Sec+ Mpq's Ul 4-1 Exam C

Front 1

Common access cards use which of the following authentication models?

Back 1

PKI

Front 2

Which of the following does a second authentication requirement mitigate when accessing privileged areas of a website, such as password changes or user profile changes?

Back 2

Cookie Stealing

Front 3

Which of the following is true concerning WEP security?

Back 3

The WEP key initialization process if flawed

Front 4

Which of the following are used to implement VPNs?

Back 4

IPSec

SSL

Front 5

Matt, a developer, recently attended a workshop on a new application. The developer installs the new application on a production system to test the functionality. Which of the following is MOST likely affected?

Back 5

Initial baseline configuration

Front 6

Which of the following application attacks is used to gain access to SEH?

Back 6

Buffer overflow

Front 7

In planning for a firewall implementation, Pete, a security administrator, needs a tool to help him understand what traffic patterns are normal on his network. Which of the following tools would help Pete determine traffic patterns?

Back 7

Protocol analyzer

Front 8

During a penetration test from the Internet, Jane, the system administrator, was able to establish a connection to an internal router, but not successfully login to it. Which ports and protocols are MOST likely to be open on the firewall?
(4)

Back 8

22

23

SSH

Telnet

Front 9

Which of the following protocols would be implemented to secure file transfers using SSL?

Back 9

FTPS

Front 10

Which of the following should the security administrator do when taking a forensic image of a hard drive?

Back 10

Hash the original hard drive, image the original hard drive, and hash the image

Front 11

A company that purchased an HVAC system for the datacenter is MOST concerned with which of the following?

Back 11

Availability

Front 12

Jane, an administrator, needs to transfer DNS zone files from outside of the corporate network. Which of the following protocols must be used?

Back 12

TCP

Front 13

Which of the following should be implemented to stop an attacker from mapping out addresses and/or devices on a network?

Back 13

Secure zone transfers

Front 14

Mike, a security analyst, has captured a packet with the following payload: GET ..//..//..//..system32\/cmd.exe
Which of the following is this an example of?

Back 14

Directory traversal

Front 15

Which of the following security concepts are used for data classification an labeling to protect data?
(2)

Back 15

Need to know

Authorization

Front 16

Sara from IT Governance wants to provide a mathematical probability of an earthquake using facts and figures. Which of the following concepts would achieve this?

Back 16

Quantitative Analysis

Front 17

Which of the following protocols would be used to verify connectivity between two remote devices at the LOWEST level of the OSI model?

Back 17

ICMP

Front 18

Users at a company report that a popular news website keeps taking them to a web page with derogatory content. This is an example of which of the following?

Back 18

DNS poisoning

Front 19

Which of the following protocols is used to authenticate the client and server's digital certificate?

Back 19

TLS

Front 20

Which of the following symmetric key algorithms are examples of block ciphers?
(3)

Back 20

3DES

AES

Blowfish

Front 21

During an anonymous penetration test, Jane, a system administrator, was able to identify a shared print spool directory, and was able to download a document from the spool. Which statement BEST describes her privileges?

Back 21

All users have read access to the file

Front 22

Which of the following devices can Sara, an administrator, implement to detect and stop known attacks?

Back 22

Signature-based NIPS

Front 23

Mike, a network administrator, has been asked to passively monitor network traffic to the company's sales websites. Which of the following would be BEST suited for this task?

Back 23

NIPS

Front 24

A buffer overflow can result in which of the following attack types?

Back 24

Privilege escalation

Front 25

Which of the following is an application security coding problem?

Back 25

Error and exception handling

Front 26

Which of the following anti-malware solutions can be implemented to mitigate the risk of phishing?

Back 26

Anti-spam

Front 27

Which of the following must Jane, a security administrator, implement to ensure all wired ports are authenticated before a user is allowed onto the network?

Back 27

Network Access Control