Which of the following BEST describes a virtual desktop infrastructure (VDI)?

Provides enhanced security and better data protection because most of the data processing is provided by servers in the data center rather than on the local device.

Specifies where and when mobile devices can be possessed within the organization. For example, the possession of mobile devices may be prohibited in high-security areas.

Gives businesses significant control over device security while allowing employees to use their devices to access both corporate and personal data.

Defines which kinds of data are allowed or which kinds of data are prohibited on personally owned devices brought into the workplace.

You manage the information systems for a large manufacturing firm. Supervisory control and data acquisition (SCADA) devices are used on the manufacturing floor to manage your organization's automated factory equipment. The SCADA devices use embedded smart technology, allowing them to be managed using a mobile device app over an internet connection. You are concerned about the security of these devices. What can you do to increase their security posture? (Select two.)

Install the latest firmware updates from the device manufacturer.

Verify that your network's existing security infrastructure is working properly.

Install anti-malware software on each device.

Enroll each device in a mobile device management system.

Install a network monitoring agent on each device.

Which of the following BEST describes PuTTy?

Open-source software that is developed and supported by a group of volunteers.

A programming language for a special runtime environment that automates the execution of tasks.

A method that provides an encryption standard that's widely used by internet websites.

A mechanism that allows you to interact with the operating system directly.

A script kiddie is a threat actor who lacks knowledge and sophistication. Script kiddie attacks often seek to exploit well-known vulnerabilities in systems. What is the BEST defense against script kiddie attacks?

Keep systems up to date and use standard security practices.

Implement email filtering systems.

Have appropriate physical security controls in place.

Build a comprehensive security approach that uses all aspects of threat prevention and protection.

Properly secure and store data backups.

Which of the following best describes shoulder surfing?

Someone nearby watching you enter your password on your computer and recording it.

Guessing someone's password because it is so common or simple.

Finding someone's password in the trash can and using it to access their account.

Giving someone you trust your username and account password.

Which of the following defines an acceptable use agreement?

An agreement that identifies employees' rights to use company property, such as internet access and computer equipment, for personal use.

A legal contract between the organization and the employee that specifies that the employee is not to disclose the organization's confidential information.

An agreement that outlines the organization's monitoring activities.

An agreement that prohibits an employee from working for a competing organization for a specified period of time after he or she leaves the organization.

Which of the following BEST describes a honeyfile?

A SINGLE FILE SETUP TO ENTICE AND TRAP ATTACKERS.

A DEFAULT FILE IN THE /ETC/SECURITY DIRECTORY.

A FILES THAT HAS BEEN DIGITALLY SIGNED.

Which of the following is the LEAST reliable means of cleaning or purging media?

OVERWRITING EVERY SECTOR WITH ALTERNATING 1S AND OS

DRIVE CONTROLLER HARDWARE-LEVEL FORMATTING

You are investigating the use of website and URL content filtering to prevent users from visiting certain websites. Which benefits are the result of implementing this technology in your organization? (Choose two.)

Enforcement of the organization's internet usage policy

An increase in bandwidth availability

Prevention of phishing attempts

Identification and disposal of infected content

Prevention of emails containing threats

You've just deployed a new Cisco router that connects several network segments in your organization. The router is physically located in a server room that requires an ID for access. You've backed up the router configuration to a remote location in an encrypted file. You access the router configuration interface from your notebook computer using a Telnet client with a username of admin and a password of P@ssW0rd. You have used the MD5 hashing algorithm to protect the password. What should you do to increase the security of this device? (Select two.)

Change the default administrative username and password.

Use an SSH client to access the router configuration.

Use a web browser to access the router configuration using an HTTP connection.

Use TFTP to back up the router configuration to a remote location.

Use encrypted Type 7 passwords.

You connect your computer to a wireless network available at the local library. You find that you can access all of the websites you want on the internet except for two. What might be causing the problem?

A proxy server is blocking access to the websites.

The router has not been configured to perform port forwarding.

A firewall is blocking ports 80 and 443.

Port triggering is redirecting traffic to the wrong IP address.

You have run a vulnerability scanning tool and identified several patches that need to be applied to a system. What should you do next after applying the patches?

Run the vulnerability assessment again.

Use a port scanner to check for open ports.

Update the vulnerability scanner definition files.

Which of the following best describes the contents of the CRL?

A list of all revoked certificates

A list of all expired and revoked certificates

The archived private keys of all issued certificates

The current status of all certificates issued by a CA

Which technology was developed to help improve the efficiency and reliability of checking the validity status of certificates in large, complex environments?

Online Certificate Status Protocol

Which of the following are advantages of virtualization? (Select two.)

Easy migration of systems to different hardware

Redundancy of hardware components for fault tolerance

Reduced utilization of hardware resources

Improved host-based attack detection

COMP TIA SECURITY EXAM PART 1 OF 2

Authored by Sahil Jamsa

Instructional Technology

11th Grade

Used 2+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

50 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A remote access user needs to gain access to resources on the server. Which of the following processes are performed by the remote access server to control access to resources?

Authentication and accounting

Authorization and accounting

Identity proofing and authentication

Authentication and authorization

Identity proofing and authorization

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Sometimes, an attacker's goal is to prevent access to a system rather than to gain access. This form of attack is often called a denial-of-service attack and causes which impact?

Identity Theft

Data Exfiltration

Availability Loss

Data Loss

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which type of RFID tag can send a signal over a long distance?

NFC

Active

Bluetooth

Passive

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which of the following is used as a secure tunnel to connect two networks?

VLAN

VAN

VPN

VFA

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which of the following strategies can protect against a rainbow table password attack?

Add random bits to the password before hashing takes place

Enforce strict password restrictions

Encrypt the password file with one-way encryption

Educate users to resist social engineering attacks

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

One of your users, Karen Scott, has recently married and is now Karen Jones. She has requested that her username be changed from kscott to kjones with no other values changed. Which of the following commands would accomplish this?

usermod -u kjones kscott

usermod -l kjones kscott

usermod -l kscott kjones

usermod -u kscott kjones

MULTIPLE SELECT QUESTION

45 sec • 1 pt

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

Group Policy

Security Templates

Security Configuration and Analysis

WSUS

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Popular Resources on Wayground

10 questions

Fire Safety Quiz

Quiz

•

12th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

20 questions

Inferences

Quiz

•

4th Grade

36 questions

6th Grade Math STAAR Review

Quiz

•

6th Grade

19 questions

Classifying Quadrilaterals

Quiz

•

3rd Grade

12 questions

What makes Nebraska's government unique?

Quiz

•

4th - 5th Grade

Discover more resources for Instructional Technology

14 questions

Fire Safety Quiz

Quiz

•

9th - 12th Grade

COMP TIA SECURITY EXAM PART 1 OF 2

A remote access user needs to gain access to resources on the server. Which of the following processes are performed by the remote access server to control access to resources?

Sometimes, an attacker's goal is to prevent access to a system rather than to gain access. This form of attack is often called a denial-of-service attack and causes which impact?

Which type of RFID tag can send a signal over a long distance?

Which of the following is used as a secure tunnel to connect two networks?

Which of the following strategies can protect against a rainbow table password attack?

One of your users, Karen Scott, has recently married and is now Karen Jones. She has requested that her username be changed from kscott to kjones with no other values changed. Which of the following commands would accomplish this?

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

Allows an attacker's computer to connect to a switch using an authorized MAC address.

The process of intentionally overwhelming the CAM table with Ethernet frames, each originating from a different MAC address.

The MAC address of the attacker can be associated with the IP address of another host.

Access all questions and much more by creating a free account

Popular Resources on Wayground

Discover more resources for Instructional Technology