Tuesday, 31 May 2016

Hands on: What's new and noteworthy with Android N

A detailed look at the most meaningful changes coming to Android via this year's yet-to-be-named N release.

With Google's I/O developers' conference behind us, it's time to start looking forward to what's next in the world of Android.

The most prominent thing is Google's rapidly approaching Android release, currently known only as Android "N." (The company has yet to reveal the full name or version number.) While the software itself isn't expected to arrive until sometime this summer, we're getting an increasingly clear picture of the fresh features and improvements it'll provide.

I've been using the pre-release versions of Android N since Google's first developer preview back in March and all the way through the most recent update put out last week (which is available to anyone with an eligible device, though be warned that it isn't entirely stable). While the software is still in flux and its elements aren't guaranteed to remain unchanged, we've seen enough at this point to get a pretty good idea of what's in the works.

Here's a tour of the most significant new elements in Android N as of now -- and why they all matter.
[ Further reading: Microsoft PowerApps first look: Create mobile apps without coding ]

(Remember: Since manufacturers are able to customize Android as they like, some specifics of the software may vary from one device to the next once N is actually released, as will the timing of when the upgrade becomes available. What's described here is Google's core vision for the software -- which is what's used on its own Nexus devices and what all manufacturers use as a base for their efforts.)
Multi-window mode

The marquee feature in Android N is without a doubt its new multi-window mode. The feature makes it possible to split a device's display in half and view two apps onscreen at the same time.
02 android n multi window

The new multi-window mode makes it possible to split a device's display in half and view two apps onscreen at the same time.

Sound familiar? It should: Manufacturers like Samsung have been adding that ability into their Android devices for quite a while now. Android N, however, marks the first time the function is being offered as a native part of the actual operating system -- which means it's the first time it'll be available on all Android devices, regardless of who makes them, and the first time developers will be able to optimize their apps to work consistently well with the feature across the entire platform.

Taking advantage of multi-window mode on Android N is quite easy: While using any app, you simply press and hold the system Overview key (typically the square-shaped icon next to the Back and Home icons). That shrinks the app down to half of the screen and brings up cards showing your most recently used apps in the other half. All you do then is select the second app you want from the stack of cards, and ta-da: You've got two apps running simultaneously on your display.

Alternatively, you can fire up multi-window mode by tapping the Overview key once from anywhere in the system -- then touching and holding any card in your recently used apps list and dragging it onto the top part of the screen. You can even arrange two Chrome tabs together, if you want.

If you're anything like me, multi-window mode isn't something you'll use all the time -- but it is something that can come in handy once in a while, like when you want to glance at an email while editing a document or send a text message while continuing to watch a video on YouTube.

Something I've been enjoying even more than multi-window mode is the new fast app-switching feature available in Android N. You can think of it as Alt-Tab for Android: When you want to jump back and forth between two apps in a snap, you just double-tap the Overview key -- and almost instantly, Android zaps you back to the last app you had open.

It makes for a much more efficient way of hopping between processes. Once you get used to it, you'll wonder how you ever got along before.
An improved Overview

For times when hopping alone won't suffice, you'll still want to use Android's full Overview interface -- and with the N release, that part of the platform gets some much-needed polish.

As of the most recent preview, Android N limits the number of items in the Overview list, so that you see only cards from the last seven apps you've had open. That's a huge improvement from the previous mess of a setup, where dozens upon dozens of cards would stack up and make the function more overwhelming than useful.

In addition to the inherently decluttered view, Android N offers a new command to clear away all the cards in the Overview list and start fresh. All in all, it's a much improved user experience that makes getting around Android even easier.
Better notifications

Android's notifications are getting better thanks to a refined interface introduced in Android N. Multiple alerts from a single app are now bundled together into a single expandable card -- so if, for instance, you received three new messages in Gmail, you'll see a single card in your notification panel with an overview of that info. Tapping the card will then fan it out into individual mini-cards with more detailed info on each message, and tapping any one of those mini-cards will expand it and allow you to perform message-specific actions like archiving.

