CET_TARDE - Security Fundamentals 2017 - Part 2

Frage 1 von 125

1

A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?

Wähle eine der folgenden:

Trojan horse
Brute force
Ping of death
SYN flooding

Erklärung

Frage 2 von 125

1

What environment would be best suited for a two-firewall network design?

Wähle eine der folgenden:

large corporate environment
A home environment with 10 or fewer hosts
A home environment that needs VPN access
A smaller, less congested business environment

Erklärung

Frage 3 von 125

1

While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?

Wähle eine der folgenden:

Worm
Virus
Trojan horse
Denial of service

Erklärung

Frage 4 von 125

1

Which two statements are true concerning anti-spam software? (Choose two.)

Wähle eine oder mehr der folgenden:

Anti-spam software can be loaded on either the end-user PC or the ISP server, but not both.
When anti-spam software is loaded, legitimate e-mail may be classified as spam by mistake.
Installing anti-spam software should be a low priority on the network.
Even with anti-spam software installed, users should be careful when opening e-mail attachments.
Virus warning e-mails that are not identified as spam via antispam software should be forwarded to other users immediately.

Erklärung

Frage 5 von 125

1

What type of advertising is typically annoying and associated with a specific website that is being visited?

Wähle eine der folgenden:

Adware
Popups
Spyware
Tracking cookies

Erklärung

Frage 6 von 125

1

What part of the security policy states what applications and usages are permitted or denied?

Wähle eine der folgenden:

Dentification and authentication
Remote access
Acceptable use
Incident handling

Erklärung

Frage 7 von 125

1

To which part of the network does the wireless access point part of a Linksys integrated router connect?

Wähle eine der folgenden:

DMZ
External
Internal
A network other than the wired network

Erklärung

Frage 8 von 125

1

Identify three techniques used in social engineering. (Choose three.)

Wähle eine oder mehr der folgenden:

Fishing
Vishing
Phishing
Spamming
Pretexting
Junk mailing

Erklärung

Frage 9 von 125

1

What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?

Wähle eine der folgenden:

Brute force
Spam
Spyware
Tracking cookies

Erklärung

Frage 10 von 125

1

Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?

Wähle eine der folgenden:

SPI
DMZ
ISR
ISP

Erklärung

Frage 11 von 125

1

During a pretexting event, how is a target typically contacted?

Wähle eine der folgenden:

By e-mail
By phone
In person
Through another person

Erklärung

Frage 12 von 125

1

What is a major characteristic of a Worm?

Wähle eine der folgenden:

Malicious software that copies itself into other executable programs
Tricks users into running the infected software
A set of computer instructions that lies dormant until triggered by a specific event
Exploits vulnerabilities with the intent of propagating itself across a network

Erklärung

Frage 13 von 125

1

What term is used to describe a dedicated hardware device that provides firewall services?

Wähle eine der folgenden:

Server-based
Integrated
Personal
Appliance-based

Erklärung

Frage 14 von 125

1

What best practice relates to wireless access point security?

Wähle eine der folgenden:

Activation of a popup stopper
A change of the default IP address
An update in the antivirus software definitions
Physically securing the cable between the access point and client

Erklärung

Frage 15 von 125

1

Which statement is true about port forwarding within a Linksys integrated router?

Wähle eine der folgenden:

Only external traffic that is destined for specific internal ports is permitted. All other traffic is denied.
Only external traffic that is destined for specific internal ports is denied. All other traffic is permitted.
Only internal traffic that is destined for specific external ports is permitted. All other traffic is denied.
Only internal traffic that is destined for specific external ports is denied. All other traffic is permitted.

Erklärung

Frage 16 von 125

1

What statement is true about security configuration on a Linksys integrated router?

Wähle eine der folgenden:

A DMZ is not supported.
The router is an example of a server-based firewall.
The router is an example of an application-based firewall.
Internet access can be denied for specific days and times.

Erklärung

Frage 17 von 125

1

What is one function that is provided by a vulnerability analysis tool?

Wähle eine der folgenden:

It provides various views of possible attack paths.
It identifies missing security updates on a computer.
It identifies wireless weak points such as rogue access points.
It identifies all network devices on the network that do not have a firewall installed.
It identifies MAC and IP addresses that have not been authenticated on the network.

Erklärung

Frage 18 von 125

1

Which statement is true regarding anti-virus software?

Wähle eine der folgenden:

Only e-mail programs need to be protected.
Only hard drives can be protected.
Only after a virus is known can an anti-virus update be created for it.
Only computers with a direct Internet connection need it.

Erklärung

Frage 19 von 125

1

Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.

