Tüm alıştırma soruları

521 soru

Soru 161Soru

Match each social engineering threat type on the left with its corresponding attack methodology on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Spear Phishing
Watering Hole Attack
Pretexting
Shoulder Surfing

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Spear Phishing matches with targeted, customized email communications; Watering Hole Attack matches with compromising frequently visited third-party websites; Pretexting matches with inventing a fabricated scenario to build trust; Shoulder Surfing matches with direct visual observation of screens or keyboards.
Each threat type is paired precisely with its defined attack vector: Spear phishing utilizes highly customized emails aimed at specific individuals, watering hole attacks infect websites frequently accessed by target groups, pretexting relies on fabricated scenarios to extract credentials, and shoulder surfing physically observes screens or keypads.

Adım Adım Çözüm

1
Analyze digital versus physical social engineering attack vectors
Identified direct visual observation as shoulder surfing and customized email targeting as spear phishing.
Categorizing the operational vector isolates the specific threat definition.
2
Distinguish between strategic web compromises and identity fabrication scenarios
Watering hole attack targets shared web resources, whereas pretexting relies on impersonation and narrative creation.
Understanding the delivery mechanism differentiates watering hole attacks from pretexting scenarios.
3
Map each threat term to its exact operational description
All four threat pairs correctly aligned based on CompTIA threat taxonomy definitions.
Ensures accurate identification for security incident diagnosis and mitigation.

Anahtar Kavram

Social Engineering Threat Methodologies and Classifications
Soru 162Soru

An IT support specialist is selecting the minimum Windows 11 edition required to fulfill specific hardware and feature deployment requirements for different user groups within an organization. Match each set of deployment requirements on the left with the minimum Windows 11 edition on the right that natively satisfies all specified conditions.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Personal computing use with web browsing and multimedia playback, restricted to a maximum of 1 CPU socket and 128 GB RAM, lacking native Active Directory Domain Join and RDP Server capabilities.
Corporate desktop deployment requiring Active Directory Domain Join, BitLocker Drive Encryption, Client Hyper-V, and Remote Desktop Host capabilities.
High-performance data analysis workstation equipped with 4 physical CPU sockets and non-volatile dual in-line memory modules (NVDIMM-N).
Enterprise-managed endpoint requiring AppLocker application control policies, DirectAccess for seamless remote connectivity without VPN, and BranchCache optimization.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Personal computing limited to 1 CPU socket/128GB RAM matches Windows 11 Home; Corporate features like Domain Join, BitLocker, and RDP Host match Windows 11 Pro; High-performance hardware with 4 CPUs and NVDIMM support matches Windows 11 Pro for Workstations; Enterprise management tools like AppLocker, DirectAccess, and BranchCache match Windows 11 Enterprise.
Each requirement scenario aligns directly with the feature set and hardware capabilities defined by Microsoft for Windows 11 editions: Home handles basic consumer tasks; Pro provides core business features like Domain Join, BitLocker, and RDP hosting; Pro for Workstations extends hardware scaling to 4 CPUs and NVDIMM memory; Enterprise delivers advanced administration tools like AppLocker, DirectAccess, and BranchCache.

Adım Adım Çözüm

1
Analyze consumer hardware limits and administrative feature omissions.
Identify that 1 CPU socket max, 128 GB RAM limit, and absence of Domain Join or RDP Server define Windows 11 Home.
Windows Home editions cater to personal consumers and lack business-class management functionality.
2
Evaluate standard business management and encryption needs.
Determine that Active Directory Domain Join, BitLocker, Client Hyper-V, and RDP Host represent the feature set introduced in Windows 11 Pro.
Windows Pro is the standard minimum edition required for joining business networks and securing local data.
3
Assess high-end physical hardware capabilities such as multi-CPU sockets and persistent memory.
Match 4 physical CPUs and NVDIMM-N support to Windows 11 Pro for Workstations.
Standard Pro supports up to 2 CPUs and 2 TB RAM, whereas Pro for Workstations scales up to 4 CPUs, 6 TB RAM, and NVDIMM storage.
4
Identify specialized corporate compliance and remote access features.
Match AppLocker, DirectAccess, and BranchCache to Windows 11 Enterprise.
These advanced security, deployment, and bandwidth optimization features require an Enterprise volume license.

