CompTIA Sec+ Chapter 3, 2nd Attempt Missed

Chris is preparing to implement an 802.1X-enabled wireless infrastructure. He knows that he wants to use an Extensible Authentication Protocol (EAP)-based protocol that does not require client-side certificates. Which of the following options should he choose?

• EAP-MD5

• PEAP

• LEAP

• EAP-TLS

Mark is responsible for managing his company's load balancer and wants to use a load-balancing scheduling technique that will take into account the current server load and active sessions. Which of the following techniques should he choose?

• Source IP hashing

• Weighted response time

• Least connection

• Round robin

Which design concept limits access to systems from outside users while protecting users and systems inside the LAN?

• DMZ

• VLAN

• Router

• Guest network

Which of the following is the equivalent of a VLAN from a physical security perspective?

• Perimeter security

• Partitioning

• Security zones

• Firewall

Which type of firewall examines the content and context of each packet it encounters?

• Packet filtering firewall

• Stateful packet filtering firewall

• Application layer firewall

• Gateway firewall

You're designing a new network infrastructure so that your company can allow unauthenticated users connecting from the Internet to access certain areas. Your goal is to protect the internal network while providing access to those areas. You decide to put the web server on a separate subnet open to public contact. What is this subnet called?

• Guest network

• DMZ

• Intranet

• VLAN

Hans is a security administrator for a large company. Users on his network visit a wide range of websites. He is concerned they might get malware from one of these many websites. Which of the following would be his best approach to mitigate this threat?

• Implement host-based antivirus.

• Blacklist known infected sites.

• Set browsers to allow only signed components.

• Set browsers to block all active content (ActiveX, JavaScript, etc.).

You work at a large company. You are concerned about ensuring that all workstations have a common configuration, that no rogue software is installed, and that all patches are kept up to date. Which of the following would be the most effective for accomplishing this?

• Use VDI.

• Implement restrictive policies.

• Use an image for all workstations.

• Implement strong patch management.

Edward is responsible for web application security at a large insurance company. One of the applications that he is particularly concerned about is used by insurance adjusters in the field. He wants to have strong authentication methods to mitigate misuse of the application. What would be his best choice?

• Authenticate the client with a digital certificate.

• Implement a very strong password policy.

• Secure application communication with Transport Layer Security (TLS).

• Implement a web application firewall (WAF).

Samantha has used ssh-keygen to generate new SSH keys. Which SSH key should she place on the server she wants to access, and where is it typically stored on a Linux system?

• Her public SSH key, /etc/

• Her private SSH key, /etc/

• Her public SSH key, ~/.ssh/

• Her private SSH key, ~/.ssh/