CompTIA Security+ Quiz Questions and Answers

Copies of lost private encryption keys can be retrieved from a key database by:

A. Backup Operators

B. Recovery Agents

C. Power Users

D. End Users

Answers

1. A
2. B
3. C
4. D

What acronym refers to a firewall controlling access to a web server?

A. WAF

B. DNS

C. MoR

D. WAP

Answers

1. A
2. B
3. C
4. D

Which password is the most secure and complex?

A.19$s7@2Rb0y@

B. C65108XjwDE

C. GO1Y7C6DXM

D.k3Qdo3tk66l!

Answers

1. A
2. B
3. C
4. D

What is the SCP protocol used for?

A. Secure File Transfer

B. Network Addressing

C. Sending Email Messages

D. Directory Access

Answers

1. A
2. B
3. C
4. D

What is the function of archive bit?

A. Generates A Copy Of The File

B. Setting File Attribute To Read-Only

C. Indicates Whether A File Has Been Modified Since Last Backup

D. Search Indexing

Answers

1. A
2. B
3. C
4. D

A fraudulent email requesting the recipient to reveal sensitive information such as username and password later used by a hacker for identity theft is known as:

A. Boot Virus

B. Macro Virus

C. File Infector

D. Logic Bomb

E. Phishing

F. Social Engineering

Answers

1. A & B
2. B & C
3. C & D
4. D & E
5. E & F

What ensures the privacy of a VPN connection?

A. VPN Connector

B. VPN Concentrator

C. Load Balancer

D. Hardware Firewall

Answers

1. A
2. B
3. C
4. D

What functionality allows a DLP system to fulfil its role?

A. Content Inspection

B. Loop Protection

C. Environmental Monitoring

D. Loop Detection

Answers

1. A
2. B
3. C
4. D

What is the name of a storage solution used to retain copies of private encryption keys?

A. Key Generator

B. Key Escrow

C. Key Log

D. Key History

Answers

1. A
2. B
3. C
4. D

What port does DNS run on?

A. 53

B. 230

C. 442

D. 52

Answers

1. A
2. B
3. C
4. D

What port does Lightweight Directory Access Protocol (LDAP) run on?

A. 52

B. 40

C. 389

D. 695

Answers

1. A
2. B
3. C
4. D

Which answer lists an example method for passive test of security controls?

A. Cross Site Script

B. Vulnerability Scan

C. Key Generator

D. Penetration Test

Answers

1. A
2. B
3. C
4. D

A post it note with a password kept on sigh in a user’s cubicle is a violation of which policy?

A. Clean Desk Policy

B. Data Labelling Policy

C. User Account Policy

D. Acceptable Use Policy (AUP)

Answers

1. A
2. B
3. C
4. D

Which answers meets the requirement of multi-factor authentication?

A. Password & Biometric Scan

B. Fingerprint Scan

C. Username & Password

D. Identification Badge

Answers

1. A
2. B
3. C
4. D

Which of the following answers apply to a smurf attack?

A. IP Spoofing & DDoS

B. MITM Attack & Vulcanbot

C. Polymorphic Malware & Memory Resident virus

D. Overwrite Virus & Trojan

Answers

1. A
2. B
3. C
4. D

What two factors are considered important for creating strong passwords?

A. Password Age

B. Password History

C. Password Length

D. Password Complexity

Answers

1. A & B
2. B & C
3. C & D

A concept of effective security posture employing multiple tools and different techniques to slow down an attacker known as:

A. Access Driving

B. Password Recovery

C. Layered Security

D. Vulnerability Scanning

E. Defense In Depth

Answers

1. A & B
2. A & C
3. C & E
4. D & E

What type of system can be compromised through phreaking?

A. ATX

B. Web Server

C. BIOS

D. PBX

Answers

1. A
2. B
3. C
4. D

What action(s) can be taken by a passive Intrusion Detection System (IDS)?

A. Closing Down Connection

B. Terminating Process

C. Sending An Alert

D. Firewall Reconfiguration

E. Logging

Answers

1. A & B
2. B & C
3. C & D
4. C & E
5. D & B
6. D & E

What is the practice of using a telephone system to manipulate the user into disclosing confidential information?

A. Pretexting

B. Baiting

C. Vishing

D. Tailgating

E. Whaling

Answers

1. A
2. B
3. C
4. D
5. E

What is allowing a connection through as firewall known as creating?

A. Tunnel

B. Access Point (AP)

C. Entry

D. Exception

Answers

1. A
2. B
3. C
4. D

What refers to a privacy-related security risk connected with public sharing of pictures taken with smartphones?

A. Weak Passwords

B. Cryptovirology

C. Data Ownership

D. Embedded Geotag

Answers

1. A
2. B
3. C
4. D

What is a solution that allows you to make phone calls over a broadband Internet connection instead of typical analog telephone lines?

A. Web Server

B. VoIP

C. IPv6

D. DNS

Answers

1. A
2. B
3. C
4. D

What is an example order of volatility for a typical computer system?

A. Archival Media, Disk Files, Temporary Files, Memory Dump

B. Memory Dump, Disk Files, Temporary Files, Archival Media

C. Temporary Files, Memory Dump, Archival Media, Disk Files

D. Memory Dump, Temporary Files, Disk Files, Archival Media

Answers

1. A
2. B
3. C
4. D

Which answer(s) list the characteristic features of the Mandatory Access Control (MAC) model?

A. Access To Resources Based On User Identity

B. Users Are Not Allowed To Change Access Policies At Their Own Discretion

C. Every Resource Has A Sensitivity Label Matching A Clearance Level Assigned To A User

D. Labels And Clearance Levels Can Only Be Applied And Changed By An Administrator

Answers

1. A & B
2. B & C
3. B, C & D
4. C & D

What term relates closely to the concept of residual risk?

A. Virtualization

B. Risk Deterrence

C. Firewall Rules

D. Risk Acceptance

Answers

1. A
2. B
3. C
4. D

A path or tool allowing an attacker to gain unauthorized access to a system or network is known as:

A. Rootkit

B. Nmap

C. Threat Vector

D. ClickJack

Answers

1. A
2. B
3. C
4. D

What software tool is used for monitoring and examining contents of the network traffic?

A. Port Scanner

B. Vulnerability Scanner

C. Protocol Analyzer

D. NetworkMiner

Answers

1. A
2. B
3. C
4. D

Block ciphers work by encrypting each plaintext digit one at a time:

A. True

B. False

Answers

1. A
2. B
3. A & B