SEC+ REVIEW QUESTIONS WITH ANSWERS
GRADED A+
Which,type,of,audit,can,be,used,to,determine,whether,accounts,have,been,established,properly,and,verif
y,that,privilege,creep,isn't,occurring?
A.,Privilege,audit
B.,Usage,audit
C.,Escalation,audit
D.,Report,audit,,ANS,-
,A.,A,privilege,audit,is,used,to,determine,that,all,groups,,users,,and,other,accounts,have,the,appropriate,p
rivileges,assigned,according,to,the,policies,of,an,organization.
What,kind,of,physical,access,device,restricts,access,to,a,small,number,of,individuals,at,one,time?
A.,Checkpoint
B.,Perimeter,security
C.,Security,zones
D.,Mantrap,,ANS,-
,D.,A,mantrap,limits,access,to,a,small,number,of,individuals.,It,could,be,,for,example,,a,small,room.,Mantr
aps,typically,use,electronic,locks,and,other,methods,to,control,access.
Which,of,the,following,is,a,set,of,voluntary,standards,governing,encryption?
A.,PKI
B.,PKCS
C.,ISA
D.,SSL,,ANS,-,B.,Public-Key,Cryptography,Standards,is,a,set,of,voluntary,standards,for,public-
key,cryptography.,This,set,of,standards,is,coordinated,by,RSA.
Which,protocol,is,used,to,create,a,secure,environment,in,a,wireless,network?
A.,WAP
B.,WEP
C.,WTLS
,D.,WML,,ANS,-
,B.,Wired,Equivalent,Privacy,(WEP),is,designed,to,provide,security,equivalent,to,that,of,a,wired,network.,
WEP,has,vulnerabilities,and,isn't,considered,highly,secure.
An,Internet,server,interfaces,with,TCP/IP,at,which,layer,of,the,DOD,model?
A.,Transport,layer
B.,Network,layer
C.,Process,layer
D.,Internet,layer,,ANS,-
,C.,The,Process,layer,interfaces,with,applications,and,encapsulates,traffic,through,the,Host-to-
Host,or,Transport,layer,,the,Internet,layer,,and,the,Network,Access,layer.
You,want,to,establish,a,network,connection,between,two,LANs,using,the,Internet.,Which,technology,wou
ld,best,accomplish,that,for,you?
A.,IPSec
B.,L2TP
C.,PPP
D.,SLIP,,ANS,-
,B.,L2TP,(Layer,2,Tunneling,Protocol),is,a,tunneling,protocol,that,can,be,used,between,LANs.,L2TP,isn't,sec
ure,,and,you,should,use,IPSec,with,it,to,provide,data,security.
Which,design,concept,limits,access,to,systems,from,outside,users,while,protecting,users,and,systems,insi
de,the,LAN?
A.,DMZ
B.,VLAN
C.,I&A
D.,Router,,ANS,-
,A.,A,DMZ,(demilitarized,zone),is,an,area,in,a,network,that,allows,restrictive,access,to,untrusted,users,and,
isolates,the,internal,network,from,access,by,external,users,and,systems.,It,does,so,by,using,routers,and,fir
ewalls,to,limit,access,to,sensitive,network,resources.
In,the,key,recovery,process,,which,key,must,be,recoverable?
A.,Rollover,key
,B.,Secret,key
C.,Previous,key
D.,Escrow,key,,ANS,-
,C.,A,key,recovery,process,must,be,able,to,recover,a,previous,key.,If,the,previous,key,can't,be,recovered,,t
hen,all,the,information,for,which,the,key,was,used,will,be,irrecoverably,lost.
Which,kind,of,attack,is,designed,to,overload,a,particular,protocol,or,service?
A.,Spoofing
B.,Back,door
C.,Man,in,the,middle
D.,Flood,,ANS,-
,D.,A,flood,attack,is,designed,to,overload,a,protocol,or,service,by,repeatedly,initiating,a,request,for,service
.,This,type,of,attack,usually,results,in,a,DoS,(denial,of,service),situation,occurring,because,the,protocol,fre
ezes,or,excessive,bandwidth,is,used,in,the,network,as,a,result,of,the,requests.
Which,component,of,an,IDS,collects,data?
A.,Data,source
B.,Sensor
C.,Event
D.,Analyzer,,ANS,-
,B.,A,sensor,collects,data,from,the,data,source,and,passes,it,on,to,the,analyzer.,If,the,analyzer,determines,
that,unusual,activity,has,occurred,,an,alert,may,be,generated.
What,is,the,process,of,making,an,operating,system,secure,from,attack,called?
