Test your basic knowledge |

Comptia Security + Exam

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. In order to ensure high availability of all critical backups of the main data center are done in the middle of the night and then the backup tapes are taken to an offsite location. Which of the following would ensure the minimal amount of downtime in






2. Which of the following encryption algorithms can be used in PGP for data encryption?






3. Which of the following devices BEST allows a security administrator to identify malicious activity after it has occurred?






4. Upon investigation an administrator finds a suspicious system-level kernel module which modifies file system operations. This is an example of which of the following?






5. Which of the following devices is used to optimize and distribute data workloads across multiple computers or networks?






6. Which of the following cloud computing concepts is BEST described as providing an easy-to configure OS and on-demand computing for customers?






7. Which of the following is the MOST secure method of utilizing FTP?






8. Users in your network are able to assign permissions to their own shared resources. Which of the following access control models is used in your network?






9. A user is no longer able to transfer files to the FTP server. The security administrator has verified the ports are open on the network firewall. Which of the following should the security administrator check?






10. What allows for all activities on a network or system to be traced to the user who performed them?






11. Your daily bandwidth monitoring report of your Internet connection shows an excessive amount of outgoing traffic on port 25. You have seen peaks in the reports before but this report shows many peaks outside office times. What should you do?






12. A security administrator is tasked with revoking the access of a terminated employee. Which of the following account policies MUST be enacted to ensure the employee no longer has access to the network?






13. What principle dictates that a user is given no more privilege necessary than that required to preform his/her job?






14. Which of the following is another name for a malicious attacker?






15. Isolation mode on an AP provides which of the following functionality types?






16. Which of the following should be performed on a computer to protect the operating system from malicious software?






17. Separating of duties is valuable in deterring?






18. Which of the following describes when forensic hashing should occur on a drive?






19. You want to setup a secure method of sending and receiving email. Which two of the following protocols can be used for this purpose?






20. Which of the following is an unauthorized wireless router that allows access to a secure network?






21. Which of the following is not an asymmetric system?






22. Which of the following attacks is BEST described as the interruption of network traffic accompanied by the insertion of malicious code?






23. Which of the following BEST describes an intrusion prevention system?






24. What port does the Domain Name Service (DNS) use by default?






25. How a Trojan works: A user downloads a keygen to install pirated software. After running the keygen - system performance is ________________ are displayed.






26. An attacker forces a Windows service that uses the Local System account as its service account to crash. The attacker is able to access administrator-level resources as a result. What kind of attack is this?






27. How does a NAT server help protect your network?






28. Which of the following is the BEST choice for encryption on a wireless network?






29. Which of the following should a security administrator implement to prevent users from disrupting network connectivity if a user connects both ends of a network cable to different switch ports?






30. You are performing risk assessment for an organization. What should you do during impact assessment?






31. Which of the following access control models allows classification and labeling of objects?






32. The server log shows 25 SSH login sessions it is a large company and the administrator does not know if this is normal behavior or if the network is under attack. Where should the administrator look to determine if this is normal behavior?






33. What types of encryption are used for adding a digital signature to a message?






34. A web application has been found to be vulnerable to a SQL injection attack. Which of the following BEST describes the required remediation action?






35. Which of the following is NOT an application layer security protocol?






36. Which of the following attacks is manifested as an embedded HTML image object or JavaScript image tag in an email?






37. Which of the following are the default ports for HTTP and HTTPS protocols?






38. You are designing a secure application environment. You need to ensure that data is kept as secure as possible. You need to select the strictest access control model. What access control model should you use?






39. Which of the following devices is often used to cache and filter content?






40. What can you prevent when you deploy wireless devices inside a TEMPEST-certified building?






41. Which of the following ports would a security administrator block if the administrator wanted to stop users from accessing outside SMTP services?






42. A company needs to be able to prevent entry at all times - to a highly sensitive area inside a public building. In order to ensure the BEST type of physical security - which of the following should be implemented?






43. Which of the following attacks is NOT aimed at fragmentation vulnerabilities of the IP stack?






44. Which of the following should be enabled to ensure only certain wireless clients can access the network?






45. Which of the following threats corresponds with an attacker targeting specific employees of a company?






46. You discover that company confidential information is being encoded into graphics files and sent to a destination outside of the company. This is an example of what kind of cryptography?






47. Which type of virus is able to alter its own code to avoid being detected by anti-virus software?






48. Which of the following should be considered when trying to prevent somebody from capturing network traffic?






49. Which protocol ensures private communications by ensuring that no third party can eavesdrop or tamper with any message or data transfer between client and server systems and is the successor to the secure Socket Layer (SSL)?






50. Which of the following is a detective security control?