CompTIA Security+ SY0-501: Secure System and Application Design and Deployment

Which device relieves the CPU from encryption and decryption processing? A. HSM B. TPM C. SSL D. SED CORRECT ANSWERS: A. HSM A technician installs a Linux virtual machine from the installation media and then applies the latest operating system patches. What else should be done to harden the installation? A. Configure a host-based firewall B. Rename the administrator account C. Disable unnecessary services D. Patch the installation CORRECT ANSWERS: A. Configure a host-based firewall C. Disable unnecessary services A smartphone is seized as an evidence at a crime scene. What is used to prevent in and outbound communications for the smartphone? A. Faraday cage B. USB write blocker C. SSL D. TLS CORRECT ANSWERS: A. Faraday cage Users in your company will be issued USB thumb drives to transfer files between disconnected networks. What should be configured to prevent unauthorized users from accessing data on the USB thumb drives A. Encryption B. Fuzzing C. Auditing D. Hashing CORRECT ANSWERS: A. Encryption Which term describes an operating system that is designed with enhanced security? A. Trusted OS B. Whitelisting C. HSM D. SED CORRECT ANSWERS: A. Trusted OS Which security control prevents a single person from controlling an entire