Book Image

CompTIA Security+ Practice Tests SY0-501

By : Ian Neil
Book Image

CompTIA Security+ Practice Tests SY0-501

By: Ian Neil

Overview of this book

CompTIA Security+ is a core security certification that will validate your baseline skills for a career in cybersecurity. Passing this exam will not only help you identify security incidents but will also equip you to resolve them efficiently. This book builds on the popular CompTIA Security+ Certification Guide, which mirrors the SY0-501 exam pattern. This practice test-based guide covers all six domains of the Security+ SY0-501 exam: threats, attacks, and vulnerabilities; technologies and tools; architecture and design; identity and access management; cryptography and PKI; and risk management. You’ll take six mock tests designed as per the official Security+ certification exam pattern, each covering significant aspects from an examination point of view. For each domain, the book provides a dedicated cheat sheet that includes important concepts covered in the test. You can even time your tests to simulate the actual exam. These tests will help you identify gaps in your knowledge and discover answers to tricky exam questions. By the end of this book, you’ll have developed and enhanced the skills necessary to pass the official CompTIA Security+ exam.
Table of Contents (9 chapters)

Chapter 5: Cryptography and PKI Practice Tests

Practice Test 17 – Solution

1. Encryption takes plaintext and turns it into unreadable ciphertext.

2. A wildcard certificate can be used on multiple servers in the same domain. Therefore, when you install it, the name of the server will be inserted into the X509.

3. The old private key is required to decrypt the data. Keys work in pairs and the old public key encrypted the data, therefore, he needs the corresponding private key to decrypt it.

4. A digital signature provides non-repudiation and integrity of the email. He needs to sign it with his private key. There is only one private key.

5. A digital signature provides both integrity, so you know that it has not been tampered with, and non-repudiation as it was signed using the one and only private key.

6. The best form of encryption for small mobile devices is to use Elliptic Curve Cryptography (ECC) as it has a small footprint and uses the Diffie Hellman handshake.

7. ECC is never...