Test your basic knowledge |

Comptia Security + Exam

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A security administrator is in charge of a a hot site and a cold site. Due to a recent disaster - the administrator needs to ensure that their cold site is ready to go in case of a disaster. Which of the following does the administrator need to ensur






2. Which of the following is a policy that would force all users to organize their areas as well as help in reducing the risk of possible data theft?






3. You have several computers that use the NTLM authentication protocol for client authentication. Network policy requires user passwords with at least 16 characters. What hash algorithm is used for password authentication?






4. Which of the following is true concerning email message encryption by using S/MIME?






5. Which of the following will educate employees about malicious attempts from an attacker to obtain bank account information?






6. User in your department complain about a slow Internet connection. You monitor the external interface of your company's border router and notice a huge mount of half-open TCP connections. What type of attack is your company currently a victim of?






7. Which of the following is a best practice to identify fraud from an employee in a sensitive position?






8. The security administrator is getting reports from users that they are accessing certain websites and are unable to download anything off of those sites. The security administrator is also receiving several alarms from the IDS about suspicious traffi






9. Users in your network are able to assign permissions to their own shared resources. Which of the following access control models is used in your network?






10. Data can potentially be stolen from a disk screen-lock protected - smartphone by which of the following?






11. Which of the following should be considered when trying to prevent somebody from capturing network traffic?






12. NIDS can also be used to help identify...






13. You need to advise a new wiring system for a company with several locations partly open to the public. A primary requirement is to make tapping into the network as difficult as possible. Which of the following cable types should you advice?






14. What principle requires that for a particular set of transactions - no one individual is solely responsible or allowed to execute the complete set?






15. An administrator identifies a security issue on but does not attempt to exploit it. Which of the following describes what the administrator has done?






16. Which of the following is a reason to perform user awareness and training?






17. A targeted email attack sent to the company's Chief Executive Officer (CEO) is known as which of the following?






18. Which of the following describes a passive attempt to identify weaknesses?






19. When examining HTTP server logs the security administrator notices that the company's online store crashes after a particular search string is executed by a single external user. Which of the following BEST describes this type of attack?






20. Which of the following is the MOST secure method of utilizing FTP?






21. Which of the following would need to be configured correctly to allow remote access to the network?






22. Which of the following is MOST likely to be the last rule contained on any firewall?






23. Which of the following manages peer authentication and key exchange for an IPSec connection?






24. An administrator who wishes to block all database ports at the firewall should include which of the following ports in the block list?






25. Which of the following concepts ensures that the data is only viewable to authorized users?






26. A security administrator wants to determine what data is allowed to be collected from users of the corporate Internet-facing web application. Which of the following should be referenced?






27. Which of the following MUST a programmer implement to prevent cross-site scripting?






28. For which of the following is centralized key management most complicated?






29. Which of the following will provide the HIGHEST level of wireless network security?






30. During the analysis of malicious code a security analyst discovers JavaScript being used to send random data to another service on the same system. This is MOST likely an example of which of the following?






31. Logs from an IDS show that a computer has been compromised with a botnet and is actively communicating with a command and control which of the following data types will be unavailable for later investigation?






32. Which of the following environmental variables reduces the potential for static discharges?






33. Which of the following is MOST relevant to a buffer overflow attack?






34. An application log shows that the text 'test; rm -rf /etc/passwd' was entered into an HTML form. Which of the following describes the type of attack that was attempted?






35. Which of the following is specific to a buffer overflow attack?






36. Users in your company use a smart card and fingerprint scan to authenticate to the network. Which of the following authentication methods is used in your company?






37. Used in conjunction which of the following are PII?






38. Which of the following port numbers is used for SCP by default?






39. A web application has been found to be vulnerable to a SQL injection attack. Which of the following BEST describes the required remediation action?






40. Which of the following network devices would MOST likely be used to detect but not react to suspicious behavior on the network?






41. Your organization recently purchased several new laptop computers for employees. You're asked to encrypt the laptop's hard drives without purchasing any additional hardware. What would you use?






42. A bulk update process fails and writes incorrect data throughout the database. Which of the following concepts describes what has been compromised?






43. Based on logs from file servers remote access systems - and IDS - a malicious insider was stealing data using a personal laptop while connected by VPN. The affected company wants access to the laptop to determine loss - but the insider's lawyer insis






44. Which of the following is a detective security control?






45. Which of the following is used for exchanging secret keys over an insecure public network?






46. You are the network admin for a large LAN with a single - firewall-protected - Internet connection. You want to analyze all network traffic in your local network for suspicious activities and receive a notification when a possible attack is in proces






47. Which of the following should the security administrator look at FIRST when implementing an AP to gain more coverage?






48. The 64 bit block cipher with 16 iterations giving a 56 bit key is called?






49. Which of the following BEST explains the security benefit of a standardized server image?






50. Which of the following is BEST used to prevent ARP poisoning attacks across a network?