CompTIA CA1-001 Online Practice Questions and Exam Preparation

CompTIA CA1-001 Online Questions & Answers

• Question 111:

  You work as a Security Administrator for uCertify Inc. The company has a TCP/IP based network and uses the WS-Security service to enable message-level security for Web services. Which of the following mechanisms does it describe? Each correct answer represents a complete solution. Choose three.

  A. How to attach security tokens to ascertain the identity of sender.
  B. How to encrypt SOAP messages to assure confidentiality.
  C. How to sign SOAP messages to assure integrity.
  D. How to provide a guarantee of security.
  A. How to attach security tokens to ascertain the identity of sender.
  B. How to encrypt SOAP messages to assure confidentiality.
  C. How to sign SOAP messages to assure integrity.

• Question 112:

  You work as a Network Administrator for uCertify Inc. You need to conduct network reconnaissance, which is carried out by a remote attacker attempting to gain information or access to a network on which it is not authorized/allowed. What will you do?

  A. Use a SuperScan
  B. Use a netcat utility
  C. Use a vulnerability scanner
  D. Use an idle scan
  C. Use a vulnerability scanner

• Question 113:

  SDLC phases include a minimum set of security tasks that are required to effectively incorporate security in the system development process. Which of the following are the key security activities for the development/acquisition phase? Each correct answer represents a complete solution. Choose two.

  A. Prepare initial documents for system certification and accreditation
  B. Conduct the risk assessment and use the results to supplement the baseline security controls
  C. Determination of privacy requirements
  D. Initial delineation of business requirements in terms of confidentiality, integrity, and availability
  A. Prepare initial documents for system certification and accreditation
  B. Conduct the risk assessment and use the results to supplement the baseline security controls

• Question 114:

  What security objectives does cryptography meet:

  Each correct answer represents a complete solution. Choose all that apply.

  A. Authentication
  B. Confidentiality
  C. Data integrity
  D. Authorization
  A. Authentication
  B. Confidentiality
  C. Data integrity

• Question 115:

  A user has entered a user name and password at the beginning of the session, and accesses multiple applications. He does not need to re-authenticate for accessing each application. Which of the following authentication processes is he using?

  A. File authentication
  B. Mutual authentication
  C. Biometric authentication
  D. SSO authentication
  D. SSO authentication

• Question 116:

  Which of the following statements are true about prototypes?

  Each correct answer represents a complete solution. Choose three.

  A. It reduces initial project risks within a business organization.
  B. It reduces the closeness between what a developer has defined for application architecture and what business management has understood.
  C. It confirms technology recommendations for an application.
  D. It helps verify some of the application requirements that are not dearly defined by a user.
  A. It reduces initial project risks within a business organization.
  C. It confirms technology recommendations for an application.
  D. It helps verify some of the application requirements that are not dearly defined by a user.

• Question 117:

  You work as a security administrator for uCertify Inc. You are conducting a security awareness campaign for the employees of the organization. What information will you provide to the employees about the security awareness program? Each correct answer represents a complete solution. Choose three.

  A. It improves awareness of the need to protect system resources.
  B. It improves the possibility for career advancement of the IT staff.
  C. It enhances the skills and knowledge so that the computer users can perform their jobs more securely.
  D. It constructs in-depth knowledge, as needed, to design, implement, or operate security programs for organizations and systems.
  A. It improves awareness of the need to protect system resources.
  C. It enhances the skills and knowledge so that the computer users can perform their jobs more securely.
  D. It constructs in-depth knowledge, as needed, to design, implement, or operate security programs for organizations and systems.

• Question 118:

  John is hosting several Web sites on a single server. One is an e-commerce site that handles credit card transactions, while the other sites do not handle credit card data. Does this present a security problem, and if so, what?

  A. There is no issue with different types of sites on one server
  B. Credit card processing requires HIPAA compliance, the other sites do not
  C. Credit card processing requires PCI compliance, the other sites do not
  D. The other sites may allow privilege escalation to the e-commerce site
  C. Credit card processing requires PCI compliance, the other sites do not

• Question 119:

  Which is the process of comparing the business processes and performance metrics including cost, cycle time, productivity, or quality?

  A. Agreement
  B. Service Improvement Plan
  C. Benchmarking
  D. COBIT
  C. Benchmarking

• Question 120:

  Which of the following are the benefits of the Single sign-on? Each correct answer represents a complete solution. Choose three.

  A. Reducing password fatigue from different user name and password combinations
  B. Increasing IT costs due to lower number of IT help desk calls about passwords
  C. Centralized reporting for compliance adherence
  D. Security on all levels of entry/exit/access to systems without the inconvenience of re-prompting users
  A. Reducing password fatigue from different user name and password combinations
  C. Centralized reporting for compliance adherence
  D. Security on all levels of entry/exit/access to systems without the inconvenience of re-prompting users