SEC 110 final (300 questions) – Flashcards

Unlock all answers in this set

Unlock answers
question
(T/F) The first step in a vulnerability assessment is to determine the assets that need to be protected.
answer
True
question
What may be defined as the components required to identify, analyze, and contain an incident?
answer
Incident response
question
The IEEE 802.15.1-2005 standard is based on what version of the Bluetooth specifications?
answer
Bluetooth v1.2
question
(T/F) Because the XSS is a widely known attack, the number of Web sites that are vulnerable is very small.
answer
False
question
What type of system security malware allows for access to a computer, program, or service without authorization?
answer
Backdoor
question
What is the most common type of P2P network?
answer
Bittorrent
question
(T/F) A due process policy is a policy that defines the actions users may perform while accessing systems and networking equipment.
answer
False
question
What layer of the OSI model is responsible for permitting two parties on a network to hold ongoing communications across the network?
answer
Session
question
(T/F) Because of the weaknesses of WEP, it is possible for an attacker to identify two packets derived from the same IV.
answer
True
question
(T/F) Because of how a rootkit replaces operating system files, it can be difficult to remove a rootkit from a system.
answer
True
question
What can be enabled to prevent a mobile device from being used until a user enters the correct passcode, such as a pin or password?
answer
‚ÄčEnable a lock screen
question
(T/F) TCP/IP uses its own five-layer architecture that includes Network Interface, Internet, Control, Transport, and Application.
answer
False
question
What type of trust model has a single CA that acts as a facilitator to interconnect all other CAs?
answer
bridge trust
question
Script kiddies acquire which item below from other attackers to easily craft an attack:
answer
Exploit kit
question
Data that is in an unencrypted form is referred to as which of the following?
answer
Cleartext
question
The simplest type of stream cipher, one in which one letter or character is exchanged for another, is known as what?
answer
substitution
question
An early networking device that functioned at layer 1 of the OSI model and added devices to a single segment is known as which of the following choices?
answer
hub
question
What is another term used for a security weakness?
answer
vulnerability
question
What kind of networking device forwards packets across different computer networks by reading destination addresses?
answer
router
question
‚ÄčWhich of the following is not a component of an IP packet that a firewall rule can use for filtering purposes?
answer
Intent
question
(T/F) The first phase of the security policy cycle involves a vulnerability assessment.
answer
True
question
(T/F) Bluetooth devices are not backward compatible with previous versions.
answer
False
question
An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:
answer
Session hijacking
question
‚ÄčWhat term is used to describe the operation of stockrooms where mobile devices are stored prior to their dispersal to employees?
answer
‚ÄčInventory control
question
In a UAC prompt, what color is used to indicate the lowest level of risk?
answer
gray
question
What type of access point is configured by an attacker in such a manner that it mimics an authorized access point?
answer
evil twin
question
What kind of attack allows for the construction of LDAP statements based on user input statements, which can then be used to access the LDAP database or modify the database's information?
answer
LDAP injection
question
What is the end result of a penetration test?
answer
penetration test report
question
What kind of server connects a remote system through the Internet to local serial ports using TCP/IP?
answer
Serial server
question
(T/F) A hash algorithm is designed to create a hash that represents the contents of a set of data that can later be decrypted.
answer
False
question
(T/F) XSS attacks occur when an attacker takes advantage of web applications that accept user input without validating it and then present it back to the user.‚Äč
answer
True
question
What concept below is at the very heart of information security?
answer
risk
question
How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?
answer
DNS poisoning
question
(T/F) Software keyloggers are programs that silently capture all keystrokes, including passwords and sensitive information.
answer
True
question
Select below the term that is used to describe individuals who want to attack computers yet lack the knowledge of computers and networks needed to do so:
answer
Script kiddies
question
HTML uses which option below within embedded brackets () causing a web browser to display text in a specific format?
answer
tags
question
(T/F) Keyed entry locks are much more difficult to defeat than deadbolt locks.
answer
False
question
‚ÄčWhich of the following selections is not one of the features provided by a typical MDM?
answer
‚ÄčTrack stolen devices
question
After the DES cipher was broken and no longer considered secure, what encryption algorithm was made as its successor?
