CompTIA Security+ Practice Test with 100% correct answers

During an assessment of a manufacturing plant, a security analyst finds several end-of-life programmable logic controllers, which have firmware that was last updated three years ago and known vulnerabilities. Which of the following BEST mitigates the risks associated with the PLC's? Implement network segmentation to isolate the devices A user is attempting to view and older sent email, but is unable to open the email. Which of the following is the MOST likely cause? The private certificate used to sign the email has expired An organization's Chief Information Officer recently received an email from human resources that contained sensitive information. The CIO noticed the email was sent via unsecure means. A policy has since been put into place stating all emails must be transmitted using secure technologies. Which of the following should be implemented to address the new policy? TLS Which of the following is a penetration tester performing when running an SMB NULL session scan of a host to determine valid usernames and share names? Credentialed vulnerability scan A Chief Executive Officer of an organization receives an email stating the CEO's account may have been compromised. The email further directs the CEO to click on a link to update the account credentials. Which of the following types of attacks has most likely occurred? Pharming A user is unable to open a file that has a grayed-out icon with a lock. The user receives a pop-up message indicating that payment must be sent in Bitcoin to unlock the file. Later in the day, other users in the organization lose the ability to open files on the server. Which of the following has MOST likely occurred? (Select THREE) Crypto-malware, Botnet attack, Ransomware A company is deploying a file-sharing protocol across a network and needs to select a protocol for authenticating clients. Management requests that the service be configured in the most secure way possible. The protocol must also be capable of mutual authentication, and support SSO and smart card logons. Which of the following would BEST accomplish this task? Implement Kerberos Which of the following methods is used by internal security teams to assess the security of internally developed applications? White box testing After a significant amount of hiring, an organization would like to simplify the connection process to its wireless network for employees while ensuring maximum security. The Chief Information Office want to get rid of any shared network passwords and require employees to use their company credentials when connecting. Which of the following should be implemented to BEST meet this requirement? 802.1x Which of the following enables sniffing attacks against a switched network? ARP poisoning A security analyst is securing a CA server. One of the requirements is network isolation with no access to the internet or networked computers. Given this scenario, which of the following should the analyst implement to BEST address the requirement? Set up an air-gapped environment A developer wants to use an open source, third-party plug-in. The developer downloads the plug-in from the providers website and from a mirror, and runs the files through and integrity-checking hash. The output of each file is shown: fileA: BA411C782ADABCDEF fileB: BA411C782ADABCDEF Which of the following statements BEST summarizes what conclusion the developer can draw from the above results? Given the output, the developer can assume there is no integrity compromise Users are able to reach the login page of their company website from home using HTTP. A network administrator disables HTTP and implements SSL. However, after the implementation, home users cannot access the login page of the company website. Which of the following is the MOST likely reason the site is unavailable? The company website implements HTTP redirects Which of the following access management concepts is associated with file permissions? Authorization