A.,Hardening
B.,Tuning
C.,Sealing
D.,Locking,down,,ANS,-
,A.,Hardening,is,the,term,used,to,describe,the,process,of,securing,a,system.,This,is,accomplished,in,many,
ways,,including,disabling,unneeded,protocols.
The,integrity,objective,addresses,which,characteristic,of,information,security?
, A.,Verification,that,information,is,accurate
B.,Verification,that,ethics,are,properly,maintained
C.,Establishment,of,clear,access,control,of,data
D.,Verification,that,data,is,kept,private,and,secure,,ANS,-
,A.,To,meet,the,goal,of,integrity,,you,must,verify,that,information,being,used,is,accurate,and,hasn't,been,t
ampered,with.,Integrity,is,coupled,with,accountability,to,ensure,that,data,is,accurate,and,that,a,final,auth
ority,exists,to,verify,this,,if,needed.
Which,mechanism,is,used,by,PKI,to,allow,immediate,verification,of,a,certificate's,validity?
A.,CRL
B.,MD5
C.,SSHA
D.,OCSP,,ANS,-
,D.,Online,Certificate,Status,Protocol,(OCSP),is,the,mechanism,used,to,immediately,verify,whether,a,certifi
cate,is,valid.,The,Certificate,Revocation,List,(CRL),is,published,on,a,regular,basis,,but,it,isn't,current,once,it'
s,published.
Which,of,the,following,is,the,equivalent,of,a,VLAN,from,a,physical,security,perspective?
A.,Perimeter,security
B.,Partitioning
C.,Security,zones
D.,Physical,barrier,,ANS,-
,B.,Partitioning,is,the,process,of,breaking,a,network,into,smaller,components,that,can,each,be,individually,
protected.,The,concept,is,the,same,as,building,walls,in,an,office,building.
A,user,has,just,reported,that,he,downloaded,a,file,from,a,prospective,client,using,IM.,The,user,indicates,th
at,the,file,was,called,account.doc.,The,system,has,been,behaving,unusually,since,he,downloaded,the,file.,
What,is,the,most,likely,event,that,occurred?
A.,Your,user,inadvertently,downloaded,a,virus,using,IM.
B.,Your,user,may,have,a,defective,hard,drive.
C.,Your,user,is,hallucinating,and,should,increase,his,medication.
D.,The,system,is,suffering,from,power,surges.,,ANS,-
,A.,IM,and,other,systems,allow,unsuspecting,users,to,download,files,that,may,contain,viruses.,Due,to,a,we
GRADED A+
Which,type,of,audit,can,be,used,to,determine,whether,accounts,have,been,established,properly,and,verif
y,that,privilege,creep,isn't,occurring?
A.,Privilege,audit
B.,Usage,audit
C.,Escalation,audit
D.,Report,audit,,ANS,-
,A.,A,privilege,audit,is,used,to,determine,that,all,groups,,users,,and,other,accounts,have,the,appropriate,p
rivileges,assigned,according,to,the,policies,of,an,organization.
What,kind,of,physical,access,device,restricts,access,to,a,small,number,of,individuals,at,one,time?
A.,Checkpoint
B.,Perimeter,security
C.,Security,zones
D.,Mantrap,,ANS,-
,D.,A,mantrap,limits,access,to,a,small,number,of,individuals.,It,could,be,,for,example,,a,small,room.,Mantr
aps,typically,use,electronic,locks,and,other,methods,to,control,access.
Which,of,the,following,is,a,set,of,voluntary,standards,governing,encryption?
A.,PKI
B.,PKCS
C.,ISA
D.,SSL,,ANS,-,B.,Public-Key,Cryptography,Standards,is,a,set,of,voluntary,standards,for,public-
key,cryptography.,This,set,of,standards,is,coordinated,by,RSA.
Which,protocol,is,used,to,create,a,secure,environment,in,a,wireless,network?
A.,WAP
B.,WEP
C.,WTLS
,D.,WML,,ANS,-
,B.,Wired,Equivalent,Privacy,(WEP),is,designed,to,provide,security,equivalent,to,that,of,a,wired,network.,
WEP,has,vulnerabilities,and,isn't,considered,highly,secure.
An,Internet,server,interfaces,with,TCP/IP,at,which,layer,of,the,DOD,model?
A.,Transport,layer
B.,Network,layer
C.,Process,layer
D.,Internet,layer,,ANS,-
,C.,The,Process,layer,interfaces,with,applications,and,encapsulates,traffic,through,the,Host-to-
Host,or,Transport,layer,,the,Internet,layer,,and,the,Network,Access,layer.
You,want,to,establish,a,network,connection,between,two,LANs,using,the,Internet.,Which,technology,wou
ld,best,accomplish,that,for,you?
