Key benefits of security+ sy0 401

New Questions 13

After installing a new Linux system the administrator runs a command that records the size, permissions, and MD5 sum of all the files on the system. Which of the following describes what the administrator is doing?

A. Identifying vulnerabilities

B. Design review

C. Host software baselining

D. Operating system hardening

New Questions 14

A security administrator is troubleshooting an authentication issues using a network sniffer. The security administrator reviews a packet capture of the authentication process and notices that authentication is performed using extensible markup over SOAP. Which of the following authentication services is the security administrator troubleshooting?

A. SAML

B. XTACACS

C. Secure LDAP

D. RADIUS

New Questions 15

The administrator installs database software to encrypt each field as it is written to disk. Which of the following describes the encrypted data?

A. In-transit

B. In-use

C. Embedded

D. At-rest

New Questions 16

Ann, a technician, wants to implement a single protocol on a remote server which will enable her to encrypt and proxy all of her traffic though the remote server via SOCKS5. Which of the following should Ann enable to support both encryption and proxy services?

A. SSH

B. IPSEC

C. TLS

D. HTTPS

New Questions 17

A bank is planning to implement a third factor to protect customer ATM transactions. Which of the following could the bank implement?

A. SMS

B. Fingerprint

C. Chip and Pin

D. OTP

New Questions 18

A video surveillance audit recently uncovered that an employee plugged in a personal laptop and used the corporate network to browse inappropriate and potentially malicious websites after office hours. Which of the following could BEST prevent a situation like this form occurring again?

A. Intrusion detection

B. Content filtering

C. Port security

D. Vulnerability scanning

New Questions 19

A network technician at a company, Joe is working on a network device. He creates a rule to prevent users from connecting to a toy website during the holiday shopping season. This website is blacklisted and is known to have SQL injections and malware. Which of the following has been implemented?

A. Mandatory access

B. Network separation

C. Firewall rules

D. Implicit Deny

New Questions 20

Joe a system architect wants to implement appropriate solutions to secure the companyu2021s distributed database. Which of the following concepts should be considered to help ensure data security? (Select TWO)

A. Data at rest

B. Data in use

C. Replication

D. Wiping

E. Retention

F. Cloud Storage

New Questions 21

An attacker discovers a new vulnerability in an enterprise application. The attacker takes advantage of the vulnerability by developing new malware. After installing the malware the attacker is provided with access to the infected machine. Which of the following is being described?

A. Zero-day exploit

B. Remote code execution

C. Session hijacking

D. Command injection

New Questions 22

Which of the following is the proper way to quantify the total monetary damage resulting from an exploited vulnerability?

A. Calculate the ALE

B. Calculate the ARO

C. Calculate the MTBF

D. Calculate the TCO