Security+ Domain 2

You are using a password attack that tests every possible keystroke for every single key in a password until the correct one is found. Which of the following technical password attacks are you using?

• Pass-the-hash attack

• Brute force attack

• Password sniffing

• Keylogger

Which of the following do security templates allow you to do? (Select two.)

• Fix a specific software problem

• Configure consistent security settings between devices

• Apply new software patches

• Quickly apply settings to multiple computers

• Block malicious websites

A network administrator suspects an attacker is intercepting and potentially modifying communications between their organization's server and the client systems. The attacker is not detected by either party during this process. Which type of attack is the network administrator likely observing in this instance?

• Domain Name System (DNS) attack

• Man-in-the-middle attack

• Denial of Service (DoS) attack

• Phishing attack

What type of attack involves overwhelming a service with excessive requests to cause denial of service?

• Distributed denial-of-service (DDoS) attack

• Replay attack

• On-path attack

• Phishing attack

In a virtualized environment, what strategy should a network administrator employ to maintain the integrity and isolation of individual VMs?

• Mitigating virtual machine escape

• Establishing firewall rules

• Implementing network segmentation

• Enforcing user access controls

Which method of access control should be used to ensure that only specifically authorized users have access to a resource, while all others are denied?

• Implicit allow, explicit deny

• Explicit allow, implicit deny

• Implicit allow, implicit deny

• Explicit allow, explicit deny

Which of the following BEST describes sideloading? (Select two.)

• It does not undergo the same scrutiny and vetting process as those on official application stores.

• It refers to the installation of applications from sources other than the official application store of the platform.

• It allows users to install unauthorized applications and customize device appearance and behavior.

• It is a method used to gain elevated privileges and access to system files on mobile devices.

As a network administrator tasked with troubleshooting access issues to a shared folder, which of the following steps would you take first?

• Reformat the volume with NTFS.

• Assign 'Co-owner' share permissions to Everyone.

• Change Jane's share permissions to 'Owner.'

• Check if the folder has NTFS permissions set for Jane or a group she belongs to.

Which of the following BEST describes bluesnarfing?

• Cloning a mobile device

• Executing commands on a mobile device

• Viewing calendar, emails, and messages on a mobile device without authorization

• Sending anonymous electronic business cards

By definition, what is the process of reducing security exposure and tightening security controls?

• Social engineering

• Passive reconnaissance

• Active scanning

• Hardening