COMPTIA Security +
What are the non-overlapping channels for 802.11g/n? ANS: Channels 1, 6, and 11
Does the S/MIME protocol use certificates? ANS: yes
Which two ports does FTP use? ANS: ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and assigns monetary values
in the event a loss occurs? ANS: quantitative risk analysis
Which IPSec mode is used to create a VPN between two gateways? ANS: tunnel mode
What is the most likely cause of a single computer communicating with an unknown IRC server and
scanning other systems on the network? ANS: The computer is infected with a botnet.
What does the acronym IDS denote? ANS: Intrusion Detection System
Which encryption method is more scalable? ANS: Asymmetric Encryption
What is the purpose of DLP? ANS: Data Loss Prevention (DLP) is a network system that monitors data on
computers to ensure the data is not deleted or removed.
Which port number does NTP use? ANS: port 123
Which backup method backs up every file on the server each time it is run? ANS: A full backup
,What is the term for an unauthorized access that a network-based intrusion detection system (NIDS)
fails to detect? ANS: missed detection or false negative
Which alternate computing facility is the least expensive to maintain before a disaster occurs? ANS: a
cold site
What are the three basic questions answered by the chain of custody? ANS: who controlled the
evidence, who secured the evidence, and who obtained the evidence
Which term refers to the assurance that data has not been altered in transmission? ANS: data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? ANS: It provides not only a
virtualized deployment platform but also a value-added solution stack and an application development
platform.
What does the acronym FCoE denote? ANS: Fibre Channel over Ethernet
At which OSI layer does IP Security (IPSec) operate? ANS: the Network layer (Layer 3)
What is meant by the term hardening? ANS: tightening control using security policies to increase system
security
What do you use to control traffic from the Internet to the LAN (local area network) by controlling the
packets that are allowed to enter the LAN? ANS: a firewall
According to CompTIA's Security+ examination blueprint, what are the four types of logs that you should
monitor for mitigation and deterrence? ANS: event logs, audit logs, security logs, and access logs
What are the two types of eye scans? ANS: iris scans and retinal scans
,What are alternate terms for cross-site request forgery (XSRF)? ANS: session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? ANS: The Skipjack block cipher and
an 80-bit key length
Why is GPS tracking often disabled? ANS: It is considered a security threat. As long as GPS tracking is
enabled and the mobile device is powered on, the device (and possibly its user) can be located.
What is the name of the process for removing only the incriminating data from the audit logs? ANS:
scrubbing
What ensures that a user is who he claims to be? ANS: identification
Which port number does SSH use? ANS: port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? ANS: a web of trust
Which information do routers use to forward packets to their destinations? ANS: the network address
and subnet mask
Which account should you rename immediately after installing a new operating system (OS) to harden
the OS? ANS: the administrator account
Which error condition arises because data is not checked before input to ensure that it has an
appropriate length? ANS: buffer overflow errors
, What is the component included with Windows Vista and higher operating systems that encrypts an
entire volume with 128-bit encryption to prevent information from being read if the drive is lost or
stolen? ANS: BitLocker
What is the purpose of administrative controls? ANS: to implement security policies based on
procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving electrical equipment or liquids,
has been discontinued? ANS: halon gas
On which standard is Lightweight Directory Access Protocol (LDAP) based ANS: X.500
Which public-key algorithm was the first to allow two users to exchange a secret key over an insecure
medium without any prior secret keys? ANS: Diffie-Hellman
Which authentication protocol separates authentication and authorization: TACACS+ or RADIUS? ANS:
TACACS+
What was the first public-key algorithm ever used? ANS: Diffie-Hellman
Which tool should you use to retrieve the contents of a GET request: a protocol analyzer or port
scanner? ANS: a protocol analyzer
Which type of controls is implemented to secure physical access to an object, such as a building, a room,
or a computer? ANS: a physical or operational control
Which protocol provides connectionless integrity, data origin authentication, replay protection, and
confidentiality (encryption) using Authentication Header (AH) and Encapsulating Security Payload (ESP)?
