Security+ Review Questions With Complete Solutions

What prevents man-in-the-middle attack? correct answer: SMB What is the best technical solution for reducing the threat of man-in-the-middle attack? correct answer: PKI prevents eavesdropping and replay attack correct answer: Kerberos Which of these can protect against replay attack? correct answer: AH What protects against playback attack? correct answer: CHAP Which of the following may help prevent replay attack? correct answer: SSL What do you use to encrypt sensitive data? correct answer: SSL What would be the way to help prevent social engineering attack? correct answer: Education and training Which of the following may prevent eavesdropping (or sniffing), IP spoofing, replay, and man-in-the-middle attack? correct answer: IPSec How do you help protecting against DNS poisoning? correct answer: Allow standard zone transfer How do you help countering worm? correct answer: Install NIDS and HIDS How do you help prevent backdoor, viruses, and worms? correct answer: Install up-to-date anti-virus software How do you help prevent all types of malicious attacks such as worm, Trojan horses, viruses, software exploitation, replays, and DNS spoofing? correct answer: Apply the latest security patches How do you help prevent Ping of Death? correct answer: Install the latest OS patches How do you protect against all of the following attacks: DoS, SYN floods, Ping of death, Teardrop or Raindrop attacks, LAND attack, brute force or smurf attack, and IP spoofing. correct answer: Install Firewall What prevents dumpster diving? correct answer: Destruction can protect against malware installation from suspects Internet sites (malware attack). correct answer: Virtualized application Which one may reduce the number of false positives? correct answer: Tuning Which of these may prevent buffer overflow attack? correct answer: Input validation How do you prevent buffer overflow attack? correct answer: Applying all security patches to workstations Which may be vulnerable to password-guessing and denial-of-service attack? correct answer: Kerberos What may cause eavesdropping and sniffing? correct answer: Wireless network What may cause DoS, Man-in-the-middle, and attacks against confidentiality? correct answer: LDAP What may spread viruses and worms by network devices? correct answer: File Sharing What may spread viruses and worms by network devices? correct answer: Telnet Which may be vulnerable to spam and hoaxes? correct answer: E-mail What may cause buffer overflow? correct answer: Web vulnerabilities What may cause wardriving? correct answer: WLAN security loopholes