CompTIA Security+ SY0-601 Chapter 13 - 15

What kind of attack is most likely when you’re doing sensitive work on your laptop at a coffee shop? Choose the best response

• Piggybacking
• Dumpster diving
• Shoulder surfing
• Smurfing

Several coworkers in the sales department received an email claiming to be from you. Each message was personally addressed and contained a link to a “test site” and a request to log in with standard user credentials. You never sent it, and on examination, the supposed test site is a phishing scam. Just what variant of phishing is this? Choose the best response

• Pharming
• Spear phishing
• Vishing
• Whaling

What security controls can protect against tailgating? Select all that apply

• Alarm systems
• Clean desk policy
• Mantraps
• Security guards
• Spam filters

Social engineering attacks are most commonly either in person or over electronic media rather than on the phone. True or false?

• true
• false

What policy document generally describes mutual goals between organizations? Choose the best response

• BPA
• ISA
• MOU
• SLA

Which policy is focused on preventing data loss? Choose the best response

• AUP
• Clean desk policy
• Mandatory vacation
• Separation of duties

Experts agree that very demanding password policies are the best way to maintain security. True or false?

• true
• false

What are the benefits of a job rotation policy? Select all that apply

• Allows employees to discover each other’s mistakes in multi-step processes
• Helps detect fraudulent activity over time
• Minimizes permissions given to any one employee
• Prevents data loss
• Trains employees more broadly

Your company has signed a BPA with a business partner. What most likely isn’t a part of it? Choose the best response

• How liability is shared for a loss of shared assets
• Technical requirements for secured data connections between the two companies
• What happens to informational assets when the agreement is dissolved
• Who is responsible for maintaining informational assets

What kind of security training is most important for a company executive? Choose the best response.

• Identifying malware symptoms
• Overall awareness of the organization’s assets and threats to them
• Recognizing social engineering attacks
• Regular updates on evolving network threats