Comptia Study Guide Security+ 301

Front 1

A user receives an email that tells them they need to click this link to go to sybex.com. The link does not really go to sybex, however, and instead goes to a rogue server intended to collect usernames and passwords. What type of attack is this?

Back 1

Phishing

Front 2

What is the term used when a hole is found in a web browser or other software and miscreants begin exploiting it the very day it is discovered by the developer (bypassing the 1–2 day response time many software providers need to put out a patch once the hole has been found)?

Back 2

Zero day exploit

Front 3

When the user enters values that query XML (known as XPath) with values that take advantage of exploits, it is known as:

Back 3

XML injection attack

Front 4

What feature included with some versions of Windows 7 offer full disk encryption that can encrypt an entire volume with 128-bit encryption?

Back 4

BitLocker

Front 5

In the most basic form of authentication only one set of values is checked. What is this known as?

Back 5

Single-factor authentication (SFA)

Front 6

What type of smart card is issued by the Department of Defense as a general identification/authentication card for military personnel, contractors, and non-DoD employees?

Back 6

Common Access Card (CAC)

Front 7

What is the technology of blocking websites (or sections of websites) based solely on the URL known as?

Back 7

URL filtering

Front 8

What is it known as when you combine phishing with Voice over IP (VoIP)?

Back 8

Vishing

Front 9

What type of rogue networking is common for sharing files such as movies and music and should be banned in the workplace?

Back 9

P2P (Peer to Peer)

Front 10

What is fuzzing?

Back 10

The technique of providing unexpected values as input to an application to try to make it crash

Front 11

What is the term used for someone being so close to you when you enter a building that they are able to come in right behind you without needing to use a key, a card, or any other security device?

Back 11

Tailgating

Front 12

What type of systems monitor the contents of systems (workstations, servers, networks) to make sure key content is not deleted or removed?

Back 12

DLP—Data Loss Prevention

Front 13

Phishing or spear phishing, but for big users instead of lower-access individuals, is known as:

Back 13

Whaling

Front 14

What type of malware are software programs that have the ability to hide certain things from the operating system?

Back 14

Rootkits

Front 15

What type of social engineering attack involves going through the trash looking for notes on paper?

Back 15

Dumpster diving

Front 16

What type of attack is a form of redirection in which traffic intended for one host is sent to another?

Back 16

Pharming

Front 17

What type of virus attacks your system in multiple ways—such as attempting to infect your boot sector, infect all of your executable files, and destroy your application files—in the hope that you won't be able to correct all the problems and will allow the infestation to continue?

Back 17

Multipartite virus

Front 18

What type of attack is the ping of death?

Back 18

Denial of service—either DoS, or DDoS, depending on the number of computers involved.

Front 19

What is software running on zombie computers often known as?

Back 19

Botnet

Front 20

What type of attack exploits the troubleshooting and developer hooks (that often circumvented normal authentication) left in a system by those who created it?

Back 20

Backdoor attack

Front 21

What type of virus will change form in order to avoid detection?

Back 21

Polymorphic

Front 22

What two protocols does HTTP/S use for connection security, and what TCP port does it operate on by default?

Back 22

HTTP/S uses SSL (Secure Sockets Layer) or TLS (Transport Layer Security) and port 443.

Front 23

What type of attack uses IP spoofing and broadcasting to send a ping to a group of hosts in a network?

Back 23

Smurf attack

Front 24

What is the name of the text file that a browser maintains on the user's hard disk in order to provide a persistent, customized web experience for each visit?

Back 24

Cookie

Front 25

What do you call a computer that has been designated as a target for computer attacks?

Back 25

Honeypot

Front 26

Most network-monitoring software requires a network card (NIC) running in what mode?

Back 26

Promiscuous mode

Front 27

What component of an IDS collects data from the data source and passes it to the analyzer for analysis?

Back 27

Sensor

Front 28

What hardware device is used to create remote access VPNs?

Back 28

VPN concentrator

Front 29

What is the difference between enticement and entrapment?

Back 29

Enticement is the process of luring someone into your plan or trap. Entrapment is the process in which a law enforcement officer or a government agent encourages or induces a person to commit a crime when the potential criminal expresses a desire not to go ahead. While enticement is legal, entrapment usually is not.

Front 30

When telephone technology is married with information technology, the result is known as what?

Back 30

Telephony

Front 31

What is a VLAN?

Back 31

A virtual local area network (VLAN) allows you to create groups of users and systems and segment them on the network

Front 32

What allows a transport protocol to be sent across the network and utilized by the equivalent service or protocol at the receiving host?

