Copyright Goodheart-Willcox Co., Inc. 95 SAMPLE SECURITY+ EXAM QUESTIONS 1. Trevor is on a security team hired to conduct a pen test for a company. Which of the following will he need to understand the depth and type of testing required? A. White box testing B. Threat intelligence C. RoE D. NDA 2. Amy is on a red team conducting reconnaissance. Which of the following is most likely to be detected by a blue team? A. War driving B. Banner grabbing C. Footprinting D. Collecting personal information of managers from social media platforms 3. What security benefit does performance monitoring offer administrators? A. The CPU is fast enough to keep up with requests. B. The server’s hard disk can be monitored before it runs out of space. C. It can show an unusual amount of traffic is being recorded on the network adapters. D. It maintains the status of antivirus and vulnerability software. 4. An administrator notices a high amount of disk activity. What would the administrator use to determine if this is an unusual occurrence? A. Baseline B. System event log C. Stateful firewall D. Vulnerability scanner 5. A security administrator needs to review auditing results. Where will this information be found? A. Security log B. Properties of the object being audited C. Group policy D. In a firewall 6. In reviewing a system log, which of the following events should have the highest priority in a security investigation? A. A warning message indicates that the DHCP server failed to start on first attempt. B. The date and time the payroll report was printed C. The Google updater service terminated with an error. D. The computer entered sleep mode.