Question 1

An organization's employees currently use three different sets of credentials to access multiple internal resources. Management wants to make this process less complex. Which of the following would be the BEST option to meet this goal?

Accepted Answer

Single sign-on (SSO) allows users to access multiple resources with one set of credentials, simplifying the login process and reducing complexity.

Question 2

Which of the following types of penetration test will allow the tester to have access only to password hashes prior to the penetration test?

Accepted Answer

In a gray box penetration test, the tester has partial knowledge of the system, which can include access to password hashes, unlike black box (no prior knowledge) or white box (full knowledge).

Question 3

A security analyst is reviewing patches on servers. One of the servers is reporting the following error message in the WSUS management console: The computer has not reported status in 30 days. Given this scenario, which of the following statements BEST represents the issue with the output above?

Accepted Answer

The error message indicates that the server has not reported its update status in 30 days, which suggests it has not pulled the latest application software updates from the WSUS server.

Question 4

A technician is investigating a potentially compromised device with the following symptoms: Browser slowness Frequent browser crashes Hourglass stuck New search toolbar Increased memory consumption Which of the following types of malware has infected the system?

Accepted Answer

Adware is known for causing browser slowness, crashes, and adding unwanted toolbars, which matches the symptoms described.

Question 5

A company has two wireless networks utilizing captive portals. Some employees report getting a trust error in their browsers when connecting to one of the networks. Both captive portals are using the same server certificate for authentication, but the analyst notices the following differences between the two certificate details: Certificate 1 Certificate Path: Geotrust Global CA *company.com Certificate 2 Which of the following would resolve the problem?

Accepted Answer

Using certificate chaining would resolve the problem by ensuring that the certificate path is complete and trusted, which would prevent trust errors in the browser.

Question 6

A security administrator is trying to eradicate a worm, which is spreading throughout the organization, using an old remote vulnerability in the SMB protocol. The worm uses Nmap to identify target hosts within the company. The administrator wants to implement a solution that will eradicate the current worm and any future attacks that may be using zero-day vulnerabilities. Which of the following would BEST meet the requirements when implemented?

Accepted Answer

A network-based intrusion prevention system (NIPS) can detect and block malicious activities, including worms exploiting vulnerabilities, in real-time across the network, providing protection against both known and zero-day threats.

Question 7

Joe, a user, has been trying to send Ann, a different user, an encrypted document via email. Ann has not received the attachment but is able to receive the header information. Which of the following is MOST likely preventing Ann from receiving the encrypted file?

Accepted Answer

The answer of Joe, a user, has been trying to...

Question 8

A malicious system continuously sends an extremely large number of SYN packets to a server. Which of the following BEST describes the resulting effect?

Accepted Answer

The attack described is a SYN flood attack, which leads to the server's memory being exhausted by maintaining numerous half-open connections, as it waits for the final ACK packet to complete the TCP handshake.

Question 9

When attempting to secure a mobile workstation, which of the following authentication technologies rely on the user's physical characteristics? (Choose two.)

Accepted Answer

Retina scans and fingerprint scans rely on the user's physical characteristics for authentication.

Question 10

A penetration tester has written an application that performs a bit-by-bit XOR 0xFF operation on binaries prior to transmission over untrusted media. Which of the following BEST describes the action performed by this type of application?

Accepted Answer

The application is performing obfuscation by altering the binary data with a simple XOR operation, making it less readable but not securely encrypted.

Question 11

Systems administrator and key support staff come together to simulate a hypothetical interruption of service. The team updates the disaster recovery processes and documentation after meeting. Which of the following describes the team's efforts?

Accepted Answer

The team's efforts describe a "Tabletop exercise," which involves discussing and simulating a hypothetical scenario to evaluate and improve disaster recovery processes and documentation.

Question 12

Which of the following is a deployment concept that can be used to ensure only the required OS access is exposed to software applications?

Accepted Answer

Sandboxing is a deployment concept that isolates applications to control their access to the operating system, ensuring only necessary permissions are granted.

Question 13

Which of the following threats has sufficient knowledge to cause the MOST danger to an organization?

Accepted Answer

Insiders have the most knowledge about an organization's systems, processes, and vulnerabilities, making them capable of causing significant harm.

Question 14

Ann, a user, reports she is unable to access an application from her desktop. A security analyst verifies Ann's access and checks the SIEM for any errors. The security analyst reviews the log file from Ann's system and notices the following output:  Which of the following is MOST likely preventing Ann from accessing the application from the desktop?

Accepted Answer

The answer of Ann, a user, reports she is unable...

Question 15

Company A has acquired Company B. Company A has different domains spread globally, and typically migrates its acquisitions infrastructure under its own domain infrastructure. Company B, however, cannot be merged into Company A's domain infrastructure. Which of the following methods would allow the two companies to access one another's resources?

Accepted Answer

Federation allows different organizations to share resources and access each other's systems while maintaining their own domain infrastructures.

Question 16

A new security administrator ran a vulnerability scanner for the first time and caused a system outage. Which of the following types of scans MOST likely caused the outage?

Accepted Answer

An intrusive non-credentialed scan is more likely to cause a system outage because it aggressively tests the system without using credentials, potentially exploiting vulnerabilities in a way that disrupts services.

Question 17

A Chief Information Officer (CIO) has decided it is not cost effective to implement safeguards against a known vulnerability. Which of the following risk responses does this BEST describe?

Accepted Answer

Acceptance is when an organization decides to acknowledge a risk and not take any action to mitigate it, often because the cost of mitigation is higher than the potential impact of the risk.

Question 18

An analyst is using a vulnerability scanner to look for common security misconfigurations on devices. Which of the following might be identified by the scanner? (Choose two.)

Accepted Answer

The answer of An analyst is using a vulnerability scanner...

Question 19

A security analyst is hardening a WiFi infrastructure. The primary requirements are the following: The infrastructure must allow staff to authenticate using the most secure method. The infrastructure must allow guests to use an "open" WiFi network that logs valid email addresses before granting access to the Internet. Given these requirements, which of the following statements BEST represents what the analyst should recommend and configure?

Accepted Answer

WPA2 Enterprise provides the most secure authentication method for staff, while a captive portal can log guest email addresses before granting internet access.

Question 20

A security administrator is reviewing the following PowerShell script referenced in the Task Scheduler on a database server:  Which of the following did the security administrator discover?

Accepted Answer

The answer of A security administrator is reviewing the following...

Exam 15: CompTIA Security+