CompTIA Security+ Book Practice Test 4

Michelle wants to check for authentication failures on a CentOS Linux-based system. Where should she look for these event logs?

• /var/log/auth.log

• /var/log/fail

• /var/log/events

• /var/log/secure

Which of the following capabilities is not built into Autopsy?

• Disk imaging

• Timeline generation

• Automatic image filtering

• Communication visualization

Jessica wants to review the network traffic that her Windows system has sent to determine if a file containing sensitive data was uploaded from the system. What Windows log file can she use to find this information?

• The application log

• The network log

• The security log

• None of the above

Valerie wants to capture the pagefile from a Windows system. Where can she find the file for acquisition?

• C:\Windows\swap

• C:\pagefile.sys

• C:\Windows\users\swap.sys

• C:\swap\pagefile.sys

Which of the following is not a common type of incident response exercise?

• Drills

• Simulations

• Tabletop

• Walk-throughs

Nick is reviewing commands run on a Windows 10 system and discovers that the route command was run with the -p flag. What occurred?

• Routes were discovered using a ping command.

• The route's path will be displayed.

• A route was added that will persist between boots.

• A route was added that will use the path listed in the command.

What mitigation technique is used to limit the ability of an attack to continue while keeping systems and services online?

• Segmentation

• Isolation

• Nuking

• Containment

Isaac executes the following command using netcat: nc -v 10.11.10.1 1-1024 What has he done?

• Opened a web page

• Connected to a remote shell

• Opened a local shell listener

• Performed a port scan

What term describes the ownership, custody, and acquisition of digital forensic artifacts and images?

• E-discovery

• Provenance

• Jurisdiction

• Volatility

What phase of the incident response process often involves adding firewall rules and patching systems to address the incident?

• Preparation

• Eradication

• Recovery

• Containment