ANS: Internet Protocol Security (IPSec)
What are the non-overlapping channels for 802.11g/n? ANS: Channels 1, 6, and 11
Does the S/MIME protocol use certificates? ANS: yes
Which two ports does FTP use? ANS: ports 20 and 21
Which technique attempts to predict the likelihood that a threat will occur and assigns monetary values
in the event a loss occurs? ANS: quantitative risk analysis
Which IPSec mode is used to create a VPN between two gateways? ANS: tunnel mode
What is the most likely cause of a single computer communicating with an unknown IRC server and
scanning other systems on the network? ANS: The computer is infected with a botnet.
What does the acronym IDS denote? ANS: Intrusion Detection System
Which encryption method is more scalable? ANS: Asymmetric Encryption
What is the purpose of DLP? ANS: Data Loss Prevention (DLP) is a network system that monitors data on
computers to ensure the data is not deleted or removed.
Which port number does NTP use? ANS: port 123
Which backup method backs up every file on the server each time it is run? ANS: A full backup
,What is the term for an unauthorized access that a network-based intrusion detection system (NIDS)
fails to detect? ANS: missed detection or false negative
Which alternate computing facility is the least expensive to maintain before a disaster occurs? ANS: a
cold site
What are the three basic questions answered by the chain of custody? ANS: who controlled the
evidence, who secured the evidence, and who obtained the evidence
Which term refers to the assurance that data has not been altered in transmission? ANS: data integrity
What is the purpose of Platform as a Service (PaaS) in cloud computing? ANS: It provides not only a
virtualized deployment platform but also a value-added solution stack and an application development
platform.
What does the acronym FCoE denote? ANS: Fibre Channel over Ethernet
At which OSI layer does IP Security (IPSec) operate? ANS: the Network layer (Layer 3)
What is meant by the term hardening? ANS: tightening control using security policies to increase system
security
What do you use to control traffic from the Internet to the LAN (local area network) by controlling the
packets that are allowed to enter the LAN? ANS: a firewall
According to CompTIA's Security+ examination blueprint, what are the four types of logs that you should
monitor for mitigation and deterrence? ANS: event logs, audit logs, security logs, and access logs
What are the two types of eye scans? ANS: iris scans and retinal scans
,What are alternate terms for cross-site request forgery (XSRF)? ANS: session riding or one-click attack
What block cipher and key size (in bits) are used by the Clipper Chip? ANS: The Skipjack block cipher and
an 80-bit key length
Why is GPS tracking often disabled? ANS: It is considered a security threat. As long as GPS tracking is
enabled and the mobile device is powered on, the device (and possibly its user) can be located.
What is the name of the process for removing only the incriminating data from the audit logs? ANS:
scrubbing
What ensures that a user is who he claims to be? ANS: identification
Which port number does SSH use? ANS: port 22
On what does the Pretty Good Privacy (PGP) mail standard rely? ANS: a web of trust
Which information do routers use to forward packets to their destinations? ANS: the network address
and subnet mask
Which account should you rename immediately after installing a new operating system (OS) to harden
the OS? ANS: the administrator account
Which error condition arises because data is not checked before input to ensure that it has an
appropriate length? ANS: buffer overflow errors
, What is the component included with Windows Vista and higher operating systems that encrypts an
entire volume with 128-bit encryption to prevent information from being read if the drive is lost or
stolen? ANS: BitLocker
What is the purpose of administrative controls? ANS: to implement security policies based on
procedures, standards, and guidelines
Which fire suppression method, formerly used to suppress fires involving electrical equipment or liquids,
has been discontinued? ANS: halon gas
On which standard is Lightweight Directory Access Protocol (LDAP) based ANS: X.500
Which public-key algorithm was the first to allow two users to exchange a secret key over an insecure
medium without any prior secret keys? ANS: Diffie-Hellman
Which authentication protocol separates authentication and authorization: TACACS+ or RADIUS? ANS:
TACACS+
What was the first public-key algorithm ever used? ANS: Diffie-Hellman
Which tool should you use to retrieve the contents of a GET request: a protocol analyzer or port
scanner? ANS: a protocol analyzer
Which type of controls is implemented to secure physical access to an object, such as a building, a room,
or a computer? ANS: a physical or operational control
Which protocol provides connectionless integrity, data origin authentication, replay protection, and
confidentiality (encryption) using Authentication Header (AH) and Encapsulating Security Payload (ESP)?
ANS: Internet Protocol Security (IPSec)
