Discovering Wireless Networks.

Are you planning to take the Security+ exam? If so, make sure you understand basic wireless network security.

See if you can you answer this sample Security+ practice test question?

Q. Management asks you if you can modify the wireless network to prevent users from easily discovering it. Which of the following would you modify to meet this goal?

A. CCMP

B. WPA2 Enterprise

C. SSID broadcast

D. MAC address filter

See the answer and full explanation here.

Methods Used to Sanitize Drives

Are you planning to take the Security+ exam? Do you know about different methods used to remove data from devices? See if you can answer this question.

Q. A user recently worked with classified data on an unclassified system. You need to sanitize all the reclaimed space on this system’s hard drives while keeping the system operational. Which of the following methods will BEST meet this goal?

A. Use a cluster tip wiping tool.

B. Use a file shredding tool.

C. Degauss the disk.

D. Physically destroy the disk.

Check your answer and see the full explanation here.

Using XML-Based Standard

Are you planning to take the Security+ exam? See if you can you answer this sample question?

Q. Your organization recently made an agreement with third parties for the exchange of authentication and authorization information. The solution uses an XML-based open standard. Which of the following is the MOST likely solution being implemented?

A. RADIUS

B. Diameter

C. TACACS+

D. SAML

Check out the answer and full explanation here.

Attack Using HTML Links

Are you planning to take the Security+ exam? Make sure you're familiar with common HTML attacks so that you answer questions like this one:

Q. Homer recently received an email thanking him for a purchase that he did not make. He asked an administrator about it and the administrator noticed a pop-up window, which included the following code:

What is the MOST likely explanation?

A. XSRF

B. Buffer overflow

C. SQL injection

D. Fuzzing

Check out the answer and explanation here.

Security+ and Account Management

Are you planning to take the Security+ exam?  See if you can answer this sample Security+ practice test question?

Q. Members of a project team came in on the weekend to complete some work on a key project. However, they found that they were unable to access any of the project data. Which of the following choices is the MOST likely reason why they can’t access this data?

A. Discretionary access control

B. Time-of-day access control

C. Rule-based access control

D. Role-based access control

See if you're correct here. 

Translating Public & Private IP Addresses

Are you preparing for the Security+ exam?  If so you need to understand some basic networking concepts.

As an example, see if you can answer this practice test question.

Q. Your organization has implemented a network design that allows internal computers to share one public IP address. Of the following choices, what did they MOST likely implement?

A. PAT

B. STP

C. DNAT

D. TLS

See if you're correct along with a full explanation here.

Hosting Virtual Systems

Are you planning to take the Security+ exam? If so you should have a basic understanding of virtualization.

See if you answer this sample question.

Q. You are preparing to deploy a new application on a virtual server. The virtual server hosts another server application that employees routinely access. Which of the following is the BEST method to use when deploying the new application?

A. Take a snapshot of the VM before deploying the new application.

B. Take a snapshot of the VM after deploying the new application.

C. Apply blacklisting techniques on the server for the new applications.

D. Back up the server after installing the new application.

See if you're correct here.