ComptiA Security+ Certification Exam Questions and answer - Part 5

1. A company was recently audited by a third party. The audit revealed the company - s network devices were transferring files in the clear. Which of the following protocols should the company use to transfer files?

A) SNMPv3
B) HTTPS
C) LDAPS
D) SCP



2. A company exchanges information with a business partner. An annual audit of the business partner is conducted against the SLA in order to verify:

A) Data ownership is being maintained and audited
B) Backups are being performed and tested
C) Performance and service delivery metrics
D) Risk awareness is being adhered to and enforced



3. A company is planning to utilize its legacy desktop systems by converting them into dummy terminals and moving all heavy applications and storage to a centralized server that hosts all of the company - s required desktop applications. Which of the following describes the BEST deployment method to meet these requirements?

A) PaaS
B) VDI
C) IaaS
D) VM sprawl



4. A datacenter recently experienced a breach. When access was gained,an RF device was used to access an air-gapped and locked server rack. Which of the following would BEST prevent this type of attack?

A) Alarms
B) Faraday cage
C) Infrared detection
D) Smart cards



5. A company is investigating a data compromise where data exfiltration occurred. Prior to the investigation,the supervisor terminates an employee as a result of the suspected data loss. During the investigation,the supervisor is absent for the interview,and little evidence can be provided form the role-based authentication system in use by the company. The situation can be identified for future mitigation as which of the following?

A) Lack of training
B) Insider threat
C) Log failure
D) Job rotation