CompTIA Security+ Practice Exam 2

An invalid input is intentionally entered in an application to check if the application can handle it. Which type of testing is performed?

• Stress

• User acceptance

• Fuzzing

• Regression

Which of the following statements are true of input validation?

Each correct answer represents a complete solution. Choose three.

• Helps to overcome buffer overflow and DoS attack

• Includes sending any unexpected or maliciously crafted input to a system

• Ensures that different types of input are handled gracefully by an application

• Requires a user login with normal characters as input during testing

Which of the following fully implements the 802.11i security requirements?

• WPS

• WPA

• WPA2

• WEP

A directory protocol that includes all the information about a network is a/an:

• SIP protocol

• LDAP protocol

• SNMP protocol

• RADIUS protocol

A company has developed an application which is undergoing the testing process. According to the results of the testing process, some changes have been made to the application. The company now wishes to check whether the changes made in the application have caused the previously existing functionality to fail or not. Which test should the company perform?

• Manual peer review

• User acceptance

• Regression

• Stress

Which of the following statements are true about asymmetric encryption?

Each correct answer represents a complete solution. Choose two.

• It is faster as compared to symmetric encryption

• Only one key is needed to encrypt and decrypt data in it

• In asymmetric encryption, the public key is distributed and the private key is available only to the recipient of the message

• It uses a public key and private key for data encryption

Which of the following password attacks calculates all the possible hashes for a set of characters and stores them in a table?

• Brute force

• Hybrid

• Dictionary

• Rainbow

Which of the following statements are true of MDA (Message Digest Algorithm)?

Each correct answer represents a complete solution. Choose all that apply.

• It uses a two-way hash

• It maintains integrity

• It offers 256-bit hash

• It offers 128-bit hash

What form of cryptography is primarily labeled as a one-way function?

• Symmetric

• Asymmetric

• Hashing

• Digital signatures

Azim is beginning an investigation of a suspect computer with a Windows operating system. He takes several screenshots of the computer with the task manager window open before shutting it down to make a copy of the drive. What is the best reason to do this?

• To document the operating system in use

• To show the applications on the desktop

• To document the desktop layout and icons

• To show running processes on the machine