Attacker obtains bank account number

and birth date by calling the victim

• Vishing

• Spoofing

• On-path

• DDoS

• Hoax

Answer explanation

Social engineering over the telephone continues to be an effective attack vector,

and obtaining personal information such as a bank account or birth date would

be considered phishing over voice, or vishing.

Attacker modifies a legitimate DNS server to resolve

the IP address of a malicious site

• Vishing

• Spoofing

• On-path

• DDoS

• Hoax

Answer explanation

Spoofing happens any time a device pretends to be another device. If a DNS

server has been modified to hand out the IP address of a different server, then

it's spoofing the IP address of the attacker.

Attacker intercepts all communication between

a client and a web server

• Vishing

• Spoofing

• On-path

• DDoS

• Hoax

Answer explanation

On-path attacks are quite effective because the attacker can often sit invisibly

between two devices and gather useful information or modify the data streams

in real-time.

Multiple attackers

overwhelm a web server

• Vishing

• Spoofing

• On-path

• DDoS

• Hoax

Answer explanation

A DoS (Denial of Service) occurs when a service is unavailable due to the

effects of a third-party. A DDoS (Distributed Denial of Service) occurs when

multiple third-parties work together to create a service outage.

A virus alert appears in your browser from Microsoft

with a phone number to call for support

• Vishing

• Spoofing

• On-path

• DDoS

• Hoax

Answer explanation

A threat that seems real but doesn't actually exist is a hoax. In this example, a

fake web site message is trying to convince you that this fake threat is actually a

real security issue.

The security team at a local public library system is creating a set of

minimum security standards for the various computer systems.

Select the BEST security control for each available placeholder.

Location:

Library

Web Server and

Database Server

Description:

Computer Room

High security

Choose 3.

• Locking Cabinets

• Environmental Sensors

• Video Surveillance

• Full-Disk Encryption

• Biometric Reader

Answer explanation

The security in the computer room requires both physical security and ongoing

surveillance. The locking cabinets will secure the physical equipment, and the

video surveillance will provide a method to monitor the systems without being

physically present. Including an environmental sensor will provide information

about the temperature and humidity levels in the computer room.

The security team at a local public library system is creating a set of

minimum security standards for the various computer systems.

Select the BEST security control for each available placeholder.

Location:

Library

Employee

Laptops

Description:

Offsite use

Contains PII

Choose 2.

• Locking Cabinets

• Environmental Sensors

• Video Surveillance

• Full-Disk Encryption

• Biometric Reader

Answer explanation

Since the laptops are used away from the main location, it's important to

protect the data and provide additional authentication options. The storage

drives on the laptop should be configured with FDE (full-disk encryption) and

a biometric reader on the laptop can ensure that the proper users have access.

The security team at a local public library system is creating a set of

minimum security standards for the various computer systems.

Select the BEST security control for each available placeholder.

Location:

Library

Lending

Systems

Description:

Manages the check-in

and check-out process

Choose 1.

• Locking Cabinets

• Smart Card

• Video Surveillance

• Full-Disk Encryption

• Biometric Reader

Answer explanation

The lending library systems are only used inside of the library, and it would

be common for employees to always have their identification cards available.

When combined with a smart card, these identification cards can be used as a

method of authentication for the lending systems.

The security team at a local public library system is creating a set of

minimum security standards for the various computer systems.

Select the BEST security control for each available placeholder.

Location:

Digital Newspaper

Reading Lab

Description:

Open Area

No supervision

Laptop computers

Choose 1.

• Locking Cabinets

• Smart Card

• Video Surveillance

• Full-Disk Encryption

• Cable Lock

Answer explanation

The reading lab computers are laptops that are used in a public area with no

supervision. To prevent these portable systems from becoming too portable,

they can be fitted with cable locks while in the reading lab.

Choose the BEST secure network protocol

for the description:

Accept customer purchases from your primary website

• HTTPS

• NTPsec

• SRTP

• SNMPv3

• SSH

Answer explanation

On today's networks, it's important to maintain confidentiality of data across

many different applications. The Security+ exam objectives include a list of

secure protocols, and it's useful to know both the insecure and secure versions

of each protocol type.

More information:

SY0-601, Objective 3.1 - Secure Protocols

https://professormesser.link/601030101