Security Plus Practice Test

These questions are part of the practice quiz. Start practicing

• Which malware type is used to hide its presence by intercepting and altering system processes?
• What does IP provide in terms of network communication?
• What type of systems should be integrated with fire alarms to prevent fire spread in data centers?
• Which of the following measures increases availability in computing systems?
• What is the specific type of phishing aimed at high-level individuals within an organization?
• What is the primary function of behavior-based NIDS/NIPS?
• What term describes a network of infected computers that can be controlled by a hacker?
• What is the purpose of a demilitarized zone (DMZ) in network security?
• Which two security measures use certificates for authentication of DNS servers?
• Which term describes attempts to acquire sensitive information by disguising as a trustworthy entity?
• What is the primary goal of implementing operational risk controls?
• Which attack exploits the three-way TCP handshake?
• Which metric should be less than the Maximum Tolerable Downtime (MTD)?
• What exploit targets applications based on insufficient user input validation within directories?
• What type of NIDS/NIPS primarily relies on known-patterns to detect attacks?
• Which of the following measures includes monitoring logs and strong physical security to prevent attacks?
• What is the practice of searching for Wi-Fi networks using portable devices known as?
• What type of security is strengthened by a strong security posture and network hardening?
• Which type of risk control would involve using specific hardware or software such as firewalls and IDSs?
• What tool contains system, security, and application logs?
• What is the outcome of a fuzzer when it encounters an exception?
• Which technology utilizes virtualization to provision guests on demand?
• What is a common result when performing a DNS cache poisoning attack?
• What type of injection exploits web-based applications that construct LDAP statements based on user input?
• Which of the following types of exploits use Bluetooth technology?
• What type of attack involves a hacker probing for the weakest link in a company's chain of trust?
• What does DLP stand for in the context of memory protection in CPUs?
• Which attack involves multiple external hosts initiating but not completing a TCP handshake?
• What does the 802.1x standard primarily provide for network access control?
• Which of the following represents the time by which critical systems should resume operations after disruption?
• What constitutes a part of preventative measures in information security?
• What does SSH stand for in networking?
• Which phishing attack type is specifically aimed at executive personnel, such as a CEO?
• What mechanism ensures network stability if both ends of a cable connect to different switch ports?
• What does "Record Time Offset" help to ensure during an investigation?
• Which of the following describes an attack that monitors packet data and attempts to modify it?
• Which protocol is specifically designed to prevent switching loops in network environments?
• In grey box penetration testing, the tester's knowledge is equivalent to what?
• Which assessment defines recovery point objectives (RPO) and recovery time objectives (RTO)?
• What are browser helpers that may include adware or spyware and should be removed if unsigned?
• What are malicious, self-hiding kernel modules that modify file system operations called?
• What term describes targeted phishing attacks directed at specific groups?
• What is characteristic of a DDoS attack?
• What is the main purpose of a phishing attack?
• Which attack captures authentication credentials to be used later in a replay?
• What technology can provide automated notification of item removal?
• What is the benefit of using vulnerability scanners compared to manual testing?
• What are small text files that transfer information between web pages?
• What type of attack takes advantage of vulnerabilities that are not yet known and therefore lack patches?
• What is a key component of an organization's security posture?
• What type of software secretly monitors user activity and can affect confidentiality?
• Which protocol is commonly used for secure file transfer?
• What is the primary function of a web application firewall (WAF)?
• What is an early type of buffer attack called?
• Which of the following refers to unsolicited advertising sent via email?
• What does NAC do before granting access to foreign hosts?
• Which type of attack can be identified using system resource monitors?
• What type of control aims to avoid single points of failure and includes recovery procedures?
• What is the term for observing someone to gain access to confidential information?
• During an incident response, which step involves recognizing initial signs of a security breach?
• Which practice involves disabling unnecessary services and applying patches for security?
• Which type of attack originates from a single computer?
• What type of attack involves infecting websites of interest to the targets?
• What is the primary focus of penetration testing?
• What type of attack is referred to when an attacker impersonates another computer by spoofing the IP address?
• What type of analysis identifies a company's exposure to the sudden loss of critical business functions?
• What principle means that all connections not explicitly allowed are automatically denied?
• Which protocol is faster than TCP but unacknowledged and commonly used in VoIP?
• What is the general response to risk that entails transfer or acceptance?
• What is the term for when an attacker gains elevated privileges by exploiting a bug with access to a user account?
• What is a security measure that involves controlling physical access to facilities?
• What process involves changing TCP and/or HTTP headers to manipulate data transfer?
• What technology allows physical servers to host multiple virtual servers?
• Which practice reduces the size of backups and improves backup and restore times?
• Which type of malware is known for its ability to disguise itself during installation?
• What is the main difference between qualitative and quantitative risk assessment?