Back 32

Encapsulation

Front 33

What are the four most common security zones you will likely encounter?

Back 33

Internet, intranet, extranet, and DMZ (demilitarized zone)

Front 34

What is load balancing?

Back 34

Load balancing is shifting a load from one device to another. Most often the device in question is a server, but the term could be used for a hard drive, a CPU, or almost any device that you want to avoid overloading.

Front 35

What technology allows you to take any single physical device and hide its characteristics from users—in essence allowing you to run multiple items on one device and make them appear as if they are standalone entities?

Back 35

Virtualization

Front 36

What is ARO?

Back 36

Annualized rate of occurrence is the likelihood, often drawn from historical data, of an event occurring within a year.

Front 37

What are five risk strategies?

Back 37

Risk avoidance, risk transference, risk mitigation, risk deterrence, and risk acceptance.

Front 38

What are events that aren't really incidents but trigger the same alarms known as?

Back 38

False positives

Front 39

What does SLE x ARO equal?

Back 39

ALE. The single loss expectancy, when multiplied by the annual rate of occurrence, equals the annualized rate of occurrence.

Front 40

What type of protection needs to apply to PII?

Back 40

PII—personally identifiable information—exists within your databases for all users, customers, vendors, and contacts and includes such things as their phone number, address, credit card number, employee status, and so on. In general, any attribute of any person is considered PII and is thus subject to privacy protection issues.

Front 41

What type of audit helps ensure that procedures and communications methods are working properly in the event of a problem or issue?

Back 41

Escalation audit

Front 42

What type of planning outlines those internal to the organization who have the ability to step into positions when they open?

Back 42

Succession planning

Front 43

What is an agreement between you (or your company) and a service provider (typically a technical support provider) known as?

Back 43

Service-level agreement (SLA)

Front 44

What is the name for the area of that application that is available to users—those who are authenticated and more importantly those who are not?

Back 44

Attack surface

Front 45

What is it known as when an application is designed to fail in a secure mode?

Back 45

Failsafe

Front 46

What tool is included with Windows-based operating systems for looking at Windows logs (such as security, application, and system)?

Back 46

Event Viewer

Front 47

What are partial or full backups that are kept at the computer center for immediate recovery purposes known as?

Back 47

Working copies or shadow copies

Front 48

What is the measurement of how long it takes to repair a system or component once a failure occurs?

Back 48

MTTR (mean time to repair/restore)

Front 49

What is code escrow?

Back 49

Code escrow refers to the storage and conditions of release of source code provided by a vendor.

Front 50

In what type of ethical hacking testing does the administrator acts as if they have no prior knowledge of the network?

Back 50

Black box

Front 51

What is blue jacking?

Back 51

Blue jacking is the sending of unsolicited messages over the Bluetooth connection.

Front 52

What is network bridging?

Back 52

Network bridging means that a device has more than one network adapter card installed and the opportunity presents itself for a user on one of the networks to which the device is attached to jump to the other.

Front 53

What type of testing involves trying to get access to your system from an attacker's perspective?

Back 53

Penetration testing

Front 54

Nessus is one of the better-known examples of what type of security tool?

Back 54

Vulnerability scanner

Front 55

What is the gaining of unauthorized access through a Bluetooth connection known as?

Back 55

Bluesnarfing

Front 56

In what type of ethical hacking testing does the administrator act as if they have inside knowledge of the network?

Back 56

White box

Front 57

What protocol was created by Cisco as an extension to EAP but is being phased out in favor of PEAP?

Back 57

LEAP (Lightweight Extensible Authentication Protocol)

Front 58

WPA mandates the use of TKIP, while WPA2 favors what?

Back 58

CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol)

Front 59

What type of filtering is based on the physical ID of each workstation?

Back 59

MAC filtering

Front 60

What are the three types of cloud computing implementation?

Back 60

Platform as a Service, Software as a Service, and Infrastructure as a Service

Front 61

If the interconnection between the WAP server and the Internet isn't encrypted, packets between the devices may be intercepted. What is this vulnerability known as?

Back 61

A gap in the WAP

Front 62

IPv4, while widely used, has limitations. What is it being replaced with?

Back 62

IPv6

Front 63

What type of encryption does CCMP use?

Back 63

CCMP uses 128-bit AES encryption with a 48-bit initialization vector.

Front 64

What is unsolicited and unwanted email known as?

Back 64

Spam

Front 65

What is the IEEE standard for port-based access control?

