COMPTIA SECURITY + EXAM 2025
QUESTIONS AND ANSWERS
What are the non-overlapping channels for 802.11g/n? - ....ANSWER ...-Channels
1, 6, and 11
Does the S/MIME protocol use certificates? - ....ANSWER ...-yes
Which two ports does FTP use? - ....ANSWER ...-ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and assigns
monetary values in the event a loss occurs? - ....ANSWER ...-quantitative risk
analysis
Which IPSec mode is used to create a VPN between two gateways? -
....ANSWER ...-tunnel mode
What is the most likely cause of a single computer communicating with an unknown
IRC server and scanning other systems on the network? - ....ANSWER ...-The
computer is infected with a botnet.
What does the acronym IDS denote? - ....ANSWER ...-Intrusion Detection System
Which encryption method is more scalable? - ....ANSWER ...-Asymmetric
Encryption
...©️ 2025, ALL RIGHTS RESERVED 1
,What is the purpose of DLP? - ....ANSWER ...-Data Loss Prevention (DLP) is a
network system that monitors data on computers to ensure the data is not deleted or
removed.
Which port number does NTP use? - ....ANSWER ...-port 123
Which backup method backs up every file on the server each time it is run? -
....ANSWER ...-A full backup
What is the term for an unauthorized access that a network-based intrusion detection
system (NIDS) fails to detect? - ....ANSWER ...-missed detection or false negative
Which alternate computing facility is the least expensive to maintain before a disaster
occurs? - ....ANSWER ...-a cold site
What are the three basic questions answered by the chain of custody? -
....ANSWER ...-who controlled the evidence, who secured the evidence, and who
obtained the evidence
Which term refers to the assurance that data has not been altered in transmission? -
....ANSWER ...-data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? -
....ANSWER ...-It provides not only a virtualized deployment platform but also a
value-added solution stack and an application development platform.
What does the acronym FCoE denote? - ....ANSWER ...-Fibre Channel over
Ethernet
...©️ 2025, ALL RIGHTS RESERVED 2
,At which OSI layer does IP Security (IPSec) operate? - ....ANSWER ...-the
Network layer (Layer 3)
What is meant by the term hardening? - ....ANSWER ...-tightening control using
security policies to increase system security
What do you use to control traffic from the Internet to the LAN (local area network) by
controlling the packets that are allowed to enter the LAN? - ....ANSWER ...-a
firewall
According to CompTIA's Security+ examination blueprint, what are the four types of
logs that you should monitor for mitigation and deterrence? - ....ANSWER ...-event
logs, audit logs, security logs, and access logs
What are the two types of eye scans? - ....ANSWER ...-iris scans and retinal scans
What are alternate terms for cross-site request forgery (XSRF)? - ....ANSWER ...-
session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? -
....ANSWER ...-The Skipjack block cipher and an 80-bit key length
Why is GPS tracking often disabled? - ....ANSWER ...-It is considered a security
threat. As long as GPS tracking is enabled and the mobile device is powered on, the
device (and possibly its user) can be located.
What is the name of the process for removing only the incriminating data from the audit
logs? - ....ANSWER ...-scrubbing
What ensures that a user is who he claims to be? - ....ANSWER ...-identification
...©️ 2025, ALL RIGHTS RESERVED 3
, Which port number does SSH use? - ....ANSWER ...-port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? - ....ANSWER ...-
a web of trust
Which information do routers use to forward packets to their destinations? -
....ANSWER ...-the network address and subnet mask
Which account should you rename immediately after installing a new operating system
(OS) to harden the OS? - ....ANSWER ...-the administrator account
Which error condition arises because data is not checked before input to ensure that it
has an appropriate length? - ....ANSWER ...-buffer overflow errors
What is the component included with Windows Vista and higher operating systems that
encrypts an entire volume with 128-bit encryption to prevent information from being read
if the drive is lost or stolen? - ....ANSWER ...-BitLocker
What is the purpose of administrative controls? - ....ANSWER ...-to implement
security policies based on procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving electrical
equipment or liquids, has been discontinued? - ....ANSWER ...-halon gas
On which standard is Lightweight Directory Access Protocol (LDAP) based -
....ANSWER ...-X.500
Which public-key algorithm was the first to allow two users to exchange a secret key over
an insecure medium without any prior secret keys? - ....ANSWER ...-Diffie-
Hellman
...©️ 2025, ALL RIGHTS RESERVED 4
QUESTIONS AND ANSWERS
What are the non-overlapping channels for 802.11g/n? - ....ANSWER ...-Channels
1, 6, and 11
Does the S/MIME protocol use certificates? - ....ANSWER ...-yes
Which two ports does FTP use? - ....ANSWER ...-ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and assigns
monetary values in the event a loss occurs? - ....ANSWER ...-quantitative risk
analysis
Which IPSec mode is used to create a VPN between two gateways? -
....ANSWER ...-tunnel mode
What is the most likely cause of a single computer communicating with an unknown
IRC server and scanning other systems on the network? - ....ANSWER ...-The
computer is infected with a botnet.
