Comptia Sec+ 421-450

NO.421 Which of the following function as preventive, detective, and deterrent controls to reduce

the risk of physical theft? (Select TWO).

• (A). Mantraps

• (B). Security guards

• (C). Video surveillance

• (D). Fences

• (E). Bollards

  (F). Antivirus

NO.422 A security analyst needs to perform periodic vulnerably scans on production systems. Which

of the following scan types would produce the BEST vulnerability scan report?

• (A). Port

• (B). Intrusive

• (C). Host discovery

• (D). Credentialed

NO.423 Which of the following will MOST likely cause machine learning and Al-enabled systems to

operate with unintended consequences?

• (A). Stored procedures

• (B). Buffer overflows

• (C). Data bias

• (D). Code reuse

NO.424 Which of the following are requirements that must be configured for PCI DSS compliance?

(Select TWO). ((F). Using vendor-supplied default passwords for system passwords)

• (A). Testing security systems and processes regularly

• (B). Installing and maintaining a web proxy to protect cardholder data

• (C). Assigning a unique ID to each person with computer access

• (D). Encrypting transmission of cardholder data across private networks

• (E). Benchmarking security awareness training for contractors

NO.425 A security analyst is reviewing the following output from a system:

Which of the following is MOST likely being observed?

• (A). ARP palsoning

• (B). Man in the middle

• (C). Denial of service

• (D). DNS poisoning

NO.426 Customers reported their antivirus software flagged one of the company's primary software

products as suspicious. The company's Chief Information Security Officer has tasked the developer

with determining a method to create a trust model between the software and the customer's

antivirus software. Which of the following would be the BEST solution?

• (A). Code signing

• (B). Domain validation

• (C). Extended validation

• (D). Self-signing

NO.427 As part of a company's ongoing SOC maturation process, the company wants to implement

a method to share cyberthreat intelligence data with outside security partners. Which of the

following will the company MOST likely implement?

• (A). TAXII

• (B). TLP

• (C). TTP

• (D). STIX

NO.428 A company recently experienced an attack in which a malicious actor was able to exfiltrate

data by cracking stolen passwords, using a rainbow table the sensitive data. Which of the following

should a security engineer do to prevent such an attack in the future?

• (A). Use password hashing.

• (B). Enforce password complexity.

• (C). Implement password salting.

• (D). Disable password reuse.

NO.429 After consulting with the Chief Risk Officer (CRO). a manager decides to acquire

cybersecurity insurance for the company Which of the following risk management strategies is the

manager adopting?

• (A). Risk acceptance

• (B). Risk avoidance

• (C). Risk transference

• (D). Risk mitigation

NO.430 A manufacturing company has several one-off legacy information systems that cannot be

migrated to a newer OS due to software compatibility issues. The Oss are still supported by the

vendor, but the industrial software is no longer supported. The Chief Information Security Officer

(CISO) has created a resiliency plan for these systems that will allow OS patches to be installed in a

non-production environment, while also creating backups of the systems for recovery. Which of the

following resiliency techniques will provide these capabilities?

• (A). Redundancy

• (B). RAID 1+5

• (C). Virtual machines

• (D). Full backups