SY0-401 CompTIA Security+ Certification Practice Exam - 05

Sample Questions:

A security administrator needs to implement a system that detects possible intrusions based upon a vendor provided list. Which of the following BEST describes this type of IDS?

Signature based

Heuristic

Anomaly-based

Behavior-based

The chief Security Officer (CSO) has reported a rise in data loss but no break ins have occurred. By doing which of the following is the CSO most likely to reduce the number of incidents?

Implement protected distribution

Empty additional firewalls

Conduct security awareness training

Install perimeter barricades

During a data breach cleanup it is discovered that not all of the sites involved have the necessary data wiping tools. The necessary tools are quickly distributed to the required technicians, but when should this problem BEST be revisited?

Reporting

Preparation

Mitigation

Lessons

Learned

New magnetic locks were ordered for an entire building. In accordance with company policy, employee safety is the top priority. In case of a fire where electricity is cut, which of the following should be taken into consideration when installing the new locks?

Fail safe

Fault tolerance

Fail secure

Redundancy

A security administrator is trying to encrypt communication. For which of the following reasons should administrator take advantage of the Subject Alternative Name (SAM) attribute of a certificate?

It can protect multiple domains

It provides extended site validation

It does not require a trusted certificate authority

It protects unlimited subdomains

After a merger between two companies a security analyst has been asked to ensure that the organization's systems are secured against infiltration by any former employees that were terminated during the transition. Which of the following actions are MOST appropriate to harden applications against infiltration by former employees? (Choose two.)

Monitor VPN client access

Reduce failed login out settings

Develop and implement updated access control policies

Review and address invalid login attempts

Increase password complexity requirements