CompTIA Review #2

Which of the following is best to use when determining the severity of a vulnerability?

• CVE

• OSINT

• SOAR

• CVSS

A systems administrator is auditing all company servers to ensure they meet the minimum security baseline While auditing a Linux server the systems administrator observes the /etc/ahadow file has permissions beyond the baseline recommendation. Which of the following commands should the systems administrator use to resolve this issue?

• chmod

• grep

• dd

• passwd

A new vulnerability enables a type of malware that allows the unauthorized movement of data from a system. Which of the following would detect this behavior?

• Implementing encryption

• Monitoring outbound traffic

• Using default settings

• Closing all open ports

Local guidelines require that all information systems meet a minimum security baseline to be compliant. Which of the following can security administrators use to assess their system configurations against the baseline?

• SOAR playbook

• Security control matrix

• Risk management framework

• Benchmarks

An organization is concerned about intellectual property theft by employees who leave the organization. Which of the following should the organization most likely implement?

• CBT

• NDA

• MOU

• AUP

Which of the following is a reason why a forensic specialist would create a plan to preserve data after an incident and prioritize the sequence for performing forensic analysis?

• Order of volatilitiy

• Preservation of event logs

• Chain of custody

• Compliance with legal hold

A security analyst has been tasked with ensuring all programs that are deployed into the enterprise have been assessed in a runtime environment Any critical issues found in the program must be sent back to the developer for verification and remediation. Which of the following describes the type of assessment taking place?

• Input validation

• Dynamic code analysis

• Fuzzing

• Manual code review

A security analyst has been reading about a newly discovered cyberattack from a known threat actor. Which of the following would best support the analyst's review of the tactics, techniques, and protocols the threat actor was observed using in previous campaigns?

• Security research publications

• The MITRE ATT4CK framework

• The Diamond Model of Intrusion Analysis

• The Cyber Kill Chain

Which of the following agreements defines response time, escalation points, and performance metrics?

• BPA

• MOA

• NDA

• SLA

During a recent penetration test, a tester plugged a laptop into an Ethernet port in an unoccupied conference room and obtained a valid IP address. Which of the following would have best prevented this avenue of attack?

• Enabling MAC address filtering

• Moving printers inside a firewall

• Implementing 802.1X

• Using network port security