Examples of comptia security+ get certified get ahead sy0 401 study guide

New Questions 9

The Chief Executive Officer (CEO) Joe notices an increase in the wireless signal in this office and thanks the IT director for the increase in network speed, Upon investigation the IT department finds an access point hidden in the dropped ceiling outside of joeu2021s office. Which of the following types of attack is MOST likely occurring?

A. Packet sniffing

B. Bluesnarfing

C. Man-in-the-middle

D. Evil twin

New Questions 10

A technician has installed new vulnerability scanner software on a server that is joined to the company domain. The vulnerability scanner is able to provide visibility over the patch posture of all companyu2021s clients. Which of the following is being used?

A. Gray box vulnerability testing

B. Passive scan

C. Credentialed scan

D. Bypassing security controls

New Questions 11

A forensic analyst is reviewing electronic evidence after a robbery. Security cameras installed at the site do not record any footage. Which of the following types of controls was being used?

A. Detective

B. Corrective

C. Deterrent

D. Preventive

New Questions 12

An organization has hired a penetration tester to test the security of its ten web servers. The penetration tester is able to gain root/administrative access in several servers by exploiting vulnerabilities associated with the implementation of SMTP, POP, DNS, FTP, Telnet, and IMAP. Which of the following recommendations should the penetration tester provide to the organization to better protect their web servers in the future?

A. Use a honeypot

B. Disable unnecessary services

C. Implement transport layer security

D. Increase application event logging

New Questions 13

Which of the following authentication services combines authentication and authorization in a use profile and use UDP?

A. LDAP

B. Kerberos

C. TACACS+

D. RADIUS

New Questions 14

A chief information officer (CIO) is concerned about PII contained in the organizationu2021s various data warehouse platforms. Since not all of the PII transferred to the organization is required for proper operation of the data warehouse application, the CIO requests the in needed PII data be parsed and securely discarded. Which of the following controls would be MOST appropriate in this scenario?

A. Execution of PII data identification assessments

B. Implementation of data sanitization routines

C. Encryption of data-at-rest

D. Introduction of education programs and awareness training

E. Creation of policies and procedures

New Questions 15

A security assurance officer is preparing a plan to measure the technical state of a customeru2021s enterprise. The testers employed to perform the audit will be given access to the customer facility and network. The testers will not be given access to the details of custom developed software used by the customer. However the testers with have access to the source code for several open source applications and pieces of networking equipment used at the facility, but these items will not be within the scope of the audit. Which of the following BEST describes the appropriate method of testing or technique to use in this scenario? (Select TWO)

A. Social engineering

B. All source

C. Black box

D. Memory dumping

E. Penetration

New Questions 16

A new security policy being implemented requires all email within the organization be

digitally signed by the author using PGP. Which of the following would needs to be created for each user?

A. A certificate authority

B. A key escrow

C. A trusted key

D. A public and private key

New Questions 17

The SSID broadcast for a wireless router has been disabled but a network administrator notices that unauthorized users are accessing the wireless network. The administor has determined that attackers are still able to detect the presence of the wireless network despite the fact the SSID has been disabled. Which of the following would further obscure the presence of the wireless network?

A. Upgrade the encryption to WPA or WPA2

B. Create a non-zero length SSID for the wireless router

C. Reroute wireless users to a honeypot

D. Disable responses to a broadcast probe request

New Questions 18

A wireless site survey has been performed at a company. One of the results of the report is that the wireless signal extends too far outside the building. Which of the following security issues could occur as a result of this finding?

A. Excessive wireless access coverage

B. Interference with nearby access points

C. Exhaustion of DHCP address pool

D. Unauthorized wireless access