CompTIA Security+ Practice Exam- 2

Reviewed by Editorial Team
The ProProfs editorial team is comprised of experienced subject matter experts. They've collectively created over 10,000 quizzes and lessons, serving over 100 million users. Our team includes in-house content moderators and subject matter experts, as well as a global network of rigorously trained contributors. All adhere to our comprehensive editorial guidelines, ensuring the delivery of high-quality content.
Learn about Our Editorial Process
| By Vaibhav Agarwal
V
Vaibhav Agarwal
Community Contributor
Quizzes Created: 58 | Total Attempts: 621,350
| Attempts: 14,941
Quiz Flashcard
SettingsSettings
Please wait...
    1/81 Questions

  • You have created a folder on your server that will be holding confidential data. You wish to assign privilege access to the same. You will be choosing which of the following control systems?

    • Mandatory Access Control
    • Discretionary Access Control
    • Role Based Access Control
    • Any of the above
Please wait...
About This Quiz

Full length Comptia Security+ Practice Exam. This is the second free mock exam at Proprofs. We suggest you do this exam after completing the free Security+ practice question available on the site. Take this exam like the real exam to see if you are completly prepared for the real exam. This FREE online Security+ practice test will help you pass See moreby familiarizing you with the material and the ensuring that you know the structure of the Security+ test. Time yourself to 90 minutes to get a feel of the pressures of the real exam. The practice test is designed to reflect the final exam.

CompTIA Security+ Practice Exam- 2 - Quiz
Questions and Answers
  • 2. 

    While assigning access privilege using the RBAC model, which of the following will you be needing?

    • Responsibilities attached to the role played by the user

    • Access Control list

    • Resource list

    • User Database

    Correct Answer
    A. Responsibilities attached to the role played by the user
    Explanation
    The mandatory information required while assigning privilege access in the RBAC model would be the responsibilities attached to the role in the organization that the user has assumed.

    Rate this question:

  • 3. 

    Which of the following statements about password encryption is true? Choose all that apply.

    • PAP allows maximum security

    • CHAP allows maximum security

    • PAP is a two-way handshake

    • CHAP is a three-way handshake.

    Correct Answer(s)
    A. CHAP allows maximum security
    A. PAP is a two-way handshake
    A. CHAP is a three-way handshake.
    Explanation
    Password encryption allows for security during authentication. PAP is a two-way handshake that is least secure. CHAP is a three-way handshake that is most secure.

    Rate this question:

  • 4. 

    Certificates can be assigned to which of the following? Choose all that apply

    • User

    • Computer

    • Web site

    • Operating System

    Correct Answer(s)
    A. User
    A. Computer
    A. Web site
    Explanation
    User, Computer as well as Websites need to be certified as �secure� by a third party at times depending on the scenario. Hence assigning certificates to any of these objects can improve the credibility of that individual object.

    Rate this question:

  • 5. 

    Which of the following about the Kerberos system is true? Choose all that apply.

    • Kerberos is ideal for WAN security

    • Kerberos uses a ticket to attach credentials to users.

    • Kerberos needs a certificate authority to be present in the network

    • Kerberos is ideally meant for LAN

    Correct Answer(s)
    A. Kerberos uses a ticket to attach credentials to users.
    A. Kerberos is ideally meant for LAN
    Explanation
    Kerberos is ideally meant for LAN security. It uses tickets to assign credentials to users who need to be authenticated to the LAN and then need to use the network resources.

    Rate this question:

  • 6. 

    Which of the following is true about the Certificates? Choose all that apply.

    • A Certificate can be issued by a third party only.

    • A Certificate enhances the credibility of the end object to which it has been assigned.

    • A Certificate when assigned to a user enhances user access permissions on the network resources for that user.

    • A Certificate requires a Certification authority to be generated.

    • A Certificate is used for secure authentication.

