CompTIA Security+ Guide to Network Security Fundamentals (MindTap Course List) 8th Edition with complete solution Questions and Answers |2025

CompTIA Security+ Guide to Network Security Fundamentals
(MindTap Course List) 8th Edition with complete solution Questions
and Answers |2025

QUESTION: Which technique attempts to predict the likelihood that a threat will occur and assigns monetary
values in the event a loss occurs? ✓✓Correct Answer: quantitative risk analysis



QUESTION: Which IPSec mode is used to create a VPN between two gateways? ✓✓Correct Answer: tunnel
mode



QUESTION: What is the most likely cause of a single computer communicating with an unknown IRC server
and scanning other systems on the network? ✓✓Correct Answer: The computer is infected with a botnet.



QUESTION: What does the acronym IDS denote? ✓✓Correct Answer: Intrusion Detection System



QUESTION: Which encryption method is more scalable? ✓✓Correct Answer: Asymmetric Encryption



QUESTION: What is the purpose of DLP? ✓✓Correct Answer: Data Loss Prevention (DLP) is a network system
that monitors data on computers to ensure the data is not deleted or removed.



QUESTION: Which port number does NTP use? ✓✓Correct Answer: port 123



QUESTION: Which backup method backs up every file on the server each time it is run? ✓✓Correct Answer: A
full backup



QUESTION: What is the term for an unauthorized access that a network-based intrusion detection system
(NIDS) fails to detect? ✓✓Correct Answer: missed detection or false negative



QUESTION: Which alternate computing facility is the least expensive to maintain before a disaster occurs?
✓✓Correct Answer: a cold site



QUESTION: What are the three basic questions answered by the chain of custody? ✓✓Correct Answer: who
controlled the evidence, who secured the evidence, and who obtained the evidence



QUESTION: Which term refers to the assurance that data has not been altered in transmission? ✓✓Correct
Answer: data integrity

1|Page

,QUESTION: What is the purpose of Platform as a Service (PaaS) in cloud computing? ✓✓Correct Answer: It
provides not only a virtualized deployment platform but also a value-added solution stack and an application
development platform.



QUESTION: What does the acronym FCoE denote? ✓✓Correct Answer: Fibre Channel over Ethernet



QUESTION: At which OSI layer does IP Security (IPSec) operate? ✓✓Correct Answer: the Network layer (Layer
3)



QUESTION: What is meant by the term hardening? ✓✓Correct Answer: tightening control using security
policies to increase system security



QUESTION: What do you use to control traffic from the Internet to the LAN (local area network) by controlling
the packets that are allowed to enter the LAN? ✓✓Correct Answer: a firewall



QUESTION: According to CompTIA's Security+ examination blueprint, what are the four types of logs that you
should monitor for mitigation and deterrence? ✓✓Correct Answer: event logs, audit logs, security logs, and
access logs



QUESTION: What are the two types of eye scans? ✓✓Correct Answer: iris scans and retinal scans



QUESTION: What are alternate terms for cross-site request forgery (XSRF)? ✓✓Correct Answer: session riding
or one-click attack



QUESTION: What block cipher and key size (in bits) are used by the Clipper Chip? ✓✓Correct Answer: The
Skipjack block cipher and an 80-bit key length



QUESTION: Why is GPS tracking often disabled? ✓✓Correct Answer: It is considered a security threat. As long
as GPS tracking is enabled and the mobile device is powered on, the device (and possibly its user) can be
located.



QUESTION: What is the name of the process for removing only the incriminating data from the audit logs?
✓✓Correct Answer: scrubbing



QUESTION: What ensures that a user is who he claims to be? ✓✓Correct Answer: identification



2|Page

,QUESTION: Which port number does SSH use? ✓✓Correct Answer: port 22



QUESTION: On what does the Pretty Good Privacy (PGP) mail standard rely? ✓✓Correct Answer: a web of
trust



QUESTION: Which information do routers use to forward packets to their destinations? ✓✓Correct Answer:
the network address and subnet mask



QUESTION: Which account should you rename immediately after installing a new operating system (OS) to
harden the OS? ✓✓Correct Answer: the administrator account



QUESTION: Which error condition arises because data is not checked before input to ensure that it has an
appropriate length? ✓✓Correct Answer: buffer overflow errors



QUESTION: What is the component included with Windows Vista and higher operating systems that encrypts
an entire volume with 128-bit encryption to prevent information from being read if the drive is lost or stolen?
✓✓Correct Answer: BitLocker



QUESTION: What is the purpose of administrative controls? ✓✓Correct Answer: to implement security
policies based on procedures, standards, and guidelines



QUESTION: Which fire suppression method, formerly used to suppress fires involving electrical equipment or
liquids, has been discontinued? ✓✓Correct Answer: halon gas



QUESTION: On which standard is Lightweight Directory Access Protocol (LDAP) based ✓✓Correct Answer:
X.500



QUESTION: Which public-key algorithm was the first to allow two users to exchange a secret key over an
insecure medium without any prior secret keys? ✓✓Correct Answer: Diffie-Hellman



QUESTION: Which authentication protocol separates authentication and authorization: TACACS+ or RADIUS?
✓✓Correct Answer: TACACS+



QUESTION: What was the first public-key algorithm ever used? ✓✓Correct Answer: Diffie-Hellman



QUESTION: Which tool should you use to retrieve the contents of a GET request: a protocol analyzer or port
scanner? ✓✓Correct Answer: a protocol analyzer

3|Page

, QUESTION: Which type of controls is implemented to secure physical access to an object, such as a building, a
room, or a computer? ✓✓Correct Answer: a physical or operational control



QUESTION: Which protocol provides connectionless integrity, data origin authentication, replay protection,
and confidentiality (encryption) using Authentication Header (AH) and Encapsulating Security Payload (ESP)?
✓✓Correct Answer: Internet Protocol Security (IPSec)



QUESTION: What does the acronym MTTR denote? ✓✓Correct Answer: mean time to repair



QUESTION: What is an entity that issues and manages certificates? ✓✓Correct Answer: certification authority
(CA)



QUESTION: According to CompTIA's Security+ examination blueprint, what are the three listed reporting
techniques for mitigation and deterrence? ✓✓Correct Answer: alarms, alerts, and trends



QUESTION: Which term is used when the amount of work that a computer has to do is divided between two
or more computers so that more work is performed in the same amount of time? ✓✓Correct Answer: load
balancing



QUESTION: Which type of attack searches long lists of words for a particular language to match them to an
encrypted password? ✓✓Correct Answer: dictionary attack



QUESTION: What is spimming? ✓✓Correct Answer: an instance of spam sent over an instant message
application



QUESTION: What is a proxy server? ✓✓Correct Answer: a server that caches and filters content



QUESTION: Which type of authentication combines two or more authentication methods, like something that
a person knows (such as a password), something that a person owns (such as a smart card), and a
characteristic about the person (such as a fingerprint)? ✓✓Correct Answer: multi-factor authentication



QUESTION: Which services are usually provided by all-in-one security devices? ✓✓Correct Answer: URL
filtering, content inspection, and malware inspection



QUESTION: Which directory protocol does Directory-Enabled Networking (DEN) use? ✓✓Correct Answer:
Lightweight Directory Access Protocol (LDAP)


4|Page