Test your basic knowledge |

Comptia Security +: Cyber Ops

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Which of the following allows a server to request a website on behalf of Starbuck - a user?






2. When integrating source material from an open source project into a highly secure environment - which of the following precautions should prevent hidden threats?






3. Which of the following functions of a firewall allows Mal - an administrator - to map an external service to an internal host?






4. A data loss prevention strategy would MOST likely incorporate which of the following to reduce the risk associated with data loss?






5. Which of the following is an improved version of the LANMAN hash?






6. Which of the following web application security weaknesses can be mitigated by preventing the use of HTML tags?






7. Which of the following mitigates the risk of proprietary information being compromised?






8. Mal - a security administrator - would like to implement laptop encryption to protect data. The Chief Executive Officer (CEO) believes this will be too costly to implement and decides the company will purchase an insurance policy instead. Which of th






9. Which of the following multifactor authentication methods uses biometrics?






10. Which of the following malware types is MOST commonly associated with command and control?






11. Which of the following reduces the likelihood of a single point of failure when a server fails?






12. A company has sent all of its private keys to a third party. The third party company has created a secure list of these keys. Which of the following has just been implemented?






13. Which of the following is the MOST important security requirement for mobile devices storing PII?






14. Which of the following is the MOST secure protocol for Mal - an administrator - to use for managing network devices?






15. Which of the following malware types is MOST likely to execute its payload after Starbuck - an employee - has left the company?






16. Employees are reporting that they are receiving unusual calls from the help desk for the purpose of verifying their user credentials. Which of the following attack types is occurring?






17. While traveling - users need access to an internal company web server that contains proprietary information. Mal - the security administrator - should implement a...






18. Mal - the security administrator - is implementing a web content fitter. Which of the following is the MOST important design consideration in regards to availability?






19. Starbuck - an IT security technician working at a bank - has implemented encryption between two locations. Which of the following security concepts BEST exemplifies the protection provided by this example?






20. Mal - a security engineer - is trying to inventory all servers in a rack. The engineer launches RDP sessions to five different PCs and notices that the hardware properties are similar. Additionally - the MAC addresses of all five servers appear on th






21. The Chief Information Officer (CIO) wants to protect laptop users from zero day attacks. Which of the following would BEST achieve the CIO's goal?






22. A valid server-role in a Kerberos authentication system






23. Which of the following has a default port of 22?






24. Jayne - the administrator - has been told to confirm what account an email was sent from. Which of the following is this an example of?






25. Which of the following is BEST described by a scenario where organizational management chooses to implement an internal Incident Response Structure for the business?






26. While traveling Jayne - an employee - decides he would like to download some new movies onto his corporate laptop. While installing software designed to download movies from multiple computers across the Internet. Jayne agrees to share portions of hi






27. Which of the following is the BEST solution to securely administer remote servers?






28. Which of the following is BEST utilized to actively test security controls on a particular system?






29. Which of the following open standards should Mal - a security administrator - select for remote authentication of users?






30. Jayne - the security administrator - notices a spike in the number of SQL injection attacks against a web server connected to a backend SQL database. Which of the following practices should be used to prevent an application from passing these attacks






31. Which of the following types of data encryption would Starbuck - a security administrator - use if MBR and the file systems needed to be included?






32. Mal - a security administrator - has observed repeated attempts to break into the network. Which of the following is designed to stop an intrusion on the network?






33. Jayne - a security administrator - is responsible for provisioning role-based user accounts in an enterprise environment. A user has a temporary business need to perform multiple roles within the organization. Which of the following is the BEST solut






34. Starbuck - the administrator - is tasked with deploying a strong encryption cipher. Which of the following ciphers would she be the LEAST likely to choose?






35. After setting up a root CA. which of the following can Mal - a security administrator - implement to allow intermediate CAs to handout keys and certificates?






36. Which of the following would MOST likely be implemented in order to prevent employees from accessing certain websites?






37. An application company sent out a software patch for one of their applications on Monday. The company has been receiving reports about intrusion attacks from their customers on Tuesday. Which of the following attacks does this describe?






38. A company wants to have a backup site that is a good balance between cost and recovery time objectives. Which of the following is the BEST solution?






39. River Tam - a security guard - reports that the side of the company building has been marked with spray paint. Which of the following could this be an example of?






40. Which of the following is a best practice when securing a switch from physical access?






41. River Tam - a user - on a public Wi-Fi network logs into a webmail account and is redirected to a search engine. Which of the following attacks may be occurring?






42. River Tam - an attacker - is recording a person typing in their ID number into a keypad to gain access to the building. River Tam then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the follow






43. The Chief Information Security Officer (CISO) tells the network administrator that a security company has been hired to perform a penetration test against their network. The security company asks the CISO which type of testing would be most beneficia






44. Which of the following may cause Starbuck - the security administrator - to seek an ACL work around?






45. Which of the following is a reason why Mal - a security administrator - would implement port security?






46. Starbuck - a VPN administrator - was asked to implement an encryption cipher with a MINIMUM effective security of 128-bits. Which of the following should Starbuck select for the tunnel encryption?






47. Which of the following attacks is characterized by River Tam attempting to send an email from a Chief Information Officer's (CIO's) non-corporate email account to an IT staff member in order to have a password changed?






48. Mal - a security administrator - wants to secure remote telnet services and decides to use the services over SSH. Which of the following ports should Mal allow on the firewall by default?






49. Which of the following would help Mal - an administrator - prevent access to a rogue access point connected to a switch?






50. Which of the following are security relevant policies?