Question 1

A network technician is designing a network for a small company. The network technician needs to implement an email server and web server that will be accessed by both internal employees and external customers. Which of the following would BEST secure the internal network and allow access to the needed servers?

Accepted Answer

A)  Implementing a site-to-site VPN for server access. 
B)  Implementing a DMZ segment for the server. 
C)  Implementing NAT addressing for the servers. 
D)  Implementing a sandbox to contain the servers.

Question 2

A penetration tester has been hired to scan a company's network for potentially active hosts. The company's IPS system blocks the ICMP echo reply and echo request packets. Which of the following can be used to scan the network?

Accepted Answer

A)  OSPF 
B)  ARP 
C)  IPSec 
D)  Ping

Question 3

An actor downloads and runs a program against a corporate login page. The program imports a list of usernames and passwords, looking for a successful attempt. Which of the following terms BEST describes the actor in this situation?

Accepted Answer

A)  Script kiddie 
B)  Hacktivist 
C)  Cryptologist 
D)  Security auditor

Question 4

A security analyst is mitigating a pass-the-hash vulnerability on a Windows infrastructure. Given the requirement, which of the following should the security analyst do to MINIMIZE the risk?

Accepted Answer

A)  Enable CHAP 
B)  Disable NTLM 
C)  Enable Kerebos 
D)  Disable PAP

Question 5

During a forensic investigation, which of the following must be addressed FIRST according to the order of volatility?

Accepted Answer

A)  Hard drive 
B)  RAM 
C)  Network attached storage 
D)  USB flash drive

Question 6

A security administrator is tasked with implementing centralized management of all network devices. Network administrators will be required to logon to network devices using their LDAP credentials. All command executed by network administrators on network devices must fall within a preset list of authorized commands and must be logged to a central facility. Which of the following configuration commands should be implemented to enforce this requirement?

Accepted Answer

A)  LDAP server 10.55.199.3 
B)  CN=company, CN=com, OU=netadmin, DC=192.32.10.233 
C)  SYSLOG SERVER 172.16.23.50 
D)  TACAS server 192.168.1.100

Question 7

A company is evaluating cloud providers to reduce the cost of its internal IT operations. The company's aging systems are unable to keep up with customer demand. Which of the following cloud models will the company MOST likely select?

Accepted Answer

A)  PaaS 
B)  SaaS 
C)  IaaS 
D)  BaaS

Question 8

Ann, a new employee, received an email from an unknown source indicating she needed to click on the provided link to update her company's profile. Once Ann clicked the link, a command prompt appeared with the following output:  Which of the following types of malware was executed?

Accepted Answer

A)  Ransomware 
B)  Adware 
C)  Spyware 
D)  Virus

Question 9

The help desk received a call after hours from an employee who was attempting to log into the payroll server remotely. When the help desk returned the call the next morning, the employee was able to log into the server remotely without incident. However, the incident occurred again the next evening. Which of the following BEST describes the cause of the issue?

Accepted Answer

A)  The password expired on the account and needed to be reset 
B)  The employee does not have the rights needed to access the database remotely 
C)  Time-of-day restrictions prevented the account from logging in 
D)  The employee's account was locked out and needed to be unlocked

Question 10

A security administrator needs to address the following audit recommendations for a public-facing SFTP server: Users should be restricted to upload and download files to their own home directories only. Users should not be allowed to use interactive shell login. Which of the following configuration parameters should be implemented? (Select TWO).

Accepted Answer

A)  PermitTunnel 
B)  ChrootDirectory 
C)  PermitTTY 
D)  AllowTcpForwarding 
E)  IgnoreRhosts

Question 11

An active/passive configuration has an impact on:

Accepted Answer

A)  confidentiality 
B)  integrity 
C)  availability 
D)  non-repudiation

Question 12

A security administrator suspects that data on a server has been exhilarated as a result of un- authorized remote access. Which of the following would assist the administrator in con-firming the suspicions? (Select TWO)

Accepted Answer

A)  Networking access control 
B)  DLP alerts 
C)  Log analysis 
D)  File integrity monitoring 
E)  Host firewall rules

Question 13

Which of the following documents would provide specific guidance regarding ports and protocols that should be disabled on an operating system?

Accepted Answer

A)  Regulatory requirements 
B)  Secure configuration guide 
C)  Application installation guides 
D)  User manuals

Question 14

Which of the following are used to substantially increase the computation time required to crack a password? (Choose two.)

Accepted Answer

A)  BCRYPT 
B)  Substitution cipher 
C)  ECDHE 
D)  PBKDF2 
E)  Diffie-Hellman

Question 15

During the penetration testing of an organization, the tester was provided with the names of a few key servers, along with their IP address. Which of the following is the organization conducting?

Accepted Answer

A)  Gray box testing 
B)  White box testing 
C)  Black box testing 
D)  Isolated container testing 
E)  Vulnerability testing

Question 16

An organization is expanding its network team. Currently, it has local accounts on all network devices, but with growth, it wants to move to centrally managed authentication. Which of the following are the BEST solutions for the organization? (Choose two.)

Accepted Answer

A)  TACACS+ 
B)  CHAP 
C)  LDAP 
D)  RADIUS 
E)  MSCHAPv2

Question 17

Which of the following are used to increase the computing time it takes to brute force a password using an offline attack? (Choose two.)

Accepted Answer

A)  XOR 
B)  PBKDF2 
C)  bcrypt 
D)  HMAC 
E)  RIPEMD

Question 18

Joe a website administrator believes he owns the intellectual property for a company invention and has been replacing image files on the company's public facing website in the DMZ. Joe is using steganography to hide stolen data. Which of the following controls can be implemented to mitigate this type of inside threat?

Accepted Answer

A)  Digital signatures 
B)  File integrity monitoring 
C)  Access controls 
D)  Change management 
E)  Stateful inspection firewall

Question 19

A network administrator is brute forcing accounts through a web interface. Which of the following would provide the BEST defense from an account password being discovered?

Accepted Answer

A)  Password history 
B)  Account lockout 
C)  Account expiration 
D)  Password complexity

Question 20

Which of the following types of controls is a turnstile?

Accepted Answer

A)  Physical 
B)  Detective 
C)  Corrective 
D)  Technical

Exam 15: CompTIA Security+