    Correct Answer(s)
    A. A Certificate enhances the credibility of the end object to which it has been assigned.
    A. A Certificate requires a Certification authority to be generated.
    A. A Certificate is used for secure authentication.
    Explanation
    A Certificate is ideally used for secure authentication. Whenever a Certificate has been assigned to a User, Computer or a Web site, it enhances the credibility for that individual object of reference and makes it easy for the other communicating end to trust this user, computer or web site. A Certificate need not be assigned only by a third party. You may configure a Certificate Server in your network that is capable of generating Certificates. But a third party verification is always better trusted as it is unbiased.

    Rate this question:

  • 7. 

    Which of the following can be enabled to issue certificates in a network that requires Certificates for security? Choose two.

    • Certificate Server

    • Administrator

    • Owner

    • Third party Certificate Server

    Correct Answer(s)
    A. Certificate Server
    A. Third party Certificate Server
    Explanation
    The Certificate Server component that is hosting the Certificate service is responsible for generating certificates. This Certificate Server can be local to the network or can be a third party Certification authority.

    Rate this question:

  • 8. 

    If you wanted to provide a user limited access to network, which of the following authentication methods would you use? Choose the best answer.

    • Username/Password

    • Smart Card

    • Certificate

    • Token

    Correct Answer
    A. Certificate
    Explanation
    Smart Card and token are not the correct choices here. Username/Password could have been considered if the option also carried the term �with limited permissions�, but since that is not he case the ideal choice here would be the Certificate. Certificates allow the user to roam the network but with limited access.

    Rate this question:

  • 9. 

    MS-CHAP is abbreviation for Most Secure � Challenge Handshake Authentication Protocol. T/F?

    • True

    • False

    Correct Answer
    A. False
    Explanation
    MS-CHAP is abbreviation for Microsoft Challenge Handshake Authentication Protocol.

    Rate this question:

  • 10. 

    If you were implementing a network that required users to be assigned certificates for authentication, which of the following services would be most important?

    • Certificate Service

    • IIS

    • RAS

    • None of the above

    Correct Answer
    A. Certificate Service
    Explanation
    Certificate service will be responsible for generating and maintaining certificates.

    Rate this question:

  • 11. 

    Which of the following services is capable of hiding internal network IP addresses?

    • Proxy

    • RAS

    • DNS

    • DHCP

    Correct Answer
    A. Proxy
    Explanation
    Proxy, firewall and Router are all capable of Network Address Translation (NAT). NAT helps to hide internal network IP addresses from the external world.

    Rate this question:

  • 12. 

    Which of the following can ensure that eavesdropping does not occur on wireless LANs?

    • Encrypting passwords

    • Encrypting usernames

    • Encrypting data

    • Encrypting data as well as passwords.

    Correct Answer
    A. Encrypting data as well as passwords.
    Explanation
    If it is practical and achievable on the network, the best way to implement security on Wireless LAns would be to encrypt passwords as well as data.

    Rate this question:

  • 13. 

    Which of the following could give rise to DoS on the destination end of the command?

    • Ftp

    • Ping

    • IPCONFIG

    • Trace

    Correct Answer
    A. Ping
    Explanation
    Putting the ping command on a continuous loop to a given destination IP address can cause that destination end system to hang thus causing the DoS state.

    Rate this question:

  • 14. 

    Which of the following would indicate that the Web Server in your organization has been subjected to the DoS attack? Choose the best answer.

    • The servers� behavior would be erratic.

    • The user would not be able to access the Web Server.

    • All resources attached to the Web Server would stop functioning

    • The entire network stops functioning.

    Correct Answer
    A. The user would not be able to access the Web Server.
    Explanation
    As the name suggests, the services or the access to resources may be denied. This is not to say that the resources will themselves stop functioning. Any user who is currently logging in may be denied authentication, or users who are already logged in may not have resources available to them. The entire network connected to the Web Server cannot stop functioning as the network is usually hidden behind the firewall and will not be accessible to the outside world.

    Rate this question:

  • 15. 

    Super imposing the internal IP address of a network on to your own for the purpose of gaining access to the network is referred to as Eavesdropping. T/F?

    • True

    • False

    Correct Answer
    A. False
    Explanation
    Super imposing the internal IP address of a network on to your own for the purpose of gaining access to the network is referred to as �IP Masquerading� or �Spoofing�.

    Rate this question:

  • 16. 

