CompTIA Security+ Percipio Study with Complete Solutions.
What would a secret formula for a medicine classify as?
A) Private
B) Public
C) Confidential
D) Proprietary correct answers D) Proprietary
It is YOUR formula that YOU own, so it is YOUR property.
Which of the following are used to measure integrity of an application? (Select all that apply)
A) Quality
B) Confidentiality
C) Maintainability
D) Reliability correct answers All of them are used (A,B,C,D)
In which of the following situations, creating a manual snapshot of an operating system is
recommended?
A) Before updates or major system changes
B) During security configuration
C) After an update or a major system change
D) Periodically at various times correct answers A) Before updates or major system changes
This allows you to back up in case of failures
You have recently formatted your system after detecting a remote access trojan (RAT). You
want to ensure that the RAT is no longer able to get into your system. Which of the following
methods should you use? (Select all that apply)
A) Keep the antivirus up to date
B) Avoid downloading unknown programs
C) Avoid opening e-mail attachments from unknown senders
D) Block unused ports and shut down unwanted services
E) Monitor outgoing traffic regularly correct answers All of them (A, B, C, D, E) are standard
information security practices.
An internal user has been able to gain access to another user's internal Website password and
logged to his account. How would you classify this event as?
A) Event Anomaly
B) Security Misconfiguration
C) Access Violation
D) Invalid Login attempt correct answers C) Access Violation
,The user is using another person's credentials to access the internal website. You should NEVER
give your password out to anyone (or use someone else's credentials).
As part of a recovery drill, an organization decides to move to a warm site, until the primary
location is back in action. Which of the following business continuity plan is performed here?
A) Alternate business process
B) Tabletop exercise
C) Failover
D) Location selection correct answers C) Failover
Failover is a process of switching over to another option when the primary option becomes
unavailable.
The IT helpdesk has been receiving complaints that when they connect their laptops through the
Wi-Fi connection, they are not able to access the organizational network. However, they can
access the Internet. On conducting a security scan, the IT helpdesk engineer notices that the users
are being routed to an access point that has not been installed by the organization.
Which of the following wireless attack does this scenario depict?
A) Jamming
B) Rogue AP
C) Packet sniffing
D) Evil Twin correct answers B) Rogue AP
Rouge Access Point (Rouge AP) is a wireless threat that bypasses all wired security measures
(firewalls, for example) by providing access to a wired enterprise network. Rogue access points
could potentially allow unchallenged access to the network by any wireless user or client in the
physical vicinity.
You need to configure an encrypted E-mail for users within the network. The E-mail must be in
its secure form so that it is not transmitted in the clear-text form using a messaging client. What
should you do?
A) Use the S/MIME protocol
B) Install SSL/TLS certificates on the messaging server
C) Configure HTTPS
D) Install the SSL/TLS certificate on all user systems correct answers A) Use the S/MIME
protocol
S/MIME (Secure/Multipurpose Internet Mail Extensions) Is used to encrypt emails at client side.
S/MIME is a standard for public key encryption and signing of MIME data.
Which of the following security protocol is used by EAP-FAST?
,A) Kerberos
B) RADIUS
C) Transport Layer Security (TLS)
D) Diameter correct answers C) Transport Layer Security (TLS)
FAST (Flexible Authentication via Secure Tunneling) uses TLS to perform authentication.
A forensic expert finds a hidden encrypted file that is useful for legal proceedings. Which of the
following actions is performed by the expert here?
A) Collecting the evidence
B) Recovery of the evidence
C) Keeping legal hold of the evidence
D) Preservation of the evidence correct answers B) Recovery of the evidence
Which of the following can help to identify a computer hoax?
A) Circuit-level gateways
B) Packet-filtering firewall
C) Application-level gateways
D) Spam filter correct answers D) Spam filter
Common spam filters will identify and help prevent hoaxes
Which of the following devices are likely to implement home automation?
A) IoT
B) Windows Embedded Compact
C) RTOS
D) Raspberry Pi
E) HVAC correct answers A) IoT
IoT devices include Smart devices (i.e., smart TV, Roomba, Alexa, Google Home)
You are creating a new network. You want to break the network into smaller networks using
routers so that you can control what traffic can enter or leave each of the networks. What should
you do?
