CompTIA CompTIA Security+ JK0-022 Questions & Answers

• Question 951:

  A recent vulnerability scan found that Telnet is enabled on all network devices. Which of the following protocols should be used instead of Telnet?

  A. SCP

  B. SSH

  C. SFTP

  D. SSL

  Correct Answer: B

  SSH transmits both authentication traffic and data in a secured encrypted form, whereas Telnet transmits both authentication credentials and data in clear text.

  Incorrect Answers:

  A: Secure Copy Protocol (SCP) is a secure file-transfer facility based on SSH and Remote Copy Protocol (RCP).

  C: SFTP encrypts authentication and data traffic between the client and server by making use of SSH to provide secure FTP communications.

  D: Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are used to encrypt traffic between a web browser and a web server. This allows web surfers to make online purchases, interact with banks, and access private information without disclosing the contents of their communications.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 45, 47, 50.

• Question 952:

  Matt, a security administrator, wants to configure all the switches and routers in the network in order to securely monitor their status. Which of the following protocols would he need to configure on each device?

  A. SMTP

  B. SNMPv3

  C. IPSec

  D. SNMP

  Correct Answer: B

  Currently, SNMP is predominantly used for monitoring and performance management. SNMPv3 defines a secure version of SNMP and also facilitates remote configuration of the SNMP entities.

  Incorrect Answers:

  A: SMTP is the email-forwarding protocol used on the Internet and intranets.

  C: IPSec provides for encryption security using symmetric cryptography. This means communication partners use shared secret keys to encrypt and decrypt traffic over the IPSec VPN link.

  D: You can use SNMP to interact with several network devices to acquire status information, performance data, statistics, and configuration details via a management console.

  References:

  http://en.wikipedia.org/wiki/Simple_Network_Management_Protocol Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 40, 42, 50.

• Question 953:

  A network administrator needs to provide daily network usage reports on all layer 3 devices without compromising any data while gathering the information. Which of the following would be configured to provide these reports?

  A. SNMP

  B. SNMPv3

  C. ICMP

  D. SSH

  Correct Answer: B

  Currently, SNMP is predominantly used for monitoring and performance management. SNMPv3 defines a secure version of SNMP and also facilitates remote configuration of the SNMP entities.

  Incorrect Answers:

  A: You can use SNMP to interact with several network devices to acquire status information, performance data, statistics, and configuration details via a management console.

  C: ICMP is a protocol that is commonly used by tools such as ping, traceroute, and pathping.

  D: SSH transmits both authentication traffic and data in a secured encrypted form. Thus, no information is exchanged in clear text. This makes SSH a secure alternative to Telnet, which transmits both authentication credentials and data in clear text.

  References:

  http://en.wikipedia.org/wiki/Simple_Network_Management_Protocol Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 42, 46, 47.

• Question 954:

  A company's legacy server requires administration using Telnet. Which of the following protocols could be used to secure communication by offering encryption at a lower OSI layer? (Select TWO).

  A. IPv6

  B. SFTP

  C. IPSec

  D. SSH

  E. IPv4

  Correct Answer: AC

  Telnet supports IPv6 connections.

  IPv6 is the communications protocol that provides an identification and location system for computers on networks and routes traffic across the Internet. IPsec is a protocol suite for securing Internet Protocol (IP) communications by

  authenticating and encrypting each IP packet of a communication session. IPsec is a compulsory component for IPv6.

  IPsec operates at Layer 3 of the OSI model, whereas Telnet operates at Layer 7.

  Incorrect Answers:

  B, D: SFTP is a protocol encrypted by SSH, which is a more secure replacement for Telnet.

  E: Telnet supports IPv6 connections.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 40, 41, 42, 48.

  http://en.wikipedia.org/wiki/OSI_model

  http://en.wikipedia.org/wiki/Telnet

• Question 955:

  Configuring the mode, encryption methods, and security associations are part of which of the following?

  A. IPSec

  B. Full disk encryption

  C. 802.1x

  D. PKI

  Correct Answer: A

  IPSec can operate in tunnel mode or transport mode. It uses symmetric cryptography to provide encryption security. Furthermore, it makes use of Internet Security Association and Key Management Protocol (ISAKMP).

  Incorrect Answers:

  B: Full disk encryption is used to provide protection for an OS, its installed applications, and all locally stored data. It does not require you to configure the mode, encryption methods, and security associations.

  C: 802.1x is a port-based authentication mechanism. It does not require you to configure the mode, encryption methods, and security associations.

  D: A PKI is the definition of the mechanisms involved in implementing certificates. It does not require you to configure the mode, encryption methods, and security associations.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 25, 40, 41, 251, 346.

