Set 1 CompTIA Security+ Practice Questions

1. Which of the following does relates to Biometricsy?

Finger print

Residential address

User password

User ID card

The Biometrics uses finger prints, retinal scan and some times the DNA structure too to establish user Id.

Explanation

The Biometrics uses finger prints, retinal scan and some times the DNA structure too to establish user Id.

2. Which of the following services when placed on the edge of the network, will provide security to the entire network?

Firewall

Router

Antivirus

None of the above

Router is a gateway and antivirus resides on all systems. Firewall is meant to safe guard the network from external attacks.

Explanation

Router is a gateway and antivirus resides on all systems. Firewall is meant to safe guard the network from external attacks.

3. Access Control list contains information relating to user to resource access mapping. T/F?

True

False

The information of mapping users to their permissions for resource access would be available in the ACL.

Explanation

The information of mapping users to their permissions for resource access would be available in the ACL.

4. Which of the following is the best way to ascertain unique identification of an employee?

Smart Card

Username/Password

Biometric

Credit Card

Biometric will authenticate or establish User ID depending on the physical attribute of the user. For ex: Finger print, hand scan or retina scan.

Explanation

Biometric will authenticate or establish User ID depending on the physical attribute of the user. For ex: Finger print, hand scan or retina scan.

5. Which of the following would provide security for Web site access?

Anonymous logon

Digital signature

Certificate

Token

Certificates are best used during WAN access. For ex: when using web sites that require you to provide confidential information about yourself, or when you are logging in to the Intranet, from an unknown location.

Explanation

Certificates are best used during WAN access. For ex: when using web sites that require you to provide confidential information about yourself, or when you are logging in to the Intranet, from an unknown location.

6. Which of the following is an example of the DoS?

A computer on your network has crashed

Your router is unable to find a destination outside of your network

Your Web server has gone into a loop trying to service a client request.

You keyboard is no longer responding.

DoS is a way of engaging a Web Server continuously in one specific task by outing it on a loop and ensuring it is unable to respond to any further requests.

Explanation

DoS is a way of engaging a Web Server continuously in one specific task by outing it on a loop and ensuring it is unable to respond to any further requests.

7. MAC allows dynamic sharing of resources. T/F?

True

False

MAC uses a static or predefined set of access privileges and hence cannot allow dynamic sharing of resources.

Explanation

MAC uses a static or predefined set of access privileges and hence cannot allow dynamic sharing of resources.

8. To allow access to a campus you would use smart card. T/F?

True

False

To allow access to a campus you would use smart cards.

Explanation

To allow access to a campus you would use smart cards.

9. Who is responsible for access control in the MAC model?

Mandatory Access Control

Discretionary Access Control

Role Based Access Control

Any of the above

System administrator is responsible for access control in the MAC model. The owner will be responsible for DAC. The RBAC is dependent on the role played by the user in the organization.

Explanation

System administrator is responsible for access control in the MAC model. The owner will be responsible for DAC. The RBAC is dependent on the role played by the user in the organization.

10. When debugging an Operating system, a programmer would make use of a back door door. T/F?

True

False

A programmer makes use of back doors in the program for the purpose of debugging or observing the performance of the program.

Explanation

A programmer makes use of back doors in the program for the purpose of debugging or observing the performance of the program.

11. To transfer mails between email servers and respective clients you would require POP3 service. T/F?

True

False

To transfer mails between email servers and their respective clients POP3 (Post Office Protocol Version 3) is used.

Explanation

To transfer mails between email servers and their respective clients POP3 (Post Office Protocol Version 3) is used.

12. Which of the following is a key component in the Kerberos system?

Key Distribution Center

Token

RAS server

Certificate Server

The Kerberos system requires a Key Distribution Center (KDC) which is responsible for authenticating any network user, Computer or Service. Depending on whether the authentication fails or succeeds the ticket will be granted to the end user, Computer or Service.

Explanation

The Kerberos system requires a Key Distribution Center (KDC) which is responsible for authenticating any network user, Computer or Service. Depending on whether the authentication fails or succeeds the ticket will be granted to the end user, Computer or Service.

13. Which of the following is a disadvantage when using a Wireless LAN?

Loss of signal strength

Eavesdropping

Blackout

EMI

Wireless LANs is dependent on frequency for transmission and reception. This makes the media very susceptible to overhearing or eavesdropping.

Explanation

Wireless LANs is dependent on frequency for transmission and reception. This makes the media very susceptible to overhearing or eavesdropping.

14. Which of the following is an advantage with clear text authentication?

Advantage is that it is easy to remember passwords

Advantage is that it is easy to implement

Advantage is it is free of errors

None of the above

Clear text authentication is very simple and easy to implement and verify. But a network that has implemented clear text security is not very secure as it is very easy to decipher clear text passwords.

Explanation

Clear text authentication is very simple and easy to implement and verify. But a network that has implemented clear text security is not very secure as it is very easy to decipher clear text passwords.

15. Which of the following use clear text password for authentication?

PAP

CHAP

Certificate

None of the above

PAP uses clear text and is a two-way handshake protocol.

Explanation

PAP uses clear text and is a two-way handshake protocol.

16. Which of the following is used to establish an error free IP-based network?

DNS

DHCP

RAS

None of the above

It is imperative that users be assigned IP addresses for the purpose of connecting to the company resources. This dynamic allocation will be possible only with the help of DHCP service.

Explanation

It is imperative that users be assigned IP addresses for the purpose of connecting to the company resources. This dynamic allocation will be possible only with the help of DHCP service.

17. A token is authentication protocol. T/F?

True

False

A token is generated when a user has been successfully authenticated. This token is attached to the users session and will be destroyed once the session is terminated or after the user has logged out. This token will contain user access permission assigned on the network resources for that user. Token is a system and not a protocol.

Explanation

A token is generated when a user has been successfully authenticated. This token is attached to the users session and will be destroyed once the session is terminated or after the user has logged out. This token will contain user access permission assigned on the network resources for that user. Token is a system and not a protocol.

18. RADIUS is a dial-up protocol. T/F?

True

False

RADIUS is a RAS authentication Service.

Explanation

RADIUS is a RAS authentication Service.

19. DDoS is a best way for testing Web server vulnerabilities. T/F?

True

False

DDoS (Distributed DoS) would test for more vulnerabilities on the server than the DoS would.

Explanation

DDoS (Distributed DoS) would test for more vulnerabilities on the server than the DoS would.

20. Which of the following services relates to acknowledgment-less data transfer?

ARP

FTP

TFTP

DHCP

TFTP (trivial File Transfer Protocol) uses UDP for data transfer and hence does not facilitate acknowledgements.

Explanation

TFTP (trivial File Transfer Protocol) uses UDP for data transfer and hence does not facilitate acknowledgements.