta Conversion) - Power is taken from the battery at all times. 3. Line Interactive - Power

30. Versions of NAT
1. Dynamic NAT - A private IP address is mapped to a public IP address drawing from a pool of registered public IP addresses (one-to-many). 2. Static NAT - A private IP address is mapped to a public IP address the public IP address that is being mapp
A system that has been compromised by malware and can be remote controlled by another computer during an attack - usually a DDoS attack. Zombies are also known as bots or network robots.
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D

31. NNTP port number
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
389
119
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation

32. What is the standard that covers PKI?
1. John the Ripper 2. Cain & Abel 3. THC Hydra
X.509 is the standard that covers PKI
80
BitLocker

33. PPTP port number
1723
1701
67 - 68
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.

34. Password Attacks
Here the administrator creates resource access policies and the users cannot modify them. These policies in turn will dictate which user(s) have access to which resource(s).
22
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
1. Dictionary 2. Brute Force 3. Rainbow Tables 4. Masked Attack

35. DHCP port number
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
67 - 68
1. Voluntary Tunnel 2. Compulsory Tunnel - Incoming Call 3. Compulsory Tunnel - Remote Dial 4. Multi-Hop Connection Tunnel
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.

36. Symmetric Key Ciphers
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
An incremental backup backs up only those files that have changed since the backup of any type - and is quicker to complete the backup.

37. What is THC Hydra?
A fast network authentication password cracker that can go after many different services.
BitLocker
The integrity of a message.
In Windows NT 4 SP4.

38. Steps in the OVAL Assessment Process
1. True Positive - Correctly identifies an attack 2. True Negative - Correctly identifies legitimate traffic 3. False Positive - Incorrectly identifies legitimate traffic as an attack 4. False Negative - Incorrectly identifies an attack as legitimate
1. Diffe-Hellman - Used in key exchange 2. Elliptic Curve - Used in OpenSSL and Bouncy Castle for Java & C# - .Net framework. 3. ElGamal - Used in PGP and GNU Privacy Guard 4. RSA - One of the best known public key ciphers - it was developed at MIT.
1. Technology Weakness 2. Configuration Weakness 3. Policy Weakness 4. Human Error or Malice
1. Represent the configuration of the system(s) to be tested. 2. Analyze the system(s) 3. Report the results

39. Can a VLAN be used to SEGREGATE access to a DHCP server?
1. S/MIME - Secure Multipurpose Internet Mail Extension 2. PGP - Pretty Good Privacy
A combination of files geared - towards fixing one or more security issues with a given piece of software. Note that hotfixes are usually created shortly after a security hole is identified.
C:Windowssystem32driversetcservices
Yes because all hosts connected to a VLAN are in the same broadcast domain - and DHCP works based on broadcast packets.

40. Goals of Email Security
80
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation

41. The 3 As
An offline UPS remains idle until AC power is lost then it uses its' internal battery to provide power to attached equipment.
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
X.509 is the standard that covers PKI
1. Authentication 2. Authorization 3. Accounting

42. What is the difference between an online UPS and a double conversion UPS?
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
Are the same thing.
3389
1. Confidentiality 2. Integrity 3. Authentication 4. Nonrepudiation

43. Access Control Models
1. MAC - Mandatory Access Control 2. DAC - Discretionary Access Control 3. RBAC - Role-Based Access Control 4. NAC - Network Access Control 5. Physical
3389
1. Online - The most available type of storage. Disk containing data is attached to the network or a system that is attached to the network. Examples include normal backup disk - RAID - and SAN. No direct physical human interaction is required to get
X.509 is the standard that covers PKI

44. What is a Trojan?
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy
1. Trust 2. Fear 3. Lack of konwledge
The asset value multiplied by the exposure factor asset value x exposure factor = SLE
1. Local computer GPO 2. Local administrator and non-administrator GPOs 3. Local user-specific GPO 4. Site GPO 5. Domain GPO 6. Organizational Unit GPO(s)

45. Checksums
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
1. Something you know2. Something you have 3. Something you are
1. DES - 64-bit block - 56-bit key - 16 rounds 2. 3DES - DES is used 3 times with 3 different keys 3. AES - 128-bit block - 128/192-bit key - 10/12/14 rounds 4. AES256 - AES used with a 256-bit key 5. RC5 - 32/64/128-bit block - 0-2040 key - 0-255 ro
1. MD4 - Message Digest 4 (128-bit digest) 2. MD5 - Message Digest 5 (128-bit digest - used in NTLMv2) 3. SHA - Secure Hashing Algorithm (160/256/512-bit digest)

46. SMTP port number
If one application is deployed to 100 workstations it needs to be patched 100 times but if the same application is deployed to 1 shared virtual host it only needs to be patched once.
25
1. Phishing 2. Hoaxes 3. Dumpster Diving 4. Shoulder Surfing
A program that appears to be harmless but delivers malicious code to a computer NetBUS and BackOrrifice are two of the most popular trojans - they are typically embedded in benign looking programs - when the programs are executed a backdoor to the sy

47. How does a differential backup work?
A differential backup backs up all files that have changed since the last full backup - and is quicker to restore than multiple incremental backups.
Anything that impacts or edits the way in which a server/application responds/answers a user's request.
No - all hosts on a VLAN do not have to be connected to the same switch - a VLAN can span multiple switches.
Are the same thing.

48. What is output validation?

49. Ways to Secure a WiFi Access Point
22
1. Access Control - MAC Filtering 2. Encryption - WEP - WPA - WPA2 3. Authentication - RADIUS 4. Isolation - VLANs
1. John the Ripper 2. Cain & Abel 3. THC Hydra
1. DES - Data Encryption Standard 2. 3DES - Triple Data Encryption Standard 3. AES - Advanced Encryption Standard 4. AES256 - Advanced Encryption Standard 256-bit 5. RC5 - Rivest Cipher 5 6. RC6 - Rivest Cipher 6 7. Blowfish 8. IDEA - International D

50. Windows Password Authentication Protocols
X.500 is the standard that covers LDAP
Use a solution that supports nonrepudiation
1. LM - Local Area Network Manager (Used in XP and before - DES is the hash) 2. NTLMv1/v2 - New Technology LANMAN (Used in Vista - 7 - and Server 2008) 3. Kerberos - Used in Active Directory
443