• Question 956:

  A network engineer is designing a secure tunneled VPN. Which of the following protocols would be the MOST secure?

  A. IPsec

  B. SFTP

  C. BGP

  D. PPTP

  Correct Answer: A

  Layer 2 Tunneling Protocol (L2TP) came about through a partnership between Cisco and Microsoft with the intention of providing a more secure VPN protocol. L2TP is considered to be a more secure option than PPTP, as the IPSec protocol

  which holds more secure encryption algorithms, is utilized in conjunction with it. It also requires a pre-shared certificate or key. L2TP's strongest level of encryption makes use of 168 bit keys, 3 DES encryption algorithm and requires two

  levels of authentication.

  L2TP has a number of advantages in comparison to PPTP in terms of providing data integrity and authentication of origin verification designed to keep hackers from compromising the system. However, the increased overhead required to

  manage this elevated security means that it performs at a slower pace than PPTP.

  Incorrect Answers:

  B: SFTP (Secure FTP) is not a VPN tunneling protocol. It is used for transferring files using the File Transfer Protocol over a secure connection. The connection is secured by using SSH (Secure Shell).

  C: BGP (Border Gateway Protocol) is a routing protocol, not a VPN protocol.

  D: Point-To-Point-Tunneling Protocol (PPTP) is the most popularly VPN protocol and is supported by the most devices. PPTP stands for point to point protocol, is by far the easiest to configure and has low overhead that makes it faster than other VPN protocols. Firewalls such as ISA Server, Cisco PIX and Sonic Wall recognize the protocol. PPTP encrypts data using a 128- bit key which puts it in the "weakest" category of VPN protocols.

  References: http://www.maketecheasier.com/understanding-various-vpn-connections/

• Question 957:

  Concurrent use of a firewall, content filtering, antivirus software and an IDS system would be considered components of:

  A. Redundant systems.

  B. Separation of duties.

  C. Layered security.

  D. Application control.

  Correct Answer: C

  Layered security is the practice of combining multiple mitigating security controls to protect resources and data.

  Incorrect Answers:

  A: Redundancy is the duplication of critical components or functions of a system with the intention of increasing reliability of the system, usually in the form of a backup or fail-safe.

  B: Separation of duties is the division of administrator or privileged tasks into distinct groupings, which are individually assigned to unique administrators. The application of separation of duties prevents a single user having complete access or power over an entire network, server, or system.

  D: Application control is a device-management solution that limits which applications can be installed onto a device.

  References:

  http://en.wikipedia.org/wiki/Layered_security

  http://en.wikipedia.org/wiki/Redundancy_(engineering)

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 82, 272.

• Question 958:

  Which of the following devices is BEST suited to protect an HTTP-based application that is susceptible to injection attacks?

  A. Protocol filter

  B. Load balancer

  C. NIDS

  D. Layer 7 firewall

  Correct Answer: D

  An application-level gateway firewall filters traffic based on user access, group membership, the application or service used, or even the type of resources being transmitted. This type of firewall operates at the Application layer (Layer 7) of the OSI model.

  Incorrect Answers:

  A: The Protocol Filter feature is used to block unwanted traffic from your network. The feature is commonly used to make sure employees, students or end users are using their Internet access for its intended productive use.

  B: A load balancer is used to distribute network traffic load across a number of network links or network devices.

  C: A network-based IDS (NIDS) watches network traffic in real time, and is reliable for detecting network-focused attacks, such as bandwidth-based DoS attacks.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 6, 10, 82. http://www.clearcenter.com/support/documentation/clearos_enterprise_5.1/user_guide/protocol_ filter

• Question 959:

  Multi-tenancy is a concept found in which of the following?

  A. Full disk encryption

  B. Removable media

  C. Cloud computing

  D. Data loss prevention

  Correct Answer: C

  One of the ways cloud computing is able to obtain cost efficiencies is by putting data from various clients on the same machines. This "multitenant" nature means that workloads from different clients can be on the same system, and a flaw in

  implementation could compromise security.

  Incorrect Answers:

  A, B, D: None of these options offer multitenancy.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 37.

  http://en.wikipedia.org/wiki/Multitenancy

• Question 960:

  Which of the following technologies can store multi-tenant data with different security requirements?

  A. Data loss prevention

  B. Trusted platform module

  C. Hard drive encryption

  D. Cloud computing

  Correct Answer: D

  One of the ways cloud computing is able to obtain cost efficiencies is by putting data from various clients on the same machines. This "multitenant" nature means that workloads from different clients can be on the same system, and a flaw in

  implementation could compromise security.

  Incorrect Answers:

  A, B, C: None of these options offer multitenancy.

  References:

  Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 37.

  http://en.wikipedia.org/wiki/Multitenancy