Question 1

A company is allowing a BYOD policy for its staff. Which of the following is a best practice that can decrease the risk of users jailbreaking mobile devices?

Accepted Answer

A)  Install a corporately monitored mobile antivirus on the devices. 
B)  Prevent the installation of applications from a third-party application store. 
C)  Build a custom ROM that can prevent jailbreaking. 
D)  Require applications to be digitally signed. 
A)  Install a corporately monitored mobile antivirus on the devices. 
B)  Prevent the installation of applications from a third-party application store. 
C)  Build a custom ROM that can prevent jailbreaking. 
D)  Require applications to be digitally signed.

Question 2

A commercial cyber-threat intelligence organization observes IoCs across a variety of unrelated customers. Prior to releasing specific threat intelligence to other paid subscribers, the organization is MOST likely obligated by contracts to:

Accepted Answer

A)  perform attribution to specific APTs and nation-state actors. 
B)  anonymize any PII that is observed within the IoC data. 
C)  add metadata to track the utilization of threat intelligence reports. 
D)  assist companies with impact assessments based on the observed data. 
A)  perform attribution to specific APTs and nation-state actors. 
B)  anonymize any PII that is observed within the IoC data. 
C)  add metadata to track the utilization of threat intelligence reports. 
D)  assist companies with impact assessments based on the observed data.

Question 3

An organization wants to set up a wireless network in the most secure way. Budget is not a major consideration, and the organization is willing to accept some complexity when clients are connecting. It is also willing to deny wireless connectivity for clients who cannot be connected in the most secure manner. Which of the following would be the MOST secure setup that conforms to the organization's requirements?

Accepted Answer

A)  Enable WPA2-PSK for older clients and WPA2-Enterprise for all other clients. 
B)  Enable WPA2-PSK, disable all other modes, and implement MAC filtering along with port security. 
C)  Use WPA2-Enterprise with RADIUS and disable pre-shared keys. 
D)  Use WPA2-PSK with a 24-character complex password and change the password monthly. 
A)  Enable WPA2-PSK for older clients and WPA2-Enterprise for all other clients. 
B)  Enable WPA2-PSK, disable all other modes, and implement MAC filtering along with port security. 
C)  Use WPA2-Enterprise with RADIUS and disable pre-shared keys. 
D)  Use WPA2-PSK with a 24-character complex password and change the password monthly.

Question 4

To help prevent one job role from having sufficient access to create, modify, and approve payroll data, which of the following practices should be employed?

Accepted Answer

A)  Least privilege 
B)  Job rotation 
C)  Background checks 
D)  Separation of duties 
A)  Least privilege 
B)  Job rotation 
C)  Background checks 
D)  Separation of duties

Question 5

Which of the following impacts are associated with vulnerabilities in embedded systems? (Choose two.)

Accepted Answer

A)  Repeated exploitation due to unpatchable firmware 
B)  Denial of service due to an integrated legacy operating system. 
C)  Loss of inventory accountability due to device deployment 
D)  Key reuse and collision issues due to decentralized management. 
E)  Exhaustion of network resources resulting from poor NIC management. 
A)  Repeated exploitation due to unpatchable firmware 
B)  Denial of service due to an integrated legacy operating system. 
C)  Loss of inventory accountability due to device deployment 
D)  Key reuse and collision issues due to decentralized management. 
E)  Exhaustion of network resources resulting from poor NIC management.

Question 6

Which of the following is the main difference between an XSS vulnerability and a CSRF vulnerability?

Accepted Answer

A)  XSS needs the attacker to be authenticated to the trusted server. 
B)  XSS does not need the victim to be authenticated to the trusted server. 
C)  CSRF needs the victim to be authenticated to the trusted server. 
D)  CSRF does not need the victim to be authenticated to the trusted server. 
E)  CSRF does not need the attacker to be authenticated to the trusted server. 
A)  XSS needs the attacker to be authenticated to the trusted server. 
B)  XSS does not need the victim to be authenticated to the trusted server. 
C)  CSRF needs the victim to be authenticated to the trusted server. 
D)  CSRF does not need the victim to be authenticated to the trusted server. 
E)  CSRF does not need the attacker to be authenticated to the trusted server.