    Which of the following protocol helps to address and IP multicast group?

    • ICMP

    • IGMP

    • IGRP

    • EIGRP

    Correct Answer
    A. IGMP
    Explanation
    IGRP and EIGRP are routing protocols. ICMP is responsible for path determination. IGMP is responsible for maintaining IP multicast group information.

    Rate this question:

  • 17. 

    To transfer mails between email servers and client of the same domain you would require POP3 service. T/F?

    • True

    • False

    Correct Answer
    A. True
    Explanation
    POP3 (Post office Protocol) is a mail retrieval protocol that helps the client to retrieve mails from the mail server.

    Rate this question:

  • 18. 

    Which of the following protocols is used for connecting UNIX hosts or terminals?

    • PPP

    • RS232

    • SLIP

    • V35

    Correct Answer
    A. SLIP
    Explanation
    PPP and SLIP are the only two protocols mentioned. The other two are related to standards and not protocols. SLIP is the protocol used in UNIX networks.

    Rate this question:

  • 19. 

    If you required a dedicated service to authenticate remote users on your network, which of the following would you choose?

    • RAS

    • DHCP

    • HTTP

    • RADIUS

    Correct Answer
    A. RADIUS
    Explanation
    RADIUS (Remote Access Dial In User Service) is meant for authenticating remote users on a network.

    Rate this question:

  • 20. 

    Which of the following is true about the RADIUS server?

    • It needs an independent administrator

    • It can be managed by the central administrator

    • It needs to be configured on the central server

    • None of the above

    Correct Answer
    A. It can be managed by the central administrator
    Explanation
    The RADIUS server can be managed by the central administrator or by the administrator who manages the other servers. It need not be configured on the Central server to be centrally manged.

    Rate this question:

  • 21. 

    Which of the following port numbers is used by POP3?

    • 25

    • 20

    • 110

    • 119

    Correct Answer
    A. 110
    Explanation
    POP3 uses port number 110.

    Rate this question:

  • 22. 

    Which of the following statements about the email client is/are true? Choose only answer(s) that apply.

    • An email client can retrieve mails only from an email server

    • An email client needs a retrieval protocol as well as an email application

    • It is mandatory that emails are scanned if an email client has to be operational

    • None of the above

    Correct Answer(s)
    A. An email client can retrieve mails only from an email server
    A. An email client needs a retrieval protocol as well as an email application
    Explanation
    An email client application usually has the client component that is configured with a protocol (POP3) for retrieving mails from an email server.

    Rate this question:

  • 23. 

    Which of the following is true about cellular communication? Choose three.

    • It uses radio frequency for main communication.

    • Advanced phones use Infrared for data transfer.

    • Its reception/transmission range will depend upon the service providers� signal strength

    • Its reception/transmission range will depend upon the cellular devices� signal strength

    Correct Answer(s)
    A. It uses radio frequency for main communication.
    A. Advanced phones use Infrared for data transfer.
    A. Its reception/transmission range will depend upon the service providers� signal strength
    Explanation
    Cellular phones mainly communicate on radio frequency. The range of reception and transmission will depend upon the number of towers as well as the signal strength provided by the cellular service provider. Advanced cellular devices have data transfer feature that can be used with PCs or printers that are Infrared enabled.

    Rate this question:

  • 24. 

    Which of the following devices may require a modem for WAN communication? Choose two.

    • PC

    • Routers

    • Switches

    • None of the above.

    Correct Answer(s)
    A. PC
    A. Routers
    Explanation
    Connecting a modem to the switch is the same as connecting it to the PC. Switch is a transparent device on the network and is not intelligent enough to independently drive a modem to perform any function. The PC and the router require a modem for dial up or leased line connectivity to the WAN.

    Rate this question:

  • 25. 

    Which of the following layers is responsible for assigning the correct standard of signal strength to the communicating devices?

    • Physical layer

    • Datalink layer

    • Network Layer

    • None of the above

    Correct Answer
    A. Physical layer
    Explanation
    The responsibility of the physical layer is to assign correct standards of physical connection as well as the signal strengths required for operation.

