CompTIA Advanced Security Practitioner Sample Questions:

1. An administrator's company has recently had to reduce the number of Tier 3 help desk technicians available to support enterprise service requests. As a result, configuration standards have declined as administrators develop scripts to troubleshoot and fix customer issues. The administrator has observed that several default configurations have not been fixed through applied group policy or configured in the baseline. Which of the following are controls the administrator should recommend to the organization's security manager to prevent an authorized user from conducting internal reconnaissance on the organization's network? (Select THREE).

A) Search engine reconnaissance
B) BIOS security
C) Disable command execution
D) NIDS
E) TLS
F) Port security
G) HIDS
H) IdM
I) Network file system

2. The Chief Information Officer (CIO) is reviewing the IT centric BIA and RA documentation. The documentation shows that a single 24 hours downtime in a critical business function will cost the business $2.3 million. Additionally, the business unit which depends on the critical business function has determined that there is a high probability that a threat will materializebased on historical data. The CIO's budget does not allow for full system hardware replacement in case of a catastrophic failure, nor does it allow for the purchase of additional compensating controls. Which of the following should the CIO recommend to the finance director to minimize financial loss?

A) The company should mitigate the risk.
B) The company should avoid the risk.
C) The company should transfer the risk.
D) The company should accept the risk.

3. A database administrator comes across the below records in one of the databases during an internal audit of the payment system:
UserIDAddressCredit Card No.Password
jsmith123 fake street55XX-XXX-XXXX-1397Password100
jqdoe234 fake street42XX-XXX-XXXX-202717DEC12
From a security perspective, which of the following should be the administrator's GREATEST concern, and what will correct the concern?

A) Concern: User IDs are confidential private information.
Correction: Require encryption of user IDs.
B) Concern: Passwords are stored in plain text.
Correction: Require a minimum of 8 alphanumeric characters and hash the password.
C) Concern: More than four digits within a credit card number are stored.
Correction: Only store the last four digits of a credit card to protect sensitive financial
information.
D) Concern: User IDs are also usernames, and could be enumerated, thereby disclosing
sensitive account information.
Correction: Require user IDs to be more complex by using alphanumeric characters and
hash the UserIDs.

4. For companies seeking to move to cloud services, variances in regulation between jurisdictions can be addressed in which of the following ways?

A) Ensuring the cloud service provides high availability spanning multiple regions.
B) Using an international private cloud model as opposed to public IaaS.
C) Encrypting all data moved to or processed in a cloud-based service.
D) Tagging VMs to ensure they are only run in certain geographic regions.

5. A security analyst is tasked to create an executive briefing, which explains the activity and motivation of a cyber adversary. Which of the following is the MOST important content for the brief for management personnel to understand?

A) Threat actor types, threat actor motivation, and the attack impact
B) Threat actor types, threat actor motivation, and attack tools
C) Threat actor types, attack sophistication, and the anatomy of an attack
D) Unsophisticated agents, organized groups, and nation states

Solutions: