Question 1

Which of the following policies would help an organization identify and mitigate potential single points of failure in the company's IT/security operations?

Accepted Answer

A)  Least privilege 
B)  Awareness training 
C)  Separation of duties 
D)  Mandatory vacation

Question 2

The help desk is receiving numerous password change alerts from users in the accounting department. These alerts occur multiple times on the same day for each of the affected users' accounts. Which of the following controls should be implemented to curtail this activity?

Accepted Answer

A)  Password Reuse 
B)  Password complexity 
C)  Password History 
D)  Password Minimum age

Question 3

An application developer is designing an application involving secure transports from one service to another that will pass over port 80 for a request. Which of the following secure protocols is the developer MOST likely to use?

Accepted Answer

A)  FTPS 
B)  SFTP 
C)  SSL 
D)  LDAPS 
E)  SSH

Question 4

A company wants to provide a guest wireless system for its visitors. The system should have a captive portal for guest self-registration and protect guest devices from spreading malware to other connected devices. Which of the following should be done on the wireless network to satisfy these requirements? (Choose two.)

Accepted Answer

A)  Configure WPA2-PSK. 
B)  Configure a wireless IDS. 
C)  Use an open authentication system. 
D)  Enforce 802.1X with PEAP. 
E)  Disable SSID broadcasting.
F) Enable client isolation.

Question 5

Company A agrees to provide perimeter protection, power, and environmental support with measurable goals for Company B, but will not be responsible for user authentication or patching of operating systems within the perimeter. Which of the following is being described?

Accepted Answer

A)  Service level agreement 
B)  Memorandum of understanding 
C)  Business partner agreement 
D)  Interoperability agreement

Question 6

Which of the following are methods to implement HA in a web application server environment? (Choose two.)

Accepted Answer

A)  Load balancers 
B)  Application layer firewalls 
C)  Reverse proxies 
D)  VPN concentrators 
E)  Routers

Question 7

A security engineer is faced with competing requirements from the networking group and database administrators. The database administrators would like ten application servers on the same subnet for ease of administration, whereas the networking group would like to segment all applications from one another. Which of the following should the security administrator do to rectify this issue?

Accepted Answer

A)  Recommend performing a security assessment on each application, and only segment the applications with the most vulnerability 
B)  Recommend classifying each application into like security groups and segmenting the groups from one another 
C)  Recommend segmenting each application, as it is the most secure approach 
D)  Recommend that only applications with minimal security features should be segmented to protect them

Question 8

A security administrator has configured a RADIUS and a TACACS+ server on the company's network. Network devices will be required to connect to the TACACS+ server for authentication and send accounting information to the RADIUS server. Given the following information: RADIUS IP: 192.168.20.45 TACACS+ IP: 10.23.65.7 Which of the following should be configured on the network clients? (Choose two.)

Accepted Answer

A)  Accounting port: TCP 389 
B)  Accounting port: UDP 1812 
C)  Accounting port: UDP 1813 
D)  Authentication port: TCP 49 
E)  Authentication port: TCP 88
F) Authentication port: UDP 636

Question 9

An application team is performing a load-balancing test for a critical application during off-hours and has requested access to the load balancer to review which servers are up without having the administrator on call. The security analyst is hesitant to give the application team full access due to other critical applications running on the load balancer. Which of the following is the BEST solution for security analyst to process the request?

Accepted Answer

A)  Give the application team administrator access during off-hours. 
B)  Disable other critical applications before granting the team access. 
C)  Give the application team read-only access.

Question 10

While performing surveillance activities, an attacker determines that an organization is using 802.1X to secure LAN access. Which of the following attack mechanisms can the attacker utilize to bypass the identified network security?

Accepted Answer

A)  MAC spoofing 
B)  Pharming 
C)  Xmas attack 
D)  ARP poisoning

Question 11

A security specialist is notified about a certificate warning that users receive when using a new internal website. After being given the URL from one of the users and seeing the warning, the security specialist inspects the certificate and realizes it has been issued to the IP address, which is how the developers reach the site. Which of the following would BEST resolve the issue?

Accepted Answer

A)  OSCP 
B)  OID 
C)  PEM 
D)  SAN

Question 12

A newly hired Chief Security Officer (CSO) is reviewing the company's IRP and notices the procedures for zero-day malware attacks are being poorly executed, resulting in the CSIRT failing to address and coordinate malware removal from the system. Which of the following phases would BEST address these shortcomings?

Accepted Answer

A)  Identification 
B)  Lessons learned 
C)  Recovery 
D)  Preparation 
E)  Eradication

Question 13

Confidential corporate data was recently stolen by an attacker who exploited data transport protections. Which of the following vulnerabilities is the MOST likely cause of this data breach?

Accepted Answer

A)  Resource exhaustion on VPN concentrators 
B)  Weak SSL cipher strength 
C)  Improper input handling on FTP site 
D)  Race condition on packet inspection firewall

Question 14

A university is opening a facility in a location where there is an elevated risk of theft. The university wants to protect the desktops in its classrooms and labs. Which of the following should the university use to BEST protect these assets deployed in the facility?

Accepted Answer

A)  Visitor logs 
B)  Cable locks 
C)  Guards 
D)  Disk encryption 
E)  Motion detection

Question 15

While testing a new vulnerability scanner, a technician becomes concerned about reports that list security concerns that are not present on the systems being tested. Which of the following BEST describes this flaw?

Accepted Answer

A)  False positives 
B)  Crossover error rate 
C)  Uncredentialed scan 
D)  Passive security controls

Question 16

Which of the following needs to be performed during a forensics investigation to ensure the data contained in a drive image has not been compromised?

Accepted Answer

A)  Follow the proper chain of custody procedures. 
B)  Compare the image hash to the original hash. 
C)  Ensure a legal hold has been placed on the image. 
D)  Verify the time offset on the image file.

Question 17

Which of the following algorithms would be used to provide non-repudiation of a file transmission?

Accepted Answer

A)  AES 
B)  RSA 
C)  MD5 
D)  SHA

Question 18

Joe, a user, wants to send Ann, another user, a confidential document electronically. Which of the following should Joe do to ensure the document is protected from eavesdropping?

Accepted Answer

A)  Encrypt it with Joe's private key 
B)  Encrypt it with Joe's public key 
C)  Encrypt it with Ann's private key 
D)  Encrypt it with Ann's public key

Question 19

Which of the following is a resiliency strategy that allows a system to automatically adapt to workload changes?

Accepted Answer

A)  Fault tolerance 
B)  Redundancy 
C)  Elasticity 
D)  High availability

Question 20

When considering a third-party cloud service provider, which of the following criteria would be the BEST to include in the security assessment process? (Choose two.)

Accepted Answer

A)  Use of performance analytics 
B)  Adherence to regulatory compliance 
C)  Data retention policies 
D)  Size of the corporation 
E)  Breadth of applications support

Exam 15: CompTIA Security+