Test your basic knowledge |

Comptia Security +: Cyber Ops

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Which of the following BEST allows Mal - a security administrator - to determine the type - source - and flags of the packet traversing a network for troubleshooting purposes?






2. Which of the following is used by Jayne - a security administrator - to lower the risks associated with electrostatic discharge - corrosion - and thermal breakdown?






3. Which of the following is Starbuck - a security administrator - MOST likely implementing when deleting all the unneeded files and modules of a newly install application?






4. The human resources department of a company has requested full access to all network resources - including those of the financial department. Starbuck - the administrator - denies this - citing...






5. Which of the following attacks would be used if River Tam - a user - is receiving unwanted text messages?






6. Which of the following attacks is characterized by River Tam attempting to send an email from a Chief Information Officer's (CIO's) non-corporate email account to an IT staff member in order to have a password changed?






7. Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized?






8. Which of the following functions of a firewall allows Mal - an administrator - to map an external service to an internal host?






9. The fundamental information security principals include confidentiality - availability and which of the following?






10. The Chief Information Officer (CIO) wants to protect laptop users from zero day attacks. Which of the following would BEST achieve the CIO's goal?






11. Which of the following technologies would allow the removal of a single point of failure?






12. Which of the following ports would be blocked if Mal - a security administrator - wants to deny access to websites?






13. Starbuck - a security administrator - has completed the imaging process for 20 computers that were deployed. The image contains the operating system and all required software. Which of the following is this an example of?






14. Starbuck - a security technician - wants to implement secure wireless with authentication. Which of the following allows for wireless to be authenticated via MSCHAPv2?






15. Mal - a security administrator - wants to secure remote telnet services and decides to use the services over SSH. Which of the following ports should Mal allow on the firewall by default?






16. Which of the following accurately describes the STRONGEST multifactor authentication?






17. Which of the following would MOST likely be implemented in order to prevent employees from accessing certain websites?






18. Which of the following ports should be open in order for River Tam and Mal - users - to identify websites by domain name?






19. Which of the following controls mitigates the risk of Jayne - an attacker - gaining access to a company network by using a former employee's credential?






20. River Tam - a user - on a public Wi-Fi network logs into a webmail account and is redirected to a search engine. Which of the following attacks may be occurring?






21. Which of the following security controls enforces user permissions based on a job role?






22. Workers of a small local organization have implemented an off-site location in which the organization can resume operations within 10 business days in the event of a disaster. This type of site is BEST known as which of the following?






23. Which of the following techniques floods an application with data in an attempt to find vulnerabilities?






24. An SQL injection vulnerability can be caused by which of the following?






25. Which of the following malware types is MOST commonly associated with command and control?






26. Jayne - a server administrator - sets up database forms based on security rating levels. If a user has the lowest security rating then the database automatically determines what access that user has. Which of the following access control methods does






27. Which of the following BEST describes a software vulnerability that is actively being used by River Tam and Starbuck - attackers - before the vendor releases a protective patch or update?






28. Starbuck - a user - has reported an increase in email phishing attempts. Which of the following can be implemented to mitigate the attacks?






29. Which of the following is used to verify the identity of the sender of a signed email?






30. Mal - a security administrator - would like to implement laptop encryption to protect data. The Chief Executive Officer (CEO) believes this will be too costly to implement and decides the company will purchase an insurance policy instead. Which of th






31. Which of the following open standards should Mal - a security administrator - select for remote authentication of users?






32. Which of the following procedures would be used to mitigate the risk of an internal developer embedding malicious code into a production system?






33. A packet filtering firewall can protect from which of the following?






34. Jayne - a security administrator - needs to Telnet into a router to change some configurations. Which of the following ports would need to be open to allow Jayne to change the configurations?






35. River Tam - the security engineer - has discovered that a breach is in progress on a non-production system of moderate importance. Which of the following should River Tam collect FIRST?






36. Which of the following security tools can Starbuck - an administrator - implement to mitigate the risks of theft?






37. A valid server-role in a Kerberos authentication system






38. Jayne - the security administrator - notices a spike in the number of SQL injection attacks against a web server connected to a backend SQL database. Which of the following practices should be used to prevent an application from passing these attacks






39. Which of the following would be the BEST reason for Starbuck - a security administrator - to initially select individual file encryption over whole disk encryption?






40. Starbuck - an IT security technician working at a bank - has implemented encryption between two locations. Which of the following security concepts BEST exemplifies the protection provided by this example?






41. Which of the following is the purpose of the spanning tree protocol?






42. Which of the following inspects traffic entering or leaving a network to look for anomalies against expected baselines?






43. Which of the following is BEST utilized to actively test security controls on a particular system?






44. Which of the following is the MOST important security requirement for mobile devices storing PII?






45. Which of the following is the MOST secure protocol for Mal - an administrator - to use for managing network devices?






46. Mal - a security engineer - is trying to inventory all servers in a rack. The engineer launches RDP sessions to five different PCs and notices that the hardware properties are similar. Additionally - the MAC addresses of all five servers appear on th






47. An application company sent out a software patch for one of their applications on Monday. The company has been receiving reports about intrusion attacks from their customers on Tuesday. Which of the following attacks does this describe?






48. Mal - a security administrator - has configured and implemented an additional public intermediate CA. Which of the following must Mal submit to the major web browser vendors in order for the certificates - signed by this intermediate - to be trusted?


49. Which of the following should be implemented to secure Pete's - a network administrator - day-today maintenance activities?






50. River Tam - the software security engineer - is trying to detect issues that could lead to buffer overflows or memory leaks in the company software. Which of the following would help River Tam automate this detection?