Part 2 comptia

During a review of the proxy server logs, if a user was repeatedly violating content standards and was not complying with the Acceptable Use Policy (AUP), which of the following is the MOST likely cause?

• Another user was using someone else's login credentials

• The system was being used to mine cryptocurrency

• The user needed to access those sites for official duties

• The user's computer was infected with adware

Which of the following are used to increase the computing time it takes to brute force a password using an offline attack? (Select TWO)

• XOR

• PBKDF2

• Bcrypt

• HMAC

• RIPEMD

To determine the Annual Loss Expectancy (ALE) of a particular risk, which of the following must be calculated? (Select TWO)

• ARO

• ROI

• SPO

• SLE

• RTO

A Chief Information Officer is reviewing the badging procedures and decides to write a policy that all employees must have their badges rekeyed at least annually. Which of the following controls BEST describes this policy?

• Physical

• Corrective

• Technical

• Administrative

A remote intruder wants to take inventory of a network so exploits can be researched. The intruder is looking for information about software versions on the network. Which of the following techniques is the intruder using?

• Banner grabbing

• Port scanning

• Packet sniffing

• Virus scanning

Which of the following attackers generally possesses minimal technical knowledge to perform advanced attacks and uses widely available tools as well as publicly available information?

• Hacktivist

• White hat hacker

• Script kiddie

• Penetration tester

An organization is providing employees with computers that log their time based on when they sign on and off the network. Which of the following account types should the employees receive?

• Shared account

• Privileged account

• User account

• Service account

A security administrator has replaced the firewall and notices a number of dropped connections. After looking at the data, the security administrator sees the following information flagged as a possible issue: "SELECT * FROM" and "1=1". Which of the following can the security administrator determine from this?

• An SQL injection attack is being attempted

• Legitimate connections are being dropped

• A network scan is being done on the system

• An XSS attack is being attempted

A systems administrator has implemented multiple websites using host headers on the same server. The server hosts two websites that require encryption and other websites where encryption is optional. Which of the following should the administrator implement to encrypt web traffic for the required websites?

• Extended domain validation

• TLS host certificate

• OCSP stapling

• Wildcard certificate

A security administrator is investigating many recent incidents of credential theft for users accessing the company's website, despite the hosting web server requiring HTTPS for access. The server's logs show the website leaves the HTTP POST method for carrying user authentication details. Which of the following is the MOST likely reason for compromise?

• The HTTP POST method is not protected by HTTPS

• The webserver is running a vulnerable SSL configuration

• The company does not support DNSSEC

• The HTTP response is susceptible to sniffing