ComptiA Security+ Certification Exam Questions and answer - Part 15

1. A development team has adopted a new approach to projects in which feedback is iterative and multiple iterations of deployments are provided within an application - s full life cycle. Which of the following software development methodologies is the development team using?

A) Agile
B) Rapid
C) Waterfall
D) Extreme



2. Adhering to a layered security approach,a controlled access facility employs security guards who verify the authorization of all personnel entering the facility. Which of the following terms BEST describes the security control being employed?

A) Compensating
B) Corrective
C) Administrative
D) Deterrent



3. An administrator has configured a new Linux server with the FTP service. Upon verifying that the service was configured correctly,the administrator has several users test the FTP service. Users report that they are able to connect to the FTP service and download their personal files,however,they cannot transfer new files to the server. Which of the following will most likely fix the uploading issue for the users?

A) Create an ACL to allow the FTP service write access to user directories
B) Set the Boolean selinux value to allow FTP home directory uploads
C) Configure the FTP daemon to utilize PAM authentication pass through user permissions
D) Reconfigure the ftp daemon to operate without utilizing the PSAV mode



4. A company has purchased a new SaaS application and is in the process of configuring it to meet the company - s needs. The director of security has requested that the SaaS application be integrated into the company - s IAM processes. Which of the following configurations should the security administrator set up in order to complete this request?

A) SAML
B) LDAP
C) NTLM
D) RADIUS



5. After discovering the /etc/shadow file had been rewritten,a security administrator noticed an application insecurely creating files in / tmp. Which of the following vulnerabilities has MOST likely been exploited?

A) Resource exhaustion
B) Privilege escalation
C) Pointer dereference
D) Memory leak