Comptia Security + UPDATED Exam
Questions and CORRECT Answers
What are the non-overlapping channels for 802.11g/n? - CORRECT ANSWER - Channels
1, 6, and 11
Does the S/MIME protocol use certificates? - CORRECT ANSWER - yes
Which two ports does FTP use? - CORRECT ANSWER - ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and assigns monetary
values in the event a loss occurs? - CORRECT ANSWER - quantitative risk analysis
Which IPSec mode is used to create a VPN between two gateways? - CORRECT
ANSWER - tunnel mode
What is the most likely cause of a single computer communicating with an unknown IRC server
and scanning other systems on the network? - CORRECT ANSWER - The computer is
infected with a botnet.
What does the acronym IDS denote? - CORRECT ANSWER - Intrusion Detection System
Which encryption method is more scalable? - CORRECT ANSWER - Asymmetric
Encryption
What is the purpose of DLP? - CORRECT ANSWER - Data Loss Prevention (DLP) is a
network system that monitors data on computers to ensure the data is not deleted or removed.
Which port number does NTP use? - CORRECT ANSWER - port 123
,Which backup method backs up every file on the server each time it is run? - CORRECT
ANSWER - A full backup
What is the term for an unauthorized access that a network-based intrusion detection system
(NIDS) fails to detect? - CORRECT ANSWER - missed detection or false negative
Which alternate computing facility is the least expensive to maintain before a disaster occurs? -
CORRECT ANSWER - a cold site
What are the three basic questions answered by the chain of custody? - CORRECT
ANSWER - who controlled the evidence, who secured the evidence, and who obtained the
evidence
Which term refers to the assurance that data has not been altered in transmission? - CORRECT
ANSWER - data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? - CORRECT
ANSWER - It provides not only a virtualized deployment platform but also a value-added
solution stack and an application development platform.
What does the acronym FCoE denote? - CORRECT ANSWER - Fibre Channel over
Ethernet
At which OSI layer does IP Security (IPSec) operate? - CORRECT ANSWER - the
Network layer (Layer 3)
What is meant by the term hardening? - CORRECT ANSWER - tightening control using
security policies to increase system security
What do you use to control traffic from the Internet to the LAN (local area network) by
controlling the packets that are allowed to enter the LAN? - CORRECT ANSWER -a
firewall
,According to CompTIA's Security+ examination blueprint, what are the four types of logs that
you should monitor for mitigation and deterrence? - CORRECT ANSWER - event logs,
audit logs, security logs, and access logs
What are the two types of eye scans? - CORRECT ANSWER - iris scans and retinal scans
What are alternate terms for cross-site request forgery (XSRF)? - CORRECT ANSWER -
session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? - CORRECT
ANSWER - The Skipjack block cipher and an 80-bit key length
Why is GPS tracking often disabled? - CORRECT ANSWER - It is considered a security
threat. As long as GPS tracking is enabled and the mobile device is powered on, the device (and
possibly its user) can be located.
What is the name of the process for removing only the incriminating data from the audit logs? -
CORRECT ANSWER - scrubbing
What ensures that a user is who he claims to be? - CORRECT ANSWER - identification
Which port number does SSH use? - CORRECT ANSWER - port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? - CORRECT
ANSWER - a web of trust
Which information do routers use to forward packets to their destinations? - CORRECT
ANSWER - the network address and subnet mask
, Which account should you rename immediately after installing a new operating system (OS) to
harden the OS? - CORRECT ANSWER - the administrator account
Which error condition arises because data is not checked before input to ensure that it has an
appropriate length? - CORRECT ANSWER - buffer overflow errors
What is the component included with Windows Vista and higher operating systems that encrypts
an entire volume with 128-bit encryption to prevent information from being read if the drive is
lost or stolen? - CORRECT ANSWER - BitLocker
What is the purpose of administrative controls? - CORRECT ANSWER - to implement
security policies based on procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving electrical equipment or
liquids, has been discontinued? - CORRECT ANSWER - halon gas
On which standard is Lightweight Directory Access Protocol (LDAP) based - CORRECT
ANSWER - X.500
Which public-key algorithm was the first to allow two users to exchange a secret key over an
insecure medium without any prior secret keys? - CORRECT ANSWER - Diffie-Hellman
Which authentication protocol separates authentication and authorization: TACACS+ or
RADIUS? - CORRECT ANSWER - TACACS+
What was the first public-key algorithm ever used? - CORRECT ANSWER - Diffie-
Hellman
Which tool should you use to retrieve the contents of a GET request: a protocol analyzer or port
scanner? - CORRECT ANSWER - a protocol analyzer
Questions and CORRECT Answers
What are the non-overlapping channels for 802.11g/n? - CORRECT ANSWER - Channels
1, 6, and 11
Does the S/MIME protocol use certificates? - CORRECT ANSWER - yes
Which two ports does FTP use? - CORRECT ANSWER - ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and assigns monetary
values in the event a loss occurs? - CORRECT ANSWER - quantitative risk analysis
Which IPSec mode is used to create a VPN between two gateways? - CORRECT
ANSWER - tunnel mode
What is the most likely cause of a single computer communicating with an unknown IRC server
and scanning other systems on the network? - CORRECT ANSWER - The computer is
infected with a botnet.
