1. 100% Exam Passing Guarantee & Money Back Assurance
Pass CompTIA SY CompTIA Security+ Certification exam in just 24 HOURS!
100% REAL EXAM QUESTIONS ANSWERS
CompTIA SY CompTIA Security+
Certification
Buy Complete Questions Answers File from
dumps.html
100% Exam Passing Guarantee & Money Back Assurance
Sample Questions

2. Question No 1: Answer: D Question No 2: Answer: C Question No 3:
The security administrator at ABC company received the following log information from an external party:
10:45:01 EST, SRC :3056, DST :80, ALERT, Directory traversal
10:45:02 EST, SRC :3057, DST :80, ALERT, Account brute force
10:45:03 EST, SRC :3058, DST :80, ALERT, Port scan
The external party is reporting attacks coming from abc-company.com. Which of the following is the reason the ABC company’s security administrator is unable to determine the origin of the attack?
A NIDS was used in place of a NIPS.
The log is not in UTC.
The external party uses a firewall.
ABC company uses PAT.
Answer: D Question No 2:
Which of the following firewall rules only denies DNS zone transfers?
Deny udp any any port 53
Deny ip any any
Deny tcp any any port 53
Deny all dns packets
Answer: C Question No 3:
A corporation is looking to expand their data center but has run out of physical space in which to store hardware. Which of the following would offer the ability to expand while keeping their current data center operated by internal staff?
Virtualization
Subnetting
IaaS
SaaS
Answer: A

3. Answer: A, D, E Question No 5:
Which of the following uses port 22 by default? (Select THREE).
SSH
SSL
TLS
SFTP
SCP
FTPS
SMTP
SNMP
Answer: A, D, E Question No 5:
The security administrator is currently unaware of an incident that occurred a week ago. Which of the following will ensure the administrator is notified in a timely manner in the future?
User permissions reviews
Incident response team
Change management
Routine auditing
Answer: D Question No 6:
Matt, a security consultant, has been tasked with increasing server fault tolerance and has been given no budget to accomplish his task. Which of the following can Matt implement to ensure servers will withstand hardware failure?
Hardware load balancing
RAID
A cold site
A host standby
Answer: B Question No 7:

4. Answer: B, C Question No 10:
A security administrator wants to perform routine tests on the network during working hours when certain applications are being accessed by the most people. Which of the following would allow the security administrator to test the lack of security controls for those applications with the least impact to the system?
Penetration test
Vulnerability scan
Load testing
Port scanner
Answer: B Question No 8:
A system administrator is using a packet sniffer to troubleshoot remote authentication. The administrator detects a device trying to communicate to TCP port 49. Which of the following authentication methods is MOST likely being attempted?
RADIUS
TACACS+
Kerberos
LDAP
Answer: B Question No 9:
Which of the following ports should be opened on a firewall to allow for NetBIOS communication? (Select TWO).
A. 110
B. 137
C. 139
D. 143
E. 161 F
Answer: B, C Question No 10:
Which of the following are examples of detective controls?
Biometrics, motion sensors and mantraps.
Audit, firewall, anti-virus and biometrics.
Motion sensors, intruder alarm and audit

5. Intruder alarm, mantraps and firewall.
Answer: C
Buy Complete Questions Answers File from
100% Exam Passing Guarantee & Money Back Assurance
PDF Version + Test Engine Software Version
90 Days Free Updates Service
Valid for All Countries