Anahtar Kavram

Windows 11 edition feature boundaries and hardware limits
Tahmini Süre:1m 30s
Soru 163Soru

A facilities security team is auditing physical access controls across a high-security corporate facility. Match each specialized physical security mechanism to the specific security risk it is primarily designed to mitigate.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Faraday cage
Mantrap (Access Control Vestibule)
Bollards
Biometric scanner with anti-passback

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Each physical security control maps directly to its intended threat mitigation: Faraday cage mitigates electromagnetic emissions interception; Mantrap prevents tailgating/piggybacking; Bollards stop vehicle ramming attacks; Biometric scanner with anti-passback prevents credential pass-back and re-entry abuse.
Each physical security mechanism addresses a unique physical threat vector: Faraday cages block RF emissions, mantraps enforce single-person physical access, bollards prevent vehicle ramming, and anti-passback controls stop credential reuse.

Adım Adım Çözüm

1
Analyze the protection mechanism of a Faraday cage
Identified that enclosure shielding stops RF emissions.
Faraday cages block electromagnetic signals, addressing eavesdropping or RF leakage.
2
Analyze the access control features of a mantrap (vestibule)
Identified interlocking door control.
Access control vestibules limit physical entry to one authenticated person at a time to prevent tailgating.
3
Analyze the structural role of bollards
Identified vehicle barrier capabilities.
Bollards are short posts designed to block vehicular access and absorb vehicle kinetic energy.
4
Analyze anti-passback security logic on biometric/card scanners
Identified exit/entry tracking constraint.
Anti-passback prevents an authenticated user from passing access credentials back to an unauthorized person to gain entry.

Anahtar Kavram

Physical Security Controls and Threat Mitigation Functions
Soru 164Soru

A network administrator is designing an enterprise wireless infrastructure with varying security requirements across departments. Match each wireless authentication protocol or framework to its specific technical deployment requirement or operational security characteristic.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

EAP-TLS
PEAP
WPA3-Enterprise (192-bit Mode)
WPA2-Personal

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

EAP-TLS pairs with server and client certificate requirement; PEAP pairs with server-side certificate creating a TLS tunnel for password authentication; WPA3-Enterprise (192-bit Mode) pairs with GCMP-256 encryption and HMAC-SHA384; WPA2-Personal pairs with PSK and CCMP vulnerable to offline dictionary attacks.
Each wireless framework is correctly matched based on standard 802.11 and 802.1X specifications: EAP-TLS mandates mutual PKI certificate verification; PEAP builds a server-authenticated TLS tunnel to protect user password challenges; WPA3-Enterprise (192-bit mode) elevates enterprise security with GCMP-256; and WPA2-Personal relies on static PSKs paired with CCMP encryption.

Adım Adım Çözüm

1
Analyze certificate requirements for 802.1X EAP types
Identify that EAP-TLS strictly requires mutual authentication via digital certificates on both server and client endpoints, whereas PEAP requires a certificate only on the server.
Differentiating EAP-TLS from PEAP depends on evaluating certificate management complexity versus password authentication capabilities.
2
Evaluate high-security WPA3 suite specifications
Confirm that 192-bit WPA3-Enterprise specifies Suite B cryptographic standards including GCMP-256 cipher suites and SHA-384 message integrity.
Standard WPA2/WPA3 uses 128-bit CCMP/GCMP, whereas the optional 192-bit mode upgrades symmetric encryption to 256-bit GCMP.
3
Examine legacy SOHO security traits and attack vectors
Determine that WPA2-Personal relies on a static pre-shared key (PSK) with CCMP, which exposes the four-way handshake to offline dictionary attacks.
WPA3 replaced PSK with SAE to prevent offline dictionary attacks, making PSK vulnerability a key trait of WPA2-Personal.

Anahtar Kavram

Wireless Authentication Protocols and Enterprise Encryption Standards
Soru 165Soru

Match each social engineering threat vector on the left with its corresponding attack description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Smishing
Typosquatting
Pretexting
Watering Hole

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Smishing corresponds to SMS text message phishing; Typosquatting corresponds to taking advantage of misspelled domain names; Pretexting corresponds to inventing a false story to gain information; Watering Hole corresponds to compromising websites frequently visited by target groups.
Smishing uses cellular SMS text messages; Typosquatting exploits browser URL entry mistakes; Pretexting relies on an invented narrative to manipulate targets; Watering Hole attacks compromise specific sites visited by targeted organizations.