• What does RMI stand for in the context of interference?
• Which phase in the incident response process is concerned with addressing detected malware threats?
• What type of training should be customized according to the role of the user?
• Which of the following represents the correct order of volatility when collecting evidence?
• What network security measure examines and remediates foreign hosts attempting to access a network?
• What is a common drawback of cloud computing concerning data management?
• What do you need to have in place if your primary plan fails during a data center upgrade?
• What devices connect networks and can create subnets to isolate broadcast domains?
• An agreement that documents the technical and security requirements of data flows between connected IT systems is called what?
• In what scenario would loop protection become crucial?
• What device balances the load among multiple web servers to increase performance?
• What is the term for unauthorized wireless access points used to gain access to a secure network?
• In which service model can users start, stop, and configure virtual servers?
• In a typical DoS attack, what resource is commonly overwhelmed by the attacker to disrupt service?
• What type of malware demands payment in exchange for decrypting compromised data?
• What does DNS poisoning affect in a network?
• Which device is recommended for protection against SYN flood attacks?
• What is the term for an attack that affects more than one virtual machine and/or the hypervisor?
• What type of penetration testing gives the tester administrative access?
• Which phase of incident response is focused on ensuring that systems are prepared for potential threats?
• What can be an effect of a virus on a computer system?
• What is the primary purpose of a Service Level Agreement (SLA)?
• What protocol supports diagnostic functions like ping and tracert?
• What type of measures include hardware locks and video surveillance?
• Which protocol was originally developed for IPv6 and is used for VPN encryption?
• What is FTPS based on?
• What is often bundled with free software and displays targeted pop-up advertisements?
• Which technique involves sifting through garbage to find sensitive information?
• Which type of attacker behavior is most likely to be blocked using traffic pattern matching?
• Which types of interference can be eliminated by fiber optic cabling?
• What is the term used when attackers create false identities to manipulate network traffic?
• What is a key element in maintaining safety in a security environment?
• What measures are taken to eliminate points of failure in information systems?
• What do VPN concentrators facilitate in terms of remote access?
• In what scenario do smurf attacks occur?
• What is the primary purpose of log analysis in security?
• Which of the following types of malware can cause a computer's performance to degrade by overwhelming it with tasks?
• What principle is violated if the accounting manager can handle both accounts payable and receivable?
• What does reporting in IT security management typically include?
• What does the term 'vishing' refer to in cybersecurity?
• Who often causes more harm than external hackers, as highlighted by examples like WikiLeaks?
• What is the focus of incident management in relation to security threats?
• Which type of site is characterized as an alternate location with no data or equipment available?
• What is the specific term used for targeted phishing aimed at high-profile individuals?
• What describes a unified threat management device?
• What does PaaS stand for in cloud computing?
• What should be updated regularly with the latest countermeasures to enhance security?
• What is a malicious entry point that allows unauthorized remote access to a computer or application?
• What type of attack might involve monitoring network transmissions to forge an acceptable response?
• What technology integrates functions to filter traffic based on multiple threats like malware and injection attacks?
• What does the term "chain of custody" refer to in security management?
• Which of the following should be included in training to protect against information theft?
• What is the primary goal of the preparation phase in an incident response plan?
• Which of the following is NOT a part of the order of volatility when collecting digital evidence?
• When could risks be accepted?
• Which attack method includes using authority to manipulate users?
• What type of agreement is more enforceable than a Memorandum of Understanding (MOU)?
• What is the practice of closely following an authorized user to gain access to a secured area?
• Which type of penetration testing allows the tester no prior knowledge of the network?
• Which of the following features is crucial for ensuring data recovery capability?
• What is the primary purpose of change management in configuration management?
• What type of testing simulates real-world attacks on a network?
• SNMPv3 provides enhanced security features over which versions?
• What is the term used for the maximum time a business can accept before critical systems are restored after a disaster?
• What technique can be used to capture traffic in real-time to potentially obtain encryption keys?
• What regulates cooling within a data center to maximize airflow?
• Which attack method is characterized by overwhelming a server with requests from many different sources?
• In WEP encryption, how many bits does the initialization vector (IV) use?
• What type of cookies are specifically used by a web application running Adobe Flash?
• What security feature provides access based on facial recognition and other factors?
• What describes malware that latches onto legitimate processes and manipulates them for malicious purposes?
• What log contains auditing and log-on information for a system?
• Which protocols are included in IPSec?
• What refers to the regular auditing or reviewing of an organization's security systems?
• Which protocols replace FTP as secure alternatives?
• Which protocol checks that a certificate belongs to the website and offers mutual authentication?
• True or False: Account lockout is considered a form of Denial of Service (DOS).
• What are the types of backups that optimize data management during recovery?
