Home › Quizzes › CompTIA Security Certification Exam Prep

CompTIA Security Certification Exam Prep

This test is based on the CompTIA Security Certification Exam and it has very useful question for multiple topics.

15 Questions Published
Play Quiz Practise this topic out loud

Questions

Question 1 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about Kerberos protocol?

  1. It is a computer network authentication protocol.
  2. It provides safety to a non-secure network.
  3. Kerberos may use public-key cryptography optionally.
  4. Kerberos is built on symmetric key cryptography.
  5. It uses TCP/IP port.
Question 2 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about zero day attack?

  1. It affects the application's vulnerability.
  2. It occurs during the vulnerability window.
  3. Malware can exploit zero day vulnerabilities.
  4. In this attack, a patch is not available.
  5. This attack is unknown to the vendor.
Question 3 Multiple Choice (Single Answer)

Which of the following is an incorrect technique in stack-based exploitation in buffer overflow?

  1. The local variable is overwritten.
  2. A function pointer is overwritten.
  3. A parameter of a different stack frame is overwritten.
  4. It occurs in the heap data area and is exploitable in a manner different from that of stack-based overflows.
  5. The execution will resume at the return address as specified by the attacker, usually a user-input filled buffer.
Question 4 Multiple Choice (Single Answer)

Which of the following statements is false about client authentication in Kerberos protocol?

  1. Client session key is encrypted using the secret key.
  2. 'Ticket-Granting-Ticket' is encrypted using the secret key of the TGS.
  3. AS (Authenticated Server) checks to see if the client is in its database.
  4. The secret is generated by AS.
  5. The client decrypts the confirmation using the client/server session key.
Question 5 Multiple Choice (Single Answer)

Which of the following security measurements is not considered in wireless security on wireless ADSL router?

  1. These are open networks and easily accessible.
  2. SSID broadcast is disabled for such measurement.
  3. WPA is used to provide encryption techniques.
  4. Extensible Authentication Protocol (EAP) protection is used.
  5. The security is limited to some local areas.
Question 6 Multiple Choice (Single Answer)

Which of the following statements is false about executable space protection in buffer overflow protection?

  1. It prevents execution of code on the stack or the heap.
  2. An attacker may use buffer overflows to insert arbitrary code into the memory of a program.
  3. Some Unix-based systems support executable space protection.
  4. This approach uses packet scanning method.
  5. Executable space protection does not protect against return-to-libc attacks.
Question 7 Multiple Choice (Single Answer)

Which of the following connections is not supported by Open Source Path First (OSPF) protocol?

  1. Point-to-point lines between exactly two routers
  2. Multi-access networks with broadcasting
  3. Multi-access networks without broadcasting
  4. Connection through autonomous system
  5. Connection through WANs
Question 8 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about MAC spoofing?

  1. It occurs when some network traffic is availabe for a hacker.
  2. It allows MAC filtering also.
  3. It combines various programs and specifies the MAC address.
  4. It is effective only for small residential (SOHO) networks.
  5. These attacks are enhanced by softwares such as LANjack.
Question 9 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about the DHCP (Dynamic Host Configuration Protocol) server security?

  1. It allows both manual IP address assignment and automatic assignment.
  2. It describes RFCs.
  3. DHCP works for multi-threaded domain.
  4. It requires manual configuration of tables mapping IP address to ethernet address.
  5. It is a good replacement of RARP and BOOTP protocols.
Question 10 Multiple Choice (Single Answer)

Which of the following statements is false about computer virus?

  1. It can be in the form of mobile code.
  2. It is written to reproduce itself.
  3. It affects the executable programs on the disk.
  4. It does not infect the boot sector of the hard disk.
  5. It tries to spread itself to other machines.
Question 11 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about the ActiveX controls in network security?

  1. These programs are embedded in a web page.
  2. The controls are executed in a sequence.
  3. They cannot be interpreted.
  4. They cannot be sandboxed.
  5. They are similar to Java control approach.
Question 12 Multiple Choice (Single Answer)

Which of the following connections is not possible in SSL (Secure Sockets Layer) in web security?

  1. Secret communication
  2. Data integrity protection
  3. Mutual authentication of client and server
  4. Parameter negotiation between client and server
  5. Database connectivity protection
Question 13 Multiple Choice (Single Answer)

Which of the following services is not provided by DNSsec?

  1. Public key distribution
  2. Proof of where the data originated
  3. Transaction authentication
  4. Request authentication
  5. Symmetric key cryptography approach
Question 14 Multiple Choice (Single Answer)

Which of the following is an incorrect statement about DNS spoofing?

  1. It occurs due to false IP address accessibility.
  2. A cache holds an intentionally false IP address.
  3. It allows a sequence number to track the requests.
  4. DNSsec is based on private-key cryptography.
  5. DNS servers use random IDs in their queries.
Question 15 Multiple Choice (Single Answer)

Which of the following statements is false about PGP (Pretty Good Privacy) in e-mail security?

  1. It provides authentication of the user's requests.
  2. It uses digital signatures.
  3. It supports multiple platforms.
  4. One cannot produce a number of versions of PGP easily.
  5. PGP encrypts data by using a block cipher called IDEA algorithm.
← Back to Quizzes