CompTIA Security+ Cert Prep #62 (25)

comptia-security-cert-prep-62-25

Exit

Question 1 of 1

Time Left

244818

120

block

A security administrator would like to ensure that some members of the building’s maintenance staff are only allowed access to the facility during weekend hours. Access to the facility is controlled by badge swipe and a man trap. Which of the following options will BEST accomplish this goal?

Select the correct answer(s).

(0/0)

244819

120

none

A security manager received reports of several laptops containing confidential data stolen out of a lab environment. The lab is not a high security area and is secured with physical key locks. The security manager has no information to provide investigators related to who may have stolen the laptops. Which of the following should the security manager implement to improve legal and criminal investigations in the future?

Select the correct answer(s).

(0/0)

244820

120

none

During a Linux security audit at a local college, it was noted that members of the dean’s group were able to modify employee records in addition to modifying student records, resulting in an audit exception. The college security policy states that the dean’s group should only have the ability to modify student records. Assuming that the correct user and group ownerships are in place, which of the following sets of permissions should have been assigned to the directories containing the employee records?

Select the correct answer(s).

(0/0)

244821

120

none

An employee reports work was being completed on a company-owned laptop using a public wireless hot-spot. A pop-up screen appeared, and the user closed the pop-up. Seconds later, the desktop background was changed to the image of a padlock with a message demanding immediate payment to recover the data. Which of the following types of malware MOST likely caused this issue?

Select the correct answer(s).

(0/0)

244822

120

none

Which of the following can be mitigated with proper secure coding techniques?

Select the correct answer(s).

(0/0)

244823

120

none

Recently the desktop support group has been performing a hardware refresh and has replaced numerous computers. An auditor discovered that a number of the new computers did not have the company’s antivirus software installed on them, Which of the following could be utilized to notify the network support group when computers without the antivirus software are added to the network?

Select the correct answer(s).

(0/0)

244824

120

none

An administrator needs to protect against downgrade attacks due to various vulnerabilities in SSL/TLS. Which of the following actions should be performed? (Select TWO)

Select the correct answer(s).

(0/0)

244825

120

none

A developer needs to utilize AES encryption in an application but requires the speed of encryption and decryption to be as fast as possible. The data that will be secured is not sensitive so speed is valued over encryption complexity. Which of the following would BEST satisfy these requirements?

Select the correct answer(s).

(0/0)

244826

120

none

During a code review a software developer discovers a security risk that may result in hundreds of hours of rework. The security team has classified these issues as low risk. Executive management has decided that the code will not be rewritten. This is an example of:

Select the correct answer(s).

(0/0)

244827

120

none

A network was down for several hours due to a contractor entering the premises and plugging both ends of a network cable into adjacent network jacks. Which of the following would have prevented the network outage? (Select Two)

Select the correct answer(s).

(0/0)

244828

120

none

After disabling SSID broadcast, a network administrator still sees the wireless network listed in available networks on a client laptop. Which of the following attacks may be occurring?

Select the correct answer(s).

(0/0)

244829

120

none

A security manager is preparing the training portion of an incident plan. Which of the following job roles should receive training on forensics, chain of custody, and the order of volatility?

Select the correct answer(s).

(0/0)

244830

120

none

Virtualization that allows an operating system kernel to run multiple isolated instances of the guest is called:

Select the correct answer(s).

(0/0)

244831

120

none

Which of the following is a proprietary protocol commonly used for router authentication across an enterprise?

Select the correct answer(s).

(0/0)

244832

120

none

While responding to an incident on a new Windows server, the administrator needs to disable unused services. Which of the following commands can be used to see processes that are listening on a TCP port?

CompTIA Security+ Cert Prep #62 (25)

Question 1 of 1

Time Left

A security administrator would like to ensure that some members of the building’s maintenance staff are only allowed access to the facility during weekend hours. Access to the facility is controlled by badge swipe and a man trap. Which of the following options will BEST accomplish this goal?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Which of the following can be mitigated with proper secure coding techniques?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

An administrator needs to protect against downgrade attacks due to various vulnerabilities in SSL/TLS. Which of the following actions should be performed? (Select TWO)

Select the correct answer(s).

(0/0)

A developer needs to utilize AES encryption in an application but requires the speed of encryption and decryption to be as fast as possible. The data that will be secured is not sensitive so speed is valued over encryption complexity. Which of the following would BEST satisfy these requirements?

Select the correct answer(s).

(0/0)

During a code review a software developer discovers a security risk that may result in hundreds of hours of rework. The security team has classified these issues as low risk. Executive management has decided that the code will not be rewritten. This is an example of:

Select the correct answer(s).

(0/0)

A network was down for several hours due to a contractor entering the premises and plugging both ends of a network cable into adjacent network jacks. Which of the following would have prevented the network outage? (Select Two)

Select the correct answer(s).

(0/0)

After disabling SSID broadcast, a network administrator still sees the wireless network listed in available networks on a client laptop. Which of the following attacks may be occurring?

Select the correct answer(s).

(0/0)

A security manager is preparing the training portion of an incident plan. Which of the following job roles should receive training on forensics, chain of custody, and the order of volatility?

Select the correct answer(s).

(0/0)

Virtualization that allows an operating system kernel to run multiple isolated instances of the guest is called:

Select the correct answer(s).

(0/0)

Which of the following is a proprietary protocol commonly used for router authentication across an enterprise?

Select the correct answer(s).

(0/0)

While responding to an incident on a new Windows server, the administrator needs to disable unused services. Which of the following commands can be used to see processes that are listening on a TCP port?

Select the correct answer(s).

(0/0)

Results

Correct

0

Incorrect

0

Skipped

0

Overall Percentage

0%

Rate Quiz