CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
856 questions in this bank
Free access · progress saved on this device
A security engineer must deploy two wireless routers in an office suite. Other tenants in the office building should not be able to connect to this wireless network. Which of the following protocols should the engineer implement to ensure the STRONGEST encryption?
Answer: B
Which biometric error would allow an unauthorized user to access a system?
Answer: A
FAR ( False Acceptance Rate ) -> where an interloper is accepted (Type II error or false match rate [FMR]). FAR is measured as a percentage. False rejection cause inconvenience to users, but false acceptance can lead to security breaches, and so is usually considered the most important metric.
Source: Adapted from community discussion — stoneface
An attacker browses a company's online job board attempting to find any relevant information regarding the technologies the company uses. Which of the following BEST describes this social engineering technique?
Answer: B
An online job board is data available to the public (OSINT) so anybody can access this information. If there's any technologies listed, then the company is fine with this information being known. It could be impersonation as a job-seeker if the attacker had applied for the job, gotten an interview and during the interview the company somehow disclosed all of their technologies that the fake job-seeker was looking for. This seems unlikely.
Source: Adapted from community discussion — rodwave
During an incident response process involving a laptop, a host was identified as the entry point for malware. The management team would like to have the laptop restored and given back to the user. The cybersecurity analyst would like to continue investigating the intrusion on the host. Which of the following would allow the analyst to continue the investigation and also return the laptop to the user as soon as possible?
Answer: A
good luck guys i have the exam after tomorrow i would really want to thank this community and tell you all that i love you and wish you the best luck :)
Source: Adapted from community discussion — ahmadawni
An analyst is trying to identify insecure services that are running on the internal network. After performing a port scan, the analyst identifies that a server has some insecure services enabled on default ports. Which of the following BEST describes the services that are currently running and the secure alternatives for replacing them? (Choose three.)
Answer: BCF
Answer: SNMPv2, SNMPv3 | HTTP, HTTPS | Telnet, SSH SNMP v3 adds cryptographic security to SNMP v2. SNMP v3 replaces the simple password sharing (as clear text) in SNMP v2 with a much more secure encoded security parameters. HTTPS is HTTP with encryption and verification. The only difference between the two protocols is that HTTPS uses TLS (SSL) to encrypt normal HTTP requests and responses, and to digitally sign those requests and responses. As a result, HTTPS is far more secure than HTTP. Telnet transfers the data in simple plain text. On other hand SSH uses Encrypted format to send data and also uses a secure channel. As SSH is more secure so it uses public key encryption for authentication.
Source: Adapted from community discussion — rodwave
A security analyst needs to produce a document that details how a security incident occurred, the steps that were taken for recovery, and how future incidents can be avoided. During which of the following stages of the response process will this activity take place?
Answer: C
This is Lessons Learned. This takes place after everything has a occurred and the team is trying to figure out how to do better. Also, for anyone that has reached this point and realized that they discussions have become less and less. That's because a month ago the questions stopped at #211. So from here on out it's just the newer participants.
Source: Adapted from community discussion — Gino_Slim
An administrator is configuring a firewall rule set for a subnet to only access DHCP, web pages, and SFTP, and to specifically block FTP. Which of the following would BEST accomplish this goal?
Answer: A
This is just a breakdown of the ports: 67 & 68 = DHCP (Dynamic Host Configuration Protocol): DHCP a client/server protocol that automatically provides IP addresses to clients. UDP Port 67 is used by the DHCP server to dynamically assign IP addresses. UDP Port 68 is the DHCP client port which is used by clients to obtain an IP address from a DHCP server. 20 & 21 = FTP (File Transfer Protocol): FTP is used to communicate and transfer files between computers. TCP Port 20 is the "data port" where the actual data transfer occurs and Port 21 is the "control port" where the client makes the connection request and management. 22 = SSH (Secure Shell) & SFTP (Secure File Transfer Protocol): SSH is a protocol that enables two computers to communicate securely by encrypting the connection. SFTP is a secure file transfer protocol that uses SSH encryption to securely send and receive file transfers. 80 & 443 = HTTP / HTTPS: HTTP(80) is a default network port used to send and receive unencrypted web pages. HTTPS(443) is HTTP but uses TLS to encrypt normal HTTP requests/responses.
Source: Adapted from community discussion — rodwave
While investigating a recent security incident, a security analyst decides to view all network connections on a particular server. Which of the following would provide the desired information?
Answer: C
The reason why it's nestat and not nmap for this question: Nmap is a Network mapping tool. That means it's used to discover information about hosts on a network (their ip, open ports, etc). Where netstat is a network statistic tool used to list active connections. The question is asking about seeing active connections.
Source: Adapted from community discussion — Gino_Slim
A company recently decided to allow its employees to use their personally owned devices for tasks like checking email and messaging via mobile applications. The company would like to use MDM, but employees are concerned about the loss of personal data. Which of the following should the IT department implement to BEST protect the company against company data loss while still addressing the employees’ concerns?
Answer: B
B. Configure the MDM software to enforce the use of PINs to access the phone. - it is the only answer that honestly have sense to me. FDE (full disc encription) does not address those problems
Source: Adapted from community discussion — Kashim
The concept of connecting a user account across the systems of multiple enterprises is BEST known as:
Answer: A
Answer A is correct. SSO allows users to use a single set of credentials to access multiple systems within a single organization (a single domain) while Federation allow users to access systems across multiple organizations.
Source: Adapted from community discussion — omodara
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 121. 856 questions available.
Version 1.0.0. How we source questions