answer
3DES
question
A person's fundamental beliefs and principals, which are used to define what is good, and how to distinguish right from wrong, are collectively called a person's:
answer
Values
question
Select below the technology that can be used to examine content through application-level filtering:
answer
Web security gateway
question
How many different Microsoft Windows file types can be infected with a virus?
answer
70
question
Select below the layer of the OSI model at which the route a packet is to take is determined, and the addressing of the packet is performed.
answer
Network
question
A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?
answer
Stateful packet filtering
question
(T/F) Geolocation is the identification of the location of a person or object using technology, and can be used as part of an authentication method.‚Äč
answer
True
question
Malware that locks or prevents a device from functioning properly until a fee has been paid is known as:‚Äč
answer
Ransomware
question
If using the MD5 hashing algorithm, what is the length to which each message is padded?
answer
512 bits
question
A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as:
answer
Separation of duties
question
Instead of using a key or entering a code to open a door, a user can use an object, such as an ID badge, to identify themselves in order to gain access to a secure area. What term describes this type of object?
answer
physical token
question
(T/F) Self-encrypting HDD is commonly found in copiers and multifunction printers as well as point-of-sale systems used in government, financial, and medical environments.
answer
True
question
A snapshot of the current state of a computer that contains all current settings and data is known as what option below:
answer
system image
question
The comparison of the present state of a system to its baseline is known as what?
answer
Baseline reporting
question
Cipher locks are sometimes combined with what type of sensor, which uses infrared beams that are aimed across a doorway?
answer
Tailgate sensors
question
Choose the SQL injection statement example below that could be used to find specific users:
answer
whatever' OR full_name LIKE '%Mia%'
question
Cryptography that attempts to use the microscopic behaviors of objects to develop and share keys while also detecting eavesdropping is known as what type of cryptography?
answer
Quantum cryptography
question
Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:
answer
Kerberos
question
What kind of policy outlines how organizations use personal information it collects?
answer
privacy
question
Multiple sectors on a disk, when combined, are referred to as a:
answer
cluster
question
At what stage can a certificate no longer be used for any type of authentication?
answer
expiration
question
‚ÄčWhat type of filtering utilizes a an analysis of the content of spam messages in comparison to neutral / non-spam messages in order to make intelligent decisions as to what should be considered spam?
answer
‚ÄčBayesian filtering
question
A web server must be accessible to untrusted outside users. What can be done to isolate this host and any additional hosts with similar requirements from more secured hosts on a network?
answer
Create a DMZ, add necessary hosts
question
What is the name of the cryptographic hash function that has international recognition and has been adopted by standards organizations such as the ISO, that creates a digest of 512 bits and will not be subject to patents?
answer
Whirlpool
question
‚ÄčSelect below the secure alternative to the telnet protocol:
answer
SSH
question
‚ÄčWhich hashing algorithm below is used with NTLMv2's Hashed Message Authentication Code?
answer
MD5
question
‚ÄčWhat MAC limiting configuration setting allows for MAC addresses to be automatically learned and stored along with any addresses that were learned prior to using the configuration setting?
answer
Sticky
question
‚ÄčWhat federated identity management (FIM) relies on token credentials?
answer
OAuth
question
What information security position reports to the CISO and supervises technicians, administrators, and security staff?
answer
manager
question
Under which law are health care enterprises required to guard protected health information and implement policies and procedures whether it be in paper or electronic format?
answer
HIPAA
question
What is the maximum number of characters that can exist within an SSID name?
answer
32
question
A secret combination of letters, numbers, and/or characters that only the user should have knowledge of, is known as a:
answer
password
question
In what type of server cluster can services fail over from downed servers to functional servers?
answer
symmetric server
question
The management in your corporate office want to group users on the network together logically even though they are attached to separate network switches. How can this be done?
answer
Create a VLAN and add the users' computers / ports to the VLAN.
question
Which of the following is not a benefit that can be provided by using IP telephony?‚Äč
answer
‚ÄčDecreased network utilization
question
When a private network uses a single public IP address, and each outgoing TCP packet uses a different port to allow for proper translation, what networking technology is in use?
answer
NAT
question
Which network address below is not a private IP address network?
answer
172.63.255.0
question
(T/F) Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.
answer
False
question
On what principle did Julius Caesar's cyptographic messages function?