Left: The initial "bundled" view of multiple notifications from a single app. Right: The fully expanded view with detailed message info and actions.
Android N also makes it possible to reply to a notification right from the notification panel -- something certain apps allowed via workarounds in the past but that can now be accomplished far more easily and consistently. With Hangouts, for example, tapping the Reply button within a notification causes the notification to expand downward and a text window to appear inside it. You can then type your response and send it without ever switching apps or stopping whatever else you were doing -- a cleverly implemented convenience that quickly becomes invaluable.
More satisfying Quick Settings

Speaking of accomplishing things without interruptions, Android's Quick Settings feature gets some significant new polish with the N release.
First of all, a scaled-down version of your Quick Settings now appears when you first pull down the notification panel -- a major improvement from previous versions of Android, which utilized nearly the same amount of space to display only the time, date and a few function-free icons. With Android N, that area holds six functional shortcuts for tasks like toggling your device's Wi-Fi, Bluetooth or do-not-disturb mode.

Left: The scaled-down version of Quick Settings. Right: The fully expanded panel.
When you swipe down on the panel a second time (or swipe down once with two fingers, if you prefer), it expands to show a series of tiles that give you access to a broader and more versatile range of commonly used functions. These tiles allow you to perform more intricate actions -- like connecting to a specific Wi-Fi network or viewing detailed battery usage info -- without ever exiting the Quick Settings pull-down.

The tiles are now customizable, too: You can add and remove items and place them in any order you like. And whichever tiles you place into the first five spots appear in the scaled-down version of Quick Settings described above -- an extremely useful bit of personalization potential.
Spruced up system settings

Android's full system settings also get a fresh coat of paint in Android N. It's nothing transformational, but you'll notice some subtle improvements -- such as a new Suggestions section at the top that tries to predict what you're looking for and make it easy to find, or the fact that the main settings screen now shows extra nuggets of info under each primary option (like your current ringer volume level under the Sound heading, for instance, or how much of your device's storage is available under Storage).

Android's full system settings also get a fresh coat of paint.
You'll find a few newly added options within the settings, too, for things like setting separate wallpaper for your home and lock screens, and the ability to adjust your device's display size and make everything bigger.

Google has also attempted to make getting around the system settings simpler by adding a side-loading menu that lets you move directly from one section to another. Hey, anything that can save a second or two -- right?
A customizable Share menu

A seemingly teensy change that's become one of my favorite Android N features is the ability to customize the system-wide Share menu. Google's used a lot of different methods for sorting that menu over the years, but for some reason, my favorite sharing destinations always seem to end up buried in the middle of the list and frustratingly hard to find.

You can long-press any icon in the Share list and pin it to the top of the Share menu.
With Android N, you can long-press any icon in the Share list and pin it to the top. You can pin any number of apps you want, and they'll appear in the order you pinned them.

Sometimes, it's the smallest things that make the biggest difference.

Data-saving support
Unlimited data isn't a reality for many smartphone owners these days, and Android N has a little something for the gigabyte-pinchers among us: a new Data Saver mode that senses when you're on a metered network and puts the brakes on your mobile data usage.

Data Saver works in two ways: First, it blocks background data usage so your apps won't move any more bytes than is absolutely necessary. (You can manually whitelist certain apps as exceptions if you want.) And second, it tells apps to limit the amount of data use in the foreground whenever possible.

Take that, pesky carrier caps!
Under-the-hood advancements and big-picture changes

In addition to all the front-facing features, Android N includes the usual host of under-the-hood improvements we hear about with practically every OS upgrade. This latest version of Android promises to provide faster and more effective performance, better battery life and other similar stuff. It hasn't been anything I've noticed in regular day-to-day use, but your mileage may vary (and some of these areas may be more apparent once a final release arrives).

