CompTIA Security+ 11-20

You have been authorized by management to use a vulnerability scanner once every three months. What is this tool?

• an application that identifies ports and services that are at risk on a network

• an application that identifies ports and services that are at risk on a network

• an application that identifies security issues on a network and gives suggestions on how to prevent the issues

• an application that detects when network intrusions occur and identifies the appropriate personnel

As part of your company's comprehensive vulnerability scanning policy, you decide to perform a passive vulnerability scan on one of your company's subnetworks. Which statement is true of this scan?

• It allows a more in-depth analysis than other scan types.

• It is limited to a particular operating system.

• It impacts the hosts and network less than other scan types.

• It includes the appropriate permissions for the different data types.

What is the goal when you passively test security controls?

• Probing for weaknesses

• Infiltrating the network

• Interfering with business operations

• Exploiting weaknesses

Which of these is part of a scan to identify a common misconfiguration?

• Packet sniffing

• Dictionary attack

• Password policy

• Router with a default password

Which memory vulnerability is associated with multithreaded applications?

• Resource exhaustion

• Race condition

• DLL injection

• Pointer dereferencing

What is often the weakest link in the security chain, and represents the largest vulnerability?

• End-of-life systems

• Untrained users

• Lack of vendor support

• Embedded systems

Which type of vulnerability is demonstrated by a SQL injection?

• Default configuration

• Improper input handling

• Misconfiguration/weak configuration

• Improper error handling

An IT technician has been assigned to a new embedded firewall. What statement best describes this type of firewall?

• a component that is added to a hardware firewall

• a firewall that is installed on a server operating system

• a firewall that is integrated into a router

• a black box device

Management has decided to purchase a new appliance firewall that will be installed between the public and private networks owned by your company. Which type of firewall is also referred to as an appliance firewall?

• hardware

• application

• embedded

• software

You are researching the different types of firewalls that you can install to protect your company's network and assets. Which type of firewall is most detrimental to network performance?

• circuit-level proxy firewall

• packet-filtering firewall

• stateful firewall

• application-level proxy firewall