Security+ Certification Preparation Review
Questions
Course Introduction
This course is designed to prepare students for the CompTIA Security+ certification exam, covering essential principles for network security and risk management. Key topics include threats, attacks, and vulnerabilities; technologies and tools for securing networks; architecture and design of secure systems; identity and access management; risk management strategies; and best practices for cryptography and public key infrastructure. Through lectures, hands-on labs, and practice exams, students will gain the foundational knowledge and practical skills necessary to identify security risks, implement protective measures, and respond effectively to security incidents in a professional IT environment.
Recommended Textbook
CompTIA Security Guide to Network Security Fundamentals 6th Edition by Mark Ciampa
Available Study Resources on Quizplus
15 Chapters
750 Verified Questions
750 Flashcards
Source URL: https://quizplus.com/study-set/2311 Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45966
Sample Questions
Q1) What term is used to describe state-sponsored attackers that are used for launching computer attacks against their foes?
A)nation state threats
B)cyber military
C)nation state actors
D)state hackers
Answer: C
Q2) Which of the following describes various supporting structures for implementing security that provides a resource of how to create a secure IT environment? (Choose all that apply. )
A)regulatory frameworks
B)reference architectures
C)industry-standard frameworks
D)reference frameworks
Answer: B,C
Q3) To mitigate risk is the attempt to address risk by making the risk less serious.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45967
Sample Questions
Q1) Vishing is a false warning,often contained in an email message claiming to come from the IT department.
A)True
B)False
Answer: False
Q2) What type of attack is targeted against a smaller group of specific individuals,such as the major executives working for a manufacturing company?
A)spam
B)adware
C)watering hole
D)typo Squatting
Answer: C
Q3) What type of computer code is typically added to a legitimate program but lies dormant until a specific logical event triggers it?
A)script
B)logic bomb
C)macro virus
D)metamorphic virus
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45968
Sample Questions
Q1) What is meant by the phrase "security through obscurity," and why is this concept not accurate?
Answer: Security through obscurity,or the notion that virtually any system can be made secure so long as outsiders are unaware of it or how it functions.However,this is a flawed approach since it is essentially impossible to keep "secrets" from everyone.
Q2) The simplest type of stream cipher,one in which one letter or character is exchanged for another,is known as what?
A)shift
B)substitution
C)lock
D)loop
Answer: B
Q3) GNU Privacy Guard a proprietary software that runs on different operating systems. A)True
B)False
Answer: False
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Advanced Cryptography and PKI
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45969
Sample Questions
Q1) What block cipher mode of operation uses the most basic approach where the plaintext is divided into blocks,and each block is then encrypted separately?
A)Electronic Code Book
B)Galois/Counter
C)Cipher Block Chaining
D)Counter
Q2) Which of the following certificates verifies the identity of the entity that has control over the domain name?
A)validation digital certificate
B)root digital certificates
C)domain validation digital certificate
D)web digital certificates
Q3) Explain how Cipher Block Chaining (CBC)operates.
Q4) What is a cipher suite?
Q5) What allows an application to implement an encryption algorithm for execution?
A)counters
B)crypto service providers
C)initialization vectors
D)crypto modules
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Networking and Server Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45970
Sample Questions
Q1) What type of attack intercepts communication between parties to steal or manipulate the data?
A)replay
B)MAC spoofing
C)man-in-the-browser
D)ARP poisoning
Q2) Which of the following are considered to be interception attacks? (Choose all that apply. )
A)denial of service
B)amplification attack
C)man-in-the-middle D)replay attacks
Q3) What protocol can be used by a host on a network to find the MAC address of another device based on an IP address?
A)DNS
B)ARP
C)TCP
D)UDP
Q4) What are some of the typical server attacks used by attackers?
Q5) How does a buffer overflow attack occur?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Network Security Devices, Design, and Technology
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45971
Sample Questions
Q1) Workgroup switches must work faster than core switches.
A)True
B)False
Q2) The OSI model breaks networking steps down into a series of six layers.
A)True
B)False
Q3) An agent may be a permanent NAC agent and reside on end devices until uninstalled,but it cannot be a dissolvable NAC agent.
A)True
B)False
Q4) What dedicated hardware device aggregates hundreds or thousands of VPN connections?
A)VPN server
B)VPN gateway
C)VPN switch
D)VPN concentrator
Q5) One use of data loss prevention (DLP)is blocking the copying of files to a USB flash drive.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45972
Sample Questions
Q1) Select the security tool that is an inventory of applications and associated components that have been pre-approved and authorized to be active and present on the device?
A)malware management
B)inventory permissions
C)application whitelist
D)application control
Q2) SNMP-managed devices must have an agent or a service that listens for commands and then executes them.
A)True
B)False
Q3) What specific issues are associated with log management? (Choose all that apply. )
A)The multiple devices generating logs.
B)The different log formats.
C)The fast network transfer speeds.
D)The large volume of data that needs to be logged
Q4) What are the two types of community strings?
Q5) What Microsoft Windows feature prevents attackers from using buffer overflows to execute malware?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45973
Sample Questions
Q1) Which of the following choices is not one of the four types of packets used by EAP?
