Home
About
Contact Us

Core 1 A+ Training
Core 2 A+ Training
Network+ Training
Security+ Training
Calendar
Members

CompTIA SY0-501 Security+ Take Ten Challenge #2

April 13, 2020

Step 1 of 10

10%

2-1: Which of the following would best describe data in-use?
- A switch forwards a frame to a router
- Encrypted data is stored in a SQL database
- A laptop drive is configured for whole disk encryption
- A point of sale terminal encrypts a credit card number
- Customer information is transmitted across an IPsec tunnel

2-2: An attacker has determined that they can intentionally overwrite an area of memory to perform an exploit. Which of these would best describe this exploitation method?
- Buffer overflow
- Data injection
- Man in the middle
- Driver manipulation
- Cross-site request forgery

2-3: A security administrator would like to limit internal users from directly communicating to external web sites. Which of these security technologies would be the best choice for this objective?
- Firewall
- Proxy
- VPN concentrator
- IPS
- Load balancer

2-4: Which of these best describes TPM functionality?
- EMI prevention
- Reverse proxy
- Application blacklisting
- EAL4
- Hardware root of trust

2-5: Which of the following would be a disadvantage to using PAP during authentication?
- The credentials are passed in the clear
- The passwords are stored as a salted hash
- Only operates over dial-up lines
- Must be used with a third-party trust
- The password hash is easy to brute force

2-6: Which data label would be most associated with patient records from a medical doctor?
- PHI
- NDA
- PII
- DSS
- PCI

2-7: Which of the following would NOT commonly be associated with a server's certificate chain?
- Server certificate
- Private key
- Intermediate certificates
- Root CA certificate
- Root CA certificate hash

2-8: An attacker has infected a government healthcare reporting web site with malware in an effort to gain access to a hospital network. When the hospital visits the government site, the malware will attempt to infect the hospital computer. Which of the following would best describe this attack type?
- Hoax
- Man-in-the-middle
- Watering hole
- Cross-site request forgery
- Data injection

2-9: During a scheduled event, a security administrator was able to exploit a known vulnerability on a server to gain root access. Which of the following would best describe this event?
- Vulnerability scan
- Penetration test
- Man-in-the-middle
- DoS
- Spoofing

2-10: A security administrator needs to create a report each day that shows the number of invalid login attempts across all of their servers. Which of these would be the best way to provide this information?
- NAC
- Firewall
- DLP
- Proxy
- SIEM

Take Ten Challenge #2 companion video with detailed answers:

Category: SY0-501 Take Ten Challenges

Comments are closed.

« CompTIA SY0-501 Security+ Take Ten Challenge #1

CompTIA SY0-501 Security+ Take Ten Challenge #3 »

Categories

Free CompTIA A+ Training
Free CompTIA Network+ Training
Free CompTIA Security+ Training
- CompTIA Security+ SY0-501
- Security+ Study Group Archive
Professor Messer After Class

Recent Posts

Today’s SY0-501 Security+ Pop Quiz: What’s that noise?
Today’s Core 1 CompTIA A+ Pop Quiz: It’s all in this cardboard box
How to Install dig in Windows 10
Today’s Core 2 CompTIA A+ Pop Quiz: This job is tiring
Today’s N10-007 Network+ Pop Quiz: I knew I forgot something

Site Information

Contact Us
About Messer Studios
Privacy Policy
Terms of Service

Connect

© 2020 Messer Studios, LLC. All rights reserved.
"Professor Messer" and the Professor Messer logo are registered trademarks of Messer Studios, LLC.

X