CompTIA Security+ Cert Prep #23 (25)

comptia-security-cert-prep-23-25

出口

题 1 of 1

剩下的时间

240034

120

block

Which of the following can only be mitigated through the use of technical controls rather that user security training?

选择正确的答案

(0/0)

240035

120

none

The security administrator is observing unusual network behavior from a workstation. The workstation is communicating with a known malicious destination over an encrypted tunnel. A full antivirus scan, with an updated antivirus definition file, does not show any signs of infection. Which of the following has happened on the workstation?

选择正确的答案

(0/0)

240036

120

none

Which of the following types of application attacks would be used to identify malware causing security breaches that have NOT yet been identified by any trusted sources?

选择正确的答案

(0/0)

240037

120

none

Which of the following may cause Jane, the security administrator, to seek an ACL work around?

选择正确的答案

(0/0)

240038

120

none

Matt, an IT administrator, wants to protect a newly built server from zero day attacks. Which of the following would provide the BEST level of protection?

选择正确的答案

(0/0)

240039

120

none

Joe, a user, in a coffee shop is checking his email over a wireless network. An attacker records the temporary credentials being passed to Joe’s browser. The attacker later uses the credentials to impersonate Joe and creates SPAM messages. Which of the following attacks allows for this impersonation?

选择正确的答案

(0/0)

240040

120

none

How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?

选择正确的答案

(0/0)

240041

120

none

Which of the following types of logs could provide clues that someone has been attempting to compromise the SQL Server database?

选择正确的答案

(0/0)

240042

120

none

Ann, the security administrator, received a report from the security technician, that an unauthorized new user account was added to the server over two weeks ago. Which of the following could have mitigated this event?

选择正确的答案

(0/0)

240043

120

none

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?

选择正确的答案

(0/0)

240044

120

none

The security administrator is analyzing a user’s history file on a Unix server to determine if the user was attempting to break out of a rootjail. Which of the following lines in the user’s history log shows evidence that the user attempted to escape the rootjail?

选择正确的答案

(0/0)

240045

120

none

A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal?

选择正确的答案

(0/0)

240046

120

none

A vulnerability assessment indicates that a router can be accessed from default port 80 and default port 22. Which of the following should be executed on the router to prevent access via these ports? (Select TWO).

选择正确的答案

(0/0)

240047

120

none

ring a routine audit a web server is flagged for allowing the use of weak ciphers. Which of the following should be disabled to mitigate this risk? (Select TWO).

选择正确的答案

(0/0)

240048

120

none

A new web server has been provisioned at a third party hosting provider for processing credit card transactions. The security administrator runs the netstat command on the server and notices that ports 80, 443, and 3389 are in a `listening’ state. No other ports are open. Which of the following services should be disabled to ensure secure communications?

CompTIA Security+ Cert Prep #23 (25)

题 1 of 1

剩下的时间

Which of the following can only be mitigated through the use of technical controls rather that user security training?

选择正确的答案

(0/0)

选择正确的答案

(0/0)

Which of the following types of application attacks would be used to identify malware causing security breaches that have NOT yet been identified by any trusted sources?

选择正确的答案

(0/0)

Which of the following may cause Jane, the security administrator, to seek an ACL work around?

选择正确的答案

(0/0)

Matt, an IT administrator, wants to protect a newly built server from zero day attacks. Which of the following would provide the BEST level of protection?

选择正确的答案

(0/0)

选择正确的答案

(0/0)

How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?

选择正确的答案

(0/0)

Which of the following types of logs could provide clues that someone has been attempting to compromise the SQL Server database?

选择正确的答案

(0/0)

Ann, the security administrator, received a report from the security technician, that an unauthorized new user account was added to the server over two weeks ago. Which of the following could have mitigated this event?

选择正确的答案

(0/0)

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?

选择正确的答案

(0/0)

The security administrator is analyzing a user’s history file on a Unix server to determine if the user was attempting to break out of a rootjail. Which of the following lines in the user’s history log shows evidence that the user attempted to escape the rootjail?

选择正确的答案

(0/0)

A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal?

选择正确的答案

(0/0)

A vulnerability assessment indicates that a router can be accessed from default port 80 and default port 22. Which of the following should be executed on the router to prevent access via these ports? (Select TWO).

选择正确的答案

(0/0)

ring a routine audit a web server is flagged for allowing the use of weak ciphers. Which of the following should be disabled to mitigate this risk? (Select TWO).

选择正确的答案

(0/0)

选择正确的答案

(0/0)

结果

正确

0

不正确

0

跳过

0

总体百分比

0%

率 Quiz