Android N also introduces support for a new VR Mode that'll provide a system-level platform for phone-connected virtual reality headsets. Devices will have to meet specific hardware requirements in order to be certified as "VR ready," though, and Google's Nexus 6P is the only phone that's been certified thus far -- so odds are, you won't be seeing the effects of this on your current device anytime soon.

On the enterprise front, meanwhile, Google's Android for Work program gains a handful of new features with the N release, including quick device-provisioning via QR code scanning, an optional security challenge to add an extra safeguard to work-related apps, a simple toggle for users to enable and disable a device's work mode and an always-on VPN requirement.

And beyond the N release, Google is prepping a system that'll make it possible to open and use apps without ever installing them; it'll work on any phone running Android 4.2 or higher when it launches later this year. More broadly yet, new efforts are underway to bring Chrome OS and Android closer together, including a plan to make all Android apps available on Chromebooks -- something that has huge implications for the future of Google's platforms (despite what some myopic analysts may surmise).

All in all, Google's certainly got its hands full -- and it shouldn't be long before the fruits of its labor start making their way into our lives.

Thursday, 7 May 2015

Comptia A+ Essentials Exam Simulator

Certkigndom.com A+ Essentials exam simulator consists of 425+ questions with Flash cards. The tests are offered in two modes. A. Online version, and b. Downloadable version. In the online version, a user need to take the tests online after logging in to the website (Internet connectivity is required). In the download version, a user may download the Certkingdom, and take the test on his/her desktop computer.

CompTIA® A+ Essentials Exam Simulator (220-801) Details

Exam Simulator Cert A+ Essentials

Exam Objectives Covered PC Hardware 40%
Networking 27%
Laptops 10%
Printers 11%
Operational Procedures 11%
Total 100%

Number of questions in the practice test 425+ questions

Question Types Multiple Choice Single/Multiple Answer, Exhibit type.

The important features of the Exam Simulator:

Up to date practice questions with detailed explanations.
Immediate online activation.
Verify for any product updates.
Store and view results at a later date, or review answers.
Integrated Test Environment that allows for installed/available test modules.
Supports several question types including multiple choice, true/false, fill-in-the-blanks, drag-n-drop, etc. that provide close to actual exam environment.

Flash cards.
220-801 and 220-802 training, 220-801 and 220-802 videos, 220-801 and 220-802 online training, 220-801 and 220-802 study guide, 220-801 and 220-802 ebooks
Number of Exams

Two exams (maximum of 90 questions, 90 minutes): 220-801 and 220-802 (JK0-801 and JK0-802 for CompTIA Academy Partners)

Cost per Exam
$194 USD per exam; Exams offered by Pearson VUE: www.pearsonvue.com/comptia

Exam vouchers available at CompTIA

URL certification.comptia.org/getCertified/certifications/a.aspx

Self-Study Materials CompTIA Study Materials: CompTIA offers a number of self-study materials including exam objectives, sample questions, study guides (nominal fee of $50 USD), as well
 as classroom and e-learning training opportunities. Credential seekers may also want to check out the CertMaster online learning tool.



Tuesday, 17 February 2015

642-737 Implementing Advanced Cisco Unified Wireless Security (IAUWS) v2.0


QUESTION 1
Which statement describes the major difference between PEAP and EAP-FAST client
authentication?

A. EAP-FAST requires a backend AAA server, and PEAP does not.
B. EAP-FAST is a Cisco-only proprietary protocol, whereas PEAP is an industry-standard
protocol.
C. PEAP requires a server-side certificate, while EAP-FAST does not require certificates.
D. PEAP authentication protocol requires a client certificate, and EAP-FAST requires a secure
password.

Answer: C

Explanation:


QUESTION 2
Which one best describes the EAP Identity Request frame when a wireless client is connecting to
a Cisco WLC v7.0-based AP WLAN?

A. sourced from the Cisco ACS Server to the client
B. sourced from the client to the Cisco ACS Server
C. sourced from the WLC to the client
D. sourced from the client to the WLC
E. sourced from the AP to the client
F. sourced from the client to the AP

Answer: C

Explanation:


QUESTION 3
What are the four packet types that are used by EAP? (Choose four.)