answer
Each alphabetic letter was shifted three places down in the alphabet
question
Which type of network below uses a direct connection between users, and involves each device simultaneously acting as a client and a server?
answer
P2P
question
The X.500 standard defines a protocol for a client application to access an X.500 directory known as which of the following options?
answer
DAP
question
The goal of what type of threat evaluation is to better understand who the attackers are, why they attack, and what types of attacks might occur?
answer
threat modeling
question
What type of cryptographic algorithm is considered to be a one-way algorithm, in that its contents can't be used to reveal the original set of data?
answer
hash
question
A system such as a printer, smart TV, or HVAC controller, typically uses an operating system on what is called a:
answer
‚ÄčEmbedded system
question
(T/F) Passwords provide strong protection.
answer
False
question
The use of one authentication credential to access multiple accounts or applications is referred to
answer
Single Sign On
question
What kind of software program delivers advertising content in a manner that is unexpected and unwanted by the user, and is typically included in malware?
answer
Adware
question
What country is now the number one source of attack traffic?
answer
Indonesia
question
(T/F) Mobile devices such as laptops are stolen on average once every 20 seconds.‚Äč
answer
False
question
A metallic enclosure that prevents the entry or escape of an electromagnetic field is known as a:
answer
Faraday cage
question
The process of identifying exposure to threats, creating preventive and recovery procedures, and then testing them to determine if they are sufficient, is known as:
answer
Business continuity planning and testing
question
During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?
answer
authentication request
question
What cryptographic method, first proposed in the mid-1980s, makes use of sloping curves instead of large prime numbers?
answer
ECC
question
‚ÄčA service contract between a vendor and a client that specifies what services will be provided, the responsibilities of each party, and any guarantees of service, is known as a:
answer
‚ÄčService Level Agreement (SLA)
question
What kind of data can be lost when a computer is turned off?
answer
Volatile
question
What is the name for a standard or checklist against which systems can be evaluated and audited for their level of security (security posture)?
answer
baseline
question
‚ÄčMobile Device Management systems that allow users to store usernames and passwords within a device are said to be using:
answer
‚ÄčCredential management
question
Which of the following is not one of the types of settings that would be included in a Microsoft Windows security template?
answer
Resolution settings
question
(T/F) If TCP port 20 is open, then an attacker can assume that FTP is being used.
answer
True
question
How can an administrator keep devices powered when power is interrupted?
answer
uninterruptible power supply
question
‚ÄčWhat RAID type below utilizes parity data across all drives instead of using a separate drive to hold parity error checking information?
answer
‚ÄčRAID 5
question
A series of instructions that can be grouped together as a single command and are often used to automate a complex set of tasks or a repeated series of tasks are known as:
answer
A macro
question
An access point that is unauthorized and allows an attacker to bypass network security configurations is considered to be what type of access point?
answer
rogue
question
The process by which keys are managed by a third party, such as a trusted CA, is known as?
answer
Key escrow
question
Slave devices that are connected to a piconet and are sending transmissions are known as what?
answer
Active slave
question
Which of the following is not one of the four methods for classifying the various types of malware?‚Äč
answer
Source
question
The physical procedure whereby an unauthorized person gains access to a location by following an authorized user is known as?
answer
Tailgating
question
What transport protocol is used by Windows operating systems to allow applications on separate computers to communicate over a LAN?
answer
NetBIOS
question
What portion of the HTTP packet consists of fields that contain information about the characteristics of the data being transmitted?
answer
HTTP header
question
‚ÄčSelect below the option that is not one of the SD format card families:
answer
Extreme Capacity (SDXC)
question
In what type of cloud computing does the customer have the highest level of control?
answer
Cloud Infrastructure as a Service
question
What term below is used to describe a means of gathering information for an attack by relying on the weaknesses of individuals?
answer
Social engineering
question
(T/F) Most organizations follow a three-phase cycle in the development and maintenance of a security policy.
answer
True
question
Which term below describes a component or entity in a system which, if it no longer functions, will disable an entire system?
answer
single point of failure
question
Which of the three protections ensures that only authorized parties can view information?
answer
Confidentiality
question
What term is used to describe a documentation of control over evidence, which is used to ensure that no unauthorized person was given the opportunity to corrupt the evidence?
