CompTIA CA1-001 Online Practice Questions and Exam Preparation

CompTIA CA1-001 Online Questions & Answers

• Question 91:

  Angela is trying to ascertain the types of security hardware and software her client should implement. What should she do before deciding?

  A. Assess that businesses specific risks and threats.
  B. Assess the technical skill of management.
  C. Assess that businesses specific opportunities.
  D. Assess the technical skill of that businesses employees.
  A. Assess that businesses specific risks and threats.

• Question 92:

  Which of the following standard organizations promulgates worldwide proprietary industrial and commercial standards?

  A. IEEE
  B. ANSI
  C. ISO
  D. W3C
  C. ISO

• Question 93:

  Denish works as a Security Administrator for a United States defense contractor. He wants to ensure that all systems have appropriate security precautions, based on their total score. Which of the following standards should he refer to?

  A. OVAL
  B. OWASP
  C. CIA
  D. DIACAP
  D. DIACAP

• Question 94:

  Which of the following statements are true about Security Requirements Traceability Matrix (SRTM)? Each correct answer represents a complete solution. Choose two.

  A. It consists of various security practices that are grouped under seven phases.
  B. It is a software development security assurance process proposed by Microsoft.
  C. It allows requirements and tests to be easily traced back to one another.
  D. It provides documentation and easy presentation of what is necessary for the security of a system.
  C. It allows requirements and tests to be easily traced back to one another.
  D. It provides documentation and easy presentation of what is necessary for the security of a system.

• Question 95:

  Which of the following terms suggests that the supplier of an application program or system provides all the hardware and software components and resources to meet the customers requirement and no other supplier is required to be involved?

  A. End-to-end solution
  B. COTS product
  C. Change Management
  D. Collaboration platform
  A. End-to-end solution

• Question 96:

  In which of the following activities an organization identifies and prioritizes technical, organizational, procedural, administrative, and physical security weaknesses?

  A. Social engineering
  B. Vulnerability assessment
  C. White box testing
  D. Penetration testing
  B. Vulnerability assessment

• Question 97:

  Mark works as a Network Security Administrator for a public school. He has decided that a hot site is appropriate for the schools grade servers, so they can have 1005= uptime, even in the event of a major disaster. Was this appropriate?

  A. No, a hot site is usually not required by most organizations.
  B. Yes, a hot site is required for the school
  C. Yes, a hot site is always a good idea.
  D. No, a school needs do not require a hot site.
  D. No, a school needs do not require a hot site.

• Question 98:

  Elaine is conducting an AAR after a hacker managed to breach the network security and steal data from the database server. Which of the following should not be part of the AAR?

  A. Getting input from multiple perspectives
  B. Describe what happened
  C. Remain unbiased
  D. Assessing who is responsible for the breach
  D. Assessing who is responsible for the breach

• Question 99:

  Which of the following is a version of netcat with integrated transport encryption capabilities?

  A. Nikto
  B. Cryptcat
  C. Encat
  D. Socat
  B. Cryptcat

• Question 100:

  Which of the following is a group of people who prepare for and respond to any emergency incident, such as a natural disaster or an interruption of business operations?

  A. Incident response team
  B. Incident investigation team
  C. Incident command team
  D. Incident management team
  A. Incident response team