A) Create multiple VLANs
B) Create multiple collision domains
C) Create an airgap
D) Create multiple broadcast domains correct answers D) Create multiple broadcast domains
A broadcast domain is a collection of network devices that receive broadcast traffic from each
other.
, https://networklessons.com/cisco/ccna-routing-switching-icnd1-100-105/broadcast-domain
A user enables the Bluetooth in a mobile and receives an unsolicited message from an unknown
source. What type of wireless attack has happened in this scenario?
A) Bluejacking
B) Bluebugging
C) Bluesnarfing
D) Bluetoothing correct answers A) Bluejacking
Not to be confused with Bluetoothing, which is similar but with a different purpose (usually to
flirt).
A user enables the Bluetooth in a mobile and their private information is stolen. What type of
wireless attack has happened in this scenario?
A) Bluejacking
B) Bluebugging
C) Bluesnarfing
D) Bluetoothing correct answers C) Bluesnarfing
Not to be confused with Bluebugging, which results in the device being in complete control of
the hacker.
Consider a scenario where there are three parties, say A, B, and C, in a two-key communication
system. B sends a message to A that is encrypted with A's public key, whose size is 128 bits. C is
in possession of A's public key and tries to decrypt B's message that was sent to A. However, C
fails to decrypt the message. Which of the following is a valid reason for the failed decryption?
A) C should use A's private key to decrypt the message
B) C should use B's public key to decrypt the message
C) C should use C's private key to decrypt the message
D) The public key of A that C possesses may be corrupt correct answers A) C should use A's
private key to decrypt the message
In a two-key (asymmetric algorithm) communication, the sender uses the receiver's public key to
encrypt the message, which then must be decrypted using the receiver's private key. Any attempt
to use an invalid key will fail.
Your organization identifies a third-party service provider to secure the information in the cloud.
Which of the following risk response technique is performed by your organization here?
A) Transfer
B) Mitigate
C) Contingency
D) Accept correct answers A) Transfer
What would a secret formula for a medicine classify as?
A) Private
B) Public
C) Confidential
D) Proprietary correct answers D) Proprietary
It is YOUR formula that YOU own, so it is YOUR property.
Which of the following are used to measure integrity of an application? (Select all that apply)
A) Quality
B) Confidentiality
C) Maintainability
D) Reliability correct answers All of them are used (A,B,C,D)
In which of the following situations, creating a manual snapshot of an operating system is
recommended?
A) Before updates or major system changes
B) During security configuration
C) After an update or a major system change
D) Periodically at various times correct answers A) Before updates or major system changes
This allows you to back up in case of failures
You have recently formatted your system after detecting a remote access trojan (RAT). You
want to ensure that the RAT is no longer able to get into your system. Which of the following
methods should you use? (Select all that apply)
A) Keep the antivirus up to date
B) Avoid downloading unknown programs
C) Avoid opening e-mail attachments from unknown senders
D) Block unused ports and shut down unwanted services
E) Monitor outgoing traffic regularly correct answers All of them (A, B, C, D, E) are standard
information security practices.
An internal user has been able to gain access to another user's internal Website password and
logged to his account. How would you classify this event as?
A) Event Anomaly
B) Security Misconfiguration
C) Access Violation
D) Invalid Login attempt correct answers C) Access Violation
,The user is using another person's credentials to access the internal website. You should NEVER
give your password out to anyone (or use someone else's credentials).
As part of a recovery drill, an organization decides to move to a warm site, until the primary
location is back in action. Which of the following business continuity plan is performed here?
A) Alternate business process
B) Tabletop exercise
C) Failover
D) Location selection correct answers C) Failover
Failover is a process of switching over to another option when the primary option becomes
unavailable.
The IT helpdesk has been receiving complaints that when they connect their laptops through the
Wi-Fi connection, they are not able to access the organizational network. However, they can
access the Internet. On conducting a security scan, the IT helpdesk engineer notices that the users
are being routed to an access point that has not been installed by the organization.