answer
chain of custody
question
When setting up a server virtualization environment, what component below manages the virtual machine operating systems and supports one or more guest systems?
answer
hypervisor
question
The PC Card and CardBus devices are being replaced by what technology?
answer
ExpressCard
question
When using SNMPv1 or SNMPv2, what piece of information is needed to view information from an agent?
answer
community string
question
A user or a process functioning on behalf of the user that attempts to access an object is known as the:
answer
subject
question
‚ÄčWhat term below describes a prearranged purchase or sale agreement between a government agency and a business?
answer
‚ÄčBlanket Purchase Agreement (BPA)
question
(T/F) Spreading similarly to a virus, a worm inserts malicious code into a program or data file.
answer
False
question
A key that is generated by a symmetric cryptographic algorithm is said to be a:
answer
private key
question
(T/F) Because PEAP can be vulnerable to specific types of attacks, Cisco now recommends that users migrate to a more secure EAP than PEAP.
answer
False
question
A location that has all the equipment installed but does not have active Internet or telecommunications facilities, and does not have current backups of data, is an example of a:
answer
warm site
question
The default root directory of the Microsoft Internet Information Services (IIS) Web server is located at which directory below?
answer
C:Inetpub wwwroot
question
What type of attack involves an attacker stealing a file containing password digests and comparing the digests with digests created by the attacker?
answer
offline cracking
question
(T/F) Simply using a mobile device in a public area can be considered a risk.
answer
True
question
What term is used to describe a loose network of attackers, identity thieves, and financial fraudsters?
answer
Cybercriminals
question
(T/F) Security is enhanced by subnetting a single network into multiple smaller subnets in order to isolate groups of hosts.
answer
True
question
What is the term for a network set up with intentional vulnerabilities?
answer
honeynet
question
Which of the following choices is not one of the four types of packets used by EAP?
answer
Error
question
Computer code that is typically added to a legitimate program but lies dormant until it is triggered by a specific logical event is known as a?
answer
logic bomb
question
(T/F) Defense in depth, or layered security, involves the use of multiple types of network hardware within a network.‚Äč
answer
True
question
(T/F) The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.
answer
False
question
To date, the single most expensive malicious attack occurred in 2000, which cost an estimated $8.7 billion. What was the name of this attack?
answer
Love Bug
question
(T/F) Vulnerability scans are usually performed from outside the security perimeter.
answer
False
question
A written document that states how an organization plans to protect the company's information technology assets is a:
answer
security policy
question
(T/F) Steganography hides the existence of data within images by dividing and hiding portions of a file within the image.
answer
True
question
‚ÄčA list of the available nonkeyboard characters can be seen in Windows by opening what utility?
answer
charmap.exe
question
(T/F) Digital signatures actually only show that the public key labeled as belonging to the person was used to encrypt the digital signature.
answer
True
question
(T/F) The vulnerability discovered in IPsec in early 2014 was nicknamed Heartbleed, due to an issue with a heartbeat extension in the protocol.
answer
False
question
(T/F) Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability.
answer
True
question
The capability for devices to exchange low-level control messages is provided by what protocol below?
answer
ICMP
question
What can be defined as the study of what a group of people understand to be good and right behavior and how people make those judgments?
answer
Ethics
question
What security goal do the following common controls address: hashing, digital signatures, certificates, nonrepudiation tools?‚Äč
answer
Integrity
question
The deployment of this technology below can be used as a defense against DoS and DDoS SYN flood attacks:
answer
flood guard
question
(T/F) A Hardware Security Module (HSM) is essentially a chip on the motherboard of the computer that provides cryptographic services.
answer
False
question
Select the EAP protocol supported by WPA2 Enterprise that securely tunnels any credential form for authentication using TLS:
answer
EAP-FAST
question
The standard TCP/IP protocol uses IP addresses which are how many bytes in length?
answer
4
question
The asymmetric cryptography algorithm most commonly used is:
answer
RSA
question
A service contract between a vendor and a client that specifies what services will be provided, the responsibilities of each party, and any guarantees of service, is known as:
answer
service level agreement
question
(T/F) Token credentials can be revoked at any time by the user without affecting other token credentials issued to other sites.