A.,IPSec
B.,L2TP
C.,PPP
D.,SLIP,,ANS,-
,B.,L2TP,(Layer,2,Tunneling,Protocol),is,a,tunneling,protocol,that,can,be,used,between,LANs.,L2TP,isn't,sec
ure,,and,you,should,use,IPSec,with,it,to,provide,data,security.
Which,design,concept,limits,access,to,systems,from,outside,users,while,protecting,users,and,systems,insi
de,the,LAN?
A.,DMZ
B.,VLAN
C.,I&A
D.,Router,,ANS,-
,A.,A,DMZ,(demilitarized,zone),is,an,area,in,a,network,that,allows,restrictive,access,to,untrusted,users,and,
isolates,the,internal,network,from,access,by,external,users,and,systems.,It,does,so,by,using,routers,and,fir
ewalls,to,limit,access,to,sensitive,network,resources.
In,the,key,recovery,process,,which,key,must,be,recoverable?
A.,Rollover,key
,B.,Secret,key
C.,Previous,key
D.,Escrow,key,,ANS,-
,C.,A,key,recovery,process,must,be,able,to,recover,a,previous,key.,If,the,previous,key,can't,be,recovered,,t
hen,all,the,information,for,which,the,key,was,used,will,be,irrecoverably,lost.
Which,kind,of,attack,is,designed,to,overload,a,particular,protocol,or,service?
A.,Spoofing
B.,Back,door
C.,Man,in,the,middle
D.,Flood,,ANS,-
,D.,A,flood,attack,is,designed,to,overload,a,protocol,or,service,by,repeatedly,initiating,a,request,for,service
.,This,type,of,attack,usually,results,in,a,DoS,(denial,of,service),situation,occurring,because,the,protocol,fre
ezes,or,excessive,bandwidth,is,used,in,the,network,as,a,result,of,the,requests.
Which,component,of,an,IDS,collects,data?
A.,Data,source
B.,Sensor
C.,Event
D.,Analyzer,,ANS,-
,B.,A,sensor,collects,data,from,the,data,source,and,passes,it,on,to,the,analyzer.,If,the,analyzer,determines,
that,unusual,activity,has,occurred,,an,alert,may,be,generated.
What,is,the,process,of,making,an,operating,system,secure,from,attack,called?
A.,Hardening
B.,Tuning
C.,Sealing
D.,Locking,down,,ANS,-
,A.,Hardening,is,the,term,used,to,describe,the,process,of,securing,a,system.,This,is,accomplished,in,many,
ways,,including,disabling,unneeded,protocols.
The,integrity,objective,addresses,which,characteristic,of,information,security?
, A.,Verification,that,information,is,accurate
B.,Verification,that,ethics,are,properly,maintained
C.,Establishment,of,clear,access,control,of,data
D.,Verification,that,data,is,kept,private,and,secure,,ANS,-
,A.,To,meet,the,goal,of,integrity,,you,must,verify,that,information,being,used,is,accurate,and,hasn't,been,t
ampered,with.,Integrity,is,coupled,with,accountability,to,ensure,that,data,is,accurate,and,that,a,final,auth
ority,exists,to,verify,this,,if,needed.
Which,mechanism,is,used,by,PKI,to,allow,immediate,verification,of,a,certificate's,validity?
A.,CRL
B.,MD5
C.,SSHA
D.,OCSP,,ANS,-
,D.,Online,Certificate,Status,Protocol,(OCSP),is,the,mechanism,used,to,immediately,verify,whether,a,certifi
cate,is,valid.,The,Certificate,Revocation,List,(CRL),is,published,on,a,regular,basis,,but,it,isn't,current,once,it'
s,published.
Which,of,the,following,is,the,equivalent,of,a,VLAN,from,a,physical,security,perspective?
A.,Perimeter,security
B.,Partitioning
C.,Security,zones
D.,Physical,barrier,,ANS,-
,B.,Partitioning,is,the,process,of,breaking,a,network,into,smaller,components,that,can,each,be,individually,
protected.,The,concept,is,the,same,as,building,walls,in,an,office,building.
A,user,has,just,reported,that,he,downloaded,a,file,from,a,prospective,client,using,IM.,The,user,indicates,th
at,the,file,was,called,account.doc.,The,system,has,been,behaving,unusually,since,he,downloaded,the,file.,
What,is,the,most,likely,event,that,occurred?
A.,Your,user,inadvertently,downloaded,a,virus,using,IM.
B.,Your,user,may,have,a,defective,hard,drive.
C.,Your,user,is,hallucinating,and,should,increase,his,medication.
D.,The,system,is,suffering,from,power,surges.,,ANS,-
,A.,IM,and,other,systems,allow,unsuspecting,users,to,download,files,that,may,contain,viruses.,Due,to,a,we
