CompTIA Security+ Cert Prep #22 (25)

comptia-security-cert-prep-21-25

Exit

Question 1 of 1

Time Left

240010

120

block

Which of the following wireless protocols could be vulnerable to a brute-force password attack? (Select TWO).

Select the correct answer(s).

(0/0)

240011

120

none

A victim is logged onto a popular home router forum site in order to troubleshoot some router configuration issues. The router is a fairly standard configuration and has an IP address of 192.168.1.1. The victim is logged into their router administrative interface in one tab and clicks a forum link in another tab. Due to clicking the forum link, the home router reboots. Which of the following attacks MOST likely occurred?

Select the correct answer(s).

(0/0)

240012

120

none

A security administrator develops a web page and limits input into the fields on the web page as well as filters special characters in output. The administrator is trying to prevent which of the following attacks?

Select the correct answer(s).

(0/0)

240013

120

none

Pete, the security administrator, has been notified by the IDS that the company website is under attack. Analysis of the web logs show the following string, indicating a user is trying to post a comment on the public bulletin board. INSERT INTO message `<script>source=http://evilsite</script> This is an example of which of the following?

Select the correct answer(s).

(0/0)

240014

120

none

hich of the following BEST describes a protective countermeasure for SQL injection?

Select the correct answer(s).

(0/0)

240015

120

none

A security administrator looking through IDS logs notices the following entry: (where [email protected] and passwd= ‘or 1==1’) Which of the following attacks had the administrator discovered?

Select the correct answer(s).

(0/0)

240016

120

none

Which of the following types of application attacks would be used to specifically gain unauthorized information from databases that did not have any input validation implemented?

Select the correct answer(s).

(0/0)

240017

120

none

The string: ‘ or 1=1-- - Represents which of the following?

Select the correct answer(s).

(0/0)

240018

120

none

When an order was submitted via the corporate website, an administrator noted special characters (e.g., ";--" and "or 1=1 --") were input instead of the expected letters and numbers. Which of the following is the MOST likely reason for the unusual results?

Select the correct answer(s).

(0/0)

240019

120

none

Highly sensitive data is stored in a database and is accessed by an application on a DMZ server. The disk drives on all servers are fully encrypted. Communication between the application server and end-users is also encrypted. Network ACLs prevent any connections to the database server except from the application server. Which of the following can still result in exposure of the sensitive data in the database server?

Select the correct answer(s).

(0/0)

240020

120

none

Which of the following BEST describes a SQL Injection attack?

Select the correct answer(s).

(0/0)

240021

120

none

An attacker attempted to compromise a web form by inserting the following input into the username field: admin)(|(password=*)) Which of the following types of attacks was attempted?

Select the correct answer(s).

(0/0)

240022

120

none

Which of the following application attacks is used against a corporate directory service where there are unknown servers on the network?

Select the correct answer(s).

(0/0)

240023

120

none

Sara, a hacker, is completing a website form to request a free coupon. The site has a field that limits the request to 3 or fewer coupons. While submitting the form, Sara runs an application on her machine to intercept the HTTP POST command and change the field from 3 coupons to 30. Which of the following was used to perform this attack?

Select the correct answer(s).

(0/0)

240024

120

none

CompTIA Security+ Cert Prep #22 (25)

Question 1 of 1

Time Left

Which of the following wireless protocols could be vulnerable to a brute-force password attack? (Select TWO).

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

A security administrator develops a web page and limits input into the fields on the web page as well as filters special characters in output. The administrator is trying to prevent which of the following attacks?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

hich of the following BEST describes a protective countermeasure for SQL injection?

Select the correct answer(s).

(0/0)

A security administrator looking through IDS logs notices the following entry: (where [email protected] and passwd= ‘or 1==1’) Which of the following attacks had the administrator discovered?

Select the correct answer(s).

(0/0)

Which of the following types of application attacks would be used to specifically gain unauthorized information from databases that did not have any input validation implemented?

Select the correct answer(s).

(0/0)

The string: ‘ or 1=1-- - Represents which of the following?

Select the correct answer(s).

(0/0)

When an order was submitted via the corporate website, an administrator noted special characters (e.g., ";--" and "or 1=1 --") were input instead of the expected letters and numbers. Which of the following is the MOST likely reason for the unusual results?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Which of the following BEST describes a SQL Injection attack?

Select the correct answer(s).

(0/0)

An attacker attempted to compromise a web form by inserting the following input into the username field: admin)(|(password=*)) Which of the following types of attacks was attempted?

Select the correct answer(s).

(0/0)

Which of the following application attacks is used against a corporate directory service where there are unknown servers on the network?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

A malicious individual is attempting to write too much data to an application’s memory. Which of the following describes this type of attack?

Select the correct answer(s).

(0/0)

Results

Correct

0

Incorrect

0

Skipped

0

Overall Percentage

0%

Rate Quiz