Question 7

An administrator intends to configure an IPSec solution that provides ESP with integrity protection, but not confidentiality protection. Which of the following AES modes of operation would meet this integrity-only requirement?

Accepted Answer

A)  HMAC 
B)  PCBC 
C)  CBC 
D)  GCM 
E)  CFB 
A)  HMAC 
B)  PCBC 
C)  CBC 
D)  GCM 
E)  CFB

Question 8

Which of the following is used to validate the integrity of data?

Accepted Answer

A)  CBC 
B)  Blowfish 
C)  MD5 
D)  RSA 
A)  CBC 
B)  Blowfish 
C)  MD5 
D)  RSA

Question 9

Which of the following could help detect trespassers in a secure facility? (Choose two.)

Accepted Answer

A)  Faraday cages 
B)  Motion-detection sensors 
C)  Tall, chain-link fencing 
D)  Security guards 
E)  Smart cards 
A)  Faraday cages 
B)  Motion-detection sensors 
C)  Tall, chain-link fencing 
D)  Security guards 
E)  Smart cards

Question 10

Which of the following is an asymmetric function that generates a new and separate key every time it runs?

Accepted Answer

A)  RSA 
B)  DSA 
C)  DHE 
D)  HMAC 
E)  PBKDF2 
A)  RSA 
B)  DSA 
C)  DHE 
D)  HMAC 
E)  PBKDF2

Question 11

A security analyst is hardening a web server, which should allow a secure certificate-based session using the organization's PKI infrastructure. The web server should also utilize the latest security techniques and standards. Given this set of requirements, which of the following techniques should the analyst implement to BEST meet these requirements? (Choose two.)

Accepted Answer

A)  Install an X- 509-compliant certificate. 
B)  Implement a CRL using an authorized CA. 
C)  Enable and configure TLS on the server. 
D)  Install a certificate signed by a public CA. 
E)  Configure the web server to use a host header. 
A)  Install an X- 509-compliant certificate. 
B)  Implement a CRL using an authorized CA. 
C)  Enable and configure TLS on the server. 
D)  Install a certificate signed by a public CA. 
E)  Configure the web server to use a host header.

Question 12

Which of the following security controls does an iris scanner provide?

Accepted Answer

A)  Logical 
B)  Administrative 
C)  Corrective 
D)  Physical 
E)  Detective
F) Deterrent 
A)  Logical 
B)  Administrative 
C)  Corrective 
D)  Physical 
E)  Detective
F) Deterrent

Question 13

A security auditor is testing perimeter security in a building that is protected by badge readers. Which of the following types of attacks would MOST likely gain access?

Accepted Answer

A)  Phishing 
B)  Man-in-the-middle 
C)  Tailgating 
D)  Watering hole 
E)  Shoulder surfing 
A)  Phishing 
B)  Man-in-the-middle 
C)  Tailgating 
D)  Watering hole 
E)  Shoulder surfing

Question 14

A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the individual to provide proof of identity before access can be granted. Which of the following types of attack is the caller performing?

Accepted Answer

A)  Phishing 
B)  Shoulder surfing 
C)  Impersonation 
D)  Dumpster diving 
A)  Phishing 
B)  Shoulder surfing 
C)  Impersonation 
D)  Dumpster diving

Question 15

A global gaming console manufacturer is launching a new gaming platform to its customers. Which of the following controls reduces the risk created by malicious gaming customers attempting to circumvent control by way of modifying consoles?

Accepted Answer

A)  Firmware version control 
B)  Manual software upgrades 
C)  Vulnerability scanning 
D)  Automatic updates 
E)  Network segmentation
F) Application firewalls 
A)  Firmware version control 
B)  Manual software upgrades 
C)  Vulnerability scanning 
D)  Automatic updates 
E)  Network segmentation
F) Application firewalls

Question 16

A security technician is configuring a new firewall appliance for a production environment. The firewall must support secure web services for client workstations on the 10.10.10.0/24 network. The same client workstations are configured to contact a server at 192.168.1.15/24 for domain name resolution. Which of the following rules should the technician add to the firewall to allow this connectivity for the client workstations? (Choose two.)