Adım Adım Çözüm

1
Analyze the attack medium and methodology described in each item.
Identify that text messaging maps to Smishing, misspelled web addresses map to Typosquatting, crafted deceptive narratives map to Pretexting, and infected destination websites map to Watering Hole attacks.
Social engineering categories are defined by their specific delivery mechanisms and psychological tactics.

Anahtar Kavram

Social Engineering Vectors and Attack Methodologies
Tahmini Süre:1m 0s
Soru 166Soru

An IT support technician is resolving several printer hardware issues across different departments. Match each observed printer symptom to its most likely hardware cause.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Toner easily smudges or rubs off the paper after printing on a laser printer.
A thermal receipt printer feeds paper continuously but produces completely blank output.
A laser printer produces pages with a sharp, continuous vertical black streak down the entire page length.
An inkjet printer produces printouts with missing color bands and uneven horizontal streaks.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Toner smudging matches the fuser assembly failing to reach operating temperature; blank thermal receipt output matches thermal paper loaded backwards; a continuous vertical black line matches a scratched photosensitive drum; missing color bands on an inkjet printer match clogged printhead nozzles.
Each symptom directly corresponds to the fundamental physical component responsible for that stage of the printing process: fuser heat melts toner, thermal paper coating reacts to heat contact, drum charge integrity dictates vertical line defects, and nozzle cleanliness ensures even ink dispersion.

Adım Adım Çözüm

1
Analyze laser printer toner bonding mechanisms.
Identify that unfused toner wiping off paper directly points to a malfunctioning fuser assembly element or heat roller.
The fuser is responsible for melting toner onto the paper media.
2
Analyze direct thermal printing mechanisms.
Identify that blank output when paper feeds correctly indicates the heat-sensitive chemical layer of the paper is not contacting the printhead.
Direct thermal printing relies on heat applied directly to chemically coated paper.
3
Analyze laser drum defect geometry.
Identify that a continuous vertical line along the page axis indicates permanent surface damage or a gouge on the OPC drum.
A damaged drum surface fails to retain electrical charge along the circumference as it rotates.
4
Analyze inkjet liquid delivery defects.
Identify that horizontal streaks or missing colors indicate blocked fluid channels in the printhead micro-nozzles.
Dried ink in nozzles blocks liquid flow, causing incomplete lines.

Anahtar Kavram

Identifying root cause component failures based on physical print defect symptoms across laser, thermal, and inkjet printer technologies.
Soru 167Soru

An IT security administrator is updating the physical security policy for an enterprise organization. Match each physical security control mechanism on the left to its primary protective function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Biometric scanner
Vehicle bollard
Mantrap
Privacy filter

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Biometric scanner matches with verifying unique physical characteristics for access control; Vehicle bollard matches with blocking physical perimeter access against vehicle ramming; Mantrap matches with enforcing single-person entry to prevent tailgating; Privacy filter matches with limiting display viewing angles to prevent shoulder surfing.
Each physical control addresses a distinct physical threat: biometric scanners evaluate physical traits (fingerprints/retina) for identity verification; bollards provide physical resistance against motor vehicle penetration; mantraps use dual interlocking doors to physically isolate individuals and block tailgating; and privacy filters restrict viewing angles to defeat visual observation (shoulder surfing).

Adım Adım Çözüm

1
Examine the physical security mechanisms listed in the left column.
Identified Biometric scanner, Vehicle bollard, Mantrap, and Privacy filter.
Understanding the function of each device is necessary to pair it with its security purpose.
2
Map each control to the specific physical threat or access requirement it addresses.
Biometrics prevent unauthorized credential usage, bollards block vehicles, mantraps stop unauthorized physical follow-through (tailgating), and privacy filters block visual eavesdropping.
Matching each control to its primary objective demonstrates knowledge of physical security controls.

Anahtar Kavram

Physical Security Controls and Functions
Soru 168Soru

A systems administrator needs to perform several maintenance, backup, and diagnostic tasks across macOS and Linux endpoints. Match each macOS tool or Linux command-line utility to its corresponding administrative function.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

dd
rsync
Keychain Access
Console

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

dd matches low-level byte-by-byte copying; rsync matches incremental file synchronization preserving metadata; Keychain Access matches secure management of encrypted passwords and certificates; Console matches monitoring real-time system logs and diagnostic reports.
Each utility corresponds to its primary administrative function: dd for block-level data duplication, rsync for delta-based file sync with metadata retention, Keychain Access for encrypted credential storage, and Console for real-time macOS system diagnostics.