Back 65

802.1X

Front 66

What feature is built into many firewalls to tweak the tolerance for unanswered login attacks and reduce the likelihood of a successful DoS/DDoS

Back 66

Flood guard

Front 67

What type of IDS system uses algorithms to analyze the traffic passing through the network?

Back 67

A heuristic system

Front 68

Which authentication protocol is associated with the key distribution center (KDC)?

Back 68

Kerberos

Front 69

What does CHAP stand for and what is it used for?

Back 69

Challenge Handshake Authentication Protocol is used in a mutual authentication situation between a client and server.

Front 70

What security is used to give an authenticated user rights and access privileges to network resources?

Back 70

A token

Front 71

What is multi-factor authentication?

Back 71

An authentication method that uses two or more access methods

Front 72

Retinal scans and thumbprint readers are examples of what type of authentication?

Back 72

Biometric authentication

Front 73

A user enters his username and password over a secure connection. He opens a file or application. Later, he is asked to reenter his username and password. What malicious code probably just executed?

Back 73

A Trojan horse program that is spoofing system authentication

Front 74

Ensuring that stock trades have been sent, successfully received, completed, and acknowledged so that they can't be disputed is an example of what type of security principle?

Back 74

Nonrepudiation

Front 75

A hacker disconnects a user from a session with a web-based or LAN-based server, takes over the session, and assumes all of the victim's privileges. What type of attack has occurred?

Back 75

TCP/IP hijacking

Front 76

On a Unix system, what is the name of the account that would give a hacker complete access?

Back 76

The root account

Front 77

In general terms, describe what has occurred when a modification is the result of an attack.

Back 77

The original information, be it a message or file, has been altered by an unauthorized party.

Front 78

What is the port number for Simple Mail Transport Protocol (SMTP)?

Back 78

25

Front 79

What is the port number for Trivial File Transfer Protocol (TFTP)?

Back 79

69

Front 80

What is the port number for Post Office Protocol 3 (POP3)?

Back 80

110

Front 81

What are the port numbers for FTP?

Back 81

20 and 21

Front 82

What is the port number for Telnet?

Back 82

23

Front 83

What two general security terms describe a TCP sequence number attack?

Back 83

Man-in-the-middle attack and TCP/IP hijacking

Front 84

When operating with 802.11's optional Wired Equivalent Privacy (WEP), all access points and client NICs on a particular wireless LAN must use which key?

Back 84

The encryption key – also known as a shared encryption key.

Front 85

Name four tunneling protocols.

Back 85

PPTP, L2TP, SSH, and IPSec

Front 86

What is the difference between the IPSec Tunneling mode and the Transport mode?

Back 86

Tunneling encrypts the internal network's IP addressing information to prevent viewing of transmitted information over a public network; Transport encrypts only the data portion of the IP packet.

Front 87

Public key cryptography is also known as what?

Back 87

Asymmetric cryptography

Front 88

Natively, does IM use encryption or digital certificates?

Back 88

No

Front 89

What port does PPTP use?

Back 89

TCP 1723

Front 90

What port does L2TP use?

Back 90

UDP 1701

Front 91

ActiveX uses Authenticode for security. What is Authenticode?

Back 91

A digital certificate that Internet Explorer can verify, thereby ensuring that the ActiveX code is genuine

Front 92

What does LDAP stand for?

Back 92

Lightweight Directory Access Protocol is used in Microsoft's Active Directory.

Front 93

If you want everyone to be able to access your FTP server but you want them to see only the directories/files you specifically designate, how should you configure your FTP server?

Back 93

You would configure the FTP server so users have permissions only to certain files; they would therefore be unable to see or access those portions to which they don't have permissions.

Front 94

What is S/FTP?

Back 94

A secure form of FTP accomplished using the Secure Shell (SSH)

Front 95

What protocol is an extension of TCP/IP that uses WML and UDP and is specifically designed to handle the requirements of transmitting data wirelessly?

Back 95

Wireless Application Protocol (WAP)

Front 96

What does the WAP gateway do?

Back 96

Translates between HTTP and WAP

Front 97

Which type of network firewall is typically the easiest to configure and the fastest in operation?

Back 97

A packet filter network firewall

Front 98

What network media is the most susceptible to RF interference and eavesdropping?

Back 98

Wi-Fi

Front 99

Why are removable media, such as flash drives and CDs, a security concern?

Back 99

Removable media can be a source of data theft or a point of virus infection.

Front 100

What common name is given to the following specific implementations: compact flash, memory sticks, and secure digital cards?

Back 100

Flash cards