CompTIA CompTIA Mobility+ N10-005 Questions & Answers

• Question 121:

  Which of the following remote access types requires a certificate for connectivity?

  A. SSH

  B. PPP

  C. HTTPS

  D. WEP

  Correct Answer: A

  Secure Shell (SSH) is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services between two networked computers that connects, via a secure channel over an insecure network, a server and a client (running SSH server and SSH client programs, respectively)

• Question 122:

  Which of the following will BEST block a host from accessing the LAN on a network using static IP addresses?

  A. IP filtering

  B. Port filtering

  C. MAC address filtering

  D. DHCP lease

  Correct Answer: A

  IPFilter (commonly referred to as ipf) is an open source software package that provides firewall services and network address translation (NAT) for many UNIX-like operating systems. The author and software maintainer is Darren Reed. IPFilter supports both IPv4 and IPv6 protocols, and is a stateful firewall.

• Question 123:

  A corporate office recently had a security audit and the IT manager has decided to implement very strict security standards. The following requirements are now in place for each employee logging into the network:

  Biometric fingerprint scan Complex 12 character password 5 digit pin code authorization Randomized security question prompt upon login

  Which of the following security setups does this company employ?

  A. Single factor authentication

  B. Three factor authentication

  C. Two factor authentication

  D. Single sign-on

  Correct Answer: C

  According to proponents, two-factor authentication could drastically reduce the incidence of online identity theft, phishing expeditions, and other online fraud, because the victim's password would no longer be enough to give a thief access to their information.

• Question 124:

  Honeypots and honeynets are different in which of the following ways?

  A. Honeynets are managed collections of honeypots.

  B. Honeypots only test software security, not hardware.

  C. Honeynets require specialized hardware to implement.

  D. Honeypots are usually servers and honeynets are routers and switches.

  Correct Answer: A

  A honeynet is a network set up with intentional vulnerabilities; its purpose is to invite attack, so that an attacker's activities and methods can be studied and that information used to increase network security. A honeynet contains one or more honey pots, which are computer systems on the Internet expressly set up to attract and "trap" people who attempt to penetrate other people's computer systems.

• Question 125:

  A network administrator has been tasked to deploy a new WAP in the lobby where there is no power outlet. Which of the following options would allow the network administrator to ensure the WAP is deployed correctly?

  A. QoS

  B. Install 802.11n WAP

  C. PoE

  D. Parabolic antenna

  Correct Answer: C

  Power over Ethernet or PoE describes any of several standardized or ad-hoc systems which pass electrical power along with data on Ethernet cabling. This allows a single cable to provide both data connection and electrical power to devices such as wireless access points or IP cameras.

• Question 126:

  The network administrator has been tasked to create a network segment where resources can be placed for public web access. Which of the following should be implemented?

  A. DMZ

  B. Honeynet

  C. PAT

  D. Port security

  Correct Answer: A

  In computer security, a DMZ is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the Internet.

• Question 127:

  An administrator needs to open ports in the firewall to support both major FTP transfer modes. Which of the following default ports was MOST likely opened? (Select TWO)

  A. 20

  B. 21

  C. 22

  D. 23

  E. 25

  F. 53

  Correct Answer: AB

  FTP use both port 21 and 20 (port 21 for the command port and port 20 for the data).

• Question 128:

  Which of the following security methods is used to attract users attempting to gain unauthorized access to various systems within a single network?

  A. Network based IDS

  B. Firewall

  C. Network based IPS

  D. Honeynet

  Correct Answer: D

  A network-based intrusion prevention system (NIPS) is a system used to monitor a network as well as protect the confidentiality, integrity, and availability of a network. Its main functions include protecting the network from threats, such as denial of service (DoS) and unauthorized usage.

• Question 129:

  Which of the following does Kerberos use to authenticate?

  A. Tickets

  B. Servers

  C. Users

  D. Clients

  Correct Answer: A

  Kerberos keeps a database of its clients and their private keys. The private key is a large number known only to Kerberos and the client it belongs to. In the case that the client is a user, it is an encrypted password. Network services requiring

  authentication register with Kerberos, as do clients wishing to use those services.

  The private keys are negotiated at registration.

• Question 130:

  Which of the following does Kerberos provide?

  A. Non-repudiation

  B. Accounting

  C. Exchange

  D. Authentication

  Correct Answer: D

  Kerberos is a trusted third-party authentication service based on the model presented by Needham and Schroeder. It is trusted in the sense that each of its clients believes Kerberos' judgment as to the identity of each of its other clients to be accurate.