CompTIA SY0-501 CompTIA Security+ Exam Practice Test Questions

• Question 1

  Which of the following represents a multifactor authentication system?

  • An iris scanner coupled with a palm print reader and fingerprint scanner with liveness detection.
  • A secret passcode that prompts the user to enter a secret key if entered correctly.
  • A digital certificate on a physical token that is unlocked with a secret passcode.
  • A one-time password token combined with a proximity badge.

  Show Answer Answer: D Next

• Question 2

  An organization has hired a security analyst to perform a penetration test. The analyst captures 1GB worth of inbound network traffic to the server and transfers the pcap back to the machine for analysis. Which of the following tools should the analyst use to future review the pcap?

  • Nmap
  • cURL
  • Netcat
  • Wireshark

  Show Answer Answer: D Next

• Question 3

  Which of the following Is a resiliency strategy that allows a system to automatically adapt to workload changes?

  • Fault tolerance
  • Redundancy
  • Elasticity
  • High availability

  Show Answer Answer: C Next

• Question 4

  Employees receive a benefits enrollment email from the company's human resources department at the beginning of each year. Several users have reported receiving the email but are unable to log in to the website with their usernames and passwords. Users who enter the URL for the human resources website can log in without issue. Which of the following security issues is occurring?

  • Several users' computers were not configured to use HTTPS to access the website
  • The human resources servers received a large number of requests, resulting in a DoS
  • The internal DNS server was compromised, directing users to a hacker's server
  • Users received a social engineering email and were directed to an external website

  Show Answer Answer: D Next

• Question 5

  Which of the following is a risk that is specifically associated with hosting applications in the public cloud?

  • Unsecured root accounts
  • Zero-day
  • Shared tenancy
  • Insider threat Insider Threat An attack from inside your organization may seem unlikely, but theinsider threat does exist. Employeescan use their authorized access to an organization's cloud-based services to misuse or access information such as customer accounts, financial forms, and other sensitive information. Additionally, these insiders don't even need to have malicious intentions. A study by Imperva, ''Inside Track on Insider Threats'' found that an insider threat was the misuse of information through malicious intent, accidents or malware. The study also examined four best practices companies could follow to implement a secure strategy, such as business partnerships, prioritizing initiatives, controling access, and implementing technology.

  Show Answer Answer: D Next