Accepted Answer

A)  Permit 10.10.10.0/24 0.0.0.0 -p tcp --dport 22 
B)  Permit 10.10.10.0/24 0.0.0.0 -p tcp --dport 80 
C)  Permit 10.10.10.0/24 192.168.1.15/24 -p udp --dport 21 
D)  Permit 10.10.10.0/24 0.0.0.0 -p tcp --dport 443 
E)  Permit 10.10.10.0/24 192.168.1.15/24 -p tcp --dport 53
F) Permit 10.10.10.0/24 192.168.1.15/24 -p udp --dport 53 
A)  Permit 10.10.10.0/24 0.0.0.0 -p tcp --dport 22 
B)  Permit 10.10.10.0/24 0.0.0.0 -p tcp --dport 80 
C)  Permit 10.10.10.0/24 192.168.1.15/24 -p udp --dport 21 
D)  Permit 10.10.10.0/24 0.0.0.0 -p tcp --dport 443 
E)  Permit 10.10.10.0/24 192.168.1.15/24 -p tcp --dport 53
F) Permit 10.10.10.0/24 192.168.1.15/24 -p udp --dport 53

Question 17

Due to regulatory requirements, a security analyst must implement full drive encryption on a Windows file server. Which of the following should the analyst implement on the system to BEST meet this requirement? (Choose two.)

Accepted Answer

A)  Enable and configure EFS on the file system. 
B)  Ensure the hardware supports TPM, and enable it in the BIOS. 
C)  Ensure the hardware supports VT-X, and enable it in the BIOS. 
D)  Enable and configure BitLocker on the drives. 
E)  Enable and configure DFS across the file system. 
A)  Enable and configure EFS on the file system. 
B)  Ensure the hardware supports TPM, and enable it in the BIOS. 
C)  Ensure the hardware supports VT-X, and enable it in the BIOS. 
D)  Enable and configure BitLocker on the drives. 
E)  Enable and configure DFS across the file system.

Question 18

A user needs to transmit confidential information to a third party. Which of the following should be used to encrypt the message?

Accepted Answer

A)  AES 
B)  SHA-2 
C)  SSL 
D)  RSA 
A)  AES 
B)  SHA-2 
C)  SSL 
D)  RSA

Question 19

Ann, a security analyst, wants to implement a secure exchange of email. Which of the following is the BEST option for Ann to implement?

Accepted Answer

A)  PGP 
B)  HTTPS 
C)  WPA 
D)  TLS 
A)  PGP 
B)  HTTPS 
C)  WPA 
D)  TLS

Question 20

Which of the following controls does a mantrap BEST represent?

Accepted Answer

A)  Deterrent 
B)  Detective 
C)  Physical 
D)  Corrective 
A)  Deterrent 
B)  Detective 
C)  Physical 
D)  Corrective

A company is allowing a BYOD policy for its staff. Which of the following is a best practice that can decrease the risk of users jailbreaking mobile devices?

A commercial cyber-threat intelligence organization observes IoCs across a variety of unrelated customers. Prior to releasing specific threat intelligence to other paid subscribers, the organization is MOST likely obligated by contracts to:

To help prevent one job role from having sufficient access to create, modify, and approve payroll data, which of the following practices should be employed?

Which of the following impacts are associated with vulnerabilities in embedded systems? (Choose two.)

Which of the following is the main difference between an XSS vulnerability and a CSRF vulnerability?

An administrator intends to configure an IPSec solution that provides ESP with integrity protection, but not confidentiality protection. Which of the following AES modes of operation would meet this integrity-only requirement?

Which of the following is used to validate the integrity of data?

Which of the following could help detect trespassers in a secure facility? (Choose two.)

