Comptia Security+ Certification Practice Test 4

Front 1

SHA and MD5 are:

Back 1

(a) Encryption algorithms
(b) Hash functions
(c) Virus signatures
(d) Trust models

Hint 1

(b) Hash functions

Front 2

Which of the following provide the means for checking data integrity? (Select two answers)

Back 2

(a) WEP
(b) RC4
(c) WPA2
(d) SHA-1
(e) MD5

Hint 2

(d) SHA-1
(e) MD5

Front 3

Packet sniffer is a common term for:

Back 3

(a) Router
(b) Multilayer switch
(c) Port scanner
(d) Protocol Analyzer

Hint 3

(d) Protocol Analyzer

Front 4

A set of rules enforced in a network that restrict the use to which the network may be put is also known as:

Back 4

(a) FAQ
(b) AUP
(c) UAT
(d) OEM

Hint 4

(b) AUP

Front 5

Which of the following protocols periodically reauthenticates a client?

Back 5

(a) CHAP
(b) PAP
(C)SHA
(d) MD5

Hint 5

(a) CHAP

Front 6

A piece of hardware and associated software/firmware that usually attaches to the inside of a PC or server and provides at least the minimum of cryptographic functions is called:

Back 6

(a) PKI
(b) OUI
(c) HSM
(d) BIOS

Hint 6

(c) HSM

Front 7

An IPv6 address consists of:

Back 7

(a) 48 bits
(b) 64 bits
(c) 32 bits
(d) 128 bits

Hint 7

(d) 128 bits

Front 8

Which of the following terms refers to an access control method based on user identity?

Back 8

(a) MAC
(b) RBAC
(c) HMAC
(d) DAC

Hint 8

(d) DAC

Front 9

Coding errors and security vulnerabilities in software that has already been released can be rectified through:

Back 9

(a) Fuzzing
(b) Virtualization
(c) Patch management
(d) Application hardening

Hint 9

(c) Patch management

Front 10

Which of the following is a stream cipher?

Back 10

(a) RC4
(b) 3DES
(c) DES
(d) AES

Hint 10

(a) RC4

Front 11

Advanced Encryption Standard (AES): (Select all that apply)

Back 11

(a) Uses block cipher algorithm
(b) Is an asymmetric encryption algorithm
(c) Requires multiple passes to encrypt data
(d) Is a symmetric encryption algorithm
(e) Uses 128-, 192-, and 256-bit keys

Hint 11

(a) Uses block cipher algorithm
(d) Is a symmetric encryption algorithm
(e) Uses 128-, 192-, and 256-bit keys

Front 12

Which of the following allows for encrypting e-mail messages?

Back 12

(a) PGP
(b) SMTP
(c) OVAL
(d) PPP

Hint 12

(a) PGP

Front 13

Which of the following actions can be taken by an IDS? (Select two answers)

Back 13

(a) Sending an alert
(b) Closing down connection
(c) Terminating process
(d) Logging
(e) Reconfiguring firewall

Hint 13

(a) Sending an alert
(d) Logging

Front 14

Which of the following ports are used by the File Transfer Protocol (FTP)? (Select two answers)

Back 14

(a) 23
(b) 21
(c) 22
(d) 25
(e) 20

Hint 14

(b) 21
(e) 20

Front 15

Which of the following measures fall(s) into the category of detective security controls? (Select all that apply)

Back 15

(a) Security guard
(b) IDS
(c) Video surveillance
(d) IPS

Hint 15

(b) IDS
(c) Video surveillance

Front 16

An access control model in which access to resources is granted or denied depending on Access Control List (ACL) entries is also known as:

Back 16

(a) Mandatory Access Control
(b) Rule-Based Access Control
(c) Lattice-Based Access Control
(d) Role-Based Access Control

Hint 16

(b) Rule-Based Access Control

Front 17

Which of the following provide availability? (Select all that apply)

Back 17

(a) Hot site
(b) Encryption
(c) RAID 5
(d) RAID 1
(e) RAID 0

Hint 17

(a) Hot site
(c) RAID 5
(d) RAID 1

Front 18

Which of the following terms refers to software or hardware based security solutions designed to detect and prevent unauthorized use and transmission of confidential information outside of a corporate network?

Back 18

(a) UAT
(b) LTO
(c) EULA
(d) DLP

Hint 18

(d) DLP

Front 19

Which of the following port numbers is used by Kerberos?

Back 19

(a) 23
(b) 22
(c) 80
(d) 88

Hint 19

(d) 88

Front 20

Which of the following attacks uses multiple compromised computer systems against its target?

Back 20

(a) Logic bomb
(b) DoS
(c) DDoS
(d) Botnet

Hint 20

(c) DDoS

Front 21

A lightly protected subnet placed on the outside of the company's firewall consisting of publicly available servers is also referred to as:

Back 21

(a) Access Point (AP)
(b) DMZ
(c) VLAN
(d) VPN

Hint 21

(b) DMZ

Front 22

Which of the following terms refers to a logical grouping of computers that allow computer hosts to act as if they were attached to the same broadcast domain, regardless of their physical location?

Back 22

(a) DMZ
(b) VLAN
(c) SNMP community
(d) MAC filtering

Hint 22

(b) VLAN

Front 23

In which of the cloud computing infrastructure types clients, instead of buying all the hardware and software, purchase computing resources as an outsourced service from suppliers who own and maintain all the necessary equipment?

Back 23

(a) IaaS
(b) RAS
(c) PaaS
(d) SaaS

Hint 23

(a) IaaS

Front 24

WPA2 standard is also known as:

Back 24

(a) 802.3
(b) 802.1X
(c) 802.11i
(d) 802.11

Hint 24

(c) 802.11i

Front 25

One of the measures used in securing an Ethernet switch includes disabling unused ports.

Back 25

(a) True
(b) False

Hint 25

(a) True