CompTIA Sec+ Ultimate Tricky Questions Compendium Part 1

Tracy wants to limit when users can log in to a standalone Windows workstation. What can Tracy do to make sure that an account called "visitor" can only log in between 8 a.m. and 5 p.m. every weekday?

• Running the command net user visitor

  /time:M-F,8am-5pm

• Running the command netreg user visitor

  -daily -working-hours

• Running the command login limit:daily time: 8-5

• This cannot be done from the Windows command line

Emily wants to capture HTTPS packets using tcpdump. If the service is running on its default port and her Ethernet adapter is eth0, which tcpdump command should she use?

• tcpdump eth0 -proto https

• tcpdump -i eth0 -proto https

• tcpdump tcp https eth0

• tcpdump -i eth0 tcp port 443

The following graphic shows a report from an OpenVAS vulnerability scan. What should Charles do first to determine the best fix for the vulnerability shown?

• Disable PHP-CGI.

• Upgrade PHP to version 5.4.

• Review the vulnerability descriptions in the CVEs listed.

• Disable the web server.

Which of the following is the best description of a stored procedure?

• Code that is in a DLL, rather than the executable

• Server-side code that is called from a client

• SQL statements compiled on the database server as a single procedure that can be called

• Procedures that are kept on a separate server from the calling application, such as in middleware

What additional security control can Amanda implement if she uses compiled software that she cannot use if she only has software binaries?

• She can review the source code.

• She can test the application in a live environment.

• She can check the checksums provided by the vendor.

• None of the above

Irene wants to use a cloud service for her organization that does not require her to do any coding or system administration, and she wants to do minimal configuration to perform the tasks that her organization needs to accomplish. What type of cloud service is she most likely looking for?

• SaaS

• PaaS

• IaaS

• IDaaS

What is the most common format for certificates issued by certificate authorities?

• DER

• PFX

• PEM

• P7B

You are a security administrator for Acme Corporation. You have discovered malware on some of your company's machines. This malware seems to intercept calls from the web browser to libraries, and then manipulates the browser calls. What type of attack is this?

• Man in the browser

• On-path attack

• Buffer overflow

• Session hijacking

Frank is a security administrator for a large company. Occasionally, a user needs to access a specific resource that they don't have permission to access. Which access control methodology would be most helpful in this situation?

• Mandatory access control (MAC)

• Discretionary access control (DAC)

• Role-based access control

• Rule-based access control

What function does counter mode perform in a cryptographic system?

• It reverses the encryption process.

• It turns a block cipher into a stream cipher.

• It turns a stream cipher into a block cipher.

• It allows public keys to unlock private keys.