What does the acronym IDS denote? - CORRECT ANSWER - Intrusion Detection System
Which encryption method is more scalable? - CORRECT ANSWER - Asymmetric
Encryption
What is the purpose of DLP? - CORRECT ANSWER - Data Loss Prevention (DLP) is a
network system that monitors data on computers to ensure the data is not deleted or removed.
Which port number does NTP use? - CORRECT ANSWER - port 123
,Which backup method backs up every file on the server each time it is run? - CORRECT
ANSWER - A full backup
What is the term for an unauthorized access that a network-based intrusion detection system
(NIDS) fails to detect? - CORRECT ANSWER - missed detection or false negative
Which alternate computing facility is the least expensive to maintain before a disaster occurs? -
CORRECT ANSWER - a cold site
What are the three basic questions answered by the chain of custody? - CORRECT
ANSWER - who controlled the evidence, who secured the evidence, and who obtained the
evidence
Which term refers to the assurance that data has not been altered in transmission? - CORRECT
ANSWER - data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? - CORRECT
ANSWER - It provides not only a virtualized deployment platform but also a value-added
solution stack and an application development platform.
What does the acronym FCoE denote? - CORRECT ANSWER - Fibre Channel over
Ethernet
At which OSI layer does IP Security (IPSec) operate? - CORRECT ANSWER - the
Network layer (Layer 3)
What is meant by the term hardening? - CORRECT ANSWER - tightening control using
security policies to increase system security
What do you use to control traffic from the Internet to the LAN (local area network) by
controlling the packets that are allowed to enter the LAN? - CORRECT ANSWER -a
firewall
,According to CompTIA's Security+ examination blueprint, what are the four types of logs that
you should monitor for mitigation and deterrence? - CORRECT ANSWER - event logs,
audit logs, security logs, and access logs
What are the two types of eye scans? - CORRECT ANSWER - iris scans and retinal scans
What are alternate terms for cross-site request forgery (XSRF)? - CORRECT ANSWER -
session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? - CORRECT
ANSWER - The Skipjack block cipher and an 80-bit key length
Why is GPS tracking often disabled? - CORRECT ANSWER - It is considered a security
threat. As long as GPS tracking is enabled and the mobile device is powered on, the device (and
possibly its user) can be located.
What is the name of the process for removing only the incriminating data from the audit logs? -
CORRECT ANSWER - scrubbing
What ensures that a user is who he claims to be? - CORRECT ANSWER - identification
Which port number does SSH use? - CORRECT ANSWER - port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? - CORRECT
ANSWER - a web of trust
Which information do routers use to forward packets to their destinations? - CORRECT
ANSWER - the network address and subnet mask
, Which account should you rename immediately after installing a new operating system (OS) to
harden the OS? - CORRECT ANSWER - the administrator account
Which error condition arises because data is not checked before input to ensure that it has an
appropriate length? - CORRECT ANSWER - buffer overflow errors
What is the component included with Windows Vista and higher operating systems that encrypts
an entire volume with 128-bit encryption to prevent information from being read if the drive is
lost or stolen? - CORRECT ANSWER - BitLocker
What is the purpose of administrative controls? - CORRECT ANSWER - to implement
security policies based on procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving electrical equipment or
liquids, has been discontinued? - CORRECT ANSWER - halon gas
On which standard is Lightweight Directory Access Protocol (LDAP) based - CORRECT
ANSWER - X.500
Which public-key algorithm was the first to allow two users to exchange a secret key over an
insecure medium without any prior secret keys? - CORRECT ANSWER - Diffie-Hellman
Which authentication protocol separates authentication and authorization: TACACS+ or
RADIUS? - CORRECT ANSWER - TACACS+
What was the first public-key algorithm ever used? - CORRECT ANSWER - Diffie-
Hellman
Which tool should you use to retrieve the contents of a GET request: a protocol analyzer or port
scanner? - CORRECT ANSWER - a protocol analyzer