What does the acronym IDS denote? - ....ANSWER ...-Intrusion Detection System
Which encryption method is more scalable? - ....ANSWER ...-Asymmetric
Encryption
...©️ 2025, ALL RIGHTS RESERVED 1
,What is the purpose of DLP? - ....ANSWER ...-Data Loss Prevention (DLP) is a
network system that monitors data on computers to ensure the data is not deleted or
removed.
Which port number does NTP use? - ....ANSWER ...-port 123
Which backup method backs up every file on the server each time it is run? -
....ANSWER ...-A full backup
What is the term for an unauthorized access that a network-based intrusion detection
system (NIDS) fails to detect? - ....ANSWER ...-missed detection or false negative
Which alternate computing facility is the least expensive to maintain before a disaster
occurs? - ....ANSWER ...-a cold site
What are the three basic questions answered by the chain of custody? -
....ANSWER ...-who controlled the evidence, who secured the evidence, and who
obtained the evidence
Which term refers to the assurance that data has not been altered in transmission? -
....ANSWER ...-data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? -
....ANSWER ...-It provides not only a virtualized deployment platform but also a
value-added solution stack and an application development platform.
What does the acronym FCoE denote? - ....ANSWER ...-Fibre Channel over
Ethernet
...©️ 2025, ALL RIGHTS RESERVED 2
,At which OSI layer does IP Security (IPSec) operate? - ....ANSWER ...-the
Network layer (Layer 3)
What is meant by the term hardening? - ....ANSWER ...-tightening control using
security policies to increase system security
What do you use to control traffic from the Internet to the LAN (local area network) by
controlling the packets that are allowed to enter the LAN? - ....ANSWER ...-a
firewall
According to CompTIA's Security+ examination blueprint, what are the four types of
logs that you should monitor for mitigation and deterrence? - ....ANSWER ...-event
logs, audit logs, security logs, and access logs
What are the two types of eye scans? - ....ANSWER ...-iris scans and retinal scans
What are alternate terms for cross-site request forgery (XSRF)? - ....ANSWER ...-
session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? -
....ANSWER ...-The Skipjack block cipher and an 80-bit key length
Why is GPS tracking often disabled? - ....ANSWER ...-It is considered a security
threat. As long as GPS tracking is enabled and the mobile device is powered on, the
device (and possibly its user) can be located.
What is the name of the process for removing only the incriminating data from the audit
logs? - ....ANSWER ...-scrubbing
What ensures that a user is who he claims to be? - ....ANSWER ...-identification
...©️ 2025, ALL RIGHTS RESERVED 3
, Which port number does SSH use? - ....ANSWER ...-port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? - ....ANSWER ...-
a web of trust
Which information do routers use to forward packets to their destinations? -
....ANSWER ...-the network address and subnet mask
Which account should you rename immediately after installing a new operating system
(OS) to harden the OS? - ....ANSWER ...-the administrator account
Which error condition arises because data is not checked before input to ensure that it
has an appropriate length? - ....ANSWER ...-buffer overflow errors
What is the component included with Windows Vista and higher operating systems that
encrypts an entire volume with 128-bit encryption to prevent information from being read
if the drive is lost or stolen? - ....ANSWER ...-BitLocker
What is the purpose of administrative controls? - ....ANSWER ...-to implement
security policies based on procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving electrical
equipment or liquids, has been discontinued? - ....ANSWER ...-halon gas
On which standard is Lightweight Directory Access Protocol (LDAP) based -
....ANSWER ...-X.500
Which public-key algorithm was the first to allow two users to exchange a secret key over
an insecure medium without any prior secret keys? - ....ANSWER ...-Diffie-
Hellman
...©️ 2025, ALL RIGHTS RESERVED 4