    Rate this question:

  • 26. 

    Which of the following devices use Infrared? Choose three.

    • Small range LAN

    • Remote control devices

    • Advanced cellular devices

    • Refrigerators

    Correct Answer(s)
    A. Small range LAN
    A. Remote control devices
    A. Advanced cellular devices
    Explanation
    Small range LAN that can afford placement of devices within line of sight may go in for Infrared communication. Remote control devices such as television or home theater sets do also use Infrared. Advanced cellular devices use Infrared for data transfer between themselves and PCs or Printers.

    Rate this question:

  • 27. 

    Routers perform filtering based on which of the following?

    • Information presented by the Access List.

    • Information presented by the routing table.

    • Information presented by the header information of the incoming packets.

    • Information presented by the header information of the outgoing packets.

    Correct Answer
    A. Information presented by the Access List.
    Explanation
    Filtering can be performed only if certain rules for filtering is decided upon. These rules or conditions for filtering are available in the Access List in case of the routers. The routing table or the header information of packets on their own cannot present any information that is required for filtering.

    Rate this question:

  • 28. 

    Which of the following is/are the firewall capable of? Choose two.

    • NAT

    • PAT

    • MAC

    • DAC

    Correct Answer(s)
    A. NAT
    A. PAT
    Explanation
    The firewall is capable of Nat (Network Address Translation) as well as PAT (Port Address Translation).
    MAC is an addressing scheme and DAC is Digital to Analog conversion, which the firewall is not capable of.

    Rate this question:

  • 29. 

    Which of the following protocols will the Circuit-level filtering firewall relate to? Choose two

    • UDP

    • TCP

    • FTP

    Correct Answer(s)
    A. UDP
    A. TCP
    Explanation
    Circuit level filtering firewall relates to transport/session layers and will hence relate to TCP and UDP. It can make up for the shortcomings of the ultra-simple UDP protocol, wherein the source address is never validated as a function of the protocol. IP spoofing can be rendered much more difficult.

    Rate this question:

  • 30. 

    Packet filtering firewall will operate Application layer of the OSI reference model. T/F?

    • True

    • False

    Correct Answer
    A. False
    Explanation
    Packet filtering firewall operates on the network layer of the OSI reference model.

    Rate this question:

  • 31. 

    Which of the following is the correct authority to decide on the firewall design policy?

    • Administrator

    • Business owner

    • User

    • Government policies.

    Correct Answer
    A. Administrator
    Explanation
    Based on the network policy and the access policy the administrator will be required to design an accurate firewall policy. The Government will have no role to play here.

    Rate this question:

  • 32. 

    Which of the following firewall policies is least restrictive?

    • Any any

    • Deny all

    • Permit any

    • None of the above

    Correct Answer
    A. Permit any
    Explanation
    The �Permit any� is the most restrictive statement that can be defined in the firewall. This statement should not be configured on the top of the list ideally as it will over rule any other restriction that may follow this statement.

    Rate this question:

  • 33. 

    When faced with an incoming packet, which of the following header components would a firewall look at first?

    • Protocol information

    • Source address

    • Destination address

    • No of bytes in the header

    Correct Answer
    A. Source address
    Explanation
    The firewall will first look at the source address to verify which network has sent the packet and then see if any firewall restriction is applicable to this packet.

    Rate this question:

  • 34. 

    If you have implemented a FTP server in your network and you would wish to secure this service so that no external user will be able perform FTP and obtain secure data, which of the following would you ensure?

    • Block port numbers 20 and 21 on the external interface for incoming connections

    • Block port numbers 20 and 21 on the internal interface.

    • Block port numbers 67 and 68 on the external interface for incoming connections

    • Block port numbers 67 and 68 on the internal interface

    Correct Answer
    A. Block port numbers 20 and 21 on the external interface for incoming connections
    Explanation
    Blocking port numbers 20 and 21 on the external interface of the firewall for incoming connections will ensure that no external user will be able to access the FTP service.

    Rate this question:

  • 35. 

    If you wish to block the external users from accessing your Mail server you must block port number 110. T/F?

