Comptia Security+ Certification Practice Test 2

Front 1

Which of the following is an example of a biometric authentication?

Back 1

(a) Smart card
(b) User name
(c) Fingerprint scanner
(d) Password

Hint 1

(c) Fingerprint scanner

Front 2

Steganography is used for:

Back 2

(a) Hiding data within another piece of data
(b) Checking data integrity
(c) Hashing
(d)Data encryption

Hint 2

(a) Hiding data within another piece of data

Front 3

Penetration testing: (Select all that apply)

Back 3

(a) Actively tests security controls
(b) Exploits vulnerabilities
(c) Bypasses security controls
(d) Passively tests security controls
(e) Only identifies lack of security controls

Hint 3

(a) Actively tests security controls
(b) Exploits vulnerabilities
(c) Bypasses security controls

Front 4

Public/private key pair concept is based on:

Back 4

(a) WEP
(b) PII
(c) Asymmetric encryption
(d) Symmetric encryption

Hint 4

(c) Asymmetric encryption

Front 5

A monitored host or network specifically designed to detect unauthorized access attempts is also known as:

Back 5

(a) Flood guard
(b) Honeypot
(c) Botnet
(d) Rogue access point

Hint 5

(b) Honeypot

Front 6

What type of system can be compromised through phreaking?

Back 6

(a) PBX
(b) ATX
(c) PGP
(d) BIOS

Hint 6

(a) PBX

Front 7

Which of the following acronyms refers to a lightweight consumer electronic device?

Back 7

(a) PED
(b) KDC
(c) SLED
(d) CA

Hint 7

(a) PED

Front 8

What are the features of Elliptic Curve Cryptography (ECC)? (Select two answers)

Back 8

(a) Suitable for small wireless devices
(b) Symmetric encryption
(c) High processing power requirements
(d) Asymmetric encryption
Shared key

Hint 8

(a) Suitable for small wireless devices
(d) Asymmetric encryption
Shared key

Front 9

The term war driving refers to:
Scanning for unsecured wireless networks while driving in a car

Back 9

(a) Scanning for unsecured wireless networks while driving in a car
(b) Penetration testing
(c) Vulnerability scanning
(d) Marking unsecured wireless networks

Hint 9

(a) Scanning for unsecured wireless networks while driving in a car

Front 10

Which of the following prevents a computer screen from being viewed by others nearby?

Back 10

(a) Privacy screen
(b) Multi-factor authentication
(c) HIPS
(d) Firewall

Hint 10

(a) Privacy screen

Front 11

Which of the following measures should be used in order to prevent shoulder surfing? (Select two answers)

Back 11

(a) Cable locks
(b) Privacy filters
(c) Security guards
(d) Screensavers
(e) Video surveillance

Hint 11

(b) Privacy filters
(d) Screensavers

Front 12

Allowing a program through a firewall is also referred to as creating:

Back 12

(a) Access Point
(b) Session
(c) Tunnel
(d) Exception

Hint 12

(d) Exception

Front 13

802.1X is an IEEE standard defining:

Back 13

(a) Port-based network access control
(b) Token ring networks
(c) VLAN tagging
(d) Wireless networking

Hint 13

(a) Port-based network access control

Front 14

Which of the following protocols was designed as a secure replacement for Telnet?

Back 14

(a) FTP
(b) ICMP
(c) IPv6
(d) SSH

Hint 14

(d) SSH

Front 15

Which of the following provides confidentiality?

Back 15

(a) SHA-1
(b) AES
(c) RAID 0
(d) MD5

Hint 15

(b) AES

Front 16

Malicious code activated by a specific event is also known as:

Back 16

(a) Logic bomb
(b) Computer worm
(c) Denial of service
(d) Xmas attack

Hint 16

(a) Logic bomb

Front 17

Which of the following is an acronym for a risk assessment formula defining probable financial loss due to a risk over a one-year period?

Back 17

(a) SLE
(b) ARO
(c) ALE
(d) UAT

Hint 17

(c) ALE

Front 18

Which of the following solutions is used to hide the internal IP addresses by modifying IP address information in IP packet headers while in transit across a traffic routing device?

Back 18

(a) ACL
(b) DMZ
(c) NAT
(d) NAC

Hint 18

(c) NAT

Front 19

Unsolicited messages received over an instant messaging system are also known as:

Back 19

(a) Spoofing
(b) Spim
(c) Bluejacking
(d) Spam

Hint 19

(b) Spim

Front 20

Gaining unauthorized access to a Bluetooth device is also referred to as:

Back 20

(a) Bluesnarfing
(b) Bluejacking
(c) Vishing
(d) Pharming

Hint 20

(a) Bluesnarfing

Front 21

RAID 0: (Select two answers)

Back 21

(a)Requires at least two drives to implement
(b) Needs a separate disk controller for each drive
(c) Requires at least three drives to implement
(d) Offers fault tolerance and redundancy
(e) Doesn't offer fault tolerance

Hint 21

(a)Requires at least two drives to implement
(e) Doesn't offer fault tolerance

Front 22

A cloud computing infrastructure type wherein applications are hosted over a network (typically Internet) eliminating the need to install and run the software on the customer's own computers is called:

Back 22

(a) IaaS
(b) Thick client
(c) Virtualization
(d) SaaS

Hint 22

(d) SaaS

Front 23

A group that consists of SNMP devices and one or more SNMP managers is called:

Back 23

(a) SNMP community
(b) Management Information Base (MIB)
(c) Network Management System (NMS)
SNMP trap

Hint 23

(a) SNMP community

Front 24

Which of the following devices operates at Layer 3 of the OSI model?

Back 24

(a) Switch
(b) Passive hub
(c) Active hub
(d) Router

Hint 24

(d) Router

Front 25

Using a telephone system to manipulate a user into disclosing confidential information is called:

Back 25

(a) Tailgating
(b) Spoofing
(c) Shoulder surfing
(d) Vishing

Hint 25

(d) Vishing