Security + Practice Exam With Correct Answers

Security + Practice Exam With Correct Answers 1. In which of the following types of architecture is the user responsible for the creation of the private and public key? A. Decentralized key management B. Centralized key management C. Revocation key management D. Multilevel key management - ANS A 2. Which of the following standards ensures privacy between communicating applications and clients on the Web and has been designed to replace SSL? A. Secure Sockets Layer 4 B. Point-to-Point Tunneling Protocol C. Transport Layer Security D. Internet Protocol Security - ANS C 3. Lynn needs access to the Accounting order-entry application but keeps getting an error that indicates inadequate access permissions. Bob assigns Lynn's account to the Administrator's group to overcome the error until he can work on the problem. Which access control constraint was violated by this action? A. Implicit denial B. Least privilege C. Separation of duties D. Account expiration - ANS B 4. An authentication system relies on an RFID chip embedded in a plastic key together with the pattern of blood vessels in the back of an authorized user's hand. What types of authentication are being employed in this system? A. Something you have and something you are B. Something you do and something you know C. Something you know and something you are D. Somewhere you are and something you have - ANS A 5. Which of the following is a commonly applied principle for fault tolerance against accidental faults designed into critical facilities planning? A. Firmware version control B. Wrappers C. Manual updates D. Control redundancy - ANS D 6. Which of the following methods can be used to locate a device in the event it is lost or stolen? A. GPS tracking B. Voice encryption C. Remote wipe D. Passcode policy - ANS A 7. Which of the following is a security concern when implementing NoSQL databases? A. NoSQL databases do not provide any authentication mechanisms. B. The NoSQL design uses server-side validation. C. NoSQL databases lack confidentiality and integrity. D. NoSQL databases are lacking in areas of scalability and performance. - ANS C 8. Which one of the following is a holding area between two entry points that gives security personnel time to view a person before allowing him into the internal building? A. Mantrap B. Biometric C. Honeypot D. Honeynet - ANS A 9. Bluejacking and bluesnarfing make use of which wireless technology? A. Wi-Fi B. Bluetooth C. Blu-Fi D. All of the above - ANS B 10. If an organization takes a full backup every Sunday morning and a daily differential backup each morning, what is the fewest number of backups that must be restored following a disaster on Friday? A. 1 B. 2 C. 5 D. 6 - ANS B 11. Which risk reduction policy does not aid in identifying internal fraud? A. Mandatory vacations B. Least privilege C. Separation of duties D. Job rotation - ANS B 12. Due to organizational requirements strong encryption cannot be used. Which of the following is the most basic form of encryption that can be used on 802.11based wireless networks to provide privacy of data sent between a wireless client and its access point? A. Wireless Application Environment (WAE) B. Wireless Session Layer (WSL) C. Wired Equivalent Privacy (WEP) D. Wireless Transport Layer Security (WTLS) - ANS C 13. Which of the following methods of cloud computing enables the client to literally outsource everything that would normally be in a typical IT department? A. SaaS B. DaaS C. PaaS D. IaaS - ANS D