Data Encryption Versus Hidden Message

Are you plannig to take the the Security+ exam? Do you understand basic cryptography concepts such as data encryption.

See if you can this question?

Q. Lisa hid several plaintext documents within an image file. Which security goal is she pursuing?

A. Encryption

B. Integrity

C. Steganography

D. Confidentiality

You can see the answer and an explanation here.

Preventing Software Installation

Are you planning to take the Security+ exam?

Check out this sample question.

Q. Your organization wants to ensure that employees do not install or play operating system games, such as solitaire and FreeCell, on their computers. Which of the following is the BEST choice to prevent this?

A. Security policy

B. Application whitelisting

C. Anti-malware software

D. Antivirus software

Check out the explanation and answer here.

Web Application Vulnerabilities

Are you planning to take the Security+ exam? Make sure that you have a good understanding of web application vulnerabilities so that you can answer questions such as this one.

Q. While creating a web application, a developer adds code to limit data provided by users. The code prevents users from entering special characters. Which of the following attacks will this code MOST likely prevent?

A. Sniffing

B. Spoofing

C. XSS

D. Pharming

Check out the answer and explanation here.

Malware Types Targeting User’s Activity

Are you prepping for the Security+ exam? If so, make sure you know about the different types of malware.

See if you can answer this sample question.

Q. Of the following malware types, which one is MOST likely to monitor a user’s computer?

A. Trojan

B. Spyware

C. Adware

D. Ransomware

Check your answer and see the explanation here.

Client and Server Ports

Is the Security+ exam in your future? If so, see if you can answer this sample Security+ question:

Q. You recently learned that a network router has TCP ports 22 and 80 open, but the organization’s security policy mandates that these should not be accessible. What should you do?

A. Disable the FTP and HTTP services on the router.

B. Disable the DNS and HTTPS services on the router.

C. Disable the SSH and HTTP services on the router.

D. Disable the Telnet and Kerberos services on the router.

Check out the answer and explanation here.

Securing Mobile Devices

Are you studying for the Security+ exam? You can expect some questions on mobile devices. See if you can answer this sample Security+ question?

Q. Your company has recently provided mobile devices to several employees. A security manager has expressed concerns related to data saved on these devices. Which of the following would BEST address these concerns?

A. Disabling the use of removable media

B. Installing an application that tracks the location of the device

C. Implementing a BYOD policy

D. Enabling geo-tagging

Check out the answer and explanation here.

Security+ and BYOD Containerization

Are you preparing to take the Security+ exam? If so, you're probably aware that a primary concern with Bring Your Own Device (BYOD) policies is protecting an organization's data.

One way of doing so is with BYOD containerization.

See if you can answer this sample practice question that we recently added to our online test banks.

Q. Your organization is planning to implement a BYOD policy. Which of the following security controls will help protect data using containerization?

A. Encrypt sensitive data
B. Storage segmentation
C. Full device encryption
D. Asset tracking

See if you're correct here.