Security+ Random Questions 2

Question 1

IPv6, in addition to having more bits allocated for each host address, also has mandatory requirements built in for which security protocol?

Answer 1

IPSec

Question 2

Which of the following actions should be taken so that the computer requires confirmation before installing an ActiveX component?

Answer 2

Configuring the settings on the Web browser

Question 3

You are concerned about outside attackers penetrating your network via your company Web server. You wish to place your Web server between two firewalls. One firewall between the Web server and the outside world. The other between the Web server and your network. What is this called?

Answer 3

DMZ

Question 4

Which of the following techniques can mitigate tailgating attacks?

Answer 4

Mantrap

Question 5

Which of the following is used to prevent the electronic emissions of a computer from being used by unauthorized users?

Answer 5

Shielding

Question 6

Fuzzing third party software is a synonym for ____.

Answer 6

Black Box

Question 7

Which of the following statements are true about asymmetric encryption?

Answer 7

It uses a public key and a private key pair for data encryption; In asymmetric encryption, the public key is distributed and the private key is available only to the recipient of the message.

Question 8

Which of the following is known as a message digest?

Answer 8

Hash function

Question 9

Which protocol uses the AES (Advanced Encryption Standard) encryption to provide a secure wireless environment?

Answer 9

WPA2

Question 10

Which of the following statements best describes CHAP’s authentication procedure?

Answer 10

The initiator sends a logon request from the client to the server. The server sends a challenge back to the client. The challenge is encrypted and then sent back to the server. The server compares the value from the client and, if the information matches, grants authorization.

Question 11

Which of the following enables users to rent equipment and run a data center?

Answer 11

IaaS

Question 12

Which of the following are defined in the risk triad for an organization?

Answer 12

Assets, vulnerabilities, threats

Question 13

Which of the following refer to the information or message integrity?

Answer 13

Verification through checksum algorithms; Prevention of information modification during transmission; Verification through digital signatures

Question 14

Which of the following is the biggest security control loss with cloud computing?

Answer 14

Physical control over data

Question 15

Which of the following establishes an agreement between organizations that own and operate connected IT systems to document technical requirements of the interconnection?

Answer 15

ISA

Question 16

Which of the following is a remote access protocol that supports encryption?

Answer 16

PPP

Question 17

Which form of IPSec should you use for encryption on a LAN for internal security?

Answer 17

Transport

Question 18

Which of the following actions does the data loss prevention (DLP) technology take when an agent detects a policy violation for data of all states?

Answer 18

It creates an alert; quarantines the file to a secure location; blocks the transmission of content

Question 19

Which of the following statements are true of worms?

Answer 19

They cause harm to the network by consuming bandwidth; They mail a copy of themselves to other systems; They replicate themselves from one system to another without using a host file

Question 20

Which of the following automatically downloads and displays advertisements in the Web browser without a user’s permission?

Answer 20

Adware

Question 21

Which kind of attack is designed to overload a particular protocol or service?

Answer 21

Flood

Question 22

What backup operation will copy or back up only those files that changed since the last full backup and will reset the archive bit?

Answer 22

Incremental

Question 23

Which of the following choices can be used to describe a block cipher?

Answer 23

Symmetric Key

Question 24

Which of the following is the most secure method of authentication?

Answer 24

Biometrics

Question 25

A malicious code is sending large amount of random data to another service on the same system. Which type of attack is this?

Answer 25

Buffer overflow

Question 26

Which of the following is a message sent from a user to a certificate authority for applying a digital identity certificate?

Answer 26

CSR

Question 27

Which of the following features are provided by public cloud computing?

Answer 27

Distribution of large jobs across a flexible number of machines, Distributed storage of information, Elastic computing resources

Question 28

Which of the following radio frequencies is used by the IEEE 802.11a wireless network?

Answer 28

5.0 GHz

Question 29

Which of the following is a chronological documentation that shows who has collected and accessed each piece of evidence?

Answer 29

Chain of custody

Question 30

Which of the following is referred to the equipment which manages automated factory equipment?

Answer 30

SCADA

Question 31

Which of the following PKI elements are placed in a browser's trusted root CA?

Answer 31

Public Key

Question 32

Which of the following keys when added to Diffie-Hellman turns it into DHE?

Answer 32

Ephemeral

Question 33

You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers of the district, they will need to be able to work from an alternate location. However, budget is an issue. Which of the following is most appropriate for this client?

Answer 33

Cold site

Question 34

Which component of an IDS collects data?

Answer 34

Sensor

Question 35

Which of the following is responsible for maintaining certificates in a public key infrastructure (PKI)?

Answer 35

Certification Authority

Question 36

Which of the following attacks involves multiple compromised systems to attack a single target?

Answer 36

DDoS attack

Question 37

In an attempt to observe hacker techniques, a security administrator configures a nonproduction network to be used as a target so he can covertly monitor network attacks. What is this type of network called?

Answer 37

Honeynet

Question 38

Your Web server crashes at exactly the point where it reaches 1 million total visits. You discover that the cause of the server crash is a malicious code. Which of the following best fits this description?

Answer 38

Logic Bomb

Question 39

Which of the following statements BEST describes VeriSign?

Answer 39

It is a certification authority.

Question 40

Which of the following is a type of scam that entices a user to disclose personal information such as social security number, bank account details, or credit card number?

Answer 40

Phishing