• What form of phishing relies on deceit using voice communication methods?
• What is the term for when false information is inserted into a DNS name server's cache?
• Which of the following tools is used for conducting detailed security assessments?
• What is the main goal of conducting penetration testing?
• What type of malware masquerades as a harmless file while delivering a malicious payload?
• Which type of security controls helps to detect unauthorized actions within a facility?
• Which of the following is NOT a major attack type?
• Which type of attacks includes spoofing and cache poisoning?
• Which of the following refers to false information that can manipulate a user’s actions?
• Which attack type takes advantage of insufficient validation of user input to modify application behavior?
• What type of network does Fiber Channel (FC) provide through the deployment of a fabric?
• Which strategy involves random checks to identify potential compliance issues?
• How often should a configuration baseline be updated?
• Which of the following best describes IPv6?
• What allows for scalable secure remote access by managing multiple VPN connections?
• In terms of security awareness, what should users be educated to avoid?
• What type of NIDS/NIPS is best suited to recognize zero-day attacks?
• Which type of analysis is based on hard numbers?
• What is the secure version of Telnet?
• Which of the following is not considered a preventative physical security control?
• What is the underlying protocol for HTTPS?
• Which of the following data sources is the last one to be collected according to the order of volatility?
• What concept addresses threats to data being modified without authorization?
• What should web servers be placed in after hardening the operating system?
• The components of the CIA triad include confidentiality, integrity, and what other aspect?
• Which of the following attacks is specifically designed to target a select group of individuals?
• Which of the following is NOT typically associated with improving data integrity?
• What does confidentiality primarily protect against?
• Which of the following describes an attack that leverages social proof to influence decisions?
• What does a proxy server do in the context of web security?
• What is a type of UDP Denial of Service (DoS) attack?
• Which security measure is designed to protect web servers from attacks like cross-site scripting?
• What is the key information collected in the initial stages of incident response?
• What type of malware is triggered by a specific event, such as a date or action?
• Which versions of SNMP are considered insecure?
• What is the recommended action if the loss of an asset is deemed unacceptable?
• What type of spam involves unsolicited messages sent through instant messaging platforms?
• What type of ranking is considered subjective?
• What type of malicious software attaches to executable files with the goal of replication?
• In virtualization, what is the benefit of using a hypervisor?
• Which violation can occur if sensitive information is disclosed on a social networking site?
• What process involves analyzing an incident and determining steps to prevent future occurrences?
• Which protocol is an improvement over WEP and uses EAP, TKIP, and RC4?
• Which input validation method is considered more secure than client-side validation?
• What security function does WPA2 provide compared to WPA?
• Which site provides a building and network equipment but lacks current application data?
• What type of attack is characterized by sending a large amount of DNS queries to a server to overwhelm it?
• Which control is focused on reducing the risk of loss through specific security measures?
• Which agreement specifies what contractors are allowed and not allowed to do?
• What technology is impacted when there are attacks on the production network during the use of Fiber Channel over Ethernet (FCoE)?
• What should be prepared to revert any changes if the upgrade plan goes awry?
• What type of attack involves manipulating file names to access restricted files?
• What should not be included in vulnerability scanning?
• What protocol can also be used in SSTP to establish a VPN without requiring client setup?
• Which type of log contains information about system startups and backups?
• What does EAP stand for in networking terms?
• What is a collection of honeypots that emulates a set of servers?
• What is the term for a fraudulent practice aimed to extract information through deceptive emails or messages?
• What do subnets and VLANs primarily separate?
• Which type of malware spreads quickly through network shares without needing user interaction?
• Which type of Intrusion Prevention System also neutralizes attacks?
• What does EMI stand for in the context of interference?
• What term refers to checking an employee's work while they are on vacation to find fraud?
• Which of the following statements about security controls is accurate?
• What is the target time frame within which critical systems should be operational again after a disaster?
• Which concept addresses the handling of special conditions in program execution?
• What type of policy includes a clean desk requirement and data sanitization?
• What does IaaS stand for in cloud computing?
• Which analysis is crucial in determining how a disaster affects business continuity?
• In risk management, how is risk calculated?
• What term refers to the concepts ensuring software can handle exception conditions?
• What attack manipulates legitimate traffic to appear as it originates from the victim's address?
• Which of the following is a characteristic of adware?
• A situation where an attack is not identified is known as what?
• Which of the following is a measure to protect against buffer overflows?
• Which role performs vulnerability assessments on systems?
• Which type of Network Address Translation has a one-to-one mapping between internal and external addresses?
• What term describes the hijacking/reuse of a magic cookie used for user authentication?
• What device minimizes collision in a network by connecting hosts based on MAC addresses?
• Which method is commonly used to provide integrity for data?
• Which type of control is an armed guard classified as?
