Sec+ review

What do you use if you allow users to bring in an approved device?

• BYOD

• AUP

• CYOD

• COPE

Used to check the validity of a certificate?

• CA

• CSP

• CSR

• CRL

Technique used to grab version information?

• ping sweep

• banner grabbing

• tcpdump

• phishing

How does DLP typically detect sensitive data?

• By using hash functions

• By analyzing file names

• By using pattern matching and fingerprinting

• By scanning firewall logs

Why is a secure baseline important?

• It helps ensure consistent security configurations across systems

• It blocks non-encrypted traffic

• It replaces the need for security patchin

• It prevents physical access to systems

You have been authorized by management to use a vulnerability scanner once every three months. What is this tool?

• an application that identifies ports and services that are at risk on a network

• an application that identifies ports and services that are at risk on a network

• an application that identifies security issues on a network and gives suggestions on how to prevent the issues

• an application that detects when network intrusions occur and identifies the appropriate personnel

Which of these is part of a scan to identify a common misconfiguration?

• Packet sniffing

• Dictionary attack

• Password policy

• Router with a default password

Which type of vulnerability is demonstrated by a SQL injection?

• Default configuration

• Improper input handling

• Misconfiguration/weak configuration

• Improper error handling

Which of the following applications is most likely to use an RTOS?

• Video Game consoles

• Web Browsers

• Pacemakers

• Linux operating systems

You are researching the different types of firewalls that you can install to protect your company's network and assets. Which type of firewall is most detrimental to network performance?

• circuit-level proxy firewall

• packet-filtering firewall

• stateful firewall

• application-level proxy firewall