answer
True
question
(T/F) APs use antennas that radiate a signal in all directions.
answer
True
question
What type of undocumented yet benign hidden feature launches after a special set of commands, key combinations, or mouse clicks, and was no longer included in Microsoft software after the start of their Trustworthy Computing initiative?
answer
Easter egg
question
One of the armored virus infection techniques utilizes encryption to make virus code more difficult to detect, in addition to separating virus code into different pieces and inject these pieces throughout the infected program code. What is the name for this technique?
answer
Swiss cheese
question
A framework for all of the entities involved in digital certificates for digital certificate management is known as:
answer
Public key infrastructure
question
Instead of trying to make a match, modern AV techniques are beginning to use a type of detection that attempts to identify the characteristics of a virus. What is the name for this technique?
answer
heuristic detection
question
(T/F) IEEE 802.1x is commonly used on wireless networks.
answer
True
question
A Bluetooth attack in which the attacker accesses unauthorized information from a wireless device using a Bluetooth connection, is known as?
answer
Bluesnarfing
question
What type of cryptographic algorithm can be used to ensure the integrity of a file's contents?
answer
Hashing
question
What type of monitoring compares network traffic, activities, transactions, or behavior against a database of known attack patterns?
answer
Signature
question
‚ÄčWhat term below describes a hand-held mobile device that was intended to replace paper systems, and typically included an appointment calendar, an address book, a "to-do" list, a calculator, and the ability to record limited notes?
answer
‚ÄčPersonal digital assistant (PDA)
question
Entries within a Directory Information Base are arranged in a tree structure called the:
answer
DIT
question
In information security, an example of a threat agent can be ____.
answer
All of the above
question
(T/F) DLP agent sensors are installed on each host device, and monitor for actions such as printing, copying to a USB flash drive, and burning to a CD or DVD.
answer
True
question
What type of attack is targeted against a smaller group of specific individuals, such as the major executives working for a manufacturing company?‚Äč
answer
‚ÄčWatering Hole
question
The NTRUEncrypt cryptographic algorithm makes use of which of the following cryptographic techniques?
answer
lattice-based
question
Which type of attack below is similar to a passive man-in-the-middle attack?
answer
replay
question
In cryptography, which of the five basic protections ensures that the information is correct and no unauthorized person or malicious software has altered that data?
answer
Integrity
question
According to the Federal Bureau of Investigation (FBI), what percentage of crime committed today leaves behind digital evidence that can be retrieved via computer forensics?
answer
85
question
Which of the three Cloud computing service models allows a customer to access software provided by a vendor using a web browser, without any installation, configuration, upgrading, or management from the user?
answer
Cloud Software as a Service
question
On a compromised computer, you have found that a user without administrative privileges was able to perform a task limited to only administrative accounts. What type of exploit has occurred?‚Äč
answer
‚ÄčPrivilege escalation
question
What device operates at the Network Layer (layer 3) of the OSI model and forwards packets across computer networks?
answer
router
question
‚ÄčSelect below the decentralized open-source FIM that does not require specific software to be installed on the desktop:
answer
OpenID
question
What cryptographic transport algorithm is considered to be significantly more secure than SSL?
answer
TLS
question
(T/F) Workgroup switches must work faster than core switches.
answer
False
question
Of the three types of mutating malware, what type changes its internal code to one of a set number of predefined mutations whenever it is executed?‚Äč
answer
Oligomorphic malware
question
What type of malware is heavily dependent on a user in order to spread?
answer
virus
question
Using what mechanism below can the non-repudiation of an e-mail and it's content be enforced?
answer
Asymmetric encryption
question
Which term below is frequently used to describe the tasks of securing information that is in a digital format?
answer
information security
question
Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database?
answer
whatever' AND email IS NULL; --
question
Select below the hashing algorithm that takes plaintext of any length and generates a digest 128 bits in length:
answer
MD2
question
What are values that are attributed to a system of beliefs that help the individual distinguish right from wrong called?
answer
Morals
question
To what specific directory are users generally restricted to on a web server?
answer
root
question
(T/F) RAM slack can contain any information that has been created, viewed, modified, downloaded, or copied since the computer was last booted.
answer
True
question
‚ÄčWhat PIN is considered to be the most commonly used PIN?