Adım Adım Çözüm

1
Analyze low-level disk copy requirements.
Identify dd as the tool that operates on raw block devices for byte-level cloning.
dd is designed for direct bit-stream transfers without filesystem structure overhead.
2
Analyze efficient file transfer and sync requirements.
Identify rsync as the utility that performs delta transfers while preserving file attributes.
rsync minimizes network bandwidth and maintains Linux/macOS metadata during synchronization.
3
Analyze macOS credential storage requirements.
Identify Keychain Access as the secure repository.
Keychain Access manages encrypted keychains storing passwords, keys, and certificates in macOS.
4
Analyze macOS logging and diagnostic requirements.
Identify Console as the log aggregation utility.
Console provides real-time log viewing and report inspection for macOS system processes.

Anahtar Kavram

macOS and Linux Administrative Tools and CLI Utilities
Soru 169Soru

An IT security team is implementing physical defense controls across an enterprise facility. Match each physical security control mechanism on the left to its corresponding protective security objective on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

USB Port Locks
Faraday Shielding
Biometric Scanner with Liveness Detection
Tamper-Evident Asset Tag

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

USB Port Locks matches with preventing unauthorized physical insertion of removable media; Faraday Shielding matches with blocking radio frequency signals; Biometric Scanner with Liveness Detection matches with mitigating authentication spoofing attempts; Tamper-Evident Asset Tag matches with deterring unauthorized chassis opening and component swapping.
Each physical security control serves a specific technical function: USB port locks physically obstruct ports against unauthorized media insertion; Faraday shielding blocks RF wireless signals; liveness detection verifies real-time physical presence to defeat biometric spoofing; and tamper-evident asset tags reveal physical tampering or component theft.

Adım Adım Çözüm

1
Analyze the primary purpose of USB Port Locks
Identified physical obstruction of unused system ports to block flash drive insertion.
Physical port locks restrict unauthorized peripheral connections.
2
Analyze the primary purpose of Faraday Shielding
Identified RF containment and signal blockage.
Faraday enclosures absorb or reflect external electromagnetic waves.
3
Analyze the role of Liveness Detection in biometric scanning
Identified detection of real-time physiological indicators (e.g., pulse, eye movement).
Liveness verification prevents spoofing with static photos or artificial replicas.
4
Analyze Tamper-Evident Asset Tags
Identified permanent damage patterns when disturbed.
Tamper indicators signal unauthorized physical access or component replacement.

Anahtar Kavram

Physical Security Controls and Threat Mitigation
Tahmini Süre:1m 30s
Soru 170Soru

Match each security threat or social engineering vector on the left with its corresponding attack scenario description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Spear Phishing
Tailgating
Watering Hole Attack
Logic Bomb

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Spear Phishing matches targeted communications aimed at specific job roles; Tailgating matches unauthorized physical entry following close behind an employee; Watering Hole Attack matches compromising trusted third-party websites visited by target users; Logic Bomb matches dormant malicious code triggered by defined system conditions.
Each attack vector correctly matches its operational description: Spear Phishing uses customized communications aimed at specific roles; Tailgating physically circumvents access control doors; Watering Hole Attack compromises external trusted websites to target specific groups; and a Logic Bomb relies on specific logical triggers to detonate dormant malicious code.

Adım Adım Çözüm

1
Identify the vector relying on customized digital communication targeting specific roles.
Spear Phishing corresponds to the tailored email targeting the payroll manager.
Spear phishing differs from general phishing because it is directed at a specific target individual or department with customized context.
2
Identify the physical security entry breach mechanism.
Tailgating corresponds to following an authorized employee into a secured building without badging in.
Tailgating exploits physical proximity and social courtesies to bypass physical access controls.
3
Identify the attack targeting trusted external websites.
Watering Hole Attack corresponds to infecting an industry news portal regularly visited by developers.
Watering hole attacks infect trusted third-party sites frequented by the target group to deliver malware.
4
Identify the software-based threat tied to specific conditional triggers.
Logic Bomb corresponds to dormant code executing upon a specific database condition or event.
Logic bombs remain inactive until predetermined logical criteria (such as dates, events, or missing file checks) occur.

