Test your basic knowledge |

Comptia Security +: Cyber Ops

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Which of the following describes the ability for a third party to verify the sender or recipient of a given electronic message during authentication?






2. Which of the following is BEST associated with PKI?






3. Which of the following would help Mal - an administrator - prevent access to a rogue access point connected to a switch?






4. Which of the following is BEST utilized to actively test security controls on a particular system?






5. Which of the following can River Tam - a security administrator - implement to ensure that encrypted files and devices can be recovered if the passphrase is lost?






6. Traffic has stopped flowing to and from the company network after the inline IPS hardware failed. Which of the following has occurred?






7. Which of the following security tools can Starbuck - a security administrator - use to deter theft?






8. 3DES is created when which of the following scenarios occurs?






9. Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized?






10. River Tam - an attacker - is recording a person typing in their ID number into a keypad to gain access to the building. River Tam then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the follow






11. The log management system at Company A is inadequate to meet the standards required by their corporate governance team. A new automated log management system has been put in place. This is an example of which of the following?






12. Which of the following can Mal - an administrator - use to verify that a downloaded file was not corrupted during the transfer?






13. Which of the following is an example of authentication using something Starbuck - a user - has and something she knows?






14. Workers of a small local organization have implemented an off-site location in which the organization can resume operations within 10 business days in the event of a disaster. This type of site is BEST known as which of the following?






15. River Tam - a forensic investigator - believes that the system image she was presented with is not the same as the original source. Which of the following should be done to verify whether or not the image has been tampered with?






16. Starbuck - an IT security technician working at a bank - has implemented encryption between two locations. Which of the following security concepts BEST exemplifies the protection provided by this example?






17. Which of the following will help Jayne - an administrator; mitigate the risk of static electricity?






18. Jayne - a security administrator - has noticed that the website and external systems have been subject to many attack attempts. To verify integrity of the website and critical files - Jayne should






19. Which of the following is a best practice when securing a switch from physical access?






20. River Tam - an attacker - calls the company's from desk and tries to gain insider information by providing specific company information to gain the attendant's trust. The front desk immediately alerts the IT department about this incident. This is an






21. Starbuck - an administrator - is primarily concerned with blocking external attackers from gaining information on remote employees by scanning their laptops. Which of the following security applications is BEST suited for this task?






22. Account lockout is a mitigation strategy used by Starbuck - the administrator - to combat which of the following attacks?






23. A company has sent all of its private keys to a third party. The third party company has created a secure list of these keys. Which of the following has just been implemented?






24. River Tam - a user - on a public Wi-Fi network logs into a webmail account and is redirected to a search engine. Which of the following attacks may be occurring?






25. Which of the following malware types is BEST described as protecting itself by hooking system processes and hiding its presence?






26. River Tam - an IT administrator - wants to protect a cluster of servers in a DMZ from zero day attacks. Which of the following would provide the BEST level of protection?






27. Which of the following has a default port of 22?






28. Several users' computers are no longer responding normally and sending out spam email to the users' entire contact list. This is an example of which of the following?






29. A company is performing internal security audits after a recent exploitation on one of their proprietary applications. River Tam - the security auditor - is given the workstation with limited documentation regarding the application installed for the






30. Which of the following allows a server to request a website on behalf of Starbuck - a user?






31. Which of the following should Starbuck - the security administrator - do FIRST when an employee reports the loss of a corporate mobile device?






32. An example of a false negative






33. Which of the following administrative controls BEST mitigates the risk of ongoing inappropriate employee activities in sensitive areas?






34. Starbuck - a VPN administrator - was asked to implement an encryption cipher with a MINIMUM effective security of 128-bits. Which of the following should Starbuck select for the tunnel encryption?






35. A packet filtering firewall can protect from which of the following?






36. After setting up a root CA. which of the following can Mal - a security administrator - implement to allow intermediate CAs to handout keys and certificates?






37. Mal - a user - is having trouble dialing into the network from their house. The administrator checks the RADIUS server - the switch connected to the server - and finds that the switch lost configuration after a recent power outage. The administrator






38. Which of the following is where an unauthorized device is found allowing access to a network?






39. Which of the following can Jayne - an administrator - use to ensure the confidentiality of a file when it is being sent over FTP?






40. Which of the following BEST explains the security benefit of a standardized server image?






41. Which of the following is similar to a smurf attack - but uses UDP instead to ICMP?






42. Which of the following attacks is manifested as an embedded HTML image object or JavaScript image tag in an email?






43. Mal - a security administrator - wants to secure remote telnet services and decides to use the services over SSH. Which of the following ports should Mal allow on the firewall by default?






44. River Tam - the security engineer - has discovered that a breach is in progress on a non-production system of moderate importance. Which of the following should River Tam collect FIRST?






45. Jayne - the security administrator - notices a spike in the number of SQL injection attacks against a web server connected to a backend SQL database. Which of the following practices should be used to prevent an application from passing these attacks






46. Which of the following allows active exploitation of security vulnerabilities on a system or network for the purpose of determining true impact?






47. Mal - the security administrator - is implementing a web content fitter. Which of the following is the MOST important design consideration in regards to availability?






48. Which of the following would River Tam - a security administrator - utilize to identity a weakness within various applications without exploiting that weakness?






49. Which of the following security concepts establishes procedures where creation and approval are performed through distinct functions?






50. In the event of a mobile device being lost or stolen - which of the following BEST protects against sensitive information leakage?