Wähle eine der folgenden:

Periodically update anti-virus software.
Be aware of normal network traffic patterns.
Periodically update the host operating system.
Activate the firewall on a Linksys integrated router.
Configure login permissions on the integrated router.
Disable the wireless network when a vulnerability analysis is being performed.

Erklärung

Frage 20 von 125

1

Refer to the graphic. In the Linksys Security menu, what does the SPI Firewall Protection option Enabled provide?

Wähle eine der folgenden:

It prevents packets based on the application that makes the request.
It allows packets based on approved internal MAC or IP addresses.
It requires that packets coming into the router be responses to internal host requests.
It translates an internal address or group of addresses into an outside, public address.

Erklärung

Frage 21 von 125

1

Passwords that contain recognizable words are vulnerable to a:

Wähle eine der folgenden:

replay attack
dictionary attack
hashing attack
Denial of service attack

Erklärung

Frage 22 von 125

1

A digitally signed e-mail message:

Wähle eine der folgenden:

is encrypted
validates the sender
is virus-free
validates the recipient

Erklärung

Frage 23 von 125

1

Which password attack uses all possible alpha numeric combinations?

Wähle eine der folgenden:

dictionary attack
social engineering
brute force attack
rainbow table attack

Erklärung

Frage 24 von 125

1

What is the minimum OS to configure BitLocker?

Wähle eine der folgenden:

Windows Vista Enterprise
Windows 7 Enterprise
Windows XP Pro
Windows 2000

Erklärung

Frage 25 von 125

1

Account lockout policies are used to prevent which type of security attack?

Wähle eine der folgenden:

passwords being reused immediately
users sharing passwords
brute force attacks
social engineering

Erklärung

Frage 26 von 125

1

A group of users has access to Folder A and all of its contents. You need to prevent some users from accessing a subfolder inside folder A. What should you do first?

Wähle eine der folgenden:

Change the owner
Hide the folder
Block inheritance
Disable folder sharing

Erklärung

Frage 27 von 125

1

Which enables you to change the permissions on a folder?

Wähle eine der folgenden:

Auditing
Take ownership
Extended attributes
Modify

Erklärung

Frage 28 von 125

1

You want to make your computer resistant to online hackers and malicious software. What should you do?

Wähle eine der folgenden:

Turn on Windows Firewall
Configure a forward proxy
Enable spam filtering
Install anti-virus software

Erklärung

Frage 29 von 125

1

The primary purpose of Network Access Protection (NAP) is to prevent:

Wähle eine der folgenden:

loss of data from client computers on a network
users on a network from installing software
unauthorized users from accessing a network
non-compliant systems from connection to a network

Erklärung

Frage 30 von 125

1

Many Internet sites that you visit require a username and password. How should you secure these passwords?

Wähle eine der folgenden:

Enable session caching
Save them to a text file
Save them to an encrypted file
Reuse the same password
Configure the browser to save passwords

Erklärung

Frage 31 von 125

1

The purpose of a digital certificate is to verify that a:

Wähle eine der folgenden:

digital document is complete
computer is virus-free
private key belongs to a sender
public key belongs to a sender

Erklärung

Frage 32 von 125

1

In IE8, InPrivate Browsing feature prevents:

Wähle eine der folgenden:

unauthorized private data input
unencrypted communication between the client computer and the server
any session data from being stored on the computer
user credentials from being sent over the Internet

Erklärung

Frage 33 von 125

1

Physically securing servers prevents:

Wähle eine der folgenden:

DOS attacks
man-in-the-middle attacks
compromise os the certificate chain
theft

Erklärung

Frage 34 von 125

1

The Windows Firewall protects computers from:

Wähle eine der folgenden:

email virus
phishing scams
unencrypted network access
unauthorized network connections

Erklärung

Frage 35 von 125

1

Role separation improve server security by:

Wähle eine der folgenden:

placing servers on separate VLAN’s
enforcing principle of least privilege
installing applications on separate hard disk
physically separating high security servers from others server

Erklärung

Frage 36 von 125

1

Which one of the following describes spam?

Wähle eine der folgenden:

Gathering information about a person or organisation without their knowledge.
Performing an unauthorised, usually malicious, action such as erasing files.
Putting unnecessary load on the network by making copies of files.
Sending unwanted bulk messages.

Erklärung

Frage 37 von 125

1

Which one of the following can protect a computer from the risk of unwanted emails?

Wähle eine der folgenden:

Anti-spam software.
Anti-virus software.
Anti-spyware software.
PC diagnostic software.

