Sec+ Quiz 2.0

What is the purpose of the Simple Network Management Protocol version 3 (SNMPv3)?

• It provides asymmetric encryption values.

• It achieves specific communication goals.

• It provides a common language for developers.

• It is used to securely manage devices on IP-based networks.

A user is concerned that a web application will not be able to handle unexpected or random input without crashing. Which of the following BEST describes the type of testing the user should perform?

•  Code signing

  
  

• Fuzzing

  
  

• Manual code review

  
  

• Dynamic code analysis

  
  

Which of the following would satisfy three-factor authentication?

• Password, retina scanner, and NFC card

• Password, fingerprint scanner, and retina scanner

• Fingerprint scanner, hard token, and retina scanner

• Password, hard token, and NFC card

An incident response technician collected a mobile device during an investigation. Which of the following should the technician do to maintain chain of custody?

• Place the device in a Faraday cage to prevent corruption of the data.

• 
  Lock the device in a safe or other secure location to prevent theft or alteration.

• Record the collection in a blockchain-protected public ledger.

• Document the collection and require a sign-off when possession changes.

Which of the following is the BEST method for ensuring non-repudiation?

•  SSO

• Digital certificate

  
  

• Token

  
  

• SSH key

  
  

What technology can check the client’s health before allowing access to the network?

• DLP

• Reverse proxy

• NIDS/NIPS

• NAC

You have a database full of very sensitive data. Salespeople need to access some of this sensitive data when onsite with a customer. The best method to prevent leakage of critical data during these access sessions would be to employ which of the following?

• Salting

• Hashing

• Block List

• Tokenization

In the middle of a cyberattack, a security engineer removes the infected devices from the network and locks down all compromised accounts. In which of the following incident response phases is the security engineer currently operating?

• Identification

• Containment

• Eradication

• Recovery

A user enters a password to log in to a workstation and is then prompted to enter an authentication code. Which of the following MFA factors or attributes are being utilized in the authentication process?

• -Something you know 

  -Something you have

• - Somewhere you are

  - Someone you are

• - Something you have

  - Somewhere you are

• - Someone you are 

  - Something you are

During a security assessment, a security analyst finds a file with overly permissive permissions. Which of the following tools will allow the analyst to reduce the permissions for the existing users and groups and remove the set-user-ID bit from the file?

• ls

• chmod

• chown

• setuid