A. EAP Type
B. EAP Request
C. EAP Identity
D. EAP Response
E. EAP Success
F. EAP Failure
G. EAP Authentication

Answer: B,D,E,F

Explanation:


QUESTION 4
When a supplicant and AAA server are configured to use PEAP, which mechanism is used by the
client to authenticate the AAA server in Phase One?

A. PMK
B. shared secret keys
C. digital certificate
D. PAC

Answer: C

Explanation:


QUESTION 5
Which EAP types are supported by MAC 10.7 for authentication to a Cisco Unified Wireless
Network?

A. LEAP and EAP-Fast only
B. EAP-TLS and PEAP only
C. LEAP, EAP-TLS, and PEAP only
D. LEAP, EAP-FAST, EAP-TLS, and PEAP

Answer: D

Explanation:


Thursday, 4 December 2014

The top infosec issues of 2014

Security experts spot the trends of the year almost past
There is still time for any list of the “top information security issues of 2014” to be rendered obsolete. The holiday shopping season is just getting into high gear, after all, and everybody knows it was from late November to mid-December last year when the catastrophic Target breach occurred.

But this list is about more than attacks and breaches – it is about broader infosec issues or trends that are likely to shape the future of the industry.
MORE ON NETWORK WORLD: Free security tools you should try

Several experts offered CSO some thoughts on their top picks, what can be learned from them and whether that knowledge can help organizations improve their security posture in the coming year.

Cyber threats trump terrorism
An Associated Press story this past week on the federal government’s $10-billion annual effort to secure its multiple agencies noted, almost in passing, that, “intelligence officials say cybersecurity now trumps terrorism as the No. 1 threat to the U.S.”

That makes sense to Sarah Isaacs, managing partner at Conventus. While cyber attacks have been expanding and evolving for decades, Isaacs said there has been a qualitative change: It is not just criminals trying to steal money – it is nation states using it for espionage and even military advantage.

Be sure not to miss:
Free security tools you should try

In May, “the Department of Justice indicted five members of China’s People’s Liberation Army on felony hacking charges for stealing industrial secrets,” she said. “We’ve never seen that before.”

Then in September, “NATO agreed that a cyber-attack could trigger a military event,” she said. “This is about more than protecting credit cards. This is escalating to new levels.”
"Everyone is oversharing everything. The threats are broad and potentially catastrophic."
sarah isaacs

Sarah Isaacs, managing partner, Conventus
Author, security guru and Co3 Systems CTO Bruce Schneier, would likely agree. In a recent blog post, he wrote that increasingly sophisticated attacks, especially advanced persistent threats (APT) that are not about financial theft, are coming from, “a new sort of attacker, which requires a new threat model.”

There is evidence of that in a recent study by ISACA on APTs. CEO Rob Clyde said 92% of respondents, “feel APTs are a serious threat and have the ability to impact national security and economic stability.”

Clouds – private, public and hybrid – are not new. But the steady increase in the use of cloud storage services is posing larger risks to businesses.

Schneier, in his blog post, said the continuing migration to clouds means, “we've lost control of our computing environment. More of our data is held in the cloud by other companies …”

While experts say cloud service providers frequently provide better security, that may not be true of so-called “shadow” or “rogue” use of clouds by workers who believe that is an easier way to do their jobs than going through IT.

Internet of Everything (IoE) – a hacker frontier
The Internet of Things (IoT) is so last year. It is now the IoE. Smart, embedded devices in homes, cars, electronics, machines, and worn by individuals are now mainstream. They already number in the billions, and estimates of their growth range from 50 billion by 2020 to more than a trillion within the next decade.

And that means a growing tsunami of data flowing to the Internet, where it can be sold for marketing purposes or stolen for more malicious means.

