Question 1

A wireless network uses a RADIUS server that is connected to an authenticator, which in turn connects to a supplicant. Which of the following represents the authentication architecture in use?

Accepted Answer

802.1x is a network access control protocol that uses a RADIUS server for authentication, involving a supplicant (client), an authenticator (network device), and an authentication server (RADIUS).

Question 2

Which of the following technologies employ the use of SAML? (Select two.)

Accepted Answer

SAML (Security Assertion Markup Language) is an XML-based standard for exchanging authentication and authorization data between security domains. It is used in single sign-on (SSO) and federation scenarios, where users can access multiple applications with a single login.

Question 3

Which of the following is an important step to take BEFORE moving any installation packages from a test environment to production?

Accepted Answer

Verifying the hashes of files ensures that the files have not been tampered with and are the same as those tested, maintaining integrity before moving to production.

Question 4

After a user reports stow computer performance, a systems administrator detects a suspicious file, which was installed as part of a freeware software package. The systems administrator reviews the output below:  Based on the above information, which of the following types of malware was installed on the user's computer?

Accepted Answer

The answer of After a user reports stow computer performance,...

Question 5

Which of the following specifically describes the exploitation of an interactive process to access otherwise restricted areas of the OS?

Accepted Answer

Privilege escalation involves exploiting a vulnerability in an interactive process to gain unauthorized access to restricted areas of the operating system.

Question 6

An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection. Which of the following steps should the responder perform NEXT?

Accepted Answer

The responder should first capture and document necessary information to understand the situation and assist in the response process effectively.

Question 7

A security analyst is hardening a web server, which should allow a secure certificate-based session using the organization's PKI infrastructure. The web server should also utilize the latest security techniques and standards. Given this set of requirements, which of the following techniques should the analyst implement to BEST meet these requirements? (Select two.)

Accepted Answer

A) Install an X- 509-compliant certificate: X- 509 is a standard for public key certificates, which are used to establish secure connections between a client and a server.C) Enable and configure TLS on the server: TLS (Transport Layer Security) is a cryptographic protocol that provides secure communication over a network.

Question 8

When connected to a secure WAP, which of the following encryption technologies is MOST likely to be configured when connecting to WPA2-PSK?

Accepted Answer

AES (Advanced Encryption Standard) is the most likely encryption technology to be configured when connecting to WPA2-PSK (Wi-Fi Protected Access II - Pre-Shared Key).

Question 9

A company has three divisions, each with its own networks and services. The company decides to make its secure web portal accessible to all employees utilizing their existing usernames and passwords. The security administrator has elected to use SAML to support authentication. In this scenario, which of the following will occur when users try to authenticate to the portal? (Select two.)

Accepted Answer

The answer of A company has three divisions, each with...

Question 10

A senior incident response manager receives a call about some external IPs communicating with internal computers during off hours. Which of the following types of malware is MOST likely causing this issue?

Accepted Answer

A botnet is a network of infected computers that are controlled by an attacker, often used for malicious activities such as sending spam or launching attacks. The communication with external IPs during off hours suggests that the internal computers might be part of a botnet.

Question 11

Adhering to a layered security approach, a controlled access facility employs security guards who verify the authorization of all personnel entering the facility. Which of the following terms BEST describes the security control being employed?

Accepted Answer

The answer of Adhering to a layered security approach, a...

Question 12

An organization needs to implement a large PKI. Network engineers are concerned that repeated transmission of the OCSP will impact network performance. Which of the following should the security analyst recommend is lieu of an OCSP?

Accepted Answer

A Certificate Revocation List (CRL) can be used instead of OCSP to check the revocation status of certificates without the need for repeated network transmissions.

Question 13

When systems, hardware, or software are not supported by the original vendor, it is a vulnerability known as:

Accepted Answer

End-of-life systems are systems, hardware, or software that are no longer supported by the original vendor. This can create a vulnerability because the systems may no longer be patched or updated, which can make them more susceptible to attack.

Question 14

When identifying a company's most valuable assets as part of a BIA, which of the following should be the FIRST priority?

Accepted Answer

The answer of When identifying a company's most valuable assets...

Question 15

In terms of encrypting data, which of the following is BEST described as a way to safeguard password data by adding random data to it in storage?

Accepted Answer

Using salt involves adding random data to passwords before hashing them, which helps protect against attacks like rainbow tables by ensuring that even identical passwords have unique hashes.

Question 16

An information security specialist is reviewing the following output from a Linux server.  Based on the above information, which of the following types of malware was installed on the server?

Accepted Answer

The answer of An information security specialist is reviewing the...

Question 17

An employer requires that employees use a key-generating app on their smartphones to log into corporate applications. In terms of authentication of an individual, this type of access policy is BEST defined as:

Accepted Answer

This type of access policy is best defined as "something you have" because it involves using a device (smartphone with a key-generating app) that the user possesses to authenticate their identity.

Question 18

When considering a third-party cloud service provider, which of the following criteria would be the BEST to include in the security assessment process? (Select two.)

Accepted Answer

Adherence to regulatory compliance ensures the provider meets legal and industry standards, while data retention policies are crucial for understanding how data is stored and managed.

Question 19

An analyst wants to implement a more secure wireless authentication for office access points. Which of the following technologies allows for encrypted authentication of wireless clients over TLS?

Accepted Answer

EAP by itself is only an authentication framework. PEAP (Protected Extensible Authentication Protocol) fully encapsulates EAP and is designed to work within a TLS (Transport Layer Security) tunnel that may be encrypted but is authenticated. The primary motivation behind the creation of PEAP was to help correct the deficiencies discovered within EAP since that protocol assumes that the communications channel is protected. As a result, when EAP messages are able to be discovered in the "clear" they do not provide the protection that was assumed when the protocol was originally authored. PEAP, EAP-TTLS, and EAP-TLS "protect" inner EAP authentication within SSL/TLS sessions.

Question 20

A company wants to host a publicity available server that performs the following functions: Evaluates MX record lookup Can perform authenticated requests for A and AAA records Uses RRSIG Which of the following should the company use to fulfill the above requirements?

Accepted Answer

DNSSEC (Domain Name System Security Extensions) is used to secure information provided by the DNS system, including MX, A, and AAAA records, and it uses RRSIG for signing records to ensure their authenticity.

Exam 15: CompTIA Security+