CompTIA Review #4

Which of the following threat actors is most likely to be motivated by ideology?

• Business competitor

• Hacktivist

• Criminal Syndicate

• Disgruntled Employee

An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs should be analyzed to identify the impacted host? (Select two).

• System

• Authentication

• Error

• Network

• Firewall

A company is auditing the manner in which its European customers’ personal information is handled. Which of the following should the company consult?

• GDPR

• ISO

• NIST

• PCIDSS

While troubleshooting a firewall configuration, a technician determines that a "deny any" policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes several company servers to become unreachable. Which of the following actions would prevent this issue?

• Documenting the new policy in a change request and submitting the request to change management

• Testing the policy in a non-production environment before enabling the policy in the production network

• Disabling any intrusion prevention signatures on the "deny any" policy prior to enabling the new policy

• Including an "allow any" policy above the "deny any" policy

A local server recently crashed, and the team is attempting to restore the server from a backup. During the restore process, the team notices the file size of each daily backup is large and will run out of space at the current rate. The current solution appears to do a full backup every night. Which of the following would use the least amount of storage space for backups?

• A weekly, incremental backup with daily differential backups

• A weekly, full backup with daily snapshot backups

• A weekly, full backup with daily differential backups

• A weekly, full backup with daily incremental backups

A financial institution would like to store its customer data in the cloud but still allow the data to be accessed and manipulated while encrypted. Doing so would prevent the cloud service provider from being able to decipher the data due to its sensitivity. The financial institution Is not concerned about computational overheads and slow speeds. Which of the following cryptographic techniques would best meet the requirement?

• Asymmetric

• Symmetric

• Ephemeral

• Homomorphic

A security analyst notices an unusual amount of traffic hitting the edge of the network. Upon examining the logs, the analyst identifies a source IP address and blocks that address from communicating with the network. Even though the analyst is blocking this address, the attack is still ongoing and coming from a large number of different source IP addresses. Which of the following describes this type of attack?

• DDOS

• Buffer Overflow

• DNS poisoning

• Privilege escalation

A company wants to deploy decoy systems alongside production systems in order to entice threat actors and to learn more about attackers. Which of the following best describes these systems?

• DNS Sinkhole

• Honeypot

• Virtual Machines

• Neural Networks

An organization's corporate offices were destroyed due to a natural disaster, so the organization is now setting up offices in a temporary work space. Which of the following will the organization most likely consult?

• The business continuity plan

• The communication plan

• The risk management plan

• The incident response plan

An organization routes all of its traffic through a VPN Most users are remote and connect into a corporate data center that houses confidential information There is a firewall at the internet border, followed by a DLP appliance, the VPN server and the data center itself. Which of the following is the weakest design element?

• The DLP appliance should be integrated into a NGFW

• Split-tunnel connections can negatively impact the DLP appliance's performance

• Encrypted VPN traffic will not be inspected when entering or leaving the network

• Adding two hops in the VPN tunnel may slow down remote connections