Isaacs, who says she is among those who uses an exercise wearable, said she used “dummy data” to register it. “So nobody knows it’s my data,” she said. “It can’t be mapped directly to me.”

In general, however, she said, “everyone is oversharing everything. The threats are broad and potentially catastrophic. I’m very nervous about the smart cars I see.

There does seem to be an increasing awareness of the privacy implications of smart cars. The AP reported this week that 19 automakers that make most of the cars and trucks sold in the U.S. signed on to a set of principles, delivered to the Federal Trade Commission (FTC), that seek to reassure vehicle owners that the information gathered by those vehicles, “won't be handed over to authorities without a court order, sold to insurance companies or used to bombard them with ads … without their permission.”

The vulnerabilities of “smart” devices to hacking have been demonstrated numerous times, prompting Phil Montgomery, senior vice president of Identiv to call for, “a more regimented standards-based security approach that relies less on outdates processes around username/password technology and more on stronger forms of authentication.”

No parties for third parties
This was the year that the risks of breaches through third-party contractors made it into mainstream consciousness. The Target breach, which exposed 70 million records, was just one of many that came through outside vendors.

Regulatory agencies are trying to maintain that awareness. Stephen Orfei, the new general manager of the Payment Card Industry Security Standards Council (PCI SSC) noted in a recent interview that, “security is only as good as your weakest link – which means the security practices of your business partners should be as high a priority as the integrity of your own systems.”
"Employee negligence was at an all-time high in 2014."
christine marciano

Christine Marciano, president, Cyber Data-Risk Managers
Christine Marciano, president of Cyber Data-Risk Managers, said that in addition to vetting vendors for rigorous security standards, companies should, “require their vendors to carry and purchase cyber/data breach insurance, to indemnify them for any costs associated with a data breach caused by the vendor’s negligence.”

The porous, sometimes malicious, human OS
While third parties may be a weak link in the security chain, that is less likely due to technology and more due to the human factor.

It was former National Security Agency contractor Edward Snowden who brought the risks of malicious insiders to international attention in 2013, but the danger to enterprises can be just as great from loyal insiders who are simply "clueless or careless," and fall for social engineering scams.

Joseph Loomis, founder and CEO of CyberSponse, said he is, “sure there are major companies out there with little controls over their employees and their access rights. Who is watching who and what they’re doing?”

It is also about employees controlling themselves when presented with ever-more persuasive social engineering attacks.

The federal government reported earlier this year that 63 percent of the breaches of its systems in 2013 were due to human error.

According to Marciano, “employee negligence was at an all-time high in 2014,” with the problems ranging from, “failure to perform routine security procedures to lack of security awareness, routine mistakes and misconduct.”

Eldon Sprickerhoff, cofounder and chief security strategist at eSentire, noted that, “phishing emails are getting better and better. I’ve seen some that were so well targeted, so well done that I could not tell the difference.”

And it is not just the average worker who is a problem. Identity Finder CEO Todd Feinman said the problem goes all the way to the top. “Many executives don’t know where their sensitive data is so they don’t know how to protect it,” he said.

Ubiquitous BYOD
While BYOD is now mainstream in the workplace, Isaacs calls the increased focus on mobile computing, “very scary, and it’s going to get even worse.”

BYOD is now bringing, “extremely unreliable business applications inside the walls of corporations,” she said. “There are a lot of software vulnerabilities. Every app that is free or 99 cents, probably doesn’t have great level of security. And people don’t install patches either.”

According to Clyde, “there are now many times more mobile devices than PCs in the world. In fact, in many regions of the world, mobile devices are the only way most users connect to the Internet,” yet security remains a relative afterthought.

ISACA found that, “fewer than half (45%) have changed an online password or PIN code.

And now, connected wearable devices (BYOW) are becoming common in the workplace, yet, “a majority of professionals say their BYOD policy does not address wearable tech, and some do not even have a BYOD policy,” Clyde said.

The age of Incident Response (IR)
All of the above issues have led to an increased focus on IR. According to Schneier, this is not just the year but the decade of IR, following a decade of protection products and another of detection products.