Which of the following wireless attack does this scenario depict?
A) Jamming
B) Rogue AP
C) Packet sniffing
D) Evil Twin correct answers B) Rogue AP
Rouge Access Point (Rouge AP) is a wireless threat that bypasses all wired security measures
(firewalls, for example) by providing access to a wired enterprise network. Rogue access points
could potentially allow unchallenged access to the network by any wireless user or client in the
physical vicinity.
You need to configure an encrypted E-mail for users within the network. The E-mail must be in
its secure form so that it is not transmitted in the clear-text form using a messaging client. What
should you do?
A) Use the S/MIME protocol
B) Install SSL/TLS certificates on the messaging server
C) Configure HTTPS
D) Install the SSL/TLS certificate on all user systems correct answers A) Use the S/MIME
protocol
S/MIME (Secure/Multipurpose Internet Mail Extensions) Is used to encrypt emails at client side.
S/MIME is a standard for public key encryption and signing of MIME data.
Which of the following security protocol is used by EAP-FAST?
,A) Kerberos
B) RADIUS
C) Transport Layer Security (TLS)
D) Diameter correct answers C) Transport Layer Security (TLS)
FAST (Flexible Authentication via Secure Tunneling) uses TLS to perform authentication.
A forensic expert finds a hidden encrypted file that is useful for legal proceedings. Which of the
following actions is performed by the expert here?
A) Collecting the evidence
B) Recovery of the evidence
C) Keeping legal hold of the evidence
D) Preservation of the evidence correct answers B) Recovery of the evidence
Which of the following can help to identify a computer hoax?
A) Circuit-level gateways
B) Packet-filtering firewall
C) Application-level gateways
D) Spam filter correct answers D) Spam filter
Common spam filters will identify and help prevent hoaxes
Which of the following devices are likely to implement home automation?
A) IoT
B) Windows Embedded Compact
C) RTOS
D) Raspberry Pi
E) HVAC correct answers A) IoT
IoT devices include Smart devices (i.e., smart TV, Roomba, Alexa, Google Home)
You are creating a new network. You want to break the network into smaller networks using
routers so that you can control what traffic can enter or leave each of the networks. What should
you do?
A) Create multiple VLANs
B) Create multiple collision domains
C) Create an airgap
D) Create multiple broadcast domains correct answers D) Create multiple broadcast domains
A broadcast domain is a collection of network devices that receive broadcast traffic from each
other.
, https://networklessons.com/cisco/ccna-routing-switching-icnd1-100-105/broadcast-domain
A user enables the Bluetooth in a mobile and receives an unsolicited message from an unknown
source. What type of wireless attack has happened in this scenario?
A) Bluejacking
B) Bluebugging
C) Bluesnarfing
D) Bluetoothing correct answers A) Bluejacking
Not to be confused with Bluetoothing, which is similar but with a different purpose (usually to
flirt).
A user enables the Bluetooth in a mobile and their private information is stolen. What type of
wireless attack has happened in this scenario?
A) Bluejacking
B) Bluebugging
C) Bluesnarfing
D) Bluetoothing correct answers C) Bluesnarfing
Not to be confused with Bluebugging, which results in the device being in complete control of
the hacker.
Consider a scenario where there are three parties, say A, B, and C, in a two-key communication
system. B sends a message to A that is encrypted with A's public key, whose size is 128 bits. C is
in possession of A's public key and tries to decrypt B's message that was sent to A. However, C
fails to decrypt the message. Which of the following is a valid reason for the failed decryption?
A) C should use A's private key to decrypt the message
B) C should use B's public key to decrypt the message
C) C should use C's private key to decrypt the message
D) The public key of A that C possesses may be corrupt correct answers A) C should use A's
private key to decrypt the message
In a two-key (asymmetric algorithm) communication, the sender uses the receiver's public key to
encrypt the message, which then must be decrypted using the receiver's private key. Any attempt
to use an invalid key will fail.
Your organization identifies a third-party service provider to secure the information in the cloud.
Which of the following risk response technique is performed by your organization here?
A) Transfer
B) Mitigate
C) Contingency
D) Accept correct answers A) Transfer