Anahtar Kavram

Social Engineering Vectors and Malware Threat Classifications
Soru 171Soru

Match each wireless authentication protocol or security framework on the left with its correct operational requirement and cryptographic mechanism on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

EAP-FAST
PEAP-MSCHAPv2
EAP-TLS
WPA3-SAE

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

EAP-FAST matches with Protected Access Credentials (PACs) without mandatory PKI certificates; PEAP-MSCHAPv2 matches with server-side certificate tunneling user password authentication; EAP-TLS matches with mutual X.509 certificate authentication on both client and server; WPA3-SAE matches with dragonfly key exchange protecting against offline dictionary attacks.
Each protocol is accurately matched to its distinct architecture: EAP-FAST uses PACs in lieu of server certificates; PEAP-MSCHAPv2 uses a single server certificate to encrypt user password authentication; EAP-TLS enforces mutual authentication using digital certificates on both endpoints; WPA3-SAE implements Dragonfly zero-knowledge key exchange for pre-shared key environments.

Adım Adım Çözüm

1
Analyze certificate requirements for enterprise EAP protocols
Identify that EAP-TLS mandates client and server digital certificates, PEAP-MSCHAPv2 requires only a server-side certificate, and EAP-FAST utilizes PACs to bypass standard PKI deployment.
Differentiating 802.1X/EAP authentication methods based on PKI complexity is essential for enterprise wireless deployments.
2
Analyze personal/SOHO WPA3 security improvements
Identify WPA3-SAE as the modern replacement for WPA2-PSK that uses the Dragonfly handshake to prevent offline brute-force attacks.
Understanding key exchange security enhancements distinguishes WPA3 personal security mechanisms from enterprise RADIUS-based solutions.
3
Map each authentication term to its corresponding requirement
Correlate EAP-FAST to PACs, PEAP-MSCHAPv2 to server-side certificate password tunneling, EAP-TLS to mutual certificate authentication, and WPA3-SAE to dragonfly key exchange.
Verifies precise conceptual matching across all four wireless security frameworks.

Anahtar Kavram

Wireless Authentication Protocols and EAP Frameworks
Soru 172Soru

A cybersecurity technician is reviewing recent security incident logs and physical security reports across an enterprise. Match each reported security incident scenario to its corresponding social engineering attack vector or threat classification.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A Chief Financial Officer receives an urgent email appearing to originate from the CEO, instructing them to execute an immediate wire transfer to a vendor for an undisclosed corporate acquisition.
An unauthorized individual holding a stack of large boxes closely follows an employee through a card-swipe secured entry door without presenting credentials.
Employees seeking an internal benefits portal are redirected to a malicious web page after inadvertently entering 'corp-beneefits.com' into their browser navigation bar.
An attacker compromises a niche industry news site regularly visited by the company's defense research team in order to execute drive-by malware downloads on visitor systems.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The executive wire transfer request matches Whaling, unauthorized entry past electronic doors behind an employee matches Tailgating, redirection due to misspelled URLs matches Typosquatting, and compromising an industry news website frequented by targeted personnel matches a Watering Hole Attack.
Each attack vector corresponds directly to its standardized security classification: executive-targeted email coercion matches Whaling, unauthorized physical door following matches Tailgating, domain misdirection based on typing errors matches Typosquatting, and strategic compromise of a niche website frequented by specific targets matches a Watering Hole Attack.

Adım Adım Çözüm

1
Evaluate the incident involving targeted email fraud aimed at executive leadership for high-value financial theft.
Identify that spear phishing specifically directed at high-level executives is Whaling.
Whaling targets senior executives (such as CFOs or CEOs) to attempt high-profile financial fraud or data theft.
2
Evaluate the physical access security breach involving entry behind authorized personnel.
Identify that unauthenticated physical entry following an authorized person is Tailgating.
Tailgating relies on social courtesies or physical proximity to enter restricted areas without presenting credentials.
3
Evaluate the web redirection caused by user typographical errors in web addresses.
Identify that exploiting misspelled web domains to trick users is Typosquatting.
Typosquatting relies on user error when typing URLs into web browsers.
4
Evaluate the third-party website compromise strategy aimed at a specific employee demographic.
Identify that compromising a site frequently visited by the target audience is a Watering Hole Attack.
Watering hole attacks infect trusted third-party websites where intended targets naturally gather online.