In his blog post, he cited three trends: More data held in the cloud and more networks outsourced; more APTs by nation states and; a continuing lack of investment in protection and detection, leaving the bulk of the burden on response.
"Incident Response is, 'the hardest job in security'."
tom bain

Tom Bain, vice president, CounterTack
But IR has been more on everybody’s lips in 2014 than even a couple of years ago. The mantra of security experts is that it is not a matter of if, but when, an organization will be breached, and that an effective IR plan (combined with detection) can make attacks more of a nuisance than a disaster.

Getting IR right is crucial, but Tom Bain, vice president of CounterTack, calls it, “the hardest job in security. You can have all the technology in place to detect, prevent and analyze, but if your workflow is broken, or the team is so inundated with incident investigation, you are still vulnerable,” he said.

More regulation, please

An industry that generally decries government regulation – retail – is now singing the opposite tune when it comes to cyber security.

A Nov. 6 letter signed by 44 state and national organizations representing retailers, addressed to the leaders of both houses of Congress, called for, “a single federal law applying to all breached entities (to) ensure clear, concise and consistent notices to all affected consumers regardless of where they live or where the breach occurs.”

Sprickerhoff said such a law would be, “a good first step. There are 38 states with different definitions of what is a breach, so things are getting a bit out of hand,” he said. “If you had unifying description of what needs to be done, that’s not a bad thing.”

But, of course, notification is not the same as improving security. And there are limits to what regulation can accomplish in that area.
"I would prefer that organizations focus on results or outputs, like what was the time from detection to containment."
richard bejtlich

Richard Bejtlich, chief security strategist, FireEye
“I worry that ‘compliance with frameworks’ attracts a lot of attention,” said Richard Bejtlich, chief security strategist at FireEye. “I would prefer that organizations focus on results or outputs, like what was the time from detection to containment?

“Until organizations track those metrics, based on results, they will not really know if their security posture is improving,” he said.

What to do?
There are, of course, no magic bullets in security. Isaacs said, noting that it’s almost impossible to say what is the biggest threat. “I heard a speech where it was described as, “death by a thousand cuts,” she said.

But experts do have suggestions. Sprickerhoff said more training is crucial, not just the security awareness of employees, but the next generation of IT security experts.

“I don’t think it’s ever been harder to find good people in IT security,” he said. “There’s not much in course work at the college level.”

Eyal Firstenberg, vice president research, LightCyber, said improving security is going to take a combination of technology and training.

“There is a need for fast and accurate alerts and notifications, which ultimately determine the outcome of these cyber engagements,” he said, but added that, “organizations need more professional diagnosticians on staff who are trained to know what threats are real and need to be addressed, and which ones aren’t.”

Ashley Hernandez, an instructor for Guidance Software, calls for more communication among organizations. “Security professionals need to have a way to share intelligence about patterns or attack types to others in their industry or trusted security groups,” she said.

Clyde notes that ISACA, “has a number of programs, from risk governance frameworks like COBIT 5 to the Cybersecurity Nexus (CSX), to ensure cybersecurity professionals have the skills they need to defend enterprises from the plethora of threats.”

Finally, Loomis offers a short list:
Improve procurement processes. “It takes too long to buy new tools,” he said.
Start educating your staff on what the DHS and NIST Frameworks really are. Read the MITRE book on the 10 strategies to a world-class SOC.
Stop believing the marketing and get real-world feedback on tools. “Security has put a lot of money into marketing, but that doesn’t mean the solution is right for the organization,” he said.
Run simulations. “When was the last time a company ran a real cyber drill?” he asked.
Stop following paper policy, “Militarizing your team, running drills, making it second nature is what will help the response process, not following a check list,” he said.

