Security Part 3

Front 1

Which of the following is a method of encrypting email?

Back 1

S/MIME

Front 2

Which of the following risks would be reduced by implementing screen filters?

Back 2

Shoulder surfing

Front 3

Which of the following allows an attacker to hide the presence of malicious code by altering the
systems process and registry entries?

Back 3

Rootkit

Front 4

Which of the following will propagate itself without any user interaction?

Back 4

Worm

Front 5

An administrator wants to setup their network with only one public IP address. Which of the
following would allow for this?

Back 5

NAT

Front 6

An administrator wants to proactively collect information on attackers and their attempted methods
of gaining access to the internal network. Which of the following would allow the administrator to
do this?

Back 6

Honeypot

Front 7

Which of the following allows a technician to correct a specific issue with a solution that has not
been fully tested?

Back 7

Hotfix

Front 8

A technician wants to regulate and deny traffic to websites that contain information on
hacking.Which of the following would be the BEST solution to deploy?

Back 8

Internet content filter

Front 9

Which of the following is the LEAST intrusive way of checking the environment for known software
flaws?

Back 9

Vulnerability scanner

Front 10

If a certificate has been compromised, which of the following should be done?

Back 10

Put the certificate on the CRL.

Front 11

Which of the following requires an update to the baseline after installing new software on a
machine?

Back 11

Behavior-based HIDS

Front 12

Which of the following would be the MOST secure choice to implement for authenticating remote
connections?

Back 12

RADIUS

Front 13

Which of the following is the BEST way to reduce the number of accounts a user must maintain?

Back 13

SSO

Front 14

Which of the following can be used as a means for dual-factor authentication?

Back 14

Iris scan and proximity card

Front 15

After implementing file auditing, which of the following logs would show unauthorized usage
attempts?

Back 15

Security

Front 16

Which of the following type of attacks requires an attacker to sniff the network?

Back 16

Man-in-the-Middle

Front 17

If a user attempts to go to a website and notices the URL has changed, which of the following
attacks is
MOST likely the cause?

Back 17

DNS poisoning

Front 18

Which of the following attacks can be caused by a user being unaware of their physical
surroundings?

Back 18

Shoulder surfing

Front 19

Which of the following actions should be performed upon discovering an unauthorized wireless
access point attached to a network?

Back 19

Unplug the Ethernet cable from the wireless access point.

Front 20

Which of the following redundancy solutions contains hardware systems similar to the affected
organization, but does not provide live data?

Back 20

Warm site

Front 21

During the implementation of LDAP, which of the following will typically be changed within the
organizations software programs?

Back 21

Authentication credentials

Front 22

Which of the following would be MOST useful to determine why packets from a computer outside
the network are being dropped on the way to a computer inside the network?

Back 22

Firewall log

Front 23

Which of the following security policies is BEST to use when trying to mitigate the risks involved
with allowing a user to access company email via their cell phone?

Back 23

The cell phone should require a password after a set period of inactivity.

Front 24

An administrator has been asked to encrypt credit card datA. Which of the following algorithms
would be the MOST secure with the least CPU utilization?

Back 24

AES

Front 25

Which of the following algorithms is the LEAST secure?

Back 25

LANMAN

Front 26

Which of the following algorithms is MOST closely associated with the signing of email messages?

Back 26

PGP

Front 27

An executive uses PKI to encrypt sensitive emails sent to an assistant. In addition to encrypting
the body of the email, the executive wishes to encrypt the signature so that the assistant can verify
that the email actually came from the executive. Which of the following asymmetric keys should
the executive use to encrypt the signature?

Back 27

Private

Front 28

A technician needs to detect staff members that are connecting to an unauthorized website. Which
of the following could be used?

Back 28

Protocol analyzer

Front 29

An administrator suspects that multiple PCs are infected with a zombie. Which of the following
tools
could be used to confirm this?

Back 29

Antivirus

Front 30

Which of the following is an example of security personnel that administer access control
functions, but
do not administer audit functions?

Back 30

Separation of duties

Front 31

A malware incident has just been detected within a company. Which of the following should be the
administrators FIRST response?

Back 31

Containment

Front 32

Taking into account personal safety, which of the following types of fire suppression substances
would BEST prevent damage to electronic equipment?

Back 32

CO2

Front 33

Which of the following describes the process of securely removing information from media (E. g.
hard drive) for future use?

Back 33

Sanitization

Front 34

Which of the following principles should be applied when assigning permissions?

Back 34

Least privilege

Front 35

Which of the following type of strategies can be applied to allow a user to enter their username
and password once in order to authenticate to multiple systems and applications?

Back 35

Single sign-on

Front 36

User A is a member of the payroll security group. Each member of the group should have
read/write permissions to a sharE. User A was trying to update a file but when the user tried to
access the file the user was denieD. Which of the following would explain why User A could not
access the file?

Back 36

Rights are not set correctly

Front 37

Which of the following threats is the MOST difficult to detect and hides itself from the operating
system?

Back 37

Rootkit

Front 38

Which of the following methods is used to perform denial of service (DoS) attacks?

Back 38

Botnet

Front 39

Which of the following is an attack that is triggered by a specific event or by a date?

Back 39

Logic bomb

Front 40

Which of the following can an attacker use to gather information on a system without having a user
ID or password?

Back 40

Null session

Front 41

Which of the following is a way to logically separate a network through a switch?

Back 41

VLAN

Front 42

Which of the following is a security threat when a new network device is configured for first-time
installation?

Back 42

Use of default passwords

Front 43

Which of the following is an exploit against a device where only the hardware model and
manufacturer
are known?

Back 43

Default passwords

Front 44

A technician is implementing a new wireless network for an organization. The technician should be
concerned with all of the following wireless vulnerabilities EXCEPT:

Back 44

80211 modE.

Front 45

Which of the following tools will allow the technician to find all open ports on the network?

Back 45

Network scanner

Front 46

An organization is installing new servers into their infrastructurE. A technician is responsible for
making sure that all new servers meet security requirements for uptimE. In which of the following
is the availability requirements identified?

Back 46

Service level agreement

Front 47

After issuance a technician becomes aware that some keys were issued to individuals who are not
authorized to use them. Which of the following should the technician use to correct this problem?

Back 47

Certificate revocation list

Front 48

Password crackers are generally used by malicious attackers to:

Back 48

gain system access.

Front 49

Which of the following properly describes penetration testing?

Back 49

Penetration tests are generally used to demonstrate a weakness in a system and then provide
documentation on the weakness.

Front 50

Which of the following should a technician review when a user is moved from one department to
another?

Back 50

User access and rights