Question 1

John is in charge of setting up an infrastructure which includes flammable liquids. Which of the following Fire extinguisher types should he use in case of a fire emergency?

Accepted Answer

Type B is used on flammable liquids and the composition consists of fire-retardant chemicals.
Key takeaway: Class B fires involve flammable or combustible liquids such as gasoline, kerosene, grease, and oil. The numerical rating for class B extinguishers indicates the approximate number of square feet of fire it can extinguish.

Question 2

Eddie is discussing with his brother-in-law his company's trade secrets, healthcare information, programming code, and information that keeps the company competitive. What type of classification is being discussed?

Accepted Answer

An individual discussing a company's trade secrets, healthcare information, programming code, and information that keeps the company competitive is discussing confidential classifications. Confidential classification is for use within the company only. Data is exempt from disclosures under the Freedom of Information Act or other laws and regulations and unauthorized disclosures could seriously affect a company. This classification level is used by commercial businesses and the military.

Question 3

John wants to measure the network utilization factor of his network, that is, the ratio of current network traffic to the maximum traffic that a port can handle. Which of the following should he use?

Accepted Answer

Performance baseline provides a ratio of current network traffic to the maximum traffic the port can handle.
Key Takeaway: Performance baseline provides the input needed to design, implement, and support a secure network. This input plays a crucial role in predicting traffic patterns, performing load analysis, averting overload conditions, and expanding the network.

Question 4

Which of the following access control models uses a subject and object label?

Accepted Answer

The MAC access control model uses a subject and object label to grant/deny access.
Key Takeaway: The MAC access model uses a subject and object model. MAC uses labels to identify the level of sensitivity that applies to objects. When a user attempts to access an object, the label is examined to see if the access should take place or be denied. One key element to remember is that when mandatory control is applied, labels are required and must exist for every object.

Question 5

What are mandatory activities, actions, or rules?

Accepted Answer

Standards are mandatory activities, actions, or rules. Standards can give a policy its support and reinforcement in direction. Standards can be internal or can be externally mandated by government laws and regulations. Organizational security standards may specify how hardware and software products are to be used. They can also be used to indicate expected user behavior. They provide a means to ensure that specific technologies, applications, parameters, and procedures are implemented in a uniform manner across the organization.

Question 6

David is a Security Administrator at his organization. He is trying to prevent unauthorized access of the corporate wireless network by people passing by. What kind of wireless network threat is he trying to curb?

Accepted Answer

War driving refers to driving around town with a laptop looking for WAPs that can be communicated with. The network card on the laptop is set to promiscuous mode and it looks for signals coming from anywhere. After intruders gain access, they may steal Internet access or start damaging your data.
Key Takeaway: Many war drivers use GPS devices to measure the location of the network and log it on a website to form maps of the network neighborhood. War driving was invented by Peter Shipley and is now commonly practiced by hobbyists, hackers and security analysts worldwide.

Question 7

John is a Network Security Administrator at his organization. The company plans to establish secure connections between the company's headquarters and branch offices. Which of the following protocols should be used to configure the router?

Accepted Answer

Tunnel mode is used to create Virtual Private Networks for network-to-network communications between routers to link sites.
Key Takeaway: IPSec is a protocol suite for securing Internet Protocol communications by authenticating and encrypting each IP packet of a data stream. It is a dual mode, end-to-end, security scheme operating at the OSI model Layer 3. In tunnel mode of the IPSec protocol, the entire IP packet is encrypted and/or authenticated. It is then encapsulated into a new IP packet with a new IP header. It is used to create VPN for network-to-network, host-to-network, and host-to-host communications.

Question 8

Ryan is inserting data inside of an ICMP packet to communicate to an already comprised system. What is Ryan doing?

Accepted Answer

When someone is inserting data inside of an ICMP packet to communicate to an already comprised system, they are committing a Loki attack. The ICMP protocol was developed to send status messages, not to hold or transmit user data. However, inserting data inside of an ICMP packet can be used to communicate to an already compromise systems. Loki is actually a client/server program used by hackers to set up backdoor systems. The attacker targets a computer and installs the server portion of the Loki software. The server portion "listens" on a port, which is the backdoor, and the attacker can use it to access the system.

Question 9

Which method(s) of risk analysis have both pros and cons attached?

Accepted Answer

The approaches to risk analysis that have both pros and cons attached are quantitative and qualitative. Quantitative risk analysis attempts to assign real and meaningful numbers to all elements of the risk analysis process. These elements may include safeguard costs, asset value, business impact, frequency, safeguard effectiveness, and exploit possibilities. A major advantage to this method is that it applies actual numbers to elements of risk, while the major con is that it fails to quantify qualitative items that produce uncertainties in qualitative values.
Qualitative risk analysis does not assign numbers and monetary values. Instead, this method focuses on potential scenarios and ranking of threats and the possible countermeasures, based on opinions. The pro to this method is that it provides scenarios that may possibly be encountered, while the con is that there is not monetary value on elements.

Question 10

What is the imaginary boundary that divides the trusted from the un-trusted components?

Accepted Answer

A security perimeter is an imaginary boundary that divides the trusted from the un-trusted components. For a system to stay in a secure and trusted state, precise communication standards must be developed to ensure that when a component with in the TCB needs to communicate with a component outside the TCB, the communication cannot expose the system to unexpected security compromise. This type of communication is handled and controlled through interfaces.

Question 11

Volmetric intrusion detection systems are photoelectric, acoustical-seismic, ultrasonic, and microwave. Which can only be used in windowless rooms?

