Practice Test 1 Flashcards
Which of the following is a difference between TFTP and FTP?
A) TFTP utilizes UDP and FTP uses TCP
B) TFTP utilizes TCP and FTP uses UDP
C) TFTP is slower than FTP
D) TFTP is more secure than FTP
TFTP utilizes UDP and FTP uses TCP
Rebecca, a security analyst, is trying to prove to management what costs they could incur if their customer database was breached. This database contains 250 records with PII. Studies show that the cost per record for a breach is $350. The likelihood that their database would be breached in the next year is only 8%. Which of the following is the ALE that Rebecca should report to management for a security breach?
A) $7,500
B) $75,000
C) $27,500
D) $7,000
$7,000
A company with a US-based sales force has requested that the VPN system be configured to authenticate the sales team based on their username, password and a client side certificate. How many authentication factors are in use by the VPN system?
A) 2
B) 1
C) 4
D) 3
2
Which of the following is the MOST secure protocol to transfer files?
A) SSH
B) TELNET
C) FTPS
D) FTP
FTPS
A network administrator recently updated various network devices to ensure redundancy throughout the network. If an interface on any of the Layer 3 devices were to go down, traffic will still pass through another interface and the production environment would be unaffected. This type of configuration represents which of the following concepts?
A) Disaster Recovery
B) Load balancing
C) High availability
D) Backout contigency plan
High availability
Which of the following should be deployed to prevent the transmission of malicious traffic between virtual machines hosted on a singular physical device on a network?
A) HIDS on each virtual machine
B) NIDS on the network
C) NIPS on the network
D) HIPS on each virtual machine
HIPS on each virtual machine
Tom, an individual, has recently been calling various financial offices pretending to be another person to gain financial information. Which of the following attacks is being described?
A) Pharming
B) Vishing
C) Phishing
D) Tailgating
Vishing
An attacker attempted to compromise a web form by inserting the following input into the username field: admin)(|(password=*)) Which of the following types of attacks was attempted?
A) XSS
B) LDAP injection
C) Command injection
D) SQL injection
LDAP injection
A network administrator needs to provide daily network usage reports on all layer 3 devices without compromising any data while gathering the information. Which of the following would be configured to provide these reports?
A) SSH
B) ICMP
C) SNMPv3
D) SNMP
SNMPv3
A security administrator needs to update the OS on all the switches in the company. Which of the following MUST be done before any actual switch configuration is performed?
A) The request needs to be approved through the incident management process.
B) The request needs to be approved through the change management process.
C) The request needs to be sent to the revision management team.
D) The request needs to be sent to the enterprise management team.
The request needs to be approved through the change management process.
A network analyst received a number of reports that impersonation was taking place on the network. Session tokens were deployed to mitigate this issue and defend against which of the following attacks?
A) DDos
B) Phishing
C) Smurf
D) Replay
Replay
Which of the following is an example of multifactor authentication?
A) Fingerprint and Retina scan
B) Password and PIN
C) Credit card and PIN
D) Username and Password
Credit card and PIN
A program has been discovered that infects a critical Windows system executable and stays dormant in memory. When a Windows mobile phone is connected to the host, the program infects the phone’s boot loader and continues to target additional Windows PCs or phones. Which of the following malware categories BEST describes this program?
A) Worm
B) Virus
C) Pharmer
D) Trojan
Virus
Which of the following should Bill, a security administrator, perform before a hard drive is analyzed with forensics tools?
A) Interview witnesses
B) Capture system image
C) Disconnect system from network
`D) Identify user habits
Capture system image
A security administrator wishes to change their wireless network so that IPSec is built into the protocol and NAT is no longer required for address range extension. Which of the following protocols should be used in this scenario?
A) WPA2
B) WPA
C) IPv4
D) IPv6
IPv6
