Sec+ Practice Test_1

An organization is migrating several SaaS applications that support SSO. The security manager wants to ensure the migration is completed securely. Which of the following should the organization consider before implementation? (Select TWO)

• The back-end directory source

• The identity federation protocol

• The hashing method

• The encryption method

• The registration authority

A systems administrator is troubleshooting a server's connection to an internal web server. The administrator

needs to determine the correct ports to use. Which of the following tools BEST shows which ports on the web server are in a listening state?

• Ipconfig

• ssh

• Ping

• Netstat

A security analyst is investigating suspicious traffic on the web server located at IP address 10.10.1.1. A search of the WAF logs reveals the following output:

• XSS attack

• SQLi attack

• Replay attack

• XSRF attack

A security analyst wants to fingerprint a web server. Which of the following tools will the security analyst MOST likely use to accomplish this task?

• nmap -pl-65S35 192.168.0.10

• dig 192.168.0.10

• curl --head http://192.168.0.10

• ping 192.168.0.10

Which of the following is the MOST effective control against zero-day vulnerabilities?

• Network segmentation

• Patch management

• Intrusion prevention system

• Multiple vulnerability scanners

A security proposal was set up to track requests for remote access by creating a baseline of the users' common sign-in properties. When a baseline deviation is detected, an MFA challenge will be triggered. Which of the following should be configured in order to deploy the proposal?

• Context-aware authentication

• Simultaneous authentication of equals

• Extensive authentication protocol

• Agentless network access control

The Chief Information Security Officer directed a risk reduction in shadow IT and created a policy requiring all unsanctioned high-risk SaaS applications to be blocked from user access. Which of the following is the BEST security solution to reduce this risk?

• MFA

• VPN concentrator

• CASB

• VPC endpoint

A security analyst is working on a project to implement a solution that monitors network communications and provides alerts when abnormal behavior is detected. Which of the following is the security analyst MOST likely implementing?

• Vulnerability scans

• Security orchestration, automation, and response

• User behavior analysis

• Threat hunting

Which of the following will increase cryptographic security?

• High data entropy

• Algorithms that require less computing power

• Longer key longevity

• Hashing

An engineer recently deployed a group of 100 web servers in a cloud environment. Per the security policy, all web-server ports except 443 should be disabled. Which of the following can be used to accomplish this task?

• Application allow list

• SWG

• Host-based firewall

• VPN