Security + practice exam

1

Which of the following policies applies to any requests that fall outside the criteria defined in an ACL?

1

A lightly protected subnet placed on the outside of the company's firewall consisting of publicly available servers is known as:

1

Which part of the 192.168.1.5/24 address identifies its network ID?

1

Which of the following acronyms refers to a solution allowing companies to cut costs related to managing of internal calls?

1

A solution that allows to make phone calls over a broadband Internet connection instead of typical analog telephone lines is known as:

1

Which of the following answers lists a /27 subnet mask?

1

What type of system can be compromised through phreaking?

1

Which of the following terms refers to a logical grouping of computers that allow computer hosts to act as if they were attached to the same broadcast domain, regardless of their physical location?

1

Which security measure is in place when a client is denied access to the network due to outdated antivirus software?

1

Which of the following terms refers to a technology that allows multiple operating systems to work simultaneously on the same hardware?

1

A security stance whereby a host is being granted / denied permissions based on its actions after it has been provided with the access to the network is known as:

1

Which of the following solutions is used to hide the internal IP addresses by modifying IP address information in IP packet headers while in transit across a traffic routing device?

1

VLAN membership can be set through: (Select all that apply)

1

In which of the cloud computing infrastructure types clients, instead of buying all the hardware and software, purchase computing resources as an outsourced service from suppliers who own and maintain all the necessary equipment?

1

Which of the following cloud service types would provide the best solution for a web developer intending to create a web app?

1

A cloud computing infrastructure type where applications are hosted over a network (typically Internet) eliminating the need to install and run the software on the customer's own computers is called:

1

The biggest advantage of public cloud is that all services provided through this type of cloud computing service model are offered free of charge.

1

A concept of effective security posture employing multiple tools and different techniques to slow down an attacker is known as: (Select 2 answers)

1

Which of the IPsec modes provides entire packet encryption?

1

Which of the following protocols is used in network management systems for monitoring network-attached devices?

1

Which of the following protocols transmit data in an unencrypted form? (Select all that apply)

1

A group that consists of SNMP devices and one or more SNMP managers is known as:

1

Which of the following protocols was designed as a secure replacement for Telnet?

1

A system used to convert a computer's host name into an IP address on the Internet is known as:

1

DNS database AAAA record identifies:

1

Which of the following protocols are used for securing HTTP connections? (Select 2 answers)

1

Which of the following answers refers to a suite of protocols used for connecting hosts on the Internet?

1

FTPS is an extension to the FTP that adds support for the Transport Layer Security (TLS) and the Secure Sockets Layer (SSL) cryptographic protocols.

1

The SCP protocol is used for:

1

Which of the protocols listed below is used by the PING utility?

1

Which of the following answers lists the IPv6 loopback address?

1

Which of the following answers refers to a networking standard for linking data storage devices over an IP network?

1

Which of the following protocols facilitate communication between SAN devices? (Select 2 answers)

1

The FTP protocol is designed for:

1

Which of the protocols listed below does not provide authentication?

1

Which of the following protocols was designed as a secure replacement for Telnet?

1

FTP runs by default on ports: (Select 2 answers)

1

Which of the following protocols run(s) on port number 22? (Select all that apply)

1

Port number 23 is used by:

1

Which of the following TCP ports is used by SMTP?

1

DNS runs on port:

1

Which of the following ports enables HTTP traffic?

1

Which of the following ports enable(s) retrieving email messages from a remote server? (Select all that apply)

1

Which of the port numbers listed below are used by NetBIOS? (Select all that apply)

1

IMAP runs on TCP port:

1

Which of the following TCP ports is used by HTTPS?

1

Which of the following answers lists the default port number for a Microsoft-proprietary remote connection protocol?

1

Which of the following protocols operate(s) at layer 3 (the network layer) of the OSI model? (Select all that apply)

1

In the OSI model, TCP resides at the:

1

A network protocol for secure file transfer over secure shell is called:

1

Which of the following wireless encryption schemes offers the highest level of protection?

1

Which of the wireless security protocols listed below has been deprecated in favor of newer standards due to known vulnerabilities?

1

Which of the following answers refers to an authentication framework frequently used in wireless networks and point-to-point connections?

1

A network access control method whereby the 48-bit address assigned to each network card is used to determine access to the network is known as:

1

Which of the following acronyms refers to a wireless network name?

1

Which of the following protocols was introduced to strengthen existing WEP implementations without requiring the replacement of legacy hardware?

1

Disabling SSID broadcast:

1

Which of the following protocols encapsulates EAP within an encrypted and authenticated TLS tunnel?

1

AES-based encryption mode implemented in WPA2 is known as:

1

An optimal WAP antenna placement provides a countermeasure against: (Select 2 answers)

1

Which of the following WAP configuration settings allows for adjusting the boundary range of the wireless signal?

1

Which of the following answers refers to a solution allowing administrators to block Internet access for users until they perform required action?

1

Which of the following antenna types would provide the best coverage for workstations connecting to a WAP placed in a central point of a typical office? (Select all that apply)

1

Which of the following is an example of a wireless site survey?

