Friday, April 21, 2017

Security+ and Authentication Factors

Are you planning to take the Security+ exam? If so, make sure you understand authentication factors.

See if you can answer this Security+ practice test question.

Q. Your network infrastructure requires users to authenticate with something they are and something they know. Which of the following choices BEST describes this authentication method?

A. Passwords

B. Dual-factor

C. Biometrics

D. Diameter

Check the answer here.



Monday, April 17, 2017

Authentication and Security+

Are you preparing to take the Security+ exam? If so, make sure you understand some authentication concepts. See if you can answer this sample question.

Q. When you log on to your online bank account, you are also able to access a partner’s credit card site, check-ordering services, and a mortgage site without entering your credentials again. What does this describe?

A. SSO

B. Same sign-on

C. SAML

D. Kerberos

Check out the answer here. 


Friday, April 14, 2017

Threats Security+

Are you preparing for the Security+ exam?

See if you can answer this practice test question.

Security experts at your organization have determined that your network has been repeatedly attacked from multiple entities in a foreign country. Research indicates these are coordinated and sophisticated attacks. What BEST describes this activity?

A. Fuzzing

B. Sniffing

C. Spear phishing

D. Advanced persistent threat

See if you're correct here. 


Monday, April 10, 2017

Security+ and Monitoring Tools

Are you planning to take the Security+ exam? If so, make sure you have a good understanding of tools available that both security professionals and attackers use.

See if you can answer this sample practice test question.

Q. Your organization security policy requires that personnel notify security administrators if an incident occurs. However, this is not occurring consistently. Which of the following could the organization implement to ensure security administrators are notified in a timely manner?

A. Routine auditing

B. User rights and permissions reviews

C. Design review

D. Incident response team

Check your answer here.


Friday, April 7, 2017

Security+ and Wireless Footprints

Are you preparing to take the Security+ exam? Do you have a good understanding of wireless topics?

See if you can answer this sample Security+ question.

Q. Your organization maintains a separate wireless network for visitors in a conference room. However, you have recently noticed that people are connecting to this network even when there aren’t any visitors in the conference room. You want to prevent these connections, while maintaining easy access for visitors in the conference room. Which of the following is the BEST solution?

A. Disable SSID broadcasting.

B. Enable MAC filtering.

C. Use wireless jamming.

D. Reduce antenna power.

Check your answer and view the full explanation here.


Monday, April 3, 2017

Physical Security Measures and Security+

Are you preparing to take the Security+ exam? If so, make sure you understand various security controls including physical security controls.

See if you can answer this sample question.

Q. Thieves recently rammed a truck through the entrance of your company’s main building. During the chaos, their partners proceeded to steal a significant amount of IT equipment. Which of the following choices can you use to prevent this from happening again?

A. Bollards

B. Guards

C. CCTV

D. Mantrap

See if you're correct and view the full explanation here.


Friday, March 31, 2017

Security+ and Patch Management

Are you planning to take the Security+ exam? If so, make sure you understand basics about patch management.

See if you can you answer this sample question.

Q. A software vendor recently developed a patch for one of its applications. Before releasing the patch to customers, the vendor needs to test it in different environments. Which of the following solutions provides the BEST method to test the patch in different environments?

A. Baseline image

B. BYOD

C. Virtualized sandbox

D. Change management

Check out the answer and a full explanation here.