Monday, 7 July 2014

CompTIA Linux+ Certification 2014

The Linux+ Certification 2014 is provided by CompTIA, which is a non-profit trade association and provides various professional certifications for the IT industry, all over the world. CompTIA also provides membership programs which include informative resources for the businesses and allows them to stay updated and at the forefront of the IT industry. CompTIA’s certifications including the Server+ certification are recognized by the American National Standards Institute (ANSI) which increases their significance in the IT industry.

CompTIA’s Linux+ Certification 2014 focuses on knowledge of the Linux operating system and its variant operating systems, including details regarding their installation and operation and the basic concepts of free software and open source licenses, associated with these operating systems. Professionals having the Linux+ Certification 2014 have the skills and knowledge to use the Linux command line, perform installation, configuration and maintenance of Linux workstations as well as assisting users with Linux.

Ever since its release the CompTIA Linux+ Certification 2014 exam has received some criticism about the huge number of questions related to hardware that were on the exam in its initial versions, the same kind of questions, which were covered on the A+ exam also. However the newest version of the exam has removed this discrepancy. The evolution of the CompTIA Linux+ Certification 2014 began in July, 2008 and incorporated a Job Task Analysis (JTA), in which subject experts on the operating system evaluated job roles and assignments of IT professionals involved with open source operating systems. This information is then used for the purpose of to updating the exam objectives of Linux+ Certification 2014s.

Linux+ Certification 2014 Requirements

Candidates attempting the Linux+ Certification 2014 must have 6 to 12 months of practical experience using the Linux operating system and its administration. The certification consists of two exams the LX0-101 and LX0-102. There are 60 questions on each exam and the duration of the exams is 90 minutes Passing score of 500 is required on a scale of 200-800. Currently the exam is available in English language with the German, Brazilian, Portuguese, Chinese and Spanish languages versions planned to be introduced soon by CompTIA.

CompTIA’s recommendations for Linux+ prerequisites are the CompTIA A+ and CompTIA Network+ certifications along with practical experience. The previous version of the Linux+ Certification 2014 exam was the exam XK0-002, which is scheduled to be retired at the end of October 2010.

Exam Topics

Exam topics frequently include subject matter related to the installation methods of Linux, configuration of boot loader, RPM management systems, working with Linux directories using the command line and bash shell, security matters, network administration, mounting file systems and configuration files of applications that Linux servers commonly run. Also included are topics about system architecture, GNU and Unix commands, devices under Linux, file systems and their hierarchy standard.

The configuration and usage of the X Window system is also a part of formal exam objectives, but questions regarding this topic rarely appear in the exam. The reason for this that the exam is concentrated more on use and working of the Linux operating system in the server and networks domain as compared to its use as a desktop

Friday, 7 March 2014

CV0-001 CompTIA Cloud+ Certification Exam


QUESTION 1
Which of the following is MOST important when factoring network level security in a public cloud
environment?

A. Ensuring good user experience
B. Ensuring confidentiality
C. Ensuring redundancy
D. Ensuring high availability

Answer: B

Explanation:


QUESTION 2
Which of the following should an administrator implement when connecting the company’s existing
network to a public cloud environment to ensure confidentiality of data that is being transmitted?

A. A proxy server
B. A load balancing solution
C. An IPSec tunnel
D. A server clustering solution

Answer: C

Explanation:


QUESTION 3
An administrator is creating a new VM template and has a requirement that the OS must be
hardened. Which of the following should be performed to harden a guest OS?

A. Encrypt the hard drive
B. Run defrag
C. Rename administrator account
D. Change page file

Answer: C

Explanation:


QUESTION 4
A company has decided to reduce their datacenter size. An administrator for the company has
been tasked to virtualize many of the company’s servers. Which of the following should the
administrator perform to accomplish this goal?

A. P2V
B. P2P
C. V2P
D. V2V

Answer: A

Explanation:


QUESTION 5
An administrator needs to provide Internet access to all internal systems using a single IP
address. Which of the following should the administrator implement?

A. NAT
B. Virtual switching
C. VLAN tagging
D. PAT

Answer: A

Explanation: