CompTIA Security+ Cert Prep #58 (25)

comptia-security-cert-prep-58-25

Exit

Question 1 of 1

Time Left

244334

120

block

While responding to an incident on a Linux server, the administrator needs to disable unused services. Which of the following commands can be used to see processes that are listening on a TCP port?

Select the correct answer(s).

(0/0)

244335

120

none

A bank chief information security officer (CISO) is responsible for a mobile banking platform that operates natively on iOS and Andriod. Which of the following security controls helps protect the associated publicly accessible API endpoints?

Select the correct answer(s).

(0/0)

244336

120

none

A company is rolling out a new e-commerce website. The security analyst wants to reduce the risk of the new website being comprised by confirming that system patches are up to date, application hot fixes are current, and unneeded ports and services have been disabled. To do this, the security analyst will perform a:

Select the correct answer(s).

(0/0)

244337

120

none

Joe, a security analyst, is attempting to determine if a new server meets the security requirements of his organization. As a step in this process, he attempts to identify a lack of security controls and to identify common misconfigurations on the server. Which of the following is Joe attempting to complete?

Select the correct answer(s).

(0/0)

244338

120

none

A classroom utilizes workstations running virtualization software for a maximum of one virtual machine per working station. The network settings on the virtual machines are set to bridged. Which of the following describes how the switch in the classroom should be configured to allow for the virtual machines and host workstation to connect to network resources?

Select the correct answer(s).

(0/0)

244339

120

none

Which of the following attacks initiates a connection by sending specially crafted packets in which multiple TCP flags are set to 1?

Select the correct answer(s).

(0/0)

244340

120

none

A Company transfers millions of files a day between their servers. A programmer for the company has created a program that indexes and verifies the integrity of each file as it is replicated between servers. The programmer would like to use the fastest algorithm to ensure integrity. Which of the following should the programmer use?

Select the correct answer(s).

(0/0)

244341

120

none

A system administrator is conducting baseline audit and determines that a web server is missing several critical updates. Which of the following actions should the administrator perform first to correct the issue?

Select the correct answer(s).

(0/0)

244342

120

none

The IT department has been tasked with reducing the risk of sensitive information being shared with unauthorized entities from computers it is saved on, without impeding the ability of the employees to access the internet. Implementing which of the following would be the best way to accomplish this objective?

Select the correct answer(s).

(0/0)

244343

120

none

A server crashes at 6 pm. Senior management has determined that data must be restored within two hours of a server crash. Additionally, a loss of more than one hour worth of data is detrimental to the company’s financial well-being. Which of the following is the RTO?

Select the correct answer(s).

(0/0)

244344

120

none

To mitigate the risk of intrusion, an IT Manager is concerned with using secure versions of protocols and services whenever possible. In addition, the security technician is required to monitor the types of traffic being generated. Which of the following tools is the technician MOST likely to use?

Select the correct answer(s).

(0/0)

244345

120

none

An administrator is implementing a new management system for the machinery on the company’s production line. One requirement is that the system only be accessible while within the production facility. Which of the following will be the MOST effective solution in limiting access based on this requirement?

Select the correct answer(s).

(0/0)

244346

120

none

A risk assessment team is concerned about hosting data with a cloud service provider (CSP) which of the following findings would justify this concern?

Select the correct answer(s).

(0/0)

244347

120

none

A company wishes to prevent unauthorized employee access to the data center. Which of the following is the MOST secure way to meet this goal?

Select the correct answer(s).

(0/0)

244348

120

none

A company hosts a web server that requires entropy in encryption initialization and authentication. To meet this goal, the company would like to select a block cipher mode of operation that allows an arbitrary length IV and supports authenticated encryption. Which of the following would meet these objectives?

CompTIA Security+ Cert Prep #58 (25)

Question 1 of 1

Time Left

While responding to an incident on a Linux server, the administrator needs to disable unused services. Which of the following commands can be used to see processes that are listening on a TCP port?

Select the correct answer(s).

(0/0)

A bank chief information security officer (CISO) is responsible for a mobile banking platform that operates natively on iOS and Andriod. Which of the following security controls helps protect the associated publicly accessible API endpoints?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Which of the following attacks initiates a connection by sending specially crafted packets in which multiple TCP flags are set to 1?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

A system administrator is conducting baseline audit and determines that a web server is missing several critical updates. Which of the following actions should the administrator perform first to correct the issue?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

A server crashes at 6 pm. Senior management has determined that data must be restored within two hours of a server crash. Additionally, a loss of more than one hour worth of data is detrimental to the company’s financial well-being. Which of the following is the RTO?

Select the correct answer(s).

(0/0)

To mitigate the risk of intrusion, an IT Manager is concerned with using secure versions of protocols and services whenever possible. In addition, the security technician is required to monitor the types of traffic being generated. Which of the following tools is the technician MOST likely to use?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

A risk assessment team is concerned about hosting data with a cloud service provider (CSP) which of the following findings would justify this concern?

Select the correct answer(s).

(0/0)

A company wishes to prevent unauthorized employee access to the data center. Which of the following is the MOST secure way to meet this goal?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Results

Correct

0

Incorrect

0

Skipped

0

Overall Percentage

0%

Rate Quiz