CompTIA Security+ Cert Prep #23 (25)

comptia-security-cert-prep-23-25

Wyjście

Pytanie 1 of 1

Pozostały Czas

240034

120

block

Which of the following can only be mitigated through the use of technical controls rather that user security training?

Wybierz prawidłowe odpowiedzi

(0/0)

240035

120

none

The security administrator is observing unusual network behavior from a workstation. The workstation is communicating with a known malicious destination over an encrypted tunnel. A full antivirus scan, with an updated antivirus definition file, does not show any signs of infection. Which of the following has happened on the workstation?

Wybierz prawidłowe odpowiedzi

(0/0)

240036

120

none

Which of the following types of application attacks would be used to identify malware causing security breaches that have NOT yet been identified by any trusted sources?

Wybierz prawidłowe odpowiedzi

(0/0)

240037

120

none

Which of the following may cause Jane, the security administrator, to seek an ACL work around?

Wybierz prawidłowe odpowiedzi

(0/0)

240038

120

none

Matt, an IT administrator, wants to protect a newly built server from zero day attacks. Which of the following would provide the BEST level of protection?

Wybierz prawidłowe odpowiedzi

(0/0)

240039

120

none

Joe, a user, in a coffee shop is checking his email over a wireless network. An attacker records the temporary credentials being passed to Joe’s browser. The attacker later uses the credentials to impersonate Joe and creates SPAM messages. Which of the following attacks allows for this impersonation?

Wybierz prawidłowe odpowiedzi

(0/0)

240040

120

none

How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?

Wybierz prawidłowe odpowiedzi

(0/0)

240041

120

none

Which of the following types of logs could provide clues that someone has been attempting to compromise the SQL Server database?

Wybierz prawidłowe odpowiedzi

(0/0)

240042

120

none

Ann, the security administrator, received a report from the security technician, that an unauthorized new user account was added to the server over two weeks ago. Which of the following could have mitigated this event?

Wybierz prawidłowe odpowiedzi

(0/0)

240043

120

none

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?

Wybierz prawidłowe odpowiedzi

(0/0)

240044

120

none

The security administrator is analyzing a user’s history file on a Unix server to determine if the user was attempting to break out of a rootjail. Which of the following lines in the user’s history log shows evidence that the user attempted to escape the rootjail?

Wybierz prawidłowe odpowiedzi

(0/0)

240045

120

none

A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal?

Wybierz prawidłowe odpowiedzi

(0/0)

240046

120

none

A vulnerability assessment indicates that a router can be accessed from default port 80 and default port 22. Which of the following should be executed on the router to prevent access via these ports? (Select TWO).

Wybierz prawidłowe odpowiedzi

(0/0)

240047

120

none

ring a routine audit a web server is flagged for allowing the use of weak ciphers. Which of the following should be disabled to mitigate this risk? (Select TWO).

Wybierz prawidłowe odpowiedzi

(0/0)

240048

120

none

A new web server has been provisioned at a third party hosting provider for processing credit card transactions. The security administrator runs the netstat command on the server and notices that ports 80, 443, and 3389 are in a `listening’ state. No other ports are open. Which of the following services should be disabled to ensure secure communications?

CompTIA Security+ Cert Prep #23 (25)

Pytanie 1 of 1

Pozostały Czas

Which of the following can only be mitigated through the use of technical controls rather that user security training?

Wybierz prawidłowe odpowiedzi

(0/0)

Wybierz prawidłowe odpowiedzi

(0/0)

Which of the following types of application attacks would be used to identify malware causing security breaches that have NOT yet been identified by any trusted sources?

Wybierz prawidłowe odpowiedzi

(0/0)

Which of the following may cause Jane, the security administrator, to seek an ACL work around?

Wybierz prawidłowe odpowiedzi

(0/0)

Matt, an IT administrator, wants to protect a newly built server from zero day attacks. Which of the following would provide the BEST level of protection?

Wybierz prawidłowe odpowiedzi

(0/0)

Wybierz prawidłowe odpowiedzi

(0/0)

How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?

Wybierz prawidłowe odpowiedzi

(0/0)

Which of the following types of logs could provide clues that someone has been attempting to compromise the SQL Server database?

Wybierz prawidłowe odpowiedzi

(0/0)

Ann, the security administrator, received a report from the security technician, that an unauthorized new user account was added to the server over two weeks ago. Which of the following could have mitigated this event?

Wybierz prawidłowe odpowiedzi

(0/0)

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?

Wybierz prawidłowe odpowiedzi

(0/0)

The security administrator is analyzing a user’s history file on a Unix server to determine if the user was attempting to break out of a rootjail. Which of the following lines in the user’s history log shows evidence that the user attempted to escape the rootjail?

Wybierz prawidłowe odpowiedzi

(0/0)

A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal?

Wybierz prawidłowe odpowiedzi

(0/0)

A vulnerability assessment indicates that a router can be accessed from default port 80 and default port 22. Which of the following should be executed on the router to prevent access via these ports? (Select TWO).

Wybierz prawidłowe odpowiedzi

(0/0)

ring a routine audit a web server is flagged for allowing the use of weak ciphers. Which of the following should be disabled to mitigate this risk? (Select TWO).

Wybierz prawidłowe odpowiedzi

(0/0)

Wybierz prawidłowe odpowiedzi

(0/0)

Wyniki

Poprawny

0

Błędny

0

Pominięty

0

Ogólny Procent

0%

Oceniać Quiz