answer
‚Äč1234
question
What kind of biometrics utilizes a person's unique physical characteristics for authentication, such as fingerprints or unique characteristics of a person's face?
answer
Standard biometrics
question
A spiked collar that extends horizontally for up to 3 feet from the pole is an example of what kind of technology?
answer
Anti-climb
question
According to the U.S. Bureau of Labor Statistics, what percentage of growth is the available job outlook supposed to reach by the end of the decade?
answer
22
question
What access control model below is considered to be the most restrictive access control model, and involves assigning access controls to users strictly according to the custodian?
answer
Mandatory Access Control
question
Policies that include statements regarding how an employee's information technology resources will be addressed are part of a:
answer
security-related human resource policy
question
When using AES-CCMP, the AES-256 bit key requires how many rounds?‚Äč
answer
13
question
Mobile devices with global positioning system (GPS) abilities typically make use of:‚Äč
answer
‚ÄčLocation services
question
What authentication service commonly used on UNIX devices involves communicating user authentication information to a centralized server?
answer
TACACS
question
What term below is used to describe an attack that sends unsolicited messages to Bluetooth enabled devices?
answer
Bluejacking
question
What is the name of the open source asymmetric cryptography system that runs on Windows, UNIX, and Linux systems, and is compatible with PGP?
answer
GPG
question
Which encryption protocol below is used in the WPA2 standard?
answer
AES-CCMP
question
(T/F) A QR code can store website URLs, plain text, phone numbers, e-mail addresses, or virtually any alphanumeric data up to 4296 characters.‚Äč
answer
True
question
(T/F) Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.
answer
True
question
An administrator running a port scan wants to ensure that no processes are listening on port 23. What state should the port be in?
answer
closed port
question
A document that describes in detail how a CA uses and manages certificates, as well as how end users register for a digital certificate, is known as?
answer
Certificate practice statement (CPS)
question
What is the name for a cumulative package of all patches and hotfixes as well as additional features up to a given point?
answer
service pack
question
In order to minimize vulnerabilities in software, code should be subject to and analyzed while it is being written in what option below?
answer
code review
question
The security protection item that ensures that the individual is who they claim to be (the authentic or genuine person) and not an imposter is known as?
answer
Authentication
question
What is the name for an organization that receives, authenticates, and processes certificate revocation requests?
answer
Registration Authority
question
What is the name for the code that can be executed by unauthorized users within a software product?
answer
attack surface
question
Which tester has an in-depth knowledge of the network and systems being tested, including network diagrams, IP addresses, and even the source code of custom applications?
answer
white box
question
Using technology to search for computer evidence of a crime in order to retrieve information, even if it has been altered or erased, that can be used in pursuit of an attacker or criminal is an example of:
answer
Computer forensics
question
What is the name of the process that takes a snapshot of the current security of an organization?
answer
vulnerability appraisal
question
An independently rotating large cup affixed to the top of a fence prevents the hands of intruders from gripping the top of a fence to climb over it. What is the name for this technology?
answer
roller barrier
question
(T/F) A block cipher works on a single character at a time, and is faster than a stream cipher.
answer
False
question
(T/F) Digital certificates cannot be used to identify objects other than users.
answer
False
question
The ____ Act requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information.
answer
Gramm-Leach-Bliley
question
What language below is designed to display data, with a primary focus on how the data looks?
answer
HTML
question
Due to the potential impact of changes that can affect all users in a organization, and considering that security vulnerabilities can arise from uncoordinated changes, what should an organization create to oversee changes?
answer
change management team
question
A QR code can't contain which of the following items directly?
answer
A video
question
‚ÄčSelect below the type of computing device that uses a limited version of the Linux operating system and uses a web browser with an integrated media player:
answer
Web-based
question
What SD card family can be used to transmit pictures over a wireless network to a laptop hard drive or wireless printer?‚Äč
answer
‚ÄčSecure Digital Input Output (SDIO)
question
A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):
answer
ACL
question
Which layer of the OSI model contains TCP protocol, which is used for establishing connections and reliable data transport between devices?
answer
Transport Layer
question
Piconets in which connections exist between different piconets are known as a:
answer
scatternet
question
Passwords that are transmitted can be captured by what type of software?
