Security+ Practice Certification Exam

Approved & Edited by ProProfs Editorial Team

The editorial team at ProProfs Quizzes consists of a select group of subject experts, trivia writers, and quiz masters who have authored over 10,000 quizzes taken by more than 100 million users. This team includes our in-house seasoned quiz moderators and subject matter experts. Our editorial experts, spread across the world, are rigorously trained using our comprehensive guidelines to ensure that you receive the highest quality quizzes.

Learn about Our Editorial Process

| By Lazor-beam

Lazor-beam

Community Contributor

Quizzes Created: 3 | Total Attempts: 492

Questions: 33 | Attempts: 240 | Updated: Mar 22, 2023

Questions

Settings

Feedback

During the Quiz End of Quiz

Play as

Quiz Flashcard

Create your own Quiz

Practice Exam - CompTIA Security+ Certification

Questions and Answers

Security+ Practice Certification Exam

Protecting your data from being revealed to unauthorized users is an example of ________ .

An AUTHORIZED user while accessing a system is flagged by the IDS as an INTRUDER. This is called a ______.

Which service either PERMITs or DENYs a user permission to view or change file data?

With Mandatory Access Control, subjects (users) must have _______ that are equal to or higher than what is assigned to the object (system, data file) to which access is being attempted.

Of the protocols listed below, which one is an older tunneling protocol that works with IP only?

IPSec carries the _____ which provides assurance of legitimacy of the transmission.

Symmetric Cryptography has several advantages, but sadly one LARGE disadvantage, ________ .

_____ based on an algorithm called Rijndael, a word formed from the combination of the names of the two Belgian cryptographers who developed it. Rijndael beat out 15 competing designs for adoption by both NIST and NSA.

When sender and receiver use different keys, the encryption scheme is called _______ .

_______ is an asymmetric algorithm?

All users should be made aware of the weakest security link, ________ .

An Intrusion Detection System cannot protect a network form _______ .

TACACS uses port _____ .

Secure Shell (SSH) uses both __ and port _ .

Professional codes of conduct require computer forensic experts to protect IT evidence gathered from a crime scene. This important guideline is known as _______ .

An attacker may overload a server by not responding with the third segment of a TCP Three Way Handshake. This is known as a _____ attack.

A worm is ______ whereas a Trojan is not.

Attackers commonly use this method to locate wireless networks.

Lack of attention to proper programming practices leads to application that may suffer from ______ .

Attackers may alter ICMP (Internet Control Message Protocol) transmissions to initiate a _____ .

Attacks may be detected by monitoring for ________ which amount to known bit patterns.

Misrepresenting a computer with the identifying address information of another is called ______ .

A _____ attaches itself to an otherwise normal program, resulting in an infection that may spread to other programs doing harm each location.

A password which has been hashed for security, may yet be revealed by a ________ attack.

A ____ attack may not steal or corrupt data, but it does overwhelm the system, denying access to legitimate users.

Encrypting a message before sending it across the internet addresses which fundamental security objective?

You discover that a session with a distant server is being monitored and altered by a third party. This is known as a ______ attack.

A server is placed in your network with the goal of attracting and monitoring attackers. This kind of server is known as a ________ .

While each of the methods listed below is appropriate for combating the threat of “dumpster diving”, which is the MOST important?

TLS is the updated version of _____.

Your have been asked to assess the security of a network. The _______ stage of the assessment involves identifying weaknesses and attempting to defeat the security system.

The arrival of a Digital Signature along with a message gives what assurance to the recipient?

What protocol is commonly used with e-mail?

Security+ Practice Certification Exam

Protecting your data from being revealed to unauthorized users is an example of ________ .

An AUTHORIZED user while accessing a system is flagged by the IDS as an INTRUDER. This is called a ______.

Which service either PERMITs or DENYs a user permission to view or change file data?

With Mandatory Access Control, subjects (users) must have _______ that are equal to or higher than what is assigned to the object (system, data file) to which access is being attempted.

Of the protocols listed below, which one is an older tunneling protocol that works with IP only?

IPSec carries the _____ which provides assurance of legitimacy of the transmission.

Symmetric Cryptography has several advantages, but sadly one LARGE disadvantage, ________ .

_____ based on an algorithm called Rijndael, a word formed from the combination of the names of the two Belgian cryptographers who developed it. Rijndael beat out 15 competing designs for adoption by both NIST and NSA.

When sender and receiver use different keys, the encryption scheme is called _______ .

_______ is an asymmetric algorithm?

All users should be made aware of the weakest security link, ________ .

An Intrusion Detection System cannot protect a network form _______ .

TACACS uses port _____ .

Secure Shell (SSH) uses both ____ and port ___ .

Professional codes of conduct require computer forensic experts to protect IT evidence gathered from a crime scene. This important guideline is known as _______ .

An attacker may overload a server by not responding with the third segment of a TCP Three Way Handshake. This is known as a _____ attack.

A worm is ______ whereas a Trojan is not.

Attackers commonly use this method to locate wireless networks.

Lack of attention to proper programming practices leads to application that may suffer from ______ .

Attackers may alter ICMP (Internet Control Message Protocol) transmissions to initiate a _____ .

Attacks may be detected by monitoring for ________ which amount to known bit patterns.

Misrepresenting a computer with the identifying address information of another is called ______ .

A _____ attaches itself to an otherwise normal program, resulting in an infection that may spread to other programs doing harm each location.

A password which has been hashed for security, may yet be revealed by a ________ attack.

A ____ attack may not steal or corrupt data, but it does overwhelm the system, denying access to legitimate users.

Encrypting a message before sending it across the internet addresses which fundamental security objective?

You discover that a session with a distant server is being monitored and altered by a third party. This is known as a ______ attack.

A server is placed in your network with the goal of attracting and monitoring attackers. This kind of server is known as a ________ .

While each of the methods listed below is appropriate for combating the threat of “dumpster diving”, which is the MOST important?

TLS is the updated version of _____.

Your have been asked to assess the security of a network. The _______ stage of the assessment involves identifying weaknesses and attempting to defeat the security system.

The arrival of a Digital Signature along with a message gives what assurance to the recipient?

What protocol is commonly used with e-mail?

Secure Shell (SSH) uses both __ and port _ .