• What are duplicate access points set up by a hacker to conduct a man-in-the-middle attack called?
• What involves instructing users on the dangers of information sharing through peer-to-peer platforms?
• In which attack does an attacker modify web content by entering HTML code?
• What type of DDoS attack uses UDP packets?
• Which type of cookies should be blocked as they are from advertisers and can pose security risks?
• Which attack takes place when an attacker responds to an ARP broadcast for the victim's MAC address?
• Which protocol is considered weak due to its 24-bit initialization vector?
• What aspect of incident management focuses on suggesting improvements after incidents have occurred?
• Which secure protocol is recommended for remote access?
• Two software developers switching roles to reduce risks is an example of which control?
• Which type of attack occurs when a hacker can monitor a smartphone user's conversation and camera?
• What is risk mitigation based on when considering asset value and exposure?
• Which injection technique compromises the logic of an XML application or service?
• What is the main underlying tactic common to social engineering attacks?
• What is the term used for phishing conducted over the phone?
• Which log records events generated by applications?
• What is the name of the attack that redirects web traffic to a spoofed website?
• What type of injection involves inserting false information into a database?
• What is the main function of a VPN concentrator?
• Which type of control is considered proactive in nature?
• What method involves documenting the location and specifics of wireless access points using chalk marks?
• Which version of IP has a 32-bit address space that is known to be depleted?
• What is the term for a hacker attacking a dial-up site?
• Which EAP variant uses certificates for authentication?
• Which of the following describes a method used to monitor confidential material or equipment being removed?
• Which protocol is associated with attacks such as Ping of Death and Smurf Attack?
• Which type of service allows vendors to supply the software product?
• What system resolves a host name to an IP address?
• What is the specialized operating system that hosts virtual machines called?
• What is the purpose of vulnerability scanning?
• How do organizations use big data analysis in the context of cybersecurity?
• Which strategy involves removing the risk entirely?
• Which of the following is NOT typically a method for defending against injection techniques?
• What security measure enhances the protection of confidential information?
• What are the primary threats discovered by packet sniffing in WEP?
• Which of the following represents a factor that could compromise confidentiality?
• What feature of modern CPUs segregates areas of memory into data and code?
• Which protocol replaces RC4 with AES for greater security?
• What is used to manage network devices like printers and routers?
• What term describes unsolicited SPAM sent over Instant Messenger platforms?
• What captures network packets and is typically integrated with a protocol analyzer?
• Which tool detects vulnerabilities by sending random input strings to an application?
• Which technology utilizes virtualization to provision resources on demand?
• What involves securing management interfaces and applications to enhance security?
• Where is a backup copy best stored for quick recovery?
• Which EAP variant employs MS-CHAPv2 for mutual authentication?
• Which principle of social engineering is demonstrated by creating a sense of urgency?
• Which site offers the highest level of availability with full equipment and current data?
• Which of the following is not a protocol used in IPSec?
• What fire suppression method is considered the best for data centers?
• Which of the following best describes a black box test?
• What security document outlines the technical and operational security requirements between organizations?
• What is the term for the loss of physical control over data in cloud computing?
• In what order should evidence be collected based on volatility?
• Which of the following best describes a honeypot?
• A space that only permits one user to enter at a time, requiring authentication to access the inner area is called what?
• Which type of attack specifically targets web browsers?
• What term describes measures that ensure system reliability by incorporating additional circuits and components?
• What enhancement does WPA2 have over WPA?
• What are the primary defenses against injection techniques?
• What does a remote access policy regulate?
• Which technique allows multiple hosts to connect to the Internet using a single public IP address?
• Which device connects hosts on a local area network (LAN) by MAC address?
• What security strategy does implicit deny employ?
• Where is the optimal location for a spam filter to be installed?
• What types of interference can be mitigated by various types of cabling and conduits?
• What is the term for the process that involves containing an incident to reduce harm?
• Which protocol encapsulates EAP in an encrypted TLS tunnel?
• What term describes a false alarm in a security context?
• Which security measure blocks access to websites by their URL?
• Which type of system is designed to divert attackers and study their techniques?
• When assessing a network requiring near 100% availability, which methods should be combined?
• What is the key function of using a Storage Area Network (SAN)?
• Which of the following functions is NOT typically performed by a proxy server?
• What is a major drawback of penetration testing compared to vulnerability scanning?
• What does the Recovery Point Objective (RPO) refer to?
• What type of malware continually changes to evade signature-based detection?
• What is the primary function of a vulnerability scanner?
• Which type of SPAM is associated with Instant Texting?
• What does the 802.1Q standard define?
• Which protocol is used to transfer web pages securely?
• What type of attack is described when users are tricked into believing that they need to act quickly to gain access to a product?
• Which category of controls includes daily checks such as user rights reviews and background investigations?