answer
protocol analyzer
question
(T/F) An evil twin AP is an AP that is set up by an attacker to mimic an authorized AP‚Äč, with the intent to redirect client devices.
answer
False
question
Which option below is responsible for the issuing of EAP request packets?
answer
authenticator
question
A load balancer that works with the File Transfer Protocol is operating at what layer of the OSI model?
answer
‚ÄčLayer 4
question
(T/F) A shield icon warns users if they attempt to access any feature that requires UAC permission.
answer
True
question
What is the term used for a device that requests permission from an authenticator to join a network?‚Äč
answer
Supplicant
question
(T/F) Today's software attack tools do not require any sophisticated knowledge on the part of the attacker.
answer
True
question
Despite its promise to dramatically impact IT, cloud computing raises significant security concerns.
answer
True
question
‚ÄčA laptop may have multiple hardware ports. Which of the following is not a typical port included on a laptop?
answer
RS232
question
How can an administrator force wireless clients to use a standard web browser to provide information, and require a user to agree to a use policy or present valid login credentials?
answer
Captive portal access point
question
Select below the type of malware that appears to have a legitimate use, but actually contains or does something malicious:
answer
Trojan
question
(T/F) Authorization and access are viewed as synonymous and in access control, they are the same step.
answer
False
question
(T/F) A macro is a series of instructions that can be grouped together as a single command.‚Äč
answer
True
question
The Google Android mobile operating system is a proprietary system, for use on only approved devices.‚Äč
answer
False
question
Select below the string of characters that can be used to traverse up one directory level from the root directory:
answer
../
question
A collection of suggestions that should be implemented are referred to as a:
answer
guideline
question
When TCP/IP was developed, the host table concept was expanded into a hierarchical name system for matching computer names and numbers using this service:
answer
DNS
question
(T/F) Public keys can be stored by embedding them within digital certificates, while private keys can be stored on the user's local system.
answer
True
question
The Temporal Key Integrity Protocol (TKIP) encryption technology increases IVs to what length?
answer
48 bits
question
What is the maximum range of most Bluetooth devices?
answer
33 ft
question
What technology enables authorized users to use an unsecured public network, such as the Internet, as if were a secure private network?
answer
VPN
question
What type of video surveillance is typically used by banks, casinos, airports, and military installations, and commonly employs guards who actively monitor the surveillance?
answer
CCTV
question
What protocol, developed by Netscape in 1994, is designed to create an encrypted data path between a client and server that could be used on any platform or operating system?
answer
SSL
question
Anti-virus products typically utilize what type of virus scanning analysis?‚Äč
answer
‚ÄčStatic analysis
question
Those who wrongfully disclose individually identifiable health information can be fined up to what amount per calendar year?
answer
$1,500,000
question
What device acts like a wireless base station in a network, acting as a bridge between wireless and wired networks?
answer
Access Point
question
When a company needs to identify mission-critical business functions and quantify the impact a loss of such functions may have on the organization in terms of it's operational and financial position, what should be performed?
answer
Business impact analysis (BIA)
question
What is the maximum effective range of a typical passive RFID tag?
answer
19
question
What language below is used to view and manipulate data that is stored in a relational database?
answer
SQL
question
(T/F) The CardBus is a 64-bit bus in the PC card form factor.
answer
False
question
Which scan examines the current security, in a passive method?
answer
vulnerability scan
question
A sensitive connection between a client and a web server uses what class of certificate?
answer
Class 2
question
What is the name for an image that consists of an evidence-grade backup because its accuracy meets evidence standards?
answer
mirror image
question
Broadcast storms can be prevented by using loop prevention technology. Which item below can be used to help prevent loops?
answer
802.1d
question
(T/F) Because of the minor role it plays, DNS is never the focus of attacks.
answer
False
question
What technology allows users to share resources stored on one site with a second site without forwarding their authentication credentials to the other site?
answer
OAuth
question
‚ÄčAn ultrabook is an example of what type of a portable computer?
answer
Subnotebook
question
What protocol below supports two encryption modes: transport and tunnel?
answer
IPSec
question
(T/F) Successful attacks on computers today consist of a single element, malicious‚Äč software programs that are created to infiltrate computers with the intent to do harm.
answer
False
question
Select below the information protection item that ensures that information is correct and that no unauthorized person or malicious software has altered that data.
