Question 1

Which of the following identity access methods creates a cookie on the first login to a central authority to allow logins to subsequent applications without re-entering credentials?

Accepted Answer

A)  Multifactor authentication 
B)  Transitive trust 
C)  Federated access 
D)  Single sign-on

Question 2

A system's administrator has finished configuring firewall ACL to allow access to a new web answer.  The security administrator confirms form the following packet capture that there is network traffic from the internet to the web server:  The company's internal auditor issues a security finding and requests that immediate action be taken. With which of the following is the auditor MOST concerned?

Accepted Answer

A)  Misconfigured firewall 
B)  Clear text credentials 
C)  Implicit deny 
D)  Default configuration

Question 3

Which of the following methods minimizes the system interaction when gathering information to conduct a vulnerability assessment of a router?

Accepted Answer

A)  Download the configuration 
B)  Run a credentialed scan. 
C)  Conduct the assessment during downtime 
D)  Change the routing to bypass the router.

Question 4

A security analyst needs to be proactive in understanding the types of attacks that could potentially target the company's executives. Which of the following intelligence sources should the security analyst review?

Accepted Answer

A)  Vulnerability feeds 
B)  Trusted automated exchange of indicator information 
C)  Structured threat information expression 
D)  Industry information-sharing and collaboration groups

Question 5

Which of the following characteristics differentiate a rainbow table attack from a brute force attack? (Select two.)

Accepted Answer

A)  Rainbow table attacks greatly reduce compute cycles at attack time. 
B)  Rainbow tables must include precomputed hashes. 
C)  Rainbow table attacks do not require access to hashed passwords. 
D)  Rainbow table attacks must be performed on the network. 
E)  Rainbow table attacks bypass maximum failed login restrictions.

Question 6

A web application is configured to target browsers and allow access to bank accounts to siphon money to a foreign account. This is an example of which of the following attacks?

Accepted Answer

A)  SQL injection 
B)  Header manipulation 
C)  Cross-site scripting 
D)  Flash cookie exploitation

Question 7

An external auditor visits the human resources department and performs a physical security assessment. The auditor observed documents on printers that are unclaimed. A closer look at these documents reveals employee names, addresses, ages, and types of medical and dental coverage options each employee has selected. Which of the following is the MOST appropriate actions to take?

Accepted Answer

A)  Flip the documents face down so no one knows these documents are PII sensitive 
B)  Shred the documents and let the owner print the new set 
C)  Retrieve the documents, label them with a PII cover sheet, and return them to the printer 
D)  Report to the human resources manager that their personnel are violating a privacy policy

Question 8

Which of the following is a document that contains detailed information about actions that include how something will be done, when the actions will be performed, and penalties for failure?

Accepted Answer

A)  MOU 
B)  ISA 
C)  BPA 
D)  SLA

Question 9

A company is planning to utilize its legacy desktop systems by converting them into dummy terminals and moving all heavy applications and storage to a centralized server that hosts all of the company's required desktop applications. Which of the following describes the BEST deployment method to meet these requirements?

Accepted Answer

A)  IaaS 
B)  VM sprawl 
C)  VDI 
D)  PaaS

Question 10

The firewall administrator is adding a new certificate for the company's remote access solution. The solution requires that the uploaded file contain the entire certificate chain for the certificate to load properly. The administrator loads the company certificate and the root CA certificate into the file. The file upload is rejected. Which of the following is required to complete the certificate chain?

Accepted Answer

A)  Certificate revocation list 
B)  Intermediate authority 
C)  Recovery agent 
D)  Root of trust

Question 11

A security engineer is configuring a wireless network that must support mutual authentication of the wireless client and the authentication server before users provide credentials. The wireless network must also support authentication with usernames and passwords. Which of the following authentication protocols MUST the security engineer select?

Accepted Answer

A)  EAP-FAST 
B)  EAP-TLS 
C)  PEAP 
D)  EAP

Question 12

An organization is comparing and contrasting migration from its standard desktop configuration to the newest version of the platform. Before this can happen, the Chief Information Security Officer (CISO) voices the need to evaluate the functionality of the newer desktop platform to ensure interoperability with existing software in use by the organization. In which of the following principles of architecture and design is the CISO engaging?

Accepted Answer

A)  Dynamic analysis 
B)  Change management 
C)  Baselining 
D)  Waterfalling

Question 13

Using a one-time code that has been texted to a smartphone is an example of:

Accepted Answer

A)  something you have. 
B)  something you know. 
C)  something you do. 
D)  something you are.

Question 14

A Chief Security Office's (CSO's) key priorities are to improve preparation, response, and recovery practices to minimize system downtime and enhance organizational resilience to ransomware attacks. Which of the following would BEST meet the CSO's objectives?

Accepted Answer

A)  Use email-filtering software and centralized account management, patch high-risk systems, and restrict administration privileges on fileshares. 
B)  Purchase cyber insurance from a reputable provider to reduce expenses during an incident. 
C)  Invest in end-user awareness training to change the long-term culture and behavior of staff and executives, reducing the organization's susceptibility to phishing attacks. 
D)  Implement application whitelisting and centralized event-log management, and perform regular testing and validation of full backups.

Question 15

A group of developers is collaborating to write software for a company. The developers need to work in subgroups and control who has access to their modules. Which of the following access control methods is considered user-centric?

Accepted Answer

A)  Time-based 
B)  Mandatory 
C)  Rule-based 
D)  Discretionary

Question 16

A computer on a company network was infected with a zero-day exploit after an employee accidently opened an email that contained malicious content. The employee recognized the email as malicious and was attempting to delete it, but accidently opened it. Which of the following should be done to prevent this scenario from occurring again in the future?

Accepted Answer

A)  Install host-based firewalls on all computers that have an email client installed 
B)  Set the email program default to open messages in plain text 
C)  Install end-point protection on all computers that access web email 
D)  Create new email spam filters to delete all messages from that sender

Question 17

An employee receives an email, which appears to be from the Chief Executive Officer (CEO), asking for a report of security credentials for all users. Which of the following types of attack is MOST likely occurring?

Accepted Answer

A)  Policy violation 
B)  Social engineering 
C)  Whaling 
D)  Spear phishing

Question 18

A security team wants to establish an Incident Response plan. The team has never experienced an incident. Which of the following would BEST help them establish plans and procedures?

Accepted Answer

A)  Table top exercises 
B)  Lessons learned 
C)  Escalation procedures 
D)  Recovery procedures

Question 19

A threat actor motivated by political goals that is active for a short period of time but has virtually unlimited resources is BEST categorized as a:

Accepted Answer

A)  hacktivist 
B)  nation-state 
C)  script kiddie 
D)  APT

Question 20

Which of the following is the proper use of a Faraday cage?

Accepted Answer

A)  To block electronic signals sent to erase a cell phone 
B)  To capture packets sent to a honeypot during an attack 
C)  To protect hard disks from access during a forensics investigation 
D)  To restrict access to a building allowing only one person to enter at a time

Exam 15: CompTIA Security+