Comptia sec plus part 5

Which of the following attacks is used to capture the WPA2 handshake?

• Replay

• IV

• Evil twin

• Dissociation

A security engineer is looking to purchase a fingerprint scanner to improve the security of a datacenter. Which of the following scanner characteristics is the MOST critical to successful implementation?

• Low false rejection rate

• High false rejection rate

• High false acceptance rate

• Low crossover error rate

A system uses an application server and database server. Employing the principle of least privilege, only database administrators are given administrative privileges on the database server, and only application team members are given administrative privileges on the application server Audit and log file reviews are performed by the business unit (a separate group from the database and application teams). The organization wants to optimize operational efficiency when application or database changes are needed, but it also wants to enforce least privilege, prevent modification of log files, and facilitate the audit and log review performed by the business unit. Which of the following approaches would BEST meet the organization’s goals?

• Restrict privileges on the log file directory to “read only” and use a service account to send a copy of these files to the business unit.

• Switch administrative privileges for the database and application servers. Give the application team administrative privileges on the database servers and the database team administrative privileges on the application servers.

• Give the business unit administrative privileges on both the database and application servers so they can independently monitor server activity.

• Remove administrative privileges from both the database and application servers, and give the business unit “read only” privileges on the directories where the log files are kept.

A security analyst runs the following command: netstat –anb :

Based on the above information, with which of the following types of malware is the server MOST likely infected?

• Worm

• RAT

• Keylogger

• Adware

A security administrator if researching ways to improve the security of a manufacturing company’s systems within the next three to six months. Which of the following would provide the security administrator with the MOST diverse perspective?

• Platform-specific security benchmark for the company’s specific systems

• Manufacturing security auditing requirements

• Academic security research on emerging technologies

• Security regulations from other industry verticals

During a risk assessment, results show that a fire in one of the company’s datacenters could cost up to $20 million in equipment damages and lost revenue. As a result, the company insures the datacenter for up to $20 million in damages for the cost of $30,000 a year. Which of the following risk response techniques has the company chosen?

• Transference

• Avoidance

• Mitigation

• Acceptance

An organization’s help desk is flooded with phone calls from users stating they can no longer access certain websites. The help desk escalates the issue to the security team, as these websites were accessible the previous day. The security analysts run the following command ipconfig /flushdns, but the issue persists. Finally, an analyst changes the DNS server for an impacted machine, and the issue goes away. Which of the following attacks MOST likely occurred on the original DNS server?

• DNS cache poisoning

• Domain hijacking

• Distributed denial-of-service

• DNS tunneling

An organization recently acquired an ISO 27001 certification. Which of the following would MOST likely be considered a benefit of this certification?

• It allows for the sharing of digital forensics data across organizations.

• It provides insurance in case of a data breach.

• It provides complimentary training and certification resources to IT security staff.

• It certifies the organization can work with foreign entities that require a security clearance.

• It assures customers that the organization meets security standards

Which of the following is an example of federated access management?

• Windows passing user credentials on a peer-to-peer network

• Applying a new user account with a complex password

• Implementing an AAA framework for network access

• Using a popular website login to provide access to another website

An organization is drafting an IRP and needs to determine which employees have the authority to take systems offline during an emergency situation. Which of the following is being outlined?

• Reporting and escalation procedures

• Permission auditing

• Roles and responsibilities

• Communication methodologies