Accepted Answer

Photoelectric intrusion detection systems can only be used in windowless rooms. This is due to this system detecting changes in a light beam. These system works like photoelectric smoke detectors, which emit a beam that hits the receiver. If the beam of light is interrupted, an alarm sounds. The beams emitted by the photoelectric cell can be cross-sectional and can be invisible or visible beam. Cross-sectional means that one area can have different light beams extending across it, which is usually carried out by using hidden mirrors to bounce the beam from one place to another until it hits the light receiver.

Question 12

Sam was in a building that caught on fire where the fire suppression method is bad for many types of life. What type of method was being used?

Accepted Answer

The method that is bad for many types of life is CO2. Co2 is good for putting out fires, but bad for many types of life forms. If an organization uses CO2, the suppression-releasing device should have a delay mechanism within it that makes sure the agent does not start applying CO2 to the area until after an audible alarm has sounded and people have been given time to evacuate. CO2 is a colorless, odorless substance that is potentially lethal because it removes oxygen from the air. Gas masks do not provide protection against CO2; therefore, it is best used in unattended facilities and areas.

Question 13

It is law for there to be fire sprinkler or suppression systems in buildings. Which type of fire sprinkler has pipes that hold pressurized air in the pipes and does not release until an actual fire is detected?

Accepted Answer

Dry pipe systems are fire sprinklers that have pipes that hold pressurized air and do not release until an actual fire is detected. In a dry pipe system, the water is not held in the pipes, but in a "holding tank" until it is released. The pipes hold pressurized air, which is reduced when a fire or smoke alarm is activated, allowing the water valve to be opened by the water pressure. Water is not allowed into the pipes that feed the sprinklers until an actual fire is detected. First, a heat or smoke sensor is activated; then, the water fills the pipes leading to the sprinkler heads. Once the alarm sounds and electric power is disconnected, water flows from the sprinklers. In cold climates, these pipes are best because they do not freeze.

Question 14

Which of the following authentication methods sends an encrypted challenge to the client and then sends it back to the server?

Accepted Answer

Challenge Handshake Authentication Protocol (CHAP) sends a challenge to the originating client.
Key Takeaway: CHAP is an authentication scheme used by Point-to-Point Protocol servers to validate the identity of remote clients. CHAP periodically verifies the identity of the client by using a three-way handshake. CHAP sends a challenge to the originating client. This happens at the time of establishing the initial link and may happen again at any time afterwards. This challenge is sent back to the server and the encryption results are compared. If the challenge is successful, the client is logged on. Kerberos authentication uses a Key Distribution Center (KDC) to carry out the process. PAP offers no security at all.

Question 15

Channels allow for communication to travel from one computer to another. What channel type divides communication channels into individual and independent channels?

Accepted Answer

Broadband divides communication channels into individual and independent channels so different types of data can be transmitted simultaneously. Baseband permits only one signal to be transmitted at a time, whereas broadband carries several signals over different channels. Broadband encompasses many different technologies, but one general rule is that it provides data transmission higher than 56 Kbps, which is what a standard modem dial-up connection line provides. Broadband communications provide channels for data transmission and can be used by many users.

Question 16

A customer complains that their touch screen is working but the response is inaccurate. Which common resolution should be performed to help troubleshoot the problem?

Accepted Answer

One common resolution for inaccurate touch screen response is device recalibration. The device has a feature ready to be used for this task.
You don't need to replace the screen nor reinstall the graphics drivers. Backlight failure is one cause for a dim display.

Question 17

A user has an old tablet that uses NiMH battery. The battery was working fine until lately, where it drains quicker even with minimal usage. The user explains that there are times when they performed partial recharges. You advised the user to replace the battery. Of the following, which term best describes this power drain issue?

Accepted Answer

Memory effect or battery effect is an effect on NiMH/NiCd batteries wherein they develop memory after multiple partial recharges. This issue makes the battery lose their maximum energy capacity (the battery "remembers" the smaller capacity).
Aging effect is an issue with Li-on batteries, but they don't have memory effect issues.

Question 18

A customer finds that their phone's touch screen is not responsive. Which of the following could be the reason?

Accepted Answer

The Digitizer is a component on the device that takes the analog input (say, user's fingers or stylus pen) and converts the input signal into a digital format.
Backlight Failure is one reason for dim screen display on a mobile device. Stuck keys and degraded battery are not failures that concern unresponsive touch screen.

Question 19

A customer complains that their mobile device screen is very dim. As the technician, which course of action should you do first?

Accepted Answer

As an A+ technician, you should check the obvious first (software in this case). Check if the screen brightness setting is turned down.
If it is a hardware problem, then check/replace the backlight, the screen, or advise the customer to file a warranty claim, if it is eligible.

Question 20

You just purchased a mobile device. You want to synchronize your photos and music to your desktop computer running Windows 7. However, after plugging in the USB cable, you received an error stating that the device driver was not successfully installed. Which Windows system tools should you use to troubleshoot the error?

Accepted Answer

You should use Device Manager to troubleshoot the error. Using this tool, you can disable, install, update, or rollback device drivers.
Regedit is used to view/change system settings configured in the system registry. Services.msc is used to verify/start or modify the startup behavior of windows or app services. Dxdiag is used to view the detailed information about the DirectX components and drivers installed on your windows machine. You can use Command Prompt to run all these tools, but it is commonly used to perform tasks on your windows machine without using a graphical interface.

Quiz 14: Comptia Asp