CompTIA Security+ (SY0-601)

Question 1

What is Air Gapes?

Answer 1

Air gaps involve physically disconnecting a computer or network from any external connections, such as the internet or other networks. This isolation prevents unauthorised access, data exfiltration, and cyberattacks

Question 2

What security benefits do Air Gapes ofter?

Answer 2

Air-gapped systems are highly secure because they are not directly accessible from the outside. This makes them resistant to remote attacks like hacking or malware infections.

Question 3

What is PGP?

Answer 3

Pretty Good Privacy cis an encryption program that provides cryptographic privacy and authentication for data communication.

Question 4

What is Asymmetric encryption?

Answer 4

Is a cryptographic technique that uses a pair of mathematically related but distinct keys: a public key and a private key. is known as public-key encryption AES, RC4, and 3DES are all symmetric algorithms

Question 5

What is Jumpbox?

Answer 5

Jumpbox is a system on a network used to access and manage devices in a separate security zone

Question 6

What is TFTP and what port does it use?

Answer 6

Trivial File Transfer Protocol uses port 69

Question 7

What is SMTP and what port does it use?

Answer 7

Simple Mail Transfer Protocol uses port 25

Question 8

What is SMTP and what port does it use?

Answer 8

Hypertext Transfer Protocol uses port 80

Question 9

What is DNS and what port does it use?

Answer 9

Domain Name Service protocol uses port 53.

Question 10

What is RIPEMD stand for?

Answer 10

RACE Integrity Primitives Evaluation Message Digest.

It was designed to provide secure hashing and message digest capabilities, primarily for use in data integrity and authentication applications

Question 11

What is APT?

Answer 11

Advanced persistent threat (APT) is a network attack in which an unauthorized person gains access to a network and stays there undetected for a long period of time

Question 12

What is HTTP and what port does it use?

Answer 12

(Hypertext Transfer Protocol) is a fundamental protocol used for transmitting data, particularly on the World Wide Web. It runs on port 80

Question 13

What is HTTPS and what port does it use?

Answer 13

(Hypertext Transfer Protocol Secure) is a secure version of the HTTP (Hypertext Transfer Protocol) used for secure communication over the internet. It runs on port 443

Question 14

What is FTP and what port does it use?

Answer 14

File Transfer Protocol is a network protocol used for transferring files between a client and a server on a computer network. It runs on port 21

Question 15

What is LDAP and what port does it use?

Answer 15

Lightweight Directory Access Protocol is a standardized protocol used for accessing and managing directory services. It runs on port 389

Question 16

What is RDP and what port does it use?

Answer 16

Remote desktop Protocol runs on port 3389

Question 17

What is SAML and what port does it use?

Answer 17

Security assertions markup language (SAML) is an XML-based framework for exchanging security-related information such as user authentication, entitlement, and attributes.

Question 18

What is Twofish and what port does it use?

Answer 18

Twofish is a symmetric key block cipher with a block size of 128 bits and key sizes up to 256 bits.

Question 19

What is DES and what port does it use?

Answer 19

Data Encryption Standard is a symmetric-key algorithm for the encryption of digital data.

Question 20

What is DLP and what port does it use?

Answer 20

Data loss prevention products automate the discovery and classification of data types and enforce rules so that data is not viewed or transferred without proper authorization.

Question 21

What is Aircrack-ng?

Answer 21

Aircrack-ng is a complete suite of wireless security assessment and exploitation tools that includes monitoring, attacking, testing, and cracking of wireless networks.

Question 22

What is Cross-site scripting?

Answer 22

Cross-site scripting (XSS) is one of the most powerful input validation exploits. XSS involves a trusted site, a client browsing the trusted site, and the attacker’s site.

Question 23

What is SOAR?

Answer 23

Security Orchestration, Automation, and Response. It is a comprehensive approach to cybersecurity that combines orchestration and automation of security processes with incident response (IR) capabilities.