COMPTIA SECURITY+ CERTMASTER PRACTICE
EXAMS | 100% CORRECT ANSWERS | LATEST
2025 VERSION
◉ Does the S/MIME protocol use certificates? Answer: yes
◉ Which two ports does FTP use? Answer: ports 20 and 21
◉ Which technique attempts to predict the likelihood that a threat
will occur and assigns monetary values in the event a loss occurs?
Answer: quantitative risk analysis
◉ Which IPSec mode is used to create a VPN between two gateways?
Answer: tunnel mode
◉ What is the most likely cause of a single computer communicating
with an unknown IRC server and scanning other systems on the
network? Answer: The computer is infected with a botnet.
◉ What does the acronym IDS denote? Answer: Intrusion Detection
System
,◉ Which encryption method is more scalable? Answer: Asymmetric
Encryption
◉ What is the purpose of DLP? Answer: Data Loss Prevention (DLP)
is a network system that monitors data on computers to ensure the
data is not deleted or removed.
◉ Which port number does NTP use? Answer: port 123
◉ Which backup method backs up every file on the server each time
it is run? Answer: A full backup
◉ What is the term for an unauthorized access that a network-based
intrusion detection system (NIDS) fails to detect? Answer: missed
detection or false negative
◉ Which alternate computing facility is the least expensive to
maintain before a disaster occurs? Answer: a cold site
◉ What are the three basic questions answered by the chain of
custody? Answer: who controlled the evidence, who secured the
evidence, and who obtained the evidence
,◉ Which term refers to the assurance that data has not been altered
in transmission? Answer: data integrity
◉ What is the purpose of Platform as a Service (PaaS) in cloud
computing? Answer: It provides not only a virtualized deployment
platform but also a value-added solution stack and an application
development platform.
◉ What does the acronym FCoE denote? Answer: Fibre Channel over
Ethernet
◉ At which OSI layer does IP Security (IPSec) operate? Answer: the
Network layer (Layer 3)
◉ What is meant by the term hardening? Answer: tightening control
using security policies to increase system security
◉ What do you use to control traffic from the Internet to the LAN
(local area network) by controlling the packets that are allowed to
enter the LAN? Answer: a firewall
◉ According to CompTIA's Security+ examination blueprint, what
are the four types of logs that you should monitor for mitigation and
deterrence? Answer: event logs, audit logs, security logs, and access
logs
, ◉ What are the two types of eye scans? Answer: iris scans and
retinal scans
◉ What are alternate terms for cross-site request forgery (XSRF)?
Answer: session riding or one-click attack
◉ What block cipher and key size (in bits) are used by the Clipper
Chip? Answer: The Skipjack block cipher and an 80-bit key length
◉ Why is GPS tracking often disabled? Answer: It is considered a
security threat. As long as GPS tracking is enabled and the mobile
device is powered on, the device (and possibly its user) can be
located.
◉ What is the name of the process for removing only the
incriminating data from the audit logs? Answer: scrubbing
◉ What ensures that a user is who he claims to be? Answer:
identification
◉ Which port number does SSH use? Answer: port 22
EXAMS | 100% CORRECT ANSWERS | LATEST
2025 VERSION
◉ Does the S/MIME protocol use certificates? Answer: yes
◉ Which two ports does FTP use? Answer: ports 20 and 21
◉ Which technique attempts to predict the likelihood that a threat
will occur and assigns monetary values in the event a loss occurs?
Answer: quantitative risk analysis
◉ Which IPSec mode is used to create a VPN between two gateways?
Answer: tunnel mode
◉ What is the most likely cause of a single computer communicating
with an unknown IRC server and scanning other systems on the
network? Answer: The computer is infected with a botnet.
◉ What does the acronym IDS denote? Answer: Intrusion Detection
System
,◉ Which encryption method is more scalable? Answer: Asymmetric
Encryption
◉ What is the purpose of DLP? Answer: Data Loss Prevention (DLP)
is a network system that monitors data on computers to ensure the
data is not deleted or removed.
◉ Which port number does NTP use? Answer: port 123
◉ Which backup method backs up every file on the server each time
it is run? Answer: A full backup
◉ What is the term for an unauthorized access that a network-based
intrusion detection system (NIDS) fails to detect? Answer: missed
detection or false negative
◉ Which alternate computing facility is the least expensive to
maintain before a disaster occurs? Answer: a cold site
◉ What are the three basic questions answered by the chain of
custody? Answer: who controlled the evidence, who secured the
evidence, and who obtained the evidence
,◉ Which term refers to the assurance that data has not been altered
in transmission? Answer: data integrity
◉ What is the purpose of Platform as a Service (PaaS) in cloud
computing? Answer: It provides not only a virtualized deployment
platform but also a value-added solution stack and an application
development platform.
◉ What does the acronym FCoE denote? Answer: Fibre Channel over
Ethernet
◉ At which OSI layer does IP Security (IPSec) operate? Answer: the
Network layer (Layer 3)
◉ What is meant by the term hardening? Answer: tightening control
using security policies to increase system security
◉ What do you use to control traffic from the Internet to the LAN
(local area network) by controlling the packets that are allowed to
enter the LAN? Answer: a firewall
◉ According to CompTIA's Security+ examination blueprint, what
are the four types of logs that you should monitor for mitigation and
deterrence? Answer: event logs, audit logs, security logs, and access
logs
, ◉ What are the two types of eye scans? Answer: iris scans and
retinal scans
◉ What are alternate terms for cross-site request forgery (XSRF)?
Answer: session riding or one-click attack
◉ What block cipher and key size (in bits) are used by the Clipper
Chip? Answer: The Skipjack block cipher and an 80-bit key length
◉ Why is GPS tracking often disabled? Answer: It is considered a
security threat. As long as GPS tracking is enabled and the mobile
device is powered on, the device (and possibly its user) can be
located.
◉ What is the name of the process for removing only the
incriminating data from the audit logs? Answer: scrubbing
◉ What ensures that a user is who he claims to be? Answer:
identification
◉ Which port number does SSH use? Answer: port 22
