COMPTIA Security +
Question 1.
What are the non-overlapping channels for 802.11g/n?
ANSWER
Channels 1, 6, and 11
Question 2.
Does the S/MIME protocol use certificates?
ANSWER
yes
Question 3.
Which two ports does FTP use?
ANSWER
ports 20 and 21
Question 4.
Which technique attempts to predict the likelihood that a threat will occur and assigns monetary values in the event a loss occurs?
ANSWER
quantitative risk analysis
Question 5.
Which IPSec mode is used to create a VPN between two gateways?
ANSWER
tunnel mode
Question 6.
What is the most likely cause of a single computer communicating with an unknown IRC server and scanning other systems on the
network?
ANSWER
The computer is infected with a botnet.
Question 7.
What does the acronym IDS denote?
ANSWER
Intrusion Detection System
, Question 8.
Which encryption method is more scalable?
ANSWER
Asymmetric Encryption
Question 9.
What is the purpose of DLP?
ANSWER
Data Loss Prevention (DLP) is a network system that monitors data on computers to ensure the data is not deleted or removed.
Question 10.
Which port number does NTP use?
ANSWER
port 123
Question 11.
Which backup method backs up every file on the server each time it is run?
ANSWER
A full backup
Question 12.
What is the term for an unauthorized access that a network-based intrusion detection system (NIDS) fails to detect?
ANSWER
missed detection or false negative
Question 13.
Which alternate computing facility is the least expensive to maintain before a disaster occurs?
ANSWER
a cold site
Question 14.
What are the three basic questions answered by the chain of custody?
ANSWER
who controlled the evidence, who secured the evidence, and who obtained the evidence
Question 15.
Which term refers to the assurance that data has not been altered in transmission?
ANSWER
data integrity
, Question 16.
What is the purpose of Platform as a Service (PaaS) in cloud computing?
ANSWER
It provides not only a virtualized deployment platform but also a value-added solution stack and an application development platform.
Question 17.
What does the acronym FCoE denote?
ANSWER
Fibre Channel over Ethernet
Question 18.
At which OSI layer does IP Security (IPSec) operate?
ANSWER
the Network layer (Layer 3)
Question 19.
What is meant by the term hardening?
ANSWER
tightening control using security policies to increase system security
Question 20.
What do you use to control traffic from the Inter-net to the LAN (local area network) by controlling the packets that are allowed to
enter the LAN?
ANSWER
a firewall
Question 21.
According to CompTIA's Security+ examination blueprint, what are the four types of logs that you should monitor for mitigation and
deterrence?
ANSWER
event logs, audit logs, security logs, and access logs
Question 22.
What are the two types of eye scans?
ANSWER
iris scans and retinal scans
, Question 23.
What are alternate terms for cross-site request forgery (XSRF)?
ANSWER
session riding or one-click attack
Question 24.
What block cipher and key size (in bits) are used by the Clipper Chip?
ANSWER
The Skipjack block cipher and an 80-bit key length
Question 25.
Why is GPS tracking often disabled?
ANSWER
It is considered a security threat. As long as GPS tracking is enabled and the mobile device is powered on, the device (and possibly its user) can be located.
Question 26.
What is the name of the process for removing only the incriminating data from the audit logs?
ANSWER
scrubbing
Question 27.
What ensures that a user is who he claims to be?
ANSWER
identification
Question 28.
Which port number does SSH use?
ANSWER
port 22
Question 29.
On what does the Pretty Good Privacy (PGP) mail standard rely?
ANSWER
a web of trust
Question 30.
Which information do routers use to forward packets to their destinations?
ANSWER
the network address and subnet mask
Question 1.
What are the non-overlapping channels for 802.11g/n?
ANSWER
Channels 1, 6, and 11
Question 2.
Does the S/MIME protocol use certificates?
ANSWER
yes
Question 3.
Which two ports does FTP use?
ANSWER
ports 20 and 21
Question 4.
Which technique attempts to predict the likelihood that a threat will occur and assigns monetary values in the event a loss occurs?
ANSWER
quantitative risk analysis
Question 5.
Which IPSec mode is used to create a VPN between two gateways?
ANSWER
tunnel mode
Question 6.
What is the most likely cause of a single computer communicating with an unknown IRC server and scanning other systems on the
network?
ANSWER
The computer is infected with a botnet.
Question 7.
What does the acronym IDS denote?
ANSWER
Intrusion Detection System
, Question 8.
Which encryption method is more scalable?
ANSWER
Asymmetric Encryption
Question 9.
What is the purpose of DLP?
ANSWER
Data Loss Prevention (DLP) is a network system that monitors data on computers to ensure the data is not deleted or removed.
Question 10.
Which port number does NTP use?
ANSWER
port 123
Question 11.
Which backup method backs up every file on the server each time it is run?
ANSWER
A full backup
Question 12.
What is the term for an unauthorized access that a network-based intrusion detection system (NIDS) fails to detect?
ANSWER
missed detection or false negative
Question 13.
Which alternate computing facility is the least expensive to maintain before a disaster occurs?
ANSWER
a cold site
Question 14.
What are the three basic questions answered by the chain of custody?
ANSWER
who controlled the evidence, who secured the evidence, and who obtained the evidence
Question 15.
Which term refers to the assurance that data has not been altered in transmission?
ANSWER
data integrity
, Question 16.
What is the purpose of Platform as a Service (PaaS) in cloud computing?
ANSWER
It provides not only a virtualized deployment platform but also a value-added solution stack and an application development platform.
Question 17.
What does the acronym FCoE denote?
ANSWER
Fibre Channel over Ethernet
Question 18.
At which OSI layer does IP Security (IPSec) operate?
ANSWER
the Network layer (Layer 3)
Question 19.
What is meant by the term hardening?
ANSWER
tightening control using security policies to increase system security
Question 20.
What do you use to control traffic from the Inter-net to the LAN (local area network) by controlling the packets that are allowed to
enter the LAN?
ANSWER
a firewall
Question 21.
According to CompTIA's Security+ examination blueprint, what are the four types of logs that you should monitor for mitigation and
deterrence?
ANSWER
event logs, audit logs, security logs, and access logs
Question 22.
What are the two types of eye scans?
ANSWER
iris scans and retinal scans
, Question 23.
What are alternate terms for cross-site request forgery (XSRF)?
ANSWER
session riding or one-click attack
Question 24.
What block cipher and key size (in bits) are used by the Clipper Chip?
ANSWER
The Skipjack block cipher and an 80-bit key length
Question 25.
Why is GPS tracking often disabled?
ANSWER
It is considered a security threat. As long as GPS tracking is enabled and the mobile device is powered on, the device (and possibly its user) can be located.
Question 26.
What is the name of the process for removing only the incriminating data from the audit logs?
ANSWER
scrubbing
Question 27.
What ensures that a user is who he claims to be?
ANSWER
identification
Question 28.
Which port number does SSH use?
ANSWER
port 22
Question 29.
On what does the Pretty Good Privacy (PGP) mail standard rely?
ANSWER
a web of trust
Question 30.
Which information do routers use to forward packets to their destinations?
ANSWER
the network address and subnet mask