answer
Integrity
question
Which of the following is not one of the functions of a digital signature?
answer
Protect the public key
question
What type of learner learns best through hands-on approaches?
answer
Kinesthetic
question
How can an area be made secure from a non-secured area via two interlocking doors to a small room?
answer
Using a mantrap
question
(T/F) IP telephony and Voice over IP (VoIP) are identical.
answer
False
question
Which type of cryptographic algorithm takes an input string of any length, and returns a string of any requested variable length?
answer
Sponge
question
Which position below is considered an entry-level position for a person who has the necessary technical skills?
answer
security technician
question
Which term below describes the art of helping an adult learn?
answer
andragogical
question
The two types of malware that require user intervention to spread are:
answer
Viruses and trojans
question
What type of cryptography uses two keys instead of just one, generating both a private and a public key?
answer
Asymmetric
question
What is the block cipher algorithm that operates on 64-bit blocks and can have a key length from 32 to 448 bits known as?
answer
Blowfish
question
A user has become compromised as a result of visiting a specific web page, without clicking on any kind of content. What type of attack has occurred?
answer
drive-by-download
question
What type of management system below can help facilitate asset tracking?
answer
‚ÄčMobile Device Management (MDM)
question
The SHA-1 hashing algorithm creates a digest that is how many bits in length?
answer
160 bits
question
Which access control model is considered to be the least restrictive?
answer
Discretionary Access Control
question
What kind of slack is created from information stored on a hard drive, which can contain remnants of previously deleted files or data?
answer
Drive file slack
question
Proximity readers utilize a special type of tag that can be affixed to the inside of an ID badge. What is the name for this type of tag?
answer
Radio Frequency Identification tag (RFID)
question
A virus that infects an executable program file is known as?
answer
program virus
question
The use of a single authentication credential that is shared across multiple networks is called:
answer
Identity management
question
Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?
answer
RADIUS
question
What proprietary EAP method developed by Cisco requires mutual authentication for WLAN encryption using Cisco client software?
answer
LEAP
question
Select below the option that represents a wearable technology:‚Äč
answer
‚ÄčGoogle Glass
question
Why is IPsec considered to be a transparent security protocol?‚Äč
answer
IPsec is designed to not require modifications of programs, or additional training, or additional client setup
question
(T/F) The CompTIA Security+ Certification is aimed at an IT security professional with the recommended background of a minimum of two years experience in IT administration, with a focus on security.
answer
True
question
Websites that group individuals and organizations into clusters or groups based on some sort of affiliation are considered to be what type of websites?
answer
social networking
question
How can a network of physical devices be grouped into logical units, regardless of what network switches they may be connected to?
answer
VLAN
question
Most portable devices, and some computer monitors, have a special steel bracket security slot built into the case, which can be used in conjunction with a:
answer
cable lock
question
Which term below describes the time it takes for a key to be pressed and then released?
answer
Dwell time
question
Select below the standard that is based on the Rijndael algorithm, and was approved by NIST in late 2000 as a replacement for DES:
answer
AES
question
What is the center of the weakness of passwords?
answer
human memory
question
What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?
answer
access control model
question
User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?
answer
Orphaned
question
Select below the TCP/IP protocol that resolves a symbolic name to its corresponding IP address using a database consisting of an organized hierarchy tree.
answer
DNS
question
The action that is taken by a subject over an object is called a(n):
answer
operation
question
Which access control model can dynamically assign roles to subjects based on a set of defined rules?
answer
Rule Based Access Control
question
(T/F) Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.
answer
True
question
What is the name for a computer or application program that intercepts user requests from the internal secure network and then processes that request on behalf of the user?
answer
proxy server
question
Because of the limitations of a hierarchical trust model, what type of trust model is used for CAs on the Internet?
answer
distributed trust
question
What type of plans include procedures to address redundancy and fault tolerance as well as data backups?
answer
Disaster recovery
question
The exchange of information among DNS servers regarding configured zones is known as:
answer
zone transfer
question
Generally considered to be the most important information security policies, what item below defines the actions a user may perform while accessing systems and networking equipment?
answer
Acceptable use policies
Get an explanation on any task
Get unstuck with the help of our AI assistant in seconds
New