Comptia Security+ Questions

The board of directors at a company contracted with an insurance firm to limit the organization's liability. Which of the following risk management practices does this BEST describe?

• Transference
• Avoidance
• Mitigation
• Acknowledgement

A forensic analyst needs to prove that data has not been tampered with since it was collected. Which of the following methods will the analyst MOST likely use?

• Calculate the checksum using a hashing algorithm.
• Look for tampering on the evidence collection bag.
• Encrypt the collected data using asymmetric encryption.
• Ensure proper procedures for chain of custody are being followed.

A security manager has tasked the security operations center with locating all web servers that respond to an unsecure protocol. Which of the following commands could an analyst run to find the requested servers?

• nmap -p 80 10.10.10.0/24
• nslookup 10.10.10.0
• pathping 10.10.10.0 -p 80
• ne -l -p 80

A help desk technician receives an email from the Chief Information Officer (CIO) asking for documents. The technician knows the CIO is on vacation for a few weeks. Which of the following should the technician do to validate the authenticity of the email?

• Check the metadata in the email header of the received path in reverse order to follow the email's path.
• Hover the mouse over the CIO's email address to verify the email address.
• Look at the metadata in the email header and verify the ג€From:ג€ line matches the CIO's email address.
• Forward the email to the CIO and ask if the CIO sent the email requesting the documents.

The Chief Information Security Officer (CISO) requested a report on potential areas of improvement following a security incident. Which of the following incident response processes is the CISO requesting?

• Lessons learned
• Preparation
• Detection
• Containment

Which of the following control types is focused primarily on reducing risk before an incident occurs?

• Preventive
• Deterrent
• Corrective
• Detective

A cloud service provider has created an environment where customers can connect existing local networks to the cloud for additional computing resources and block internal HR applications from reaching the cloud. Which of the following cloud models is being used?

• Hybrid
• Public
• Community
• Private

A security engineer is deploying a new wireless network for a company. The company shares office space with multiple tenants. Which of the following should the engineer configure on the wireless network to ensure that confidential data is not exposed to unauthorized users?

• AES
• EAP
• TLS
• HTTPS

A security engineer is building a file transfer solution to send files to a business partner. The users would like to drop off the files in a specific directory and have the server send the file to the business partner. The connection to the business partner is over the internet and needs to be secure. Which of the following can be used?

• SSH
• S/MIME
• LDAPS
• SRTP

Which of the following is an effective tool to stop or prevent the exfiltration of data from a network?

• DLP
• TPM
• NIDS
• FDE