A)Request
B)Response
C)Success
D)Error
Q2) What is the maximum transmission power for IEEE WLANs?
A)100 milliwatts (mW)
B)200 milliwatts (mW)
C)400 milliwatts (mW)
D)500 milliwatts (mW)
Q3) The current Bluetooth version is Bluetooth 6.
A)True
B)False
Q4) Which encryption protocol below is used in the WPA2 standard?
A)AES-CCMP
B)AES-CTR
C)AES-TKIP
D)AES-SCMP
Q5) What is the most common type of wireless access control?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Client and Application Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45974
Sample Questions
Q1) What type of video surveillance is typically used by banks,casinos,airports,and military installations,and commonly employs guards who actively monitor the surveillance?
A)CCTV
B)ICTV
C)IPTV
D)ITV
Q2) What U.S.government classified standard is intended to prevent attackers from picking up electromagnetic fields from government buildings?
A)RAIN
B)EMIF
C)TEMPEST
D)MaSec
Q3) Which AV approach uses a variety of techniques to spot the characteristics of a virus instead of attempting to make matches?
A)heuristic monitoring
B)pattern detection
C)hybrid monitoring
D)combination detection
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Mobile and Embedded Device Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45975
Sample Questions
Q1) What PIN is considered to be the most commonly used PIN?
A)1234
B)4321
C)0000
D)7777
Q2) What particular option can be used mobile devices that contain both personal and corporate data?
Q3) Which of the following selections is not one of the features provided by a typical MDM?
A)Rapidly deploy new mobile devices
B)Discover devices accessing enterprise systems
C)Track stolen devices
D)Enforce encryption settings
Q4) An embedded system is computer hardware and software contained within a smaller system that is designed for a specific function.
A)True
B)False
Q5) How does BYOD increase employee performance?
Q6) What is the difference between a feature phone and a smartphone?
Q7) Describe how content management is used.
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45976
Sample Questions
Q1) Which of the following options prevents a logon after a set number of failed logon attempts within a specified period and can also specify the length of time that the lockout is in force?
A)password lock
B)logon lock
C)password lockout
D)logon lockout
Q2) Voice recognition is identical to speech recognition.
A)True
B)False
Q3) How does a retina scanner work?
Q4) Why should account passwords be disabled instead of the account being immediately deleted?
Q5) Why do passwords place a heavy load on human memory?
Q6) What term best describes managing the login credentials such as passwords in user accounts?
A)account management
B)user management
C)credential management
D)password management
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Access Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45977
Sample Questions
Q1) A Local Group Policy (LGP)has more options than a Group Policy.
A)True
B)False
Q2) Which of the following controls can be implemented so an organization can configure multiple computers by setting a single policy for enforcement?
A)group-based access control
B)computer-based access control
C)role-based access control
D)system access control
Q3) Authorization is granting permission for admittance.
A)True
B)False
Q4) Which access control model is considered to be the least restrictive?
A)Role Based Access Control
B)Mandatory Access Control
C)Rule Based Access Control
D)Discretionary Access Control
Q5) Describe the two key elements of the MAC model.
Q6) Describe how Kerberos works.
Q7) Discuss the two significant weaknesses of DAC.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Vulnerability Assessment and Data Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45978
Sample Questions
Q1) List at least four things that a vulnerability scanner can do.
Q2) What is the end result of a penetration test?
A)penetration test profile
B)penetration test report
C)penetration test system
D)penetration test view
Q3) List two types of hardening techniques.
Q4) List and describe the elements that make up a security posture.
Q5) What type of reconnaissance is a penetration tester performing if they are using tools that do not raise any alarms?
A)active
B)passive
C)invasive
D)evasive
Q6) What security goal do the following common controls address: Redundancy,fault tolerance,and patching.?
A)confidentiality
B)integrity
C)availability
D)safety
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Business Continuity
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45979
Sample Questions
Q1) Which of the following is the sudden flow of electric current between two objects?
A)electromagnetic interference
B)Faraday interference
C)electrostatic discharge
D)electromagnetic pulse
Q2) What value refers to the average amount of time until a component fails,cannot be repaired,and must be replaced?
A)average time between failures
B)mean time to recovery
C)mean time between failures
D)median time between failures
Q3) A service contract between a vendor and a client that specifies what services will be provided,the responsibilities of each party,and any guarantees of service,is known as:
A)service level agreement
B)recovery point objective
C)recovery time objective
D)service point agreement
Q4) What are the objectives of disaster exercises?
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/45980
Sample Questions
Q1) What can be defined as the planning,coordination,and communications functions that are needed to resolve an incident in an efficient manner?
A)incident reporting
B)incident management
C)incident handling
D)incident planning
Q2) What is a service contract between a vendor and a client that specifies what services will be provided,the responsibilities of each party,and any guarantees of service?
A)MOU
B)SLA
C)BPA
D)ISA
Q3) What is privilege management?
Q4) What type of learner learns best through hands-on approaches?
A)visual
B)auditory
C)kinesthetic
D)spatial
Q5) List and describe three of the six risk categories.
To view all questions and flashcards with answers, click on the resource link above. Page 17