Skip to content

Home
About
Contact Us

youtube
twitter
instagram
linkedin
facebook
discord

220-1101 A+
220-1102 A+
N10-008 Network+
N10-009 Network+
SY0-701 Security+
Events
Members
Vouchers

Search for:

CompTIA SY0-401 Security Pop Quiz Online – Quiz #1

← Back to the Pop Quiz Online index

Click here to see how you can own all of my Security+ notes
with my 36-page downloadable PDF Course Notes.

Step 1 of 20

What is the critical vulnerability associated with WPS?
- Limited passphrase length
- Limited number of initialization vector (IV) values
- Man-in-the-middle
- Cryptographic vulnerability
- Denial of Service

What is the most significant difference between Telnet and SSH?
- Telnet uses TCP, SSH uses UDP
- SSH provides additional emulation options
- SSH provides additional security
- Telnet is supported on more operating systems

Which of these would be a false negative?
- Malware infected a computer without any warning or notification
- An anti-virus application turns itself off every day at the same time
- A known-bad web site is blocked in a URL filter
- An internal monthly financial spreadsheet file transfer is flagged as a virus

Which of these enables your browser to “trust" a particular web site?
- Cookies
- Browser cache
- Certificate authority
- Encryption key
- Executable permissions

Which of these best describes an exception that's created by sending random input to an application?
- Buffer overflow
- Database injection
- Application patch management
- Fuzzing
- Server-side validation

Which of these would be the best way of validating and restricting user input to an application?
- IPS
- IDS
- Load balancer
- Packet filter
- WAF

Which of these would restrict mobile device camera use in the office but allow it outside of the building?
- MDM policies
- TLS
- MD5 Hashes
- Key escrow
- Geo-fencing

Which of these data storage systems is most volatile?
- ARP cache
- Network topology
- Temporary file system
- Archival media
- Remote monitoring data

Which of these would be the best example of obtaining data in use?
- Retrieving credit card numbers from memory
- Retrieving files from a stored disk image
- Copying a SQL database from one drive to another
- Capturing data inside of Ethernet frames
- Upgrading an operating system across the network

Which of these authentication methods would you most commonly find in a Windows Active Directory environment?
- RADIUS
- LDAP
- TACACS+
- Kerberos
- TACACS

Which of these would be the best way to identify and stop a SYN flood?
- Personal Firewall
- WAF
- IDS
- URL filter
- IPS

What kind of training assessment is determined through the use of a single, final exam?
- Formative
- Sequential
- Assertive
- Comprehensive
- Summative

In which of these cases would you use a HSM?
- Real-time network traffic virus scanning
- Web server input validation
- Long-term storage of raw network traffic
- Identify and alert on DDoS attacks
- Secure encryption key backup

Which of these would be an example of non-repudiation?
- Digital signature
- Implement a TACACS+ server
- Analyze and visualize big data
- SSL encryption
- Multi-factor authentication

Which of these best describes 3DES?
- Used in WPA2
- Three times more complex than DES
- Has been replaced due to a cryptographic vulnerability
- A FIPS-compliant standard

Which of these would you not expect to find in an X.509 certificate?
- Algorithm used in the certificate digital signature
- Public key
- Name of the issuing certificate authority
- Private key
- Serial number

Which of these would be the best way to correct a buffer overflow vulnerability?
- Update anti-virus signatures
- Use VPNs to connect remote sites
- Correct the bug in the application
- Move servers to a DMZ
- Create an IPS signature

Which of these would best describe an authentication factor that changes based on the time of day?
- HOTP
- GPS
- PIN
- TOTP
- Pattern series

What kind of malware can be invisible to the operating system?
- Worm
- Trojan
- Polymorphic
- Spyware
- Botnet
- Rootkit

Which of these would be the best example of a web-of-trust?
- Trust is determined by a single certificate authority
- Encryption between a browser and web server
- You cannot connect to the network until successful authentication
- Each user builds a trust relationship with other users
- Each user is provided a digital certificate on a smart card

← Back to the Pop Quiz Online index

Categories

Categories

220-1101 A+
220-1102 A+
N10-008 Network+
N10-009 Network+
SY0-701 Security+
Events
Members
Vouchers

Recent Posts

Professor Messer’s N10-009 Network+ Study Group – December 2024
Today’s N10-009 CompTIA Network+ Pop Quiz: It’s up there
Today’s 220-1102 CompTIA A+ Pop Quiz: Pick A or B
Today’s 220-1101 CompTIA A+ Pop Quiz: Heat up the oatmeal
Professor Messer’s CompTIA 220-1102 A+ Study Group – December 2024

Site Information

Contact Us
About Messer Studios
Privacy Policy
Terms of Service

Copyright © 2024 Messer Studios LLC. All rights reserved.

"Professor Messer" and the Professor Messer logo are registered trademarks of Messer Studios, LLC.