CompTIA Security+ Practice Test 2

A cyber group is reviewing its web filtering capabilities after a recent breach. Which centralized web-filtering technique groups websites into categories such as social networking, gambling, and webmail?

• Block rules

• Uniform resource locators (URL) scanning

• Reputation-based filtering

• Content categorization

After a long day of malicious software removal, the team is ready to head home but knows their day is not over. They did not want to come in to find another vulnerability exploited, so they split themselves into three teams to perform the final testing. What three types of testing are they performing? (Select the three best options.)

• Auditing

• Verification

• Prioritization

• Re-scanning

A network administrator at a large tech company has the task of enhancing the visibility into network traffic patterns in a distributed enterprise network. The administrator wants to implement a solution that captures metadata and statistics about network traffic without recording each frame, with the goal of improving the company’s security measures. Which tool should the administrator consider implementing?

• A vulnerable scanner

• A NetFlow collector

• A data loss prevention (DLP)

• a simple network management protocol (SNMP) trap

A tech consultant enhances automation and scripting with continuous integration and testing capabilities. What are some characteristics associated with this capability? (Select the three best options.)

• Different software systems are enabled to communicate and interact, creating seamless workflows.

• Developers regularly merge their changes back to the main code branch.

• The technician makes improvements to code quality and accelerates development cycles.

• The system automatically evaluates merges to help detect and fix integration issues

A technician creates a report on end-user activity to see what events the host's security software monitors instead of the operating system (OS). What type of log provides these data points?

• OS-specific security logs

• Application logs

• Endpoint logs

• Firewall logs

A mid-sized organization has faced a series of breaches due to insecure authentication methods. The security team concludes that current practices for user credentials need revision. What is the BEST course of action?

• Enhance recognition of phishing attempts

• Implement password management

• Start a development phase

• Start an initial phase

A cybersecurity team plans to launch awareness programs to educate employees about potential security threats. They are in the process of defining objectives, selecting tools, and outlining the scope of the programs. What phase of the process should they initiate?

• Password management

• User guidance and training

• Campaigns

• Initial Phase

A jailbroken mobile device discovered in an organization's network bypasses the manufacturer's restrictions. What actions should the IT security team execute to manage this situation? (Select the two best options.)

• Install a third-party security application on the device

• Revert the device to factory settings

• Confiscate and perform a forensic analysis on the device

• Send an organization-wide email about the incident

A hospital has implemented a security device that processes sensitive patient information. The hospital wants to ensure that in the event of a failure, the confidentiality and integrity of the patient data take priority over the system's availability. What should the hospital set as the failure mode configuration for this security device?

• The security device should be configured to fail-open.

• The security device should be configured to actively monitor the network.

• The security device should be configured to fail-closed.

• The security device should be configured to passively monitor the network.

A new IT security firm is partnering with an IT support company and is opening its business soon. The firm would like to be a reseller for a popular firewall. Which of the following options allows the firm to become an authorized reseller?

• Memorandum of Agreement (MOA)

• Non-Disclosure Agreement (NDA)

• Business Partners Agreement (BPA)

• Memorandum of Understanding (MOU)