CompTIA Security+ (SY0-601) Practice Exam #2

Answer the fill-in-the-blank by typing one of the following type of attacks:

Integration    Deployment    Monitoring    Delivery

Which of the following products uses the Software as a Service (SaaS) cloud model? (Choose all the apply.)

Your company migrates its infrastructure to the public cloud because of the advantages the cloud offers. Which of the following options are advantages of using public cloud services? (Choose all that apply.)

Which of the following part(s) of the Authentication, Authorization, and Accounting (AAA) is responsible for measuring the resources a user consumes during access to a system?

You have been tasked to find a way to transform a plain text sensitive file into a non-readable form and send it through the web. Which of the following technique will you use to send the file through the web and only authorized parties can understand the information?

The attacker connects to a switch port and starts sending a very large number of Ethernet frames with a different fake source MAC address. The switch’s MAC address table becomes full and now it’s not able to save more MAC address, which means it enters into a fail-open mode and starts behaving like a network Hub. Frames are flooded to all ports, similar to a broadcast type of communication. The attacker’s machine will be delivered with all the frames between the victim and other machines. The attacker will be able to capture sensitive data from the network.

Given the above scenario, identify the Layer 2 type of attack.

In which of the following wireless network attacks the attacker set up a fraudulent Wi-Fi access point that appears to be legitimate but it is used to eavesdrop wireless communications?

Answer the fill-in-the-blank by typing one of the following types of attacks:

Jamming    Disassociation    Bluesnarfing    Bluejacking

There are two main techniques for driver manipulating: Shimming and Refactoring. Shiming is the process of changing a computer program’s internal structure without modifying its external functional behavior or existing functionality. (True/False)

In which of the following API attacks does the attacker intercept communications between an API endpoint and a client in order to steal and/or alter the confidential data that is passed between them?

A member of the company asks for a financial transfer by sending an encrypted message to the financial administrator. An attacker eavesdrops on this message, captures it, and is now in a position to resend it. Because it’s an authentic message that has simply been resent, the message is already correctly encrypted and looks legitimate to the financial administrator. Then the financial administrator is likely to respond to this new request, that response could include sending a large sum of money to the attacker’s bank account.

Which of the following type of attack is described above?

Which of the following options are considered as request forgery attacks? (Choose all that apply)

Given the following injection attacks, which one allows an attacker to interfere with the queries that an application makes to its database?

What type of attack is when an attacker takes over a regular user account on a network and attempts to gain administrative permissions?

Which of the following attacks is known as URL hijacking?

The type of hackers that are experts in compromising computer security systems and use their abilities for good, ethical, and legal purposes rather than bad, unethical, and criminal purposes is commonly known as:

The technique of redirecting victims from a current page to a new URL which is usually a phishing page that impersonates a legitimate site and steals credentials from the victims is known as:

Which of the following cybersecurity testing exercise team does not focus exclusively on attacking or defending, but they do both?

__________ is the first step where hacker gathers as much information as possible to find ways to intrude into a target system or at least decide what type of attacks will be more suitable for the target.

The document that lists out the specifics of your penetration testing project to ensure that both the client and the engineers working on a project know exactly what is being tested when it’s being tested, and how it’s being tested is known as:

You have been hired as a penetration tester for a company to locate and exploit vulnerabilities in its target’s outward-facing services. You are not provided with any architecture diagrams or source code. This means that you are relying on dynamic analysis of currently running programs and systems within the target network.

Which of the following pentesting assignments are you currently on?

Which of the following options is a dictionary that provides definitions for publicly disclosed cybersecurity vulnerabilities and exposures?

You have set up an Intrusion detection system (IDS) and suddenly the IDS identifies an activity as an attack but the activity is acceptable behavior. The state, in this case, is known as:

A zero-day attack is an attack that exploits a potentially serious software security weakness that the vendor or developer may be unaware of.  (True/False)

Which of the following statements are true regarding Cloud-based security vulnerabilities? (Choose all the apply)

_________________ describes a period of time in which an enterprise’s operations must be restored following a disruptive event, e.g., a cyberattack, natural disaster, or communications failure.

Answer the fill-in-the-blank by typing one of the following type of attacks:

Inspection    Survey    Check    Scan

Which of the following features will you use to remotely clear your phones’ data in the event of losing your phone?

Which of the following technologies will you use in order to send instant notifications to your subscribed users each time you publish a new blog post on your website?

