Security+ Practice Quiz: SY0-601 Quiz 14

1. Which kind of malware provides an attacker with administrative control over a target computer through a backdoor?

• Potentially Unwanted Program (PUP)
• Trojan horse
• Remote Access Trojan (RAT)
• Crypto-malware

2. Social engineers are master manipulators. Which of the following are tactics they might use?

• Moral obligation, ignorance, and threatening
• Shoulder surfing, eavesdropping, and keylogging
• Eavesdropping, ignorance, and threatening
• Keylogging, shoulder surfing, and moral obligation

3. Which VPN tunnel style routes only certain types of traffic?

• Host-to-host
• Site-to-site
• Full
• Split

4. Which IPSec subprotocol provides data encryption?

• AES
• SSL
• AH
• ESP

5. Which EAP implementation is MOST secure?

• EAP-FAST
• EAP-TLS
• LEAP
• EAP-MD5

6. Which of the following do switches and wireless access points use to control access through a device?

• IP address filtering
• Session filtering
• Port number filtering
• MAC address filtering

7. Which of the following devices is capable of detecting and responding to security threats?

• Multi-layer switch
• IPS
• DNS server
• IDS

8. Which IDS method searches for intrusion or attack attempts by recognizing patterns or identifying entities listed in a database?

• Signature-based IDS
• Anomaly-analysis-based IDS
• Stateful-inspection-based IDS
• Heuristics-based IDS

9. Which of the following is defined as a contract that prescribes the technical support or business parameters a provider bestows to its client?

• Mutual aid agreement
• Final audit report
• Certificate practice statement
• Service level agreement

10. What is a service level agreement (SLA)?

• An agreement to support another company in the event of a disaster
• A contract with an ISP for a specific level of bandwidth
• A contract with a legal entity to limit your asset-loss liability
• A guarantee of a specific level of service