Question 1

Two users need to securely share encrypted files via email. Company policy prohibits users from sharing credentials or exchanging encryption keys. Which of the following can be implemented to enable users to share encrypted data while abiding by company policies?

Accepted Answer

A)  Key escrow 
B)  Digital signatures 
C)  PKI 
D)  Hashing

Question 2

An organization has an account management policy that defines parameters around each type of account. The policy specifies different security attributes, such as longevity, usage auditing, password complexity, and identity proofing. The goal of the account management policy is to ensure the highest level of security while providing the greatest availability without compromising data integrity for users. Which of the following account types should the policy specify for service technicians from corporate partners?

Accepted Answer

A)  Guest account 
B)  User account 
C)  Shared account 
D)  Privileged user account 
E)  Default account
F) Service account

Question 3

The security administrator has noticed cars parking just outside of the building fence line. Which of the following security measures can the administrator use to help protect the company's WiFi network against war driving? (Select TWO)

Accepted Answer

A)  Create a honeynet 
B)  Reduce beacon rate 
C)  Add false SSIDs 
D)  Change antenna placement 
E)  Adjust power level controls
F) Implement a warning banner

Question 4

A Chief Information Officer (CIO) drafts an agreement between the organization and its employees. The agreement outlines ramifications for releasing information without consent and/or approvals. Which of the following BEST describes this type of agreement?

Accepted Answer

A)  ISA 
B)  NDA 
C)  MOU 
D)  SLA

Question 5

A company is experiencing an increasing number of systems that are locking up on Windows startup. The security analyst clones a machine, enters into safe mode, and discovers a file in the startup process that runs Wstart.bat. @echo off :asdhbawdhbasdhbawdhb start notepad.exe start calculator.exe goto asdhbawdhbasdhbawdhb Given the file contents and the system's issues, which of the following types of malware is present?

Accepted Answer

A)  Rootkit 
B)  Logic bomb 
C)  Worm 
D)  Virus

Question 6

A systems administrator wants to replace the process of using a CRL to verify certificate validity. Frequent downloads are becoming problematic. Which of the following would BEST suit the administrator's needs?

Accepted Answer

A)  OCSP 
B)  CSR 
C)  Key escrow 
D)  CA

Question 7

A workstation puts out a network request to locate another system. Joe, a hacker on the network, responds before the real system does, and he tricks the workstation into communicating with him. Which of the following BEST describes what occurred?

Accepted Answer

A)  The hacker used a race condition. 
B)  The hacker used a pass-the-hash attack. 
C)  The hacker-exploited improper key management. 
D)  The hacker exploited weak switch configuration.

Question 8

A company's loss control department identifies theft as a recurring loss type over the past year. Based on the department's report, the Chief Information Officer (CIO) wants to detect theft of datacenter equipment. Which of the following controls should be implemented?

Accepted Answer

A)  Biometrics 
B)  Cameras 
C)  Motion detectors 
D)  Mantraps

Question 9

A company is performing an analysis of the corporate enterprise network with the intent of identifying any one system, person, function, or service that, when neutralized, will cause or cascade disproportionate damage to the company's revenue, referrals, and reputation. Which of the following an element of the BIA that this action is addressing?

Accepted Answer

A)  Identification of critical systems 
B)  Single point of failure 
C)  Value assessment 
D)  Risk register

Question 10

Which of the following outcomes is a result of proper error-handling procedures in secure code?

Accepted Answer

A)  Execution continues with no notice or logging of the error condition. 
B)  Minor fault conditions result in the system stopping to preserve state. 
C)  The program runs through to completion with no detectable impact or output. 
D)  All fault conditions are logged and do not result in a program crash.

Question 11

A company wants to provide centralized authentication for its wireless system. The wireless authentication system must integrate with the directory back end. Which of the following is a AAA solution that will provide the required wireless authentication?

Accepted Answer

A)  TACACS+ 
B)  MSCHAPv2 
C)  RADIUS 
D)  LDAP

Question 12

A security analyst reviews the following output:  The analyst loads the hash into the SIEM to discover if this hash is seen in other parts of the network. After inspecting a large number of files, the security analyst reports the following:  Which of the following is the MOST likely cause of the hash being found in other areas?

Accepted Answer

A)  Jan Smith is an insider threat 
B)  There are MD5 hash collisions 
C)  The file is encrypted 
D)  Shadow copies are present

Question 13

Which of the following best describes routine in which semicolons, dashes, quotes, and commas are removed from a string?

Accepted Answer

A)  Error handling to protect against program exploitation 
B)  Exception handling to protect against XSRF attacks. 
C)  Input validation to protect against SQL injection. 
D)  Padding to protect against string buffer overflows.

Question 14

Which of the following encryption methods does PKI typically use to securely protect keys?

Accepted Answer

A)  Elliptic curve 
B)  Digital signatures 
C)  Asymmetric 
D)  Obfuscation

Question 15

An organization has a policy in place that states the person who approves firewall controls/changes cannot be the one implementing the changes. Which of the following is this an example of?

Accepted Answer

A)  Change management 
B)  Job rotation 
C)  Separation of duties 
D)  Least privilege

Question 16

A security analyst is assessing a small company's internal servers against recommended security practices. Which of the following should the analyst do to conduct the assessment? (Choose two.)

Accepted Answer

A)  Compare configurations against platform benchmarks 
B)  Confirm adherence to the company's industry-specific regulations 
C)  Review the company's current security baseline 
D)  Verify alignment with policy related to regulatory compliance 
E)  Run an exploitation framework to confirm vulnerabilities

Question 17

Which of the following encryption algorithms require one encryption key? (Choose two.)

Accepted Answer

A)  MD5 
B)  3DES 
C)  BCRYPT 
D)  RC4 
E)  DSA

Question 18

An administrator has concerns regarding the traveling sales team who works primarily from smart phones. Given the sensitive nature of their work, which of the following would BEST prevent access to the data in case of loss or theft?

Accepted Answer

A)  Enable screensaver locks when the phones are not in use to prevent unauthorized access 
B)  Configure the smart phones so that the stored data can be destroyed from a centralized location 
C)  Configure the smart phones so that all data is saved to removable media and kept separate from the device 
D)  Enable GPS tracking on all smart phones so that they can be quickly located and recovered

Question 19

A company is performing an analysis of the corporate enterprise network with the intent of identifying what will cause losses in revenue, referrals, and/or reputation when out of commission. Which of the following is an element of a BIA that is being addressed?

Accepted Answer

A)  Mission-essential function 
B)  Single point of failure 
C)  backup and restoration plans 
D)  Identification of critical systems

Question 20

A system administrator is reviewing the following information from a compromised server.  Given the above information, which of the following processes was MOST likely exploited via remote buffer overflow attack?

Accepted Answer

A)  Apache 
B)  LSASS 
C)  MySQL 
D)  TFTP

Exam 15: CompTIA Security+