You have been tasked to implement a solution to send product offers to consumers’ smartphones when they trigger a search in a particular geographic location, enter a mall, neighborhood, or store.

What solution will you implement in order to achieve that?

It has been noticed that the Wi-Fi of your company is slow with intermittent loss of connection. After investigation, you noticed that it was caused by channel interference.

Which of the following solutions will you implement to overcome issues such as channel interference when you build WLANs?

Which of the following options are authentication protocols? (Choose all the apply)

Which of the following options are cryptographic protocols? (Choose all the apply)

For security and monitoring purposes your company instructed you to implement a solution so that all packets entering or exiting a port should be copied and then should be sent to a local interface for monitoring.

Which of the following solution will you implement in order to meet the requirement?

The type of network hardware appliance which can help protect networks against combined security threats, including malware and attacks that simultaneously target separate parts of the network is known as?

As a security expert of your company you are responsible for preventing unauthorized (rogue) Dynamic Host Configuration Protocols servers from offering IP addresses to the clients (users).

Which of the following security technology will you implement to meet the requirement?

A/An _______________ is a contract between a service provider and its customers that documents what services the provider will furnish and defines the service standards the provider is obligated to meet.

_________________ measures the predicted time that passes between one previous failure of a mechanical/electrical system to the next failure during normal operation. In simpler terms, it helps you predict how long an asset can run before the next unplanned breakdown happens.

_________________ is the average time it takes to recover from a product or system failure. This includes the full time of the outage—from the time the system or product fails to the time that it becomes fully operational again.

A ___________________ is a legally enforceable contract that establishes confidentiality between two parties—the owner of protected information and the recipient of that information.

Which of the following VPN solutions is used to connect a personal user device to a remote server on a private network?

Answer the fill-in-the-blank by typing one of the following words:

Security    Filter    Control    Service

What technique is used for IP address conservation by making private IP addresses to connect to the Internet?

WiFi ____________ Setup is a wireless network security standard that tries to make connections between a router and wireless devices faster, easier, and more secure.

You have been tasked to implement a security solution so all the network events from your company should be recorded in a central database for further analysis.

Which of the following security solutions will you implement to meet the requirement?

You have been tasked to configure the Wi-Fi of your company’s LAN to allow certain workstations to have access to the Internet and the rest to be blocked.

Which of the following security technology will you implement to meet the requirement?

In cloud computing, the ability to scale up and down resources based on the user’s needs is known as:

Answer the fill-in-the-blank by typing one of the following types of authentication:

Security    Single    Sign    Service

Which of the following authentication protocols allows you to use an existing account to sign in to multiple websites, without needing to create new passwords?

A _____________ certificate is a digital certificate that’s not signed by a publicly trusted certificate authority (CA). These certificates are created, issued, and signed by the company or developer who is responsible for the website or software being signed.

Which of the following process describes how long businesses need to keep a piece of information (a record), where it’s stored, and how to dispose of the record when its time?

Which of the following process is designed to protect personnel or assets and make sure they can function quickly when a disaster strikes (natural disasters, cyber-attacks)?

Wireshark is a command-line utility that allows you to capture and analyze network traffic going through your system. It is often used to help troubleshoot network issues, as well as a security tool. (True/False)

The log file of your company’s network status is updated frequently, and the most critical information is on the first five lines. You want to avoid opening the entire file each time, only to view the first five lines.

What command will you use to view only the first five lines of the log file?

You need to mitigate all the networking attacks that exploit open unused TCP ports on your system.

Which of the following command displays active TCP connections and ports on which the computer is listening?

Which of the following tools can you use to perform manual DNS lookups? Assuming you are working on a Linux environment. (Choose all that apply)

You have been hired by a company to identify and document all aspects of an asset’s configurations in order to create a secure template against which all subsequent configurations will be measured. What type of configuration management will you implement?

Your organization is working with a contractor to build a database. You need to find a way to hide the actual data from being exposed to the contractor. Which of the following technique will you use in order to allow the contractor to test the database environment without having access to actual sensitive customer information?

The software that monitors user activity and automatically prevents malware between cloud service users and cloud applications is known as:

You are working for a startup and recently the application you are developing experienced a large amount of traffic. As a result, the performance of the application was decreased. You have been instructed to implement a solution to efficiently distributing incoming network traffic across a group of backend servers to increase the performance of the APP.

