61-90

NO.61 After segmenting the network, the network manager wants to control the traffic between the segments. Which of the following should the manager use to control the network traffic?

• (A).  A DMZ

• (B). A VPN

• (C). A VLAN

• (D). An ACL

NO.62 A security analyst needs to determine how an attacker was able to use User3 to gain a foothold within a company's network. The company's lockout policy requires that an account be locked out for a minimum of 15 minutes after three unsuccessful attempts. While reviewing the log files, the analyst discovers the following:

Which of the following attacks MOST likely occurred?

• (A). Dictionary

• (B). Credential-stuffing

• (C). Password-spraying

• (D). Brute-force

NO.63 An organization is concerned that its hosted web servers are not running the most updated version of the software. Which of the following would work BEST to help identify potential vulnerabilities?

• (A). hping3 -S corsptia.org -p 80

• (B). nc -1 -v comptia.org -p 80

• (C). nmap comptia.org -p 80 -sV

• (D). nslookup -port=80 comptia.org

NO.64 A company uses wireless tor all laptops and keeps a very detailed record of its assets, along with a comprehensive list of devices that are authorized to be on the wireless network. The Chief Information Officer (CIO) is concerned about a script kiddie potentially using an unauthorized device to brute force the wireless PSK and obtain access to the internal network. Which of the following should the company implement to BEST prevent this from occurring?

• (A). A BPDU guard

• (B). WPA-EAP

• (C). IP filtering

• (D). A WIDS

NO.65 A security analyst wants to verify that a client-server (non-web) application is sending encrypted traffic.

Which of the following should the analyst use?

• (A). openssl

• (B). hping

• (C). netcat

• (D). tcpdump

NO.66 A user enters a password to log in to a workstation and is then prompted to enter an authentication code.

Which of the following MFA factors or attributes are being utilized in the authentication process? (Select TWO).

• (A). Something you know

• (B). Something you have

• (C). Somewhere you are

• (D). Someone you are

  (E).Something you can do

• (F). Something you are

NO.67 A financial institution would like to store its customer data in a cloud but still allow the data to be accessed and manipulated while encrypted. Doing so would prevent the cloud service provider from being able to decipher the data due to its sensitivity. The financial institution is not concerned about computational overheads and slow speeds. Which of the following cryptographic techniques would BEST meet the requirement?

• (A). Asymmetric

• (B). Symmetric

• (C). Homomorphic

• (D). Ephemeral

NO.68 Which of the following BEST describes a social-engineering attack that relies on an executive at a small business visiting a fake banking website where credit card and account details are harvested?

• (A). Whaling

• (B). Spam

• (C). Invoice scam

• (D). Pharming

NO.69 A company's help desk received several AV alerts indicating Mimikatz attempted to run on the remote systems. Several users also reported that the new company flash drives they picked up in the break room only have 512KB of storage. Which of the following is MOST likely the cause?

• (A). The GPO prevents the use of flash drives, which triggers a false positive AV indication and

  restricts the drives to only 512KB of storage.

• (B). The new flash drives need a driver that is being blocked by the AV software because the flash

  drives are not on the application's allow list, temporarily restricting the drives to 512KB of storage.

• (C). The new flash drives are incorrectly partitioned, and the systems are automatically trying to use

  an unapproved application to repartition the drives.

• (D). The GPO blocking the flash drives is being bypassed by a malicious flash drive that is attempting

  to harvest plaintext credentials from memory.

NO.70 A well-known organization has been experiencing attacks from APIs. The organization is concerned that custom malware is being created and emailed into the company or installed on USB sticks that are dropped in parking lots. Which of the following is the BEST defense against this scenario?

• (A). Configuring signature-based antivirus io update every 30 minutes

• (B). Enforcing S/MIME for email and automatically encrypting USB drives upon insertion.

• (C). Implementing application execution in a sandbox for unknown software.

• (D). Fuzzing new files for vulnerabilities if they are not digitally signed