CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 941:

  An achievement in providing worldwide Internet security was the signing of certificates associated with which of the following protocols?

  A. TCP/IP

  B. SSL

  C. SCP

  D. SSH

  Correct Answer: B

  SSL (Secure Sockets Layer) is used for establishing an encrypted link between two computers, typically a web server and a browser. SSL is used to enable sensitive information such as login credentials and credit card numbers to be transmitted securely.

  Incorrect Answers:

  A: TCP/IP (Transmission Control Protocol/Internet Protocol) is a layered suite of protocols used to enable network communications between computers. All communications over the Internet between a Web browser and a Web server use

  TCP/IP. HTTP and SSL run in the Application layer of the TCP/IP protocol suite.

  TCP/IP itself does not use digitally signed certificates.

  C: SCP (Secure Copy) uses SSH (Secure Shell) to copy files between computers using a secure encrypted connection. SSH uses public and private keys in a similar way to SSL to encrypt the connection, however SCP/SSH are not the

  protocols used to provide the "worldwide Internet security" that this question is asking about.

  D: SSH (Secure Shell) is commonly used to log into a remote machine and execute commands over a secure encrypted connection. SSH uses public and private keys in a similar way to SSL to encrypt the connection. However SSH is not the

  protocol used to provide the "worldwide Internet security" that this question is asking about.

  References: https://www.digicert.com/ssl.htm

• Question 942:

  An administrator configures all wireless access points to make use of a new network certificate authority. Which of the following is being used?

  A. WEP

  B. LEAP

  C. EAP-TLS

  D. TKIP

  Correct Answer: C

  The majority of the EAP-TLS implementations require client-side X.509 certificates without giving the option to disable the requirement.

  Incorrect Answers:

  A: WEP does not require the use of X.509 certificates.

  B: LEAP does not require the use of X.509 certificates.

  D: TKIP does not require the use of X.509 certificates.

  References:

  http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 60, 61.

• Question 943:

  Which of the following protocols is used to authenticate the client and server's digital certificate?

  A. PEAP

  B. DNS

  C. TLS

  D. ICMP

  Correct Answer: C

  Transport Layer Security (TLS) is a cryptographic protocol designed to provide communications security over a computer network. It uses X.509 certificates and hence asymmetric cryptography to authenticate the counterparty with whom it is communicating, and to exchange a symmetric key.

  Incorrect Answers:

  A: Protected Extensible Authentication Protocol (PEAP) encapsulates EAP methods within a TLS tunnel that provides authentication and potentially encryption.

  B: Domain name system (DNS) is the hierarchical naming scheme used for public and private networks.

  D: ICMP is a protocol that is commonly used by tools such as ping, traceroute, and pathping.

  References:

  http://en.wikipedia.org/wiki/Transport_Layer_Security

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 47, 61.

• Question 944:

  A security engineer, Joe, has been asked to create a secure connection between his mail server and the mail server of a business partner. Which of the following protocol would be MOST appropriate?

  A. HTTPS

  B. SSH

  C. FTP

  D. TLS

  Correct Answer: D

  Transport Layer Security (TLS) is a cryptographic protocol designed to provide communications security over a computer network. It uses X.509 certificates and hence asymmetric cryptography to authenticate the counterparty with whom it is communicating, and to exchange a symmetric key. The TLS protocol allows client-server applications to communicate across a network in a way designed to prevent eavesdropping and tampering.

  Incorrect Answers:

  A: HTTPS provides the secure means for web-based transactions by utilizing various other protocols such as SSL and TLS.

  B: SSH is used to establish a command-line, text-only interface connection with a server, router, switch, or similar device over any distance.

  C: Standard FTP is a protocol often used to move files between one system and another either over the Internet or within private networks.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 46, 49.

• Question 945:

  Which of the following should be implemented to stop an attacker from mapping out addresses and/or devices on a network?

  A. Single sign on

  B. IPv6

  C. Secure zone transfers

  D. VoIP

  Correct Answer: C

  C: A primary DNS server has the "master copy" of a zone, and secondary DNS servers keep copies of the zone for redundancy. When changes are made to zone data on the primary DNS server, these changes must be distributed to the secondary DNS servers for the zone. This is done through zone transfers. If you allow zone transfers to any server, all the resource records in the zone are viewable by any host that can contact your DNS server. Thus you will need to secure the zone transfers to stop an attacker from mapping out your addresses and devices on your network.

  Incorrect Answers:

  A: Single sign-on is about having one password for all resources on a given network. This is not designed to stop attackers from mapping addresses on your network.

  B: IPv6 in the TCP/IP protocol is designed to support 128-bit addresses it is not designed to stop attackers mapping addresses on your network.