Which of the following solutions will you implement to meet the requirement?

Recently the physical network adapter card from your company’s server broke. As a result, your co-workers couldn’t access important resources for hours. You have been instructed to implement a solution to eliminate this from happening again in the event of a network adapter failure.

Which of the following solutions will you implement to meet the requirement?

Which of the following types of social engineering techniques is the use of messaging systems to send an unsolicited message to large numbers of recipients for the purpose of commercial advertising, or for the purpose of non-commercial proselytizing?

A method by which authorized and unauthorized users are able to get around normal security measures and gain high-level user access (root access) on a computer system, network, or software application is known as:

Which of the following attacks occurs when someone infiltrates a system through an outside partner or provider with access to the systems and data?

The type of hackers that violates computer security systems without permission, stealing the data inside for their own personal gain or vandalizing the system is commonly known as:

A hacker wants to attack a network with the aim of maintaining ongoing access to the targeted network rather than to get in and out as quickly as possible with the ultimate goal of stealing information over a long period of time. What type of attacking technique will the hacker use in this case?

You have been tasked to access a remote computer for handling some administrative tasks over an unsecured network in a secure way.

Which of the following protocols will you use to access the remote computer to handle the administrative tasks?

Your manager is trying to understand the difference between SFTP and FTPS. So, he asked you to explain the difference between them.

Which of the following statements are correct? (Choose all that apply.)

You have been hired as a security expert to implement a security solution to protect an organization from external threats. The solution should provide the organization with a superior ability to identify attacks, malware, and other threats and also provide packet filtering capabilities, VPN support, and network monitoring.

Which of the following security solutions will you implement to meet the requirement?

Assuming you are working on a Windows environment, what command will you type to identify the number of hops and the time it takes for a packet to travel between your local computer and your web server?

You have been hired as a network security expert in a Network Operation Center. After reviewing the logs, you have noticed that an attacker has exploited a flaw in GeoTrust SSL and forced some connections to move to a weak cipher suite version of SSL/TLS.

What sort of attack you have just discovered?

Which of the following protocols are not secured and should be avoided (Choose TWO)?

You are trying to find an input value that will produce the same hash as a password. What type of attack are you performing?

You are trying to determine where your home office’s wireless network can be accessed from. Which of the following technique will you perform?

While reviewing the log server you discover that a user found and exploited a vulnerability in your web application to gain root privileges on the server. What sort of attack you have just discovered?

You are working as a cybersecurity analyst for a firm. Duties of this position include but are not limited to detect malware and anomalous network behaviors. After reviewing the network logs you discover that the firm’s network has been subjected to a series of advanced attacks over a period of time.

What sort of attack you have just discovered?

You received a troubleshooting ticket from your co-worker Marie. She reported an odd behavior which is caused by a virus on her workstation.  After isolating the workstation, you found out that Marie received an email from an unknown user with a .doc document inside. When Marie opened the .doc document her workstation started behaving oddly.

What is the MOST likely issue on Marie’s workstation?

An attacker wants to get users to connect to his malicious WAP by using a second wireless access point (WAP) that broadcasts the same SSID as a legitimate access point. What type of attack does he try to perform?

Which of the following type of information, phishing attacks aren’t intended to acquire?

A graduate intern asked you to explain to him what is zero-day vulnerability all about. Which of the following statements is true?

Your company is running an Intrusion Detection System on its network, and most of the time you get notified that legitimate traffic is reported as malicious traffic.

What BEST describes this scenario?

Given the following code snippet. What language is this code written in?

You notice that the CPU utilization of your company’s switches is high. After investigation, you discover that many fake MAC addresses fill up the entire MAC address table of each switch.

What sort of attack you have just discovered?

Which of the following is used in a distributed denial-of-service (DDoS) attack?

Adware is an example of what type of malicious software?

You have been tasked to create a new Access Control List on the company’s firewall to prevent any HTTP traffic from/to the network. Type the port number that needs to be added to the ACL rule.

Given the following firewall configuration requirements, type the correct port number to complete the access control rules.

Given the following firewall configuration requirements, type the correct port number to complete the access control rules.

Drag and drop the TCP/UDP port numbers into their respective protocol name.

You have been tasked to create a new Access Control List on the company’s firewall to prevent any FTP access to the webserver and permit any SSH access to the webserver.

Type the port numbers that need to be added to the ACL rule to complete the task.