CompTIA Security+™: Review Guide

4.8. Review Questions

1. What is the primary goal of auditing?

   1. Detect virus infections

   2. Look for rogue services

   3. Scan for open ports

   4. Check compliance with security policy

2. Which of the following risk assessment formulas represents the total potential loss a company may experience within a single year due to a specific risk to an asset?

   1. EF

   2. SLE

   3. ARO

   4. ALE

3. What is an asset?

   1. An item costing more than $10,000

   2. Anything used in a work task

   3. A threat to the security of an organization

   4. An intangible resource

4. Which of the following is not a feature or capability of a port scanner?

   1. Determine open ports

   2. Determine active services

   3. Determine target OS

   4. Determine weakness of OS

5. What is a significant difference between vulnerability scanners and penetration testing?

   1. One tests both the infrastructure ...