Erklärung

Frage 38 von 125

1

Which one of the following could lead to the spread of a malicious program?

Wähle eine der folgenden:

Using only software that has been checked for viruses.
Maintaining regularly updated anti-virus software.
Opening only virus-checked file attachments from known sources.
Using a USB Flash Drive from an unknown source to exchange data.

Erklärung

Frage 39 von 125

1

Which one of the following describes why it is important to update antivirussoftware regularly?

Wähle eine der folgenden:

To protect your computer from all known viruses.
To ensure the software identifies old viruses.
To protect your computer from unwanted bulk messages.
To prevent the spread of malicious programs on the Internet.

Erklärung

Frage 40 von 125

1

Which one of the following describes what you should do if you receive a chain letter email?

Wähle eine der folgenden:

Forward the email.
Download it onto your system.
Delete the email.
Send a read receipt.

Erklärung

Frage 41 von 125

1

Which one of the following describes a computer hacker?

Wähle eine der folgenden:

A skilled programmer who uses authorised access to exploit information available on a computer.
A skilled programmer who secretly invades computers without authorisation.
A skilled programmer who writes programs to train new employees.
A skilled programmer who helps in the installation of new software for an organisation.

Erklärung

Frage 42 von 125

1

Which one of the following describes why firewalls are used?

Wähle eine der folgenden:

To prevent unauthorised access by incoming transmissions.
To prevent destruction of a computer in the event of a fire.
To enable easy downloading of data from web sites.
To detect and disable viruses already on a computer.

Erklärung

Frage 43 von 125

1

Which one of the following is MOST likely to be a hoax?

Wähle eine der folgenden:

An email from a friend you have not seen recently.
An email with an attachment sent by a colleague using their personal email address.
An email asking you to go to a website for a free computer scan.
An email advertisement from a local shop you subscribe to.

Erklärung

Frage 44 von 125

1

Which one of the following is the reason that users should log on with ausername and password?

Wähle eine der folgenden:

To be aware of who is in the building.
To check up on the time-keeping of users.
To protect computers against unauthorised use.
To enable a personalised greeting for each user.

Erklärung

Frage 45 von 125

1

Which one of the following statements about a password is TRUE?

Wähle eine der folgenden:

It must be changed only if it is compromised.
It cannot contain special character symbols.
It must be registered with the system administrator.
It should be changed regularly.

Erklärung

Frage 46 von 125

1

Which one of the following should be used to change your password?

Wähle eine der folgenden:

Control Panel.
Anti-virus software.
Windows Firewall.
Internet Explorer.

Erklärung

Frage 47 von 125

1

Which one of the following shows respect for confidentiality of information?

Wähle eine der folgenden:

Discussing confidential information over the telephone.
Disclosing confidential information only to authorised individuals.
Uploading confidential information to a shared web site.
Emailing confidential information to a colleague.

Erklärung

Frage 48 von 125

1

Which one of the following would be considered the BEST way to store a PIN number?

Wähle eine der folgenden:

Keep a written note of it with you bank cards.
Store it on your computer.
Memorise it.
Keep a written note of it in your office drawer.

Erklärung

Frage 49 von 125

1

Which one of the following describes why users should lock their computer when leaving their desk?

Wähle eine der folgenden:

To prevent unauthorised access to data.
To prevent a waste of electricity.
To prevent data from getting corrupted.
To prevent the computer from malfunctioning.

Erklärung

Frage 50 von 125

1

Which one of the following is an example of phishing?

Wähle eine der folgenden:

An email warning the recipient of a computer virus threat.
An email directing the recipient to forward the email to friends.
An email directing the recipient to enter personal details on a fake website.
An email directing the recipient to download an attachment.

Erklärung

Frage 51 von 125

1

Which one of the following is unsafe online activity?

Wähle eine der folgenden:

Using a screen name or nick name that cannot identify you.
Meeting someone you met online face-to-face in the company of your parents.
Keeping your social network profile private.
Giving your home address to someone you met in a chat room.

Erklärung

Frage 52 von 125

1

Which one of the following describes a public network?

Wähle eine der folgenden:

A network where devices outside the network cannot see or communicate directly with computers on the network.
A network where devices outside the network can see but cannot communicate directly with computers on the network.
A network where devices outside the network can see and communicate directly with computers on the network.
A network where devices outside the network cannot see but can communicate directly with computers on the network.

Erklärung

Frage 53 von 125

1

Which one of the following describes how confidential information should be sent using an unsecured network?

Wähle eine der folgenden:

In an unsigned email.
In an encrypted format.
In a compressed format.
In an attachment.

Erklärung

Frage 