Which of the following is an asymmetric function that generates a new and separate key every time it runs?

Which of the following security controls does an iris scanner provide?

A security auditor is testing perimeter security in a building that is protected by badge readers. Which of the following types of attacks would MOST likely gain access?

A global gaming console manufacturer is launching a new gaming platform to its customers. Which of the following controls reduces the risk created by malicious gaming customers attempting to circumvent control by way of modifying consoles?

Due to regulatory requirements, a security analyst must implement full drive encryption on a Windows file server. Which of the following should the analyst implement on the system to BEST meet this requirement? (Choose two.)

A user needs to transmit confidential information to a third party. Which of the following should be used to encrypt the message?

Ann, a security analyst, wants to implement a secure exchange of email. Which of the following is the BEST option for Ann to implement?

Which of the following controls does a mantrap BEST represent?

CompTIA A+ Certification Exam: Core 1

CompTIA A+ Certification Exam: Core 2

CompTIA Advanced Security Practitioner (CASP+) CAS-003

CompTIA Advanced Security Practitioner (CASP+) CAS-004

CompTIA Cloud Essentials+

CompTIA CySA+ Certification Exam (CS0-002)

CompTIA Cloud+ (CV0-002)

CompTIA Cloud+

CompTIA IT Fundamentals

CompTIA Network+

CompTIA Project+

CompTIA PenTest+ Certification Exam

CompTIA Server+

CompTIA Server+ Certification Exam

CompTIA Security+ 2021

CompTIA CTT+ Essentials

CompTIA Linux+

Filters

Exam 15: CompTIA Security+

A company is allowing a BYOD policy for its staff. Which of the following is a best practice that can decrease the risk of users jailbreaking mobile devices?

A commercial cyber-threat intelligence organization observes IoCs across a variety of unrelated customers. Prior to releasing specific threat intelligence to other paid subscribers, the organization is MOST likely obligated by contracts to:

To help prevent one job role from having sufficient access to create, modify, and approve payroll data, which of the following practices should be employed?

Which of the following impacts are associated with vulnerabilities in embedded systems? (Choose two.)

Which of the following is the main difference between an XSS vulnerability and a CSRF vulnerability?

An administrator intends to configure an IPSec solution that provides ESP with integrity protection, but not confidentiality protection. Which of the following AES modes of operation would meet this integrity-only requirement?

Which of the following is used to validate the integrity of data?

Which of the following could help detect trespassers in a secure facility? (Choose two.)

Which of the following is an asymmetric function that generates a new and separate key every time it runs?

Which of the following security controls does an iris scanner provide?

A security auditor is testing perimeter security in a building that is protected by badge readers. Which of the following types of attacks would MOST likely gain access?

A global gaming console manufacturer is launching a new gaming platform to its customers. Which of the following controls reduces the risk created by malicious gaming customers attempting to circumvent control by way of modifying consoles?

Due to regulatory requirements, a security analyst must implement full drive encryption on a Windows file server. Which of the following should the analyst implement on the system to BEST meet this requirement? (Choose two.)

A user needs to transmit confidential information to a third party. Which of the following should be used to encrypt the message?

Ann, a security analyst, wants to implement a secure exchange of email. Which of the following is the BEST option for Ann to implement?

Which of the following controls does a mantrap BEST represent?

CompTIA A+ Certification Exam: Core 1

CompTIA A+ Certification Exam: Core 2

CompTIA Advanced Security Practitioner (CASP+) CAS-003

CompTIA Advanced Security Practitioner (CASP+) CAS-004

CompTIA Cloud Essentials+

CompTIA CySA+ Certification Exam (CS0-002)

CompTIA Cloud+ (CV0-002)

CompTIA Cloud+

CompTIA IT Fundamentals

CompTIA Network+

CompTIA Project+

CompTIA PenTest+ Certification Exam

CompTIA Server+

CompTIA Server+ Certification Exam

CompTIA Security+ 2021

CompTIA CTT+ Essentials

CompTIA Linux+

Filters