1

Which of the following examples falls into the category of technical security controls?

1

An antivirus software identifying non-malicious file as a virus due to faulty virus signature file is an example of:

1

Which of the following examples falls into the category of operational security controls?

1

Which of the following terms refers to a situation where no alarm is raised when an attack has taken place?

1

A policy outlining ways of collecting and managing personal data is known as:

1

Which of the following acronyms refers to a set of rules enforced in a network that restrict the use to which the network may be put?

1

One of the goals behind the mandatory vacations policy is to mitigate the occurrence of fraudulent activity within the company.

1

Which of the following answers refers to a concept of having more than one person required to complete a given task?

1

A security rule that prevents users from accessing information and resources that lie beyond the scope of their responsibilities is known as:

1

Which of the following acronyms refers to a risk assessment formula defining probable financial loss due to a risk over a one-year period?

1

Single Loss Expectancy (SLE) = Asset Value (AV) x Exposure Factor (EF)

The Exposure Factor (EF) used in the formula above refers to the impact of the risk over the asset, or percentage of asset lost when a specific threat is realized. Which of the following answers lists the EF value for an asset that is entirely lost?

1

A software or hardware that checks information coming from the Internet and depending on the applied configuration settings either blocks it or allows it to pass through is called

1

A device designed to forward data packets between networks is called

1

Allowing a program through a firewall is known as creating

1

A network device designed for managing the optimal distribution of workloads across multiple computing resources is called

1

The last default rule on a firewall is to

1

A computer network service that allows clients to make indirect network connections to other network services is called

1

A solution designed for filtering malicious / restricted content from entering corporate networks is known as

1

One of the measures for securing networking devices includes the practice of disabling unused ports

1

What type of protocols ensure the privacy of a VPN connection?

1

Which of the following answers refers to a dedicated device for managing secure connections established over an untrusted network, such as the Internet?

1

Which of the following acronyms refers to a network or host based monitoring system designed to automatically alert administrators of known or suspected unauthorized activity?

1

A software tool used to monitor and examine contents of network traffic is known as: (Select all that apply)

1

Which of the following answers list the protocol and port number used by a spam filter? (Select 2 answers)

1

Which of the following acronyms refers to a network security solution combining the functionality of a firewall with additional safeguards such as URL filtering, content inspection, or malware inspection?

1

Which of the following network security solutions inspects network traffic in real-time and has the capability to stop the ongoing attack?

1

Which of the following answers refers to a set of rules that specify which users or system processes are granted access to objects as well as what operations are allowed on a given object?

1

Which of the following actions can be taken by passive IDS? (Select 2 answers)

1

802.1x is an IEEE standard defining

1

An access control model in which access to resources is granted or denied depending on Access Control List (ACL) entries is also known as

1

Which type of Intrusion Detection System (IDS) relies on the previously established baseline of normal network activity in order to detect intrusions?

1

Which of the following security solutions provides a countermeasure against denial-of-service attack characterized by increasing number of half-open connections?

1

Which of the following protocols protects against switching loops?

1

Which type of Intrusion Detection System (IDS) relies on known attack patterns to detect an intrusion?

1

URL filtering restricts access to Internet sites based on which of the following criteria?

1

Which of the following acronyms refers to a firewall controlling access to a web server?

CompTIA Security+ Exam SY0-401 All 12 practice tests in one spot

Security + practice exam

Security + practice exam

Which of the following policies applies to any requests that fall outside the criteria defined in an ACL?

A lightly protected subnet placed on the outside of the company's firewall consisting of publicly available servers is known as:

Which part of the 192.168.1.5/24 address identifies its network ID?

Which of the following acronyms refers to a solution allowing companies to cut costs related to managing of internal calls?

A solution that allows to make phone calls over a broadband Internet connection instead of typical analog telephone lines is known as:

Which of the following answers lists a /27 subnet mask?

What type of system can be compromised through phreaking?

Which of the following terms refers to a logical grouping of computers that allow computer hosts to act as if they were attached to the same broadcast domain, regardless of their physical location?

Which security measure is in place when a client is denied access to the network due to outdated antivirus software?

Which of the following terms refers to a technology that allows multiple operating systems to work simultaneously on the same hardware?

A security stance whereby a host is being granted / denied permissions based on its actions after it has been provided with the access to the network is known as:

Which of the following solutions is used to hide the internal IP addresses by modifying IP address information in IP packet headers while in transit across a traffic routing device?

VLAN membership can be set through: (Select all that apply)

In which of the cloud computing infrastructure types clients, instead of buying all the hardware and software, purchase computing resources as an outsourced service from suppliers who own and maintain all the necessary equipment?

Which of the following cloud service types would provide the best solution for a web developer intending to create a web app?

A cloud computing infrastructure type where applications are hosted over a network (typically Internet) eliminating the need to install and run the software on the customer's own computers is called:

The biggest advantage of public cloud is that all services provided through this type of cloud computing service model are offered free of charge.

A concept of effective security posture employing multiple tools and different techniques to slow down an attacker is known as: (Select 2 answers)

Which of the IPsec modes provides entire packet encryption?