    • True

    • False

    Correct Answer
    A. False
    Explanation
    If you wish to block the external users from accessing your Mail server you must block port number 25.

    Rate this question:

  • 36. 

    Which of the following can help with Web Server hardening? Choose all that apply.

    • Web servers should not have most restrictive permissions on resources that need not be accessible to the external user.

    • Web servers should have most restrictive permissions on resources that need not be accessible to the external user.

    • Verifying that only relevant resources can be accessible through URLs

    • Verify if all services have been updated with latest patches or service packs.

    • None of the above

    Correct Answer(s)
    A. Web servers should have most restrictive permissions on resources that need not be accessible to the external user.
    A. Verifying that only relevant resources can be accessible through URLs
    A. Verify if all services have been updated with latest patches or service packs.
    Explanation
    To harden the Web server, it is essential that all services running on the server be updated with latest patches as and when required. Resources that should not be accessible to the external user must have the most restrictive permissions. Static files and other resources that are not relevant to external users must not be accessible through URLs.

    Rate this question:

  • 37. 

    Which of the following is true about a three-tier model? Choose two.

    • In this model the Database server is the core component.

    • In this model, the database client is the core component.

    • This is the most secure model for a database server.

    • This is the least secure model for hosting a database server.

    Correct Answer(s)
    A. In this model the Database server is the core component.
    A. This is the most secure model for a database server.
    Explanation
    In a three-tier model, the client is the superficial component, the middle server provides the required security and the database server forms the core component. Since the middle level server receives client requests first and then passes it on to the database server, the database server is not directly exposed to the client and is hence the most secure way of hosting the web server.

    Rate this question:

  • 38. 

    To prevent News servers from being accessed you must block TCP port 21. T/F?

    • True

    • False

    Correct Answer
    A. False
    Explanation
    The port number 119 must also be blocked.

    Rate this question:

  • 39. 

    Does NTFS provide file system security?

    • Yes

    • No

    Correct Answer
    A. Yes
    Explanation
    NTFS supports EFS (Encrypted File System) which allows data stored on a mass storage device to be saved in encrypted format.

    Rate this question:

  • 40. 

    Which of the following statements about the MDA (Message Digest algorithm) are true? Choose two.

    • It offers 128-bit hash

    • It offers 256-bit hash

    • Its latest version is MD#5

    • Its latest version is MD#1

    Correct Answer(s)
    A. It offers 128-bit hash
    A. Its latest version is MD#5
    Explanation
    MDA is also a hash algorithm that can be used during encryption. It provides 128-bit hash. Its latest version is MD#5.

    Rate this question:

  • 41. 

    Which of the following can RSA be used for? Choose two.

    • Encryption

    • Digital signatures

    • Certificates

    • Tokens

    Correct Answer(s)
    A. Encryption
    A. Digital signatures
    Explanation
    RSA can be used for Encryption and Digital signatures. It is not relevant to certificates and tokens.

    Rate this question:

  • 42. 

    Which of the following statements relating to Digital signatures are true? Choose two.

    • It is ideal security for emails

    • It can be used for Identification establishment.

    • It is an encryption method

    • It is an encryption standard

    Correct Answer(s)
    A. It is ideal security for emails
    A. It can be used for Identification establishment.
    Explanation
    It is ideally meant to establish Identity of the sender and receiver of the information and not to encrypt the information. The most practical implementation of digital signatures would be in emails. It is not any encryption standard.

    Rate this question:

  • 43. 

    ECC and diffe-Hellman are both asymmetric using public/private keys. T/F?

    • True

    • False

    Correct Answer
    A. True
    Explanation
    ECC, RSA, Diffie-Hellman, and El Gamal are all asymmetric systems using public/private keys

    Rate this question:

  • 44. 

    Which of the following relate to information or message integrity? Choose two.

    • Prevent information modification during transmission.

    • Verification through check sum algorithms.

    • Verification through authentication

    • Verification through digital signatures.

    Correct Answer(s)
    A. Prevent information modification during transmission.
    A. Verification through check sum algorithms.
    Explanation
    Message integrity ensures that he message being transmitted is not being modified enroute. To ensure this, a checksum algorithm may be employed at the sending and the receiving end to ensure the message being sent is received in tact.

