CompTIA Security+ Module 1 - Fundamental
Security Concepts
What are the non-overlapping channels for 802.11g/n? - answer-Channels 1, 6,
and 11
Does the S/MIME protocol use certificates? - answer-yes
Which two ports does FTP use? - answer-ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and
assigns monetary values in the event a loss occurs? - answer-quantitative risk
analysis
Which IPSec mode is used to create a VPN between two gateways? - answer-
tunnel mode
What is the most likely cause of a single computer communicating with an
unknown IRC server and scanning other systems on the network? - answer-The
computer is infected with a botnet.
,What does the acronym IDS denote? - answer-Intrusion Detection System
Which encryption method is more scalable? - answer-Asymmetric Encryption
What is the purpose of DLP? - answer-Data Loss Prevention (DLP) is a network
system that monitors data on computers to ensure the data is not deleted or
removed.
Which port number does NTP use? - answer-port 123
Which backup method backs up every file on the server each time it is run? -
answer-A full backup
What is the term for an unauthorized access that a network-based intrusion
detection system (NIDS) fails to detect? - answer-missed detection or false
negative
Which alternate computing facility is the least expensive to maintain before a
disaster occurs? - answer-a cold site
What are the three basic questions answered by the chain of custody? -
answer-who controlled the evidence, who secured the evidence, and who
obtained the evidence
Which term refers to the assurance that data has not been altered in
transmission? - answer-data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? -
answer-It provides not only a virtualized deployment platform but also a value-
added solution stack and an application development platform.
,What does the acronym FCoE denote? - answer-Fibre Channel over Ethernet
At which OSI layer does IP Security (IPSec) operate? - answer-the Network
layer (Layer 3)
What is meant by the term hardening? - answer-tightening control using
security policies to increase system security
What do you use to control traffic from the Internet to the LAN (local area
network) by controlling the packets that are allowed to enter the LAN? -
answer-a firewall
According to CompTIA's Security+ examination blueprint, what are the four
types of logs that you should monitor for mitigation and deterrence? - answer-
event logs, audit logs, security logs, and access logs
What are the two types of eye scans? - answer-iris scans and retinal scans
What are alternate terms for cross-site request forgery (XSRF)? - answer-
session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? - answer-
The Skipjack block cipher and an 80-bit key length
Why is GPS tracking often disabled? - answer-It is considered a security threat.
As long as GPS tracking is enabled and the mobile device is powered on, the
device (and possibly its user) can be located.
, What is the name of the process for removing only the incriminating data from
the audit logs? - answer-scrubbing
What ensures that a user is who he claims to be? - answer-identification
Which port number does SSH use? - answer-port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? - answer-a
web of trust
Which information do routers use to forward packets to their destinations? -
answer-the network address and subnet mask
Which account should you rename immediately after installing a new
operating system (OS) to harden the OS? - answer-the administrator account
Which error condition arises because data is not checked before input to
ensure that it has an appropriate length? - answer-buffer overflow errors
What is the component included with Windows Vista and higher operating
systems that encrypts an entire volume with 128-bit encryption to prevent
information from being read if the drive is lost or stolen? - answer-BitLocker
What is the purpose of administrative controls? - answer-to implement
security policies based on procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving
electrical equipment or liquids, has been discontinued? - answer-halon gas
Security Concepts
What are the non-overlapping channels for 802.11g/n? - answer-Channels 1, 6,
and 11
Does the S/MIME protocol use certificates? - answer-yes
Which two ports does FTP use? - answer-ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and
assigns monetary values in the event a loss occurs? - answer-quantitative risk
analysis
Which IPSec mode is used to create a VPN between two gateways? - answer-
tunnel mode
What is the most likely cause of a single computer communicating with an
unknown IRC server and scanning other systems on the network? - answer-The
computer is infected with a botnet.
,What does the acronym IDS denote? - answer-Intrusion Detection System
Which encryption method is more scalable? - answer-Asymmetric Encryption
What is the purpose of DLP? - answer-Data Loss Prevention (DLP) is a network
system that monitors data on computers to ensure the data is not deleted or
removed.
Which port number does NTP use? - answer-port 123
Which backup method backs up every file on the server each time it is run? -
answer-A full backup
What is the term for an unauthorized access that a network-based intrusion
detection system (NIDS) fails to detect? - answer-missed detection or false
negative
Which alternate computing facility is the least expensive to maintain before a
disaster occurs? - answer-a cold site
What are the three basic questions answered by the chain of custody? -
answer-who controlled the evidence, who secured the evidence, and who
obtained the evidence
Which term refers to the assurance that data has not been altered in
transmission? - answer-data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? -
answer-It provides not only a virtualized deployment platform but also a value-
added solution stack and an application development platform.
,What does the acronym FCoE denote? - answer-Fibre Channel over Ethernet
At which OSI layer does IP Security (IPSec) operate? - answer-the Network
layer (Layer 3)
What is meant by the term hardening? - answer-tightening control using
security policies to increase system security
What do you use to control traffic from the Internet to the LAN (local area
network) by controlling the packets that are allowed to enter the LAN? -
answer-a firewall
According to CompTIA's Security+ examination blueprint, what are the four
types of logs that you should monitor for mitigation and deterrence? - answer-
event logs, audit logs, security logs, and access logs
What are the two types of eye scans? - answer-iris scans and retinal scans
What are alternate terms for cross-site request forgery (XSRF)? - answer-
session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? - answer-
The Skipjack block cipher and an 80-bit key length
Why is GPS tracking often disabled? - answer-It is considered a security threat.
As long as GPS tracking is enabled and the mobile device is powered on, the
device (and possibly its user) can be located.
, What is the name of the process for removing only the incriminating data from
the audit logs? - answer-scrubbing
What ensures that a user is who he claims to be? - answer-identification
Which port number does SSH use? - answer-port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? - answer-a
web of trust
Which information do routers use to forward packets to their destinations? -
answer-the network address and subnet mask
Which account should you rename immediately after installing a new
operating system (OS) to harden the OS? - answer-the administrator account
Which error condition arises because data is not checked before input to
ensure that it has an appropriate length? - answer-buffer overflow errors
What is the component included with Windows Vista and higher operating
systems that encrypts an entire volume with 128-bit encryption to prevent
information from being read if the drive is lost or stolen? - answer-BitLocker
What is the purpose of administrative controls? - answer-to implement
security policies based on procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving
electrical equipment or liquids, has been discontinued? - answer-halon gas
