Security+ Practice Test 9

You have an e-commerce application that needs to be implemented. Implementing the application includes allowing access to external users on the Internet. You want to ensure the application is protected from cross-site scripting (XSS) and SQL injection. You also want to prevent OSI Layer 7 traffic. To meet the criteria in the scenario, which of the following should you implement along with the application?

Which of the following is a disadvantage of using a water-based system for fire suppression?

You need to connect two laptops using their wireless network adapter and share data between them. There is no network or wireless network available to connect both the laptops. You must perform this task with minimum administrative effort. What should you do?

Which of the following is an example of the nonregulatory framework?

You have recently implemented a media gateway that uses the Session Initiation Protocol (SIP) protocol. You want to ensure that the media gateway using SIP cannot be exploited via the man-in-the-middle (MITM) attacks. What should you do? [Choose all that apply.]

You log into your system using your password. A colleague is not able to log into your system with your account. Which authentication factor is this technique based on?

A crime scene technician in an organization collects all evidence from the moment a security incident had been discovered and documented the details of the events across their lifecycle. Which of the following process is performed by the forensic examiner here?

When do you create an Object identifier (OID)?

An employee’s background screening reveals evidence of criminal activities. As an employer, what should be the next step?

In a network configuration, where would you place the VPN concentrator?