ComptiA Security+ Certification Exam Questions and answer - Part 51

1. A security engineer wants to add SSL to the public web server. Which of the following would be the FIRST step to implement the SSL certificate?

A) Encrypt the private key
B) Download the web certificate
C) Install the intermediate certificate
D) Generate a CSR



2. A security analyst captures forensic evidence from a potentially compromised system for further investigation. The evidence is documented and securely stored to FIRST:

A) preserve the data.
B) recover data at a later time.
C) obtain a legal hold.
D) maintain the chain of custody.



3. A security administrator receives notice that a third-party certificate authority has been compromised,and new certificates will need to be issued. Which of the following should the administrator submit to receive a new certificate?

A) CSR
B) OSCP
C) CA
D) CRL
E) PFX


4. A security analyst is reviewing patches on servers. One of the servers is reporting the following error message in the WSUS management console: The computer has not reported status in 30 days. Given this scenario,which of the following statements BEST represents the issue with the output above?

A) The computer in question has not pulled the latest antivirus definitions from the antivirus program.
B) The computer in question has not pulled the latest GPO policies from the management server.
C) The computer in question has not pulled the latest ACL policies for the firewall.
D) The computer in question has not pulled the latest application software updates.



5. A security architect has convened a meeting to discuss an organization's key management policy. The organization has a reliable internal key management system,and some argue that it would be best to manage the cryptographic keys internally as opposed to using a solution from a third party. The company should use:

A) risk benefits analysis results to make a determination.
B) the current internal key management system.
C) a third-party key management system that will reduce operating costs.
D) a software solution including secure key escrow capabilities.