CompTIA Security+; 215-264

Which of the following can a security adin implement to help identify smurf attacks

Which Provide the HIGHEST level of wireless network security

Which wireless security controls can be easily and quickly circumvented using only a network sniffer

Which should be considered when trying to prevent somebody from capturing network traffic

Which BEST describes the use of hiding data within other files

A security admin is tasked with ensuring that all servers are highly available and that hards drive failure will not affect an individual servers. Which configurations will allow for high availability

While browsing the internet, and admin notices their browser behaves erratically, appears to download something, and then crashes. Upon restarting the PC, the admin notices performance is extremely slow and there are hundreds of outbound connections to various websites. Which BEST describes what has occurred?

Which of the following authentication services would be used to authenticate users trying to access a network device
SSH
SNMPv3
TCACS+
TELNET

In order to ensure high availability of all critical servers, backups of the main datacenter are done in the middle of the night and then the backup tapes are taken to an offsite location. Which of the following would ensure the minimal amount of downtime in the case of a disaster

Which of the following is a removable device that may be used to encrypt in a high availability clustered environment

Which of the following secruity threats does shredding mitigate

Bsed on logs from file servers, remote access systems, and IDS a malicious insider was stealing data using a personal laptop while connected by VPN. The affected compnay wants access to the laptop to determine loss, but the insider's lawyer insists the laptop cannot be identified. Which of the following would BEST be used to identify the specific computer used by the insider

The detection of a NOOP sled is an indication of which of the following attacks

Which of the following MUST a programmer implement to prevent cross-site scripting?

Which of the following would be considered multifactor authentication

Isolation mode on an AP provides which of the following functionality types

Which is the MOST likely cause of a single computer communicating with an unknown IRC server and scanning other systems on the network

When granting access, which of the following protocols uses multiple-challenge responses for authentication, authorization and audit
TACACS
TACACS+
LDAP
RADIUS

Which of the following is the BEST choice for encryption on a wireless network?

A bulk update process failes and writes incorrect data throughout the database which of the following concepts describes what has been compromised

Which of the following uses tickets to identify users to the network?

Which of the follwoing would be the BEST action to perform when conducting a corporate vulnerability assessment

Which of the following BEST describes the proper method and reason to implement port security

A technician needs to limit the wireless signal from reaching outside of a building. Which of the following actions should the technician take

The BEST way to protect the confidentiality of sensitive data entered in a database table is to use:

Which of the following is seen as non-secure based on tis ability to only store seven uppercase characters of data making it susceptible to brute force attacks

Which of the following is the MOST secure method of utilizing FTP

Which of the following devices BEST allows a security administrator to identify malicious activity after it has occurred?

Which of the following is specific to a buffer overflow attack

Which of the following malware types is MOST commonly installed through the use of thumb drives to compromise systems and provide unauthorized access

Which of the following allows a security administrator to set device traps?

NTLM is an improved and substantially backwards compatible replacement for which of the following

Which of the following assists in identifying if a system was properly handles during transport

Which of the following should be reviewed periodically to ensure a server maintains the correct security configuration?

A proximity card reader is used to test which of the following aspects of human authentication

Public keys are used for which of the following

Which of the following cloud computing concepts is BEST described as providing an easy-to-configure OS and on-demand computing for customers

Which of the following is an example of verifying new software changes on a test system

Which of the following describes the purpose of chain of custody as applied to forensic image retention?

A security administrator working for a health insurance company needs to protect customer data by installing an HVAC system and a mantrap in the datacenter. Whick of the following are being addressed

Which of the follwoing devices would allow a technician to view IP headers ona data packet

A company that purchases insurance to reduce risk is an example of which of the following

Which of the following is a management control type?

Which of the following is an example of allowing another user physical access to a secured area with out validation of their credentials

A security adminstrator performs several war driving routes each month and recently has noticed a certain area with a large number of unauthorized devices. Which of the following attack types is MOST likely occurring

Applying detailed instructions to manage the flow of network traffic at the edge of the network, including allowing or denying trafic ased on port, protocol, address, or dierction is an implementation of which of the following

Which of the following requires special handling and explicit policies for data retention and data distribution

Which of the following protocols only encrypts password packets from client to server

XTACACS
TACACS
RADIUS
TCACS+

Which of the following protocols requires the use of a CA based authentication process

FTPS Implicit
FTPS explicit
MD5
PEAP-TLS

If a user wishes to receive a file encrypted with PGP, the user must FIRST supply the