Sec+ Mpq's Ul 4-1 Exam A

Front 1

Which of the following is a best pactice before deploying a new desktop operating system image?

Back 1

Verify operating system security settings

Front 2

Which of the following is characterized by an attacker attempting to map out an organization's staff hierarchy in order to send targeted emails?

Back 2

Whaling

Front 3

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?

Back 3

Security

Front 4

An administrator wants to minimze the amount of time needed to perform backups during the week. It is also acceptable to the adminstrator for restoration to take an extended time frame. Which of the following strategies would the adminsitrator MOST likely implement?

Back 4

Full backups on the weekend and incremental during the week

Front 5

Which of the following access controls enforces permissions based on data labeling at specific levels?

Back 5

Mandatory access control

Front 6

A user in the company is in charge of various financial roles but needs to prepare for an upcoming audit. they use the same account to access each financial system. Which of the following security controls will MOST likely be implemented within the company?

Back 6

Separation of duties

Front 7

Which of the following defines an organiation goal for acceptable downtime during a disaster or other contingency?

Back 7

RTO

Front 8

A sytem adminstrator decides to use SNMPv3 on the network router in AuthPri mode. Which of the following algorithm combinations would be valid?

Back 8

3DES-MD5

Front 9

Which of the following are encryption alogithms that can use a 128-bit key size? (2)

Back 9

AES

Twofish

Front 10

Which of the following transportation encryption protocols should be used to ensure maximum security between a web browser and a web server?

Back 10

TLS

Front 11

Which of the following MOST interferes with network-based detection techniques?

Back 11

SSL

Front 12

Elliptic curver cryptography:
(2)

Back 12

is mostly used in embedded devices

produces higher strength encryption with shorter keys

Front 13

A CRL is comprised of:

Back 13

public keys

Front 14

In Which of the following categories would creating a corporate privacy policy, drafting acceptible use policies, and group based access control be classified?

Back 14

Best practice

Front 15

Which of the following application security testing techniques is implement when an automated system generates random input data?

Back 15

Fuzzing

Front 16

Which of the following can use RC4 for encryption?
(2)

Back 16

SSL

WEP

Front 17

Use of a smart card to authenticate remote servers remains MOST susceptible to which of the following attacks?

Back 17

Malicous code on the local system

Front 18

In Which of the following scenarious is PKI LEAST hardened?

Back 18

A malcious CA certificate is loaded on all the clients

Front 19

Which of the following assessments would Pete, the security administrator, use to actively test that an application's security controls are in place?

Back 19

Penetration test

Front 20

Configuring the mode, encryption methods, and security associations are part of which of the following?

Back 20

IPSec

Front 21

All of the following are valid cryptographic hash functions EXCEPT:

Back 21

RC4

Front 22

A security administrator wants to check user password complexity. Which of the following is the BEST tool to use?

Back 22

Passwork cracker