    Rate this question:

  • 45. 

    Which of the following is the function of IETF?

    • Setup networking standards

    • Propose and develop standards relating to computers, networks and Internet

    • Review security policies for banks

    • None of the above.

    Correct Answer
    A. Propose and develop standards relating to computers, networks and Internet
    Explanation
    IETF (Internet Engineering Task Force) is responsible for proposing and developing standards relating to computers, networks and the Internet.

    Rate this question:

  • 46. 

    Which of the following is true about Ciphertext? Choose three.

    • It is a result of strong cryptography

    • It is a result of weak cryptography

    • It makes it impossible to retrieve clear text without the help of correct decoding tools.

    • It makes it impossible to retrieve clear text.

    • Requires extensive computing capability to decode.

    Correct Answer(s)
    A. It is a result of strong cryptography
    A. It makes it impossible to retrieve clear text without the help of correct decoding tools.
    A. Requires extensive computing capability to decode.
    Explanation
    Ciphertext is a result of strong cryptography. It is meant to be so complex that it is impossible to decode without appropriate decoding tools in spite of using extensive computing capabilities.

    Rate this question:

  • 47. 

    Cipher is a mathematical function used for secure authentication. T/F?

    • True

    • False

    Correct Answer
    A. False
    Explanation
    Cipher is a cryptography algorithm. It is a mathematical function used for the purpose of encryption and decryption.

    Rate this question:

  • 48. 

    If �Hi Kid� is being represented as �Kl Nlg�, then which of the following is the correct offset value or key value being used here?

    • 3

    • 5

    • 4

    • 0

    Correct Answer
    A. 4
    Explanation
    H when offset by 4 will be represented as K, I as L, K as N, D as G. Hence key value or offset value being used here is 4.

    Rate this question:

  • 49. 

    Which of the following is a disadvantage when using conventional encryption?

    • It is not reliable

    • Key distribution

    • Key generation

    • None of the above

    Correct Answer
    A. Key distribution
    Explanation
    When using conventional encryption for transmitting data, key distribution between the sending and the receiving end can be a problem.

    Rate this question:

Quiz Review Timeline (Updated): Mar 22, 2022 +

Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.

  • Current Version
  • Mar 22, 2022
    Quiz Edited by
    ProProfs Editorial Team
  • Dec 07, 2006
    Quiz Created by
    Vaibhav Agarwal

Related Topics

Recent Quizzes

Quiz on CompTIA Security+ Certification! Trivia Questions Quiz on CompTIA Security+ Certification! Trivia Questions
Comptia Security+ Practice Exam Comptia Security+ Practice Exam
Comptia Security PLUS Practice Exam Comptia Security PLUS Practice Exam
CompTIA Security+ (SY0-301) Practice Exam CompTIA Security+ (SY0-301) Practice Exam
Comptia Security+ Practice Exam: Quiz! Comptia Security+ Practice Exam: Quiz!
Chapter 7 & 8 Security + Chapter 7 & 8 Security +
Securty + Ch. 2-6 test Securty + Ch. 2-6 test
SECURITY + Systems Security SECURITY + Systems Security
SECURITY + Network Infrastructure SECURITY + Network Infrastructure

Featured Quizzes

Emotion Quiz: What Emotion Am I Quiz Emotion Quiz: What Emotion Am I Quiz
Significant Figures Quiz: Can You Score Full Marks? Significant Figures Quiz: Can You Score Full Marks?
Pedigree Analysis Quiz Questions with Answers Pedigree Analysis Quiz Questions with Answers
Music Genre Quiz: What Kind of Music Do I Like? Music Genre Quiz: What Kind of Music Do I Like?
Are You Ready For IQ Quiz: Test Your Intelligence Now Are You Ready For IQ Quiz: Test Your Intelligence Now
Game Recommendations Quiz: What Game Should I Play? Game Recommendations Quiz: What Game Should I Play?
Back to Top Back to top
Advertisement
×

Wait!
Here's an interesting quiz for you.

We have other quizzes matching your interest.