Anahtar Kavram

Social Engineering Attack Vectors and Threat Classifications
Soru 173Soru

A helpdesk technician is assisting users with standard operating system tools on macOS devices. Match each native macOS feature on the left to its primary system function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Keychain Access
Spotlight
Time Machine
Boot Camp

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Keychain Access matches with password and certificate storage; Spotlight matches with fast system indexing search; Time Machine matches with automated incremental backups; Boot Camp matches with dual-booting Windows on Mac hardware.
Keychain Access securely stores user passwords and certificates; Spotlight provides indexing search services; Time Machine manages automated incremental system backups; Boot Camp configures disk partitioning for dual-booting Windows.

Adım Adım Çözüm

1
Identify the primary administrative purpose of Keychain Access.
Keychain Access manages secure storage of passwords, keys, and certificates.
It acts as the macOS built-in credential repository.
2
Identify the primary function of Spotlight.
Spotlight indexes system data to enable fast search functionality across documents, apps, and settings.
It is invoked via Command + Space for instant system search.
3
Identify the primary function of Time Machine.
Time Machine performs automatic incremental backups of the operating system and user files.
It allows point-in-time recovery of deleted files or entire systems.
4
Identify the primary function of Boot Camp.
Boot Camp assists in setting up dual-boot configurations for running Microsoft Windows on Intel Macs.
It handles disk partitioning and driver setup for Windows operating systems.

Anahtar Kavram

macOS System Utilities and Administrative Tools
Soru 174Soru

A IT support specialist is reviewing wireless security protocols and authentication mechanisms for an upcoming network refresh. Match each wireless security term on the left with its corresponding operational definition or characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

WPA3-Personal
802.1X / RADIUS
WEP
TKIP

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

WPA3-Personal matches SAE protection against dictionary attacks; 802.1X / RADIUS matches enterprise authentication via a central server; WEP matches legacy protocol with weak 24-bit IV; TKIP matches interim per-packet key rotation protocol.
Each wireless protocol is correctly paired to its cryptographic or authentication mechanism: WPA3-Personal utilizes SAE to protect against dictionary attacks; 802.1X with RADIUS provides centralized enterprise access management; WEP is defined by its vulnerable 24-bit IV; and TKIP dynamically changes encryption keys per packet to fix initial WEP flaws.

Adım Adım Çözüm

1
Identify the key technology feature of WPA3-Personal.
Recognize that WPA3-Personal introduces SAE (Simultaneous Authentication of Equals) to secure passphrases.
SAE prevents dictionary attacks even when weak passwords are chosen.
2
Identify the primary function of 802.1X / RADIUS.
Associate 802.1X with enterprise access control reliant on a centralized RADIUS authentication server.
Enterprise networks require unique user credentials validated by a central server rather than a shared passphrase.
3
Differentiate between legacy encryption protocols WEP and TKIP.
Identify WEP as the older 24-bit IV flawed protocol and TKIP as the dynamic per-packet key replacement introduced with WPA.
Understanding legacy protocol flaws is essential for migration and network security assessment.

Anahtar Kavram

Wireless Security Protocols and Authentication Mechanisms
Tahmini Süre:1m 0s
Soru 175Soru

A desktop support technician is deploying physical and hardware security controls across multiple corporate facilities. Match each physical security control mechanism on the left to its corresponding primary protective function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

USB data blocker
Anti-passback system
Kensington lock
Privacy screen filter

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The physical security controls correctly match their primary protective functions: USB data blocker prevents data exchange during charging by disabling data lines; Anti-passback system prevents credential sharing and tailgating by enforcing badge exit tracking; Kensington lock physically tethers hardware to fixed objects; Privacy screen filter prevents shoulder surfing by narrowing screen viewing angles.
Each physical security control directly counters a distinct physical threat: USB data blockers mitigate juice jacking attacks; anti-passback rules eliminate badge-passing and tailgating; Kensington locks deter physical theft of mobile hardware; privacy screen filters prevent shoulder surfing.

