CompTIA CA1-001 Online Practice Questions and Exam Preparation

CompTIA CA1-001 Online Questions & Answers

• Question 11:

  Which of the following is a meeting of minds between two or more legally competent parties, about their relative duties and rights regarding current or future performance?

  A. Scope
  B. Service Improvement Plan
  C. Contract negotiation
  D. Agreement
  D. Agreement

• Question 12:

  End point security is an information security concept that assumes that each device (end point) is responsible for its own security. Which of the following tools are examples of end point security software? Each correct answer represents a complete solution. Choose all that apply.

  A. Grayware
  B. Anti-malware
  C. Anti-spyware
  D. Anti-virus
  E. Spam filters
  B. Anti-malware
  C. Anti-spyware
  D. Anti-virus
  E. Spam filters

• Question 13:

  Which of the following terms is about communicating the user's need and ability to communicate, and the medium through which that communication may occur?

  A. Data sharing
  B. Presence
  C. Instant messaging
  D. Audio conferencing
  B. Presence

• Question 14:

  Mary is a new security administrator. She wants to focus most of her efforts on the areas that have the greatest risk. Which of the following areas poses the greatest risk?

  A. Employees
  B. Hackers
  C. Cyber terrorism
  D. Viruses
  A. Employees

• Question 15:

  Compliance is described as dutifulness, obligingness, pliability, tolerance, and tractability. Which of the following are multitude of standards that a project must comply? Each correct answer represents a complete solution. Choose all that apply.

  A. Process compliance
  B. Decision oversight
  C. Control compliance
  D. Standards compliance
  A. Process compliance
  B. Decision oversight
  D. Standards compliance

• Question 16:

  Mark is responsible for secure programming at his company. He wants to implement steps to validate the security of software design. At what phase in the SDLC should he implement design validation for security?

  A. After the design phase
  B. This is not a part of SDLC
  C. During the testing phase
  D. At every phase
  D. At every phase

• Question 17:

  In which of the following attacks does an attacker intercept call-signaling SIP message traffic and masquerade as the calling party to the called party and vice-versa?

  A. Call tampering
  B. Man-in-the-middle
  C. Eavesdropping
  D. Denial of Service
  B. Man-in-the-middle

• Question 18:

  Denial of service attacks are quite common. Whether it is an ICMP flood, Syn Flood, or SMURF attack, they all are based on the concept of________.

  A. Circumventing the firewall
  B. Resource exhaustion
  C. Exploiting OS vulnerabilities
  D. Avoiding the IDS
  B. Resource exhaustion

• Question 19:

  The help desk is flooded with calls from users who receive an e-mail warning about a new virus. The e-mail instructs them to search and delete a number of files from their systems. Many of them attempt to reboot the systems after deleting the specified files and find that the systems are not rebooting properly, which of the following types of attacks has occurred?

  A. Hoax
  B. Phishing
  C. Spam
  D. Pharming
  A. Hoax

• Question 20:

  Which of the following attacks are computer threats that try to exploit computer application vulnerabilities that are unknown to others or undisclosed to the software developer?

  A. FMS
  B. Spoofing
  C. Buffer overflow
  D. Zero-day
  D. Zero-day