CompTIA Security+ CertMaster - Domain 1.0 Exam
Practice Questions with Verified Answers 100%
Guaranteed Pass
A security engineer examined some suspicious error logs on a Windows server that showed attempts to
run shellcode to a web application. The shellcode showed multiple lines beginning with Invoke-
Command. What type of script is the suspicious code trying to run? - Answer PowerShell script
A web application's code prevents the output of any type of information when an error occurs during a
request. The development team cited security reasons as to why they developed the application in this
way. What sort of security issues did the team have concerns about in this case? - Answer Revealing
database server configuration
A security operations center (SOC) analyst investigates the propagation of a memory-resident virus
across the network and notices a rapid consumption of network bandwidth, causing a Denial of Service
(DoS). What type of virus is this? - Answer A worm
After recently being targeted by multiple brute-force and dictionary attacks, a software engineer
employs salting and key stretching to enhance security for stored password hashes. How can salting and
key stretching bolster the security of the company's password hashes? - Answer It adds an additional
value to the stored hash with the purpose of frustrating attempts to crack hashes.
If a user's computer becomes infected with malware and used as part of a botnet, which of the following
actions can be initiated by the attacker? (Select all that apply.) - Answer -Launch a Distributed Denial of
Service (DDoS) attack
-Launch a mass-mail spam attack
-Establish a connection with a Command and Control server
By compromising a Windows XP application that ran on a Windows 10 machine, an attacker installed
persistent malware on a victim computer with local administrator privileges. What should the attacker
add to the registry, along with its files added to the system folder, to execute this malware? - Answer A
shim
, A hacker is trying to gain remote access to a company computer by trying brute force password attacks
using a few common passwords in conjunction with multiple usernames. What specific type of password
attack is the hacker most likely performing? - Answer Password spraying attack
An attacker used an exploit to steal information from a mobile device, which allowed the attacker to
circumvent the authentication process. Which of the following attacks was used to exploit the mobile
device? - Answer Bluesnarfing
An attacker is preparing to perform what type of attack when the target vulnerabilities include headers
and payloads of specific application protocols? - Answer Application attack
A malicious user sniffed credentials exchanged between two computers by intercepting communications
between them. What type of attack did the attacker execute? - Answer A Man-in-the-Middle attack
An attacker passes data that deliberately overfills an area of memory that the application reserves to
store the expected data. Which vulnerability exploit resulted from the attacker's actions? - Answer A
buffer overflow
Wi-Fi Protected Access (WPA) fixes critical vulnerabilities in the earlier wired equivalent privacy (WEP)
standard. Understanding that WPA uses a combination of an RC4 stream cipher and Temporal Key
Integrity Protocol (TKIP), this makes a wireless access point NOT vulnerable to which of the following
attacks when related to encrypted wireless packets? - Answer IV attacks
A Linux systems admin reported a suspicious .py file that ran on a daily schedule after business hours.
The file includes shellcode that would automate Application Programming Interface (API) calls to a web
application to get information. What type of script is executing this shellcode? - Answer Python script
A malicious actor is preparing a script to run with an Excel spreadsheet as soon as the target opens the
file. The script includes a few macros designed to secretly gather and send information to a remote
server. How is the malicious actor accomplishing this task? - Answer By using VBA code
An attacker wants to exploit a weakness in a password protocol to calculate the hash of a password.
What methods allow the attacker to match a hash to obtain authentication? (Select the best two
responses.) - Answer - Dictionary attack
- Rainbow table
Practice Questions with Verified Answers 100%
Guaranteed Pass
A security engineer examined some suspicious error logs on a Windows server that showed attempts to
run shellcode to a web application. The shellcode showed multiple lines beginning with Invoke-
Command. What type of script is the suspicious code trying to run? - Answer PowerShell script
A web application's code prevents the output of any type of information when an error occurs during a
request. The development team cited security reasons as to why they developed the application in this
way. What sort of security issues did the team have concerns about in this case? - Answer Revealing
database server configuration
A security operations center (SOC) analyst investigates the propagation of a memory-resident virus
across the network and notices a rapid consumption of network bandwidth, causing a Denial of Service
(DoS). What type of virus is this? - Answer A worm
After recently being targeted by multiple brute-force and dictionary attacks, a software engineer
employs salting and key stretching to enhance security for stored password hashes. How can salting and
key stretching bolster the security of the company's password hashes? - Answer It adds an additional
value to the stored hash with the purpose of frustrating attempts to crack hashes.
If a user's computer becomes infected with malware and used as part of a botnet, which of the following
actions can be initiated by the attacker? (Select all that apply.) - Answer -Launch a Distributed Denial of
Service (DDoS) attack
-Launch a mass-mail spam attack
-Establish a connection with a Command and Control server
By compromising a Windows XP application that ran on a Windows 10 machine, an attacker installed
persistent malware on a victim computer with local administrator privileges. What should the attacker
add to the registry, along with its files added to the system folder, to execute this malware? - Answer A
shim
, A hacker is trying to gain remote access to a company computer by trying brute force password attacks
using a few common passwords in conjunction with multiple usernames. What specific type of password
attack is the hacker most likely performing? - Answer Password spraying attack
An attacker used an exploit to steal information from a mobile device, which allowed the attacker to
circumvent the authentication process. Which of the following attacks was used to exploit the mobile
device? - Answer Bluesnarfing
An attacker is preparing to perform what type of attack when the target vulnerabilities include headers
and payloads of specific application protocols? - Answer Application attack
A malicious user sniffed credentials exchanged between two computers by intercepting communications
between them. What type of attack did the attacker execute? - Answer A Man-in-the-Middle attack
An attacker passes data that deliberately overfills an area of memory that the application reserves to
store the expected data. Which vulnerability exploit resulted from the attacker's actions? - Answer A
buffer overflow
Wi-Fi Protected Access (WPA) fixes critical vulnerabilities in the earlier wired equivalent privacy (WEP)
standard. Understanding that WPA uses a combination of an RC4 stream cipher and Temporal Key
Integrity Protocol (TKIP), this makes a wireless access point NOT vulnerable to which of the following
attacks when related to encrypted wireless packets? - Answer IV attacks
A Linux systems admin reported a suspicious .py file that ran on a daily schedule after business hours.
The file includes shellcode that would automate Application Programming Interface (API) calls to a web
application to get information. What type of script is executing this shellcode? - Answer Python script
A malicious actor is preparing a script to run with an Excel spreadsheet as soon as the target opens the
file. The script includes a few macros designed to secretly gather and send information to a remote
server. How is the malicious actor accomplishing this task? - Answer By using VBA code
An attacker wants to exploit a weakness in a password protocol to calculate the hash of a password.
What methods allow the attacker to match a hash to obtain authentication? (Select the best two
responses.) - Answer - Dictionary attack
- Rainbow table
