NEW
Font size
WorksheetsCompTIA Security+ 11-20
Total questions: 10
Worksheet time: 6mins
You have been authorized by management to use a vulnerability scanner once every three months. What is this tool?
an application that identifies ports and services that are at risk on a network
an application that identifies ports and services that are at risk on a network
an application that identifies security issues on a network and gives suggestions on how to prevent the issues
an application that detects when network intrusions occur and identifies the appropriate personnel
As part of your company's comprehensive vulnerability scanning policy, you decide to perform a passive vulnerability scan on one of your company's subnetworks. Which statement is true of this scan?
It allows a more in-depth analysis than other scan types.
It is limited to a particular operating system.
It impacts the hosts and network less than other scan types.
It includes the appropriate permissions for the different data types.
What is the goal when you passively test security controls?
Probing for weaknesses
Infiltrating the network
Interfering with business operations
Exploiting weaknesses
Which of these is part of a scan to identify a common misconfiguration?
Packet sniffing
Dictionary attack
Password policy
Router with a default password
Which memory vulnerability is associated with multithreaded applications?
Resource exhaustion
Race condition
DLL injection
Pointer dereferencing
What is often the weakest link in the security chain, and represents the largest vulnerability?
End-of-life systems
Untrained users
Lack of vendor support
Embedded systems
Which type of vulnerability is demonstrated by a SQL injection?
Default configuration
Improper input handling
Misconfiguration/weak configuration
Improper error handling
An IT technician has been assigned to a new embedded firewall. What statement best describes this type of firewall?
a component that is added to a hardware firewall
a firewall that is installed on a server operating system
a firewall that is integrated into a router
a black box device
Management has decided to purchase a new appliance firewall that will be installed between the public and private networks owned by your company. Which type of firewall is also referred to as an appliance firewall?
hardware
application
embedded
software
You are researching the different types of firewalls that you can install to protect your company's network and assets. Which type of firewall is most detrimental to network performance?
circuit-level proxy firewall
packet-filtering firewall
stateful firewall
application-level proxy firewall