  D: Voice over IP (VoIP) is a methodology and group of technologies for the delivery of voice communications and multimedia sessions over Internet Protocol (IP) networks, such as the Internet. IT is not meant to keep attackers from mapping addresses on your network.

  References:

  https://technet.microsoft.com/en-us/library/ee649273%28v=ws.10%29.aspx Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 148.

• Question 946:

  When reviewing security logs, an administrator sees requests for the AAAA record of www.comptia.com. Which of the following BEST describes this type of record?

  A. DNSSEC record

  B. IPv4 DNS record

  C. IPSEC DNS record

  D. IPv6 DNS record

  Correct Answer: D

  The AAAA Address record links a FQDN to an IPv6 address.

  Incorrect Answers:

  A, C: There is no specific DNSSEC or IPSEC DNS record

  B: The A Address record links a FQDN to an IPv4 address.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 44.

  http://en.wikipedia.org/wiki/List_of_DNS_record_types

• Question 947:

  A network technician is on the phone with the system administration team. Power to the server room was lost and servers need to be restarted. The DNS services must be the first to be restarted. Several machines are powered off. Assuming each server only provides one service, which of the following should be powered on FIRST to establish DNS services?

  A. Bind server

  B. Apache server

  C. Exchange server

  D. RADIUS server

  Correct Answer: A

  BIND (Berkeley Internet Name Domain) is the most widely used Domain Name System (DNS) software on the Internet. It includes the DNS server component contracted for name daemon. This is the only option that directly involves DNS.

  Incorrect Answers:

  B: Apache is the most widely used web server software. It is not specifically required for DNS.

  C: Microsoft Exchange Server is calendaring software, a mail server and contact manager developed by Microsoft. It is not specifically required for DNS.

  D: RADIUS is a networking protocol that delivers consolidated Authentication, Authorization, and Accounting (AAA) management for users who connect and make use of a network service. It is not specifically required for DNS.

  References: http://en.wikipedia.org/wiki/BIND

  http://en.wikipedia.org/wiki/RADIUS http://en.wikipedia.org/wiki/Microsoft_Exchange_Server http://en.wikipedia.org/wiki/Apache_HTTP_Server

• Question 948:

  A UNIX administrator would like to use native commands to provide a secure way of connecting to other devices remotely and to securely transfer files. Which of the following protocols could be utilized? (Select TWO).

  A. RDP

  B. SNMP

  C. FTP

  D. SCP

  E. SSH

  Correct Answer: DE

  SSH is used to establish a command-line, text-only interface connection with a server, router, switch, or similar device over any distance. Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP). SCP is commonly used on Linux and Unix platforms.

  Incorrect Answers:

  A: Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection.

  B: You can use SNMP to interact with several network devices to acquire status information, performance data, statistics, and configuration details via a management console.

  C: Standard FTP is a protocol often used to move files between one system and another either over the Internet or within private networks. It is not commonly used on Linux and Unix platforms.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 47, 49.

  http://en.wikipedia.org/wiki/Remote_Desktop_Protocol

• Question 949:

  A security analyst needs to logon to the console to perform maintenance on a remote server. Which of the following protocols would provide secure access?

  A. SCP

  B. SSH

  C. SFTP

  D. HTTPS

  Correct Answer: B

  Secure Shell (SSH) is a tunneling protocol originally used on Unix systems. It's now available for both Unix and Windows environments. SSH is primarily intended for interactive terminal sessions. SSH is used to establish a command-line, text-only interface connection with a server, router, switch, or similar device over any distance.

  Incorrect Answers:

  A: Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP).

  C: SFTP encrypts authentication and data traffic between the client and server by making use of SSH to provide secure FTP communications. As a result, SFTP offers protection for both the authentication traffic and the data transfer taking

  place between a client and server.

  D: HTTPS provides the secure means for web-based transactions by utilizing various other protocols such as SSL and TLS.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 46, 50. Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 271.

• Question 950:

  Which of the following is BEST used as a secure replacement for TELNET?

  A. HTTPS

  B. HMAC

  C. GPG

  D. SSH

  Correct Answer: D

  SSH transmits both authentication traffic and data in a secured encrypted form, whereas Telnet transmits both authentication credentials and data in clear text.

  Incorrect Answers:

  A: HTTPS provides the secure means for web-based transactions by utilizing various other protocols such as SSL and TLS.

  B: Guarantees the integrity of a message during transmission, but it doesn't provide for non- repudiation.

  C: GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. Pretty Good Privacy (PGP) is a freeware email encryption system.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 46.

  http://en.wikipedia.org/wiki/GNU_Privacy_Guard

  Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 272.