Topic 2 : Exam Pool B

An attacker browses a company’s online job board attempting to find any relevant information regarding the technologies the company uses.

Which of the following BEST describes this social engineering technique?

• Hoax

• Reconnaissance

• Impersonation

• Pretexting

Server administrators want to configure a cloud solution so that computing memory and processor usage is maximized most efficiently across a number of virtual servers. They also need to avoid potential denial-of-service situations caused by availability.

Which of the following should an administrator configure to maximize system availability while efficiently utilizing available computing power?

• Dynamic resource allocation

• High availability

• Segmentation

• Container security

Which of the following uses SAML for authentication?

• TOTP

• Federation

• Kerberos

• HOTP

The Chief Information Security Officer (CISO) of a bank recently updated the incident response policy. The CISO is concerned that members of the incident response team do not understand their roles. The bank wants to test the policy but with the least amount of resources or impact.

Which of the following BEST meets the requirements?

• Warm site failover

• Tabletop walk-through

• Parallel path testing

• Full outage simulation

A security analyst is reviewing web-application logs and finds the following log:

https://www.comptia.org/contact-us/93Ffiles/%3Ffile%Ffile%3D..%2F..%2F..%2Fetch%2Fpasswd

Which of the following attacks is being observed?

• Directory traversal

• XSS

• CSRF

• On-path attack