Adım Adım Çözüm

1
Analyze the function of USB data blockers.
Identified that USB data blockers disable data pin continuity, protecting devices charging on untrusted public charging stations from data exfiltration or juice jacking.
Matches the protective function that prevents data transfer while allowing power delivery.
2
Analyze the operation of anti-passback access controls.
Identified that anti-passback enforces an alternating sequence of entry and exit scans for credential validity.
Matches the protective function requiring registered exit scans before allowing re-entry with the same credential.
3
Analyze hardware security cable locks (Kensington locks).
Identified that cable locks physically tether laptop or monitor chassis to immovable furniture or fixtures.
Matches the protective function anchoring equipment to fixed structural elements using steel cabling.
4
Analyze visual security controls.
Identified that privacy screens narrow viewing angles to prevent unauthorized observation from peripheral viewing angles.
Matches the protective function narrowing the display viewing cone to counter shoulder surfing.

Anahtar Kavram

Physical Security Controls
Soru 176Soru

A security technician is preparing training materials to help staff recognize different security risks. Match each threat type on the left with its correct description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Watering Hole Attack
Whaling
Dumpster Diving
Logic Bomb

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Watering Hole Attack matches compromising a frequently visited website. Whaling matches targeted phishing against high-profile executives. Dumpster Diving matches physically searching trash bins for sensitive documents. Logic Bomb matches dormant malicious code triggered by specified logical conditions.
Watering Hole Attack pairs with compromising a trusted website used by a target group. Whaling pairs with phishing aimed directly at high-level executives. Dumpster Diving pairs with looking through paper trash for confidential data. Logic Bomb pairs with malicious code designed to execute when specific criteria are met.

Adım Adım Çözüm

1
Analyze the web-based attack targeting specific industry sites.
Watering Hole attack infects a third-party site frequented by employees of the target group.
Attackers exploit trust in a third-party site to compromise visitors automatically.
2
Identify the high-profile targeted social engineering email scam.
Whaling targets senior executives such as CEOs and CFOs.
Whaling is a specific category of spear phishing aimed exclusively at high-level leadership.
3
Identify the physical security threat vector.
Dumpster Diving involves looking through physical waste containers for sensitive documents.
Attackers search municipal trash for unredacted passwords, internal directories, or proprietary documents.
4
Identify the dormant condition-triggered malware.
Logic Bomb triggers malicious commands when specific events or dates occur.
Logic bombs lie dormant until predetermined parameters are met.

Anahtar Kavram

Social Engineering and Threat Vector Classification
Soru 177Soru

A system administrator manages software permissions, service ports, credential vaults, and system processes across macOS and Linux endpoints in an enterprise environment. Match each CLI command or native operating system utility on the left with its exact administrative function or outcome on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

chmod 750 /scripts/backup.sh
Keychain Access
lsof -i :8080
kill -9 4152

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

chmod 750 /scripts/backup.sh matches granting rwx to owner, r-x to group, and no access to others. Keychain Access matches the native macOS security utility for passwords and certificates. lsof -i :8080 matches listing open files and processes bound to port 8080. kill -9 4152 matches sending an uncatchable SIGKILL signal to forcibly terminate PID 4152.
Each tool or command accurately matches its system function: chmod 750 assigns permissions by user tier (owner: rwx, group: r-x, others: none); Keychain Access manages macOS encrypted credentials; lsof -i :8080 inspects network-bound processes on port 8080; and kill -9 sends a SIGKILL signal to forcibly terminate the specified PID.

Adım Adım Çözüm

1
Analyze octal file permissions for chmod 750
7 = rwx (4+2+1), 5 = r-x (4+0+1), 0 = --- (0+0+0). This restricts all access for 'others'.
Understanding Linux/macOS octal permission flags is required to configure file security correctly.
2
Identify the macOS security management tool
Keychain Access manages stored credentials, tokens, and certificates in macOS.
Differentiating macOS-specific system utilities from standard Unix tools.
3
Determine the network diagnostic capabilities of lsof
The lsof command lists open files; in Unix/Linux systems, open network sockets are treated as files.
The -i flag filters output by network connections and ports.
4
Evaluate process termination signals using the kill command
Signal -9 corresponds to SIGKILL, which forces process shutdown immediately.
Standard kill (SIGTERM 15) allows graceful exit, while SIGKILL cannot be caught or ignored.

