⚡️Lightning Sale: 25% off Lifetime Membership ⚡️

15 hours, 57 minutes remaining!
CompTIA Study Materials
AWS Study Materials
AWS Cloud Practitioner AWS Cloud Practitioner
AWS Cloud Practitioner CLF-C02
Microsoft Study Materials
Microsoft Azure Fundamentals Microsoft Azure Fundamentals
Microsoft Azure Fundamentals AZ-900
Content out of date!

These study materials are for an old exam version. Click here for the up to date study materials!

CompTIA Security Plus SY0 401 Test 3

Free CompTIA Security+ SY0-401 practice test, CompTIA Security Plus SY0 401 Test 3. This free CompTIA Security+ practice exam covers basic knowledge in the field of Information Systems Security. To pass the CompTIA Security+ exam, a candidate will need knowledge in Network Security, Compliance and operational security, threats and vulnerabilities, access control and identity management, cryptography, and application, data, and host security. This free practice test will test your knowledge and readiness for the CompTIA Security+ Examination.

  • Questions: 20
  • Time: 60 seconds per question (0 hours, 15 minutes, 0 seconds)

Company A sends a PGP encrypted file to company B. If company A used company B's public key to encrypt the file, which of the following should be used to decrypt data at company B?

  • CRLs

  • Private key

  • Public key

  • Shared key

Separation of duties is often implemented between developers and administrators in order to separate which of the following?

  • The network access layer from the application access layer

  • Upper level management users from standard development employees

  • Changes to program code and the ability to deploy to production

  • More experienced employees from less experienced employees

An investigator recently discovered that an attacker placed a remotely accessible CCTV camera in a public area overlooking several Automatic Teller Machines (ATMs). It is also believed that user accounts belonging to ATM operators may have been compromised. Which of the following attacks has MOST likely taken place?

  • Whaling attack

  • Vishing attack

  • Dumpster diving

  • Shoulder surfing

A network stream needs to be encrypted. Sara, the network administrator, has selected a cipher which will encrypt 8 bits at a time before sending the data across the network. Which of the following has Sara selected?

  • Zero cipher

  • Hashing algorithm

  • Block cipher

  • CRC

Which of the following defines a business goal for system restoration and acceptable data loss?

  • MTBF

  • RTO

  • MTTR

  • Warm site

Which of the following is true about asymmetric encryption?

  • A message encrypted with the public key can be decrypted with a shared key

  • A message encrypted with the private key can be decrypted by the same key

  • A message encrypted with the public key can be decrypted with the private key

  • A message encrypted with a shared key, can be decrypted by the same key

A security administrator is responsible for performing periodic reviews of user permission settings due to high turnover and internal transfers at a corporation. Which of the following BEST describes the procedure and security rationale for performing such reviews?

  • Ensure all users have adequate permissions and appropriate group memberships, so the volume of help desk calls is reduced

  • Ensure former employee accounts have no permissions so that they cannot access any network file stores and resources

  • Review the permissions of all transferred users to ensure new permissions are granted so the employee can work effectively

  • Review all user permissions and group memberships to ensure only the minimum set of permissions required to perform a job is assigned

The Chief Information Officer (CIO) of your employer has mandated that the internal payroll software be replaced by a cloud based application. The new software is a web based industry standard and will be licensed for use by the company. Which of the following best describes this situation?

  • Platform as a Service

  • Infrastructure as a Service

  • Software as a Service

  • Hosted virtualization service

Which of the following will allow Pete, a security analyst, to trigger a security alert because of a tracking cookie?

  • Network based firewall

  • Anti-spam software

  • Anti-spyware software

  • Host based firewall

An administrator notices that former temporary employees' accounts are still active on a domain. Which of the following can be implemented to increase security and prevent this from happening?

  • Implement a password expiration policy

  • Implement time of day restrictions for all temporary employees

  • Run a last logon script to look for inactive accounts

  • Implement an account expiration date for temporary employees

Which of the following types of application attacks would be used to specifically gain unauthorized information from databases that did not have any input validation implemented?

  • Cookies and attachments

  • SQL injection

  • Buffer overflow and XSS

  • Session hijacking and XML injection

An information bank has been established to store contacts, phone numbers and other records. A UNIX application needs to connect to the index server using port 389. Which of the following authentication services should be used on this port by default?

  • Kerberos

  • TACACS+

  • LDAP

  • RADIUS

George, an employee, is terminated from the company and the legal department needs documents from his encrypted hard drive. Which of the following could be used to accomplish this task?

  • CRL

  • Recovery agent

  • Public key

  • Private hash

Which of the following would a security administrator implement in order to discover comprehensive security threats on a network?

  • Design reviews

  • Vulnerability scan

  • Code review

  • Baseline reporting

A router has a single Ethernet connection to a switch. In the router configuration, the Ethernet interface has three sub-interfaces, each configured with ACLs applied to them and 802.1q trunks. Which of the following is MOST likely the reason for the sub-interfaces?

  • The sub-interfaces each implement quality of service

  • The switch has several VLANs configured on it

  • The sub-interfaces are configured for VoIP traffic

  • The network uses the subnet of 255.255.255.128

Which of the following BEST explains the use of an HSM within the company servers?

  • Hardware encryption is faster than software encryption.

  • Software encryption can perform multiple functions required by HSM.

  • Thumb drives present a significant threat which is mitigated by HSM.

  • Data loss by removable media can be prevented with DLP.

Keith, a network administrator, has been asked to passively monitor network traffic for potential malicious activities to the company's sales websites. Which of the following would be BEST suited for this task?

  • NIDS

  • Spam filter

  • Firewall

  • HIPS

Which of the following presents the STRONGEST access control?

  • MAC

  • DAC

  • TACACS

  • RBAC

Datacenter access is controlled with proximity badges that record all entries and exits from the datacenter. The access records are used to identify which staff members accessed the data center in the event of equipment theft. Which of the following MUST be prevented in order for this policy to be effective?

  • Tailgating

  • Phishing

  • Password reuse

  • Social engineering

Which of the following can allow Emily, a security analyst, to encrypt individual files on a system?

  • JFS

  • EFS

  • Single Sign-on

  • TLS



Remaining Time 00:15:00