Question 1

Which of the following is a compensating control that will BEST reduce the risk of weak passwords?

Accepted Answer

A)  Requiring the use of one-time tokens 
B)  Increasing password history retention count 
C)  Disabling user accounts after exceeding maximum attempts 
D)  Setting expiration of user passwords to a shorter time

Question 2

A product manager is concerned about continuing operations at a facility located in a region undergoing significant political unrest. After consulting with senior management, a decision is made to suspend operations at the facility until the situation stabilizes. Which of the following risk management strategies BEST describes management's response?

Accepted Answer

A)  Deterrence 
B)  Mitigation 
C)  Avoidance 
D)  Acceptance

Question 3

A cybersecurity analyst needs to implement secure authentication to third-party websites without users' passwords. Which of the following would be the BEST way to achieve this objective?

Accepted Answer

A)  OAuth 
B)  SSO 
C)  SAML 
D)  PAP

Question 4

Two companies are enabling TLS on their respective email gateways to secure communications over the Internet. Which of the following cryptography concepts is being implemented?

Accepted Answer

A)  Perfect forward secrecy 
B)  Ephemeral keys 
C)  Domain validation 
D)  Data in transit

Question 5

An application team is performing a load-balancing test for a critical application during off-hours and has requested access to the load balancer to review which servers are up without having the administrator on call. The security analyst is hesitant to give the application team full access due to other critical applications running on the load balancer. Which of the following is the BEST solution for security analyst to process the request?

Accepted Answer

A)  Give the application team administrator access during off-hours. 
B)  Disable other critical applications before granting the team access. 
C)  Give the application team read-only access. 
D)  Share the account with the application team.

Question 6

Which of the following is a technical preventive control?

Accepted Answer

A)  Two-factor authentication 
B)  DVR-supported cameras 
C)  Acceptable-use MOTD 
D)  Syslog server

Question 7

A systems administrator is configuring a system that uses data classification labels. Which of the following will the administrator need to implement to enforce access control?

Accepted Answer

A)  Discretionary access control 
B)  Mandatory access control 
C)  Role-based access control 
D)  Rule-based access control

Question 8

A security administrator is implementing a new WAF solution and has placed some of the web servers behind the WAF, with the WAF set to audit mode. When reviewing the audit logs of external requests and posts to the web servers, the administrator finds the following entry:  Based on this data, which of the following actions should the administrator take?

Accepted Answer

A)  Alert the web server administrators to a misconfiguration. 
B)  Create a blocking policy based on the parameter values. 
C)  Change the parameter name 'Account_Name' identified in the log. Change the parameter name 'Account_Name' identified in the log. 
D)  Create an alert to generate emails for abnormally high activity.

Question 9

A penetration tester harvests potential usernames from a social networking site. The penetration tester then uses social engineering to attempt to obtain associated passwords to gain unauthorized access to shares on a network server. Which of the following methods is the penetration tester MOST likely using?

Accepted Answer

A)  Escalation of privilege 
B)  SQL injection 
C)  Active reconnaissance 
D)  Proxy server

Question 10

Which of the following metrics are used to calculate the SLE? (Select TWO)

Accepted Answer

A)  ROI 
B)  ARO 
C)  ALE 
D)  MTBF 
E)  MTTF
F) TCO

Question 11

Which of the following implements two-factor authentication?

Accepted Answer

A)  A phone system requiring a PIN to make a call 
B)  At ATM requiring a credit card and PIN 
C)  A computer requiring username and password 
D)  A datacenter mantrap requiring fingerprint and iris scan

Question 12

Which of the following terms BEST describes an exploitable vulnerability that exists but has not been publicly disclosed yet?

Accepted Answer

A)  Design weakness 
B)  Zero-day 
C)  Logic bomb 
D)  Trojan

Question 13

A mobile device user is concerned about geographic positioning information being included in messages sent between users on a popular social network platform. The user turns off the functionality in the application, but wants to ensure the application cannot re-enable the setting without the knowledge of the user. Which of the following mobile device capabilities should the user disable to achieve the stated goal?

Accepted Answer

A)  Device access control 
B)  Location based services 
C)  Application control 
D)  GEO-Tagging

Question 14

Which of the following can affect electrostatic discharge in a network operations center?

Accepted Answer

A)  Fire suppression 
B)  Environmental monitoring 
C)  Proximity card access 
D)  Humidity controls

Question 15

Which of the following should be implemented to stop an attacker from interacting with the hypervisor through another guest?

Accepted Answer

A)  Containers 
B)  VM escape protection 
C)  Security broker 
D)  Virtual desktop

Question 16

A high-security defense installation recently begun utilizing large guard dogs that bark very loudly and excitedly at the slightest provocation. Which of the following types of controls does this BEST describe?

Accepted Answer

A)  Deterrent 
B)  Preventive 
C)  Detective 
D)  Compensating

Question 17

A Chief Information Officer (CIO) recently saw on the news that a significant security flaws exists with a specific version of a technology the company uses to support many critical application. The CIO wants to know if this reported vulnerability exists in the organization and, if so, to what extent the company could be harmed. Which of the following would BEST provide the needed information?

Accepted Answer

A)  Penetration test 
B)  Vulnerability scan 
C)  Active reconnaissance 
D)  Patching assessment report

Question 18

Which of the following are disadvantages of full backups? (Choose three.)

Accepted Answer

A)  They rely on other backups for recovery 
B)  They require the most storage 
C)  They demand the most bandwidth 
D)  They have the slowest recovery time 
E)  They are impossible in virtual environments
F) They require on-site storage
G) They are time-consuming to complete

Question 19

A security administrator wants to configure a company's wireless network in a way that will prevent wireless clients from broadcasting the company's SSID. Which of the following should be configured on the company's access points?

Accepted Answer

A)  Enable ESSID broadcast 
B)  Enable protected management frames 
C)  Enable wireless encryption 
D)  Disable MAC authentication 
E)  Disable WPS
F) Disable SSID broadcast

Question 20

A user is unable to open a file that has a grayed-out icon with a lock. The user receives a pop-up message indicating that payment must be sent in Bitcoin to unlock the file. Later in the day, other users in the organization lose the ability to open files on the server. Which of the following has MOST likely occurred? (Choose three.)

Accepted Answer

A)  Crypto-malware 
B)  Adware 
C)  Botnet attack 
D)  Virus 
E)  Ransomware
F) Backdoor
G) DDoS attack

Exam 15: CompTIA Security+