CompTIA CompTIA Security+ RC0-501 Questions & Answers

• Question 151:

  Which of the following attack types is being carried out where a target is being sent unsolicited messages via Bluetooth?

  A. War chalking

  B. Bluejacking

  C. Bluesnarfing

  D. Rogue tethering

  Correct Answer: B

  Bluejacking is the sending of unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs or laptop computers, sending a vCard which typically contains a message in the name field (i.e., for bluedating or bluechat) to another Bluetooth-enabled device via the OBEX protocol.

• Question 152:

  A security technician would like to obscure sensitive data within a file so that it can be transferred without causing suspicion. Which of the following technologies would BEST be suited to accomplish this?

  A. Transport Encryption

  B. Stream Encryption

  C. Digital Signature

  D. Steganography

  Correct Answer: D

  Steganography is the process of hiding a message in another message so as to obfuscate its importance. It is also the process of hiding a message in a medium such as a digital image, audio file, or other file. In theory, doing this prevents analysts from detecting the real message. You could encode your message in another file or message and use that file to hide your message.

• Question 153:

  A supervisor in your organization was demoted on Friday afternoon. The supervisor had the ability to modify the contents of a confidential database, as well as other managerial permissions. On Monday morning, the database administrator

  reported that log files indicated that several records were missing from the database.

  Which of the following risk mitigation strategies should have been implemented when the supervisor was demoted?

  A. Incident management

  B. Routine auditing

  C. IT governance

  D. Monthly user rights reviews

  Correct Answer: D

• Question 154:

  A technician must configure a firewall to block external DNS traffic from entering a network. Which of the following ports should they block on the firewall?

  A. 53

  B. 110

  C. 143

  D. 443

  Correct Answer: A

• Question 155:

  A software development company needs to share information between two remote servers, using encryption to protect it. A programmer suggests developing a new encryption protocol, arguing that using an unknown protocol with secure, existing cryptographic algorithm libraries will provide strong encryption without being susceptible to attacks on other known protocols. Which of the following summarizes the BEST response to the programmer's proposal?

  A. The newly developed protocol will only be as secure as the underlying cryptographic algorithms used.

  B. New protocols often introduce unexpected vulnerabilities, even when developed with otherwise secure and tested algorithm libraries.

  C. A programmer should have specialized training in protocol development before attempting to design a new encryption protocol.

  D. The obscurity value of unproven protocols against attacks often outweighs the potential for introducing new vulnerabilities.

  Correct Answer: B

• Question 156:

  A Security Officer on a military base needs to encrypt several smart phones that will be going into the field. Which of the following encryption solutions should be deployed in this situation?

  A. Elliptic curve

  B. One-time pad

  C. 3DES

  D. AES-256

  Correct Answer: D

• Question 157:

  An organization relies heavily on an application that has a high frequency of security updates. At present, the security team only updates the application on the first Monday of each month, even though the security updates are released as often as twice a week. Which of the following would be the BEST method of updating this application?

  A. Configure testing and automate patch management for the application.

  B. Configure security control testing for the application.

  C. Manually apply updates for the application when they are released.

  D. Configure a sandbox for testing patches before the scheduled monthly update.

  Correct Answer: A

• Question 158:

  Which of the following use the SSH protocol?

  A. Stelnet

  B. SCP

  C. SNMP

  D. FTPS

  E. SSL

  F. SFTP

  Correct Answer: BF

• Question 159:

  Which of the following is the GREATEST risk to a company by allowing employees to physically bring their personal smartphones to work?

  A. Taking pictures of proprietary information and equipment in restricted areas.

  B. Installing soft token software to connect to the company's wireless network.

  C. Company cannot automate patch management on personally-owned devices.

  D. Increases the attack surface by having more target devices on the company's campus

  Correct Answer: A

• Question 160:

  Which of the following is the summary of loss for a given year?

  A. MTBF

  B. ALE

  C. SLA

  D. ARO

  Correct Answer: B