Anahtar Kavram

macOS and Linux Operating System Features and Tools
Soru 178Soru

A network technician is troubleshooting various network connectivity and configuration issues on Windows 11 client workstations. Match each Windows command-line utility or switch on the left with its correct operational objective on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

ipconfig /release
netsh wlan show profiles
nslookup
nbtstat -n

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

'ipconfig /release' matches sending a DHCPRELEASE message to forfeit IP configuration; 'netsh wlan show profiles' matches displaying saved wireless network profiles; 'nslookup' matches querying DNS servers directly; 'nbtstat -n' matches listing NetBIOS names registered locally.
Each tool directly corresponds to its network diagnostic role in Windows: 'ipconfig /release' surrenders the dynamic IP configuration back to the DHCP server; 'netsh wlan show profiles' enumerates stored wireless SSIDs; 'nslookup' queries DNS infrastructure directly; and 'nbtstat -n' displays local NetBIOS name registrations.

Adım Adım Çözüm

1
Analyze each command utility and parameter to identify its exact operational function in Windows networking.
Distinguish between IP addressing commands, wireless profile management, DNS diagnostic tools, and NetBIOS resolution utilities.
Accurate CLI utility selection is essential for diagnosing Windows network layer, name resolution, and adapter settings.
2
Match each utility to its correct administrative objective based on default Windows client behavior.
Correct matching pairs are established.
Verifies mastery of core Windows client networking command-line functionality.

Anahtar Kavram

Windows Client Networking Command-Line Utilities and Diagnostic Switches
Tahmini Süre:1m 30s
Soru 179Soru

Match each social engineering threat or attack vector on the left with its corresponding attack description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Pretexting
Shoulder Surfing
Watering Hole Attack
Typosquatting

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Pretexting matches the creation of a fabricated scenario by an auditor impersonator; Shoulder Surfing matches visual observation of passwords; Watering Hole Attack matches compromising a frequently visited industry website; Typosquatting matches registering misspelled domain names.
Each attack vector is matched to its defining characteristic: Pretexting involves creating a believable false context or identity; Shoulder Surfing involves physical line-of-sight observation; Watering Hole Attacks infect legitimate sites known to be frequented by targets; Typosquatting exploits user mistyping in web addresses.

Adım Adım Çözüm

1
Analyze the social engineering techniques involving deceptive scenarios.
Pretexting is identified as creating an invented scenario (a pretext) such as posing as an auditor to gain trust and credentials.
Pretexting specifically centers on creating a persona and scenario to manipulate the victim.
2
Analyze physical observation techniques.
Shoulder surfing is identified as visually observing a victim entering sensitive information like PINs or passwords.
Direct line-of-sight monitoring of screens or keypads defines shoulder surfing.
3
Analyze website-focused attack vectors.
Watering hole attacks compromise trusted industry websites frequented by targets, while typosquatting targets mistyped domain names.
Distinguishing between strategic site compromise (watering hole) and domain registration tricks (typosquatting) correctly pairs the web-based vectors.

Anahtar Kavram

Social Engineering Tactics and Attack Vector Classification
Soru 180Soru

Match each physical security control mechanism on the left with its primary protective function or implementation purpose on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Biometric Scanner
Cable Lock
Industrial Cross-Cut Shredder
Proximity Card Reader

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The correct matches pair Biometric Scanner with verifying identity using unique physical traits, Cable Lock with securing hardware to stationary fixtures, Industrial Cross-Cut Shredder with destroying sensitive paper and optical media, and Proximity Card Reader with granting access via contactless token detection.
Each physical security control serves a specific protective purpose: Biometric scanners use physiological attributes to verify identity, cable locks physically anchor hardware to prevent theft, shredders render physical media unreadable to prevent dumpster diving, and proximity readers validate RFID access tokens.

Adım Adım Çözüm

1
Identify the primary function of a Biometric Scanner
Matches with verifying identity via unique physical traits.
Biometrics rely on biological characteristics such as fingerprints or retina scans for authentication.
2
Identify the primary function of a Cable Lock
Matches with securing hardware to stationary fixtures.
Cable locks physically tie down equipment using hardened steel cables connected to security slots.
3
Identify the primary function of an Industrial Cross-Cut Shredder
Matches with destroying paper and media to prevent dumpster diving.
Shredding ensures physical documents and media cannot be reconstructed by attackers.
4
Identify the primary function of a Proximity Card Reader
Matches with granting physical access based on contactless token detection.
Proximity card readers detect RFID/NFC signals emitted from employee access badges.

Anahtar Kavram

Physical Security Controls and Functions
Tahmini Süre:1m 30s
ÖncekiSayfa 9 / 27Sonraki
Tüm alıştırma soruları — CompTIA A+ (Core 1 & Core 2) | Examkin