Sec+Practice Test_4

An organization is migrating several SaaS applications that support SSO. The security manager wants to ensure the migration is completed securely. Which of the following should the organization consider before implementation? (Select TWO).

• C. The hashing method

• D. The encryption method

• E. The registration authority

• A. The back-end directory source

• B. The identity federation protocol

An organization has been experiencing outages during holiday sales and needs to ensure availability of its point-of-sale systems. The IT administrator has been asked to improve both server-data fault tolerance and site availability under high consumer load. Which of the following are the BEST options to accomplish this objective'? (Select TWO)

• B. Incremental backups

• D. RAID

• A. Load balancing

• C. UPS

• E. Dual power supply

Which of the following ISO standards is certified for privacy?

• A. ISO 9001

• B. ISO 27002

• C. ISO 27701

• D. ISO 31000

A security analyst is reviewing the following attack log output: Which of the following types of attacks does this MOST likely represent?

• A. Rainbow table

• B. Brute-force

• C. Password-spraying

• D. Dictionary

A security assessment determines DES and 3DES are still being used on recently deployed production servers. Which of the following did the assessment identify?

• A. Unsecure protocols

• B. Default settings

• C. Open permissions

• D. Weak encryption

Which of the following tools is effective in preventing a user from accessing unauthorized removable media?

• A. USB data blocker

• B. Faraday cage

• C. Proximity reader

• D. Cable lock

A network administrator would like to configure a site-to-site VPN utilizing iPSec. The administrator wants the tunnel to be established with data integrity encryption, authentication and anti-replay functions. Which of the following should the administrator use when configuring the VPN?

• A. AH

• B. EDR

• C. ESP

• D. DNSSEC

An engineer wants to access sensitive data from a corporate-owned mobile device. Personal data is not allowed on the device. Which of the following MDM configurations must be considered when the engineer travels for business?

• A. Screen locks

• B. Application management

• C. Geofencing

• D. Containerization

An organization is concerned that its hosted web servers are not running the most updated version of the software. Which of the following would work BEST to help identify potential vulnerabilities?

• A. Hping3 –s comptia, org –p 80

• B. Nc -1 –v comptia, org –p 80

• C. nmap comptia, org –p 80 –sV

• D. nslookup –port=80 comtia.org

An attacker is attempting to exploit users by creating a fake website with the URL www.validwebsite.com. The attacker's intent is to imitate the look and feel of a legitimate website to obtain personal information from unsuspecting users. Which of the following social-engineering attacks does this describe?

• A. Information elicitation

• B. Typo squatting

• C. Impersonation

• D. Watering-hole attack