CompTIA CA1-001 Online Practice Questions and Exam Preparation

CompTIA CA1-001 Online Questions & Answers

• Question 21:

  Which of the following is a declarative access control policy language implemented in XML and a processing model, describing how to interpret the policies?

  A. SAML
  B. SOAP
  C. SPML
  D. XACML
  D. XACML

• Question 22:

  The Top Level Management contains the Board of Directors (BOD) and the Chief Executive Officer (CEO) or General Manager (GM) or Managing Director (MO) or President. What are the roles of the top level management? Each correct answer represents a complete solution. Choose all that apply.

  A. The Top Level Management decides the objectives, policies, and plans of the organization.
  B. The Top Level Management prepares long-term plans of the organization.
  C. The Top Level Management has minimum authority and responsibility to take few decisions.
  D. The Top Level Management assembles the available resources.
  A. The Top Level Management decides the objectives, policies, and plans of the organization.
  B. The Top Level Management prepares long-term plans of the organization.
  D. The Top Level Management assembles the available resources.

• Question 23:

  Which of the following protocols will you use to query and modify information stored within directory services?

  A. TFTP
  B. LDAP
  C. SSL
  D. TLS
  B. LDAP

• Question 24:

  Network boundaries can be logical or physical. Which of the following are boundaries a network administrator cannot control?

  A. Informational
  B. Logical
  C. External
  D. Physical
  C. External

• Question 25:

  Which of the following governing factors should be considered to derive an overall likelihood rating that is used to specify the probability that a potential vulnerability may be exercised within the construct of the associated threat environment? Each correct answer represents a complete solution. Choose three.

  A. Threat-source motivation and capability
  B. Detect a problem and determine its cause
  C. Nature of the vulnerability
  D. Existence and effectiveness of current controls
  A. Threat-source motivation and capability
  C. Nature of the vulnerability
  D. Existence and effectiveness of current controls

• Question 26:

  You are completing the requirements for vendor selection and need to create a procurement form that will ask the vendor to provide only a price for commercial-off-the-shelf solution. What type of procurement form will you need to provide to the vendor?

  A. Purchase order
  B. Request for proposal
  C. Request for information
  D. Request for quote
  D. Request for quote

• Question 27:

  Risk analysis provides the higher management the details necessary to determine the risks that should be mitigated, transferred, and accepted. What are the various stages in the risk analysis process?

  Each correct answer represents a complete solution. Choose all that apply.

  A. Management
  B. Threat assessment
  C. Evaluation of control
  D. Monitoring
  E. Asset control
  F. Inventory
  A. Management
  B. Threat assessment
  C. Evaluation of control
  D. Monitoring
  F. Inventory

• Question 28:

  Which of the following refers to any system whereby things that are of value to an entity or group are monitored and maintained?

  A. Asset management
  B. Investment management
  C. Service management
  D. Product management
  A. Asset management

• Question 29:

  Which of the following is a deterministic algorithm to generate a sequence of numbers with little or no discernible pattern in the numbers, apart from broad statistical properties?

  A. Java Cryptographic Extension
  B. Simple and Protected GSSAPI Negotiation Mechanism
  C. Pseudorandom number generator
  D. Twofish
  C. Pseudorandom number generator

• Question 30:

  which of the following is the randomness collected by an operating system or application for use in cryptography or other uses that require random data?

  A. Confusion
  B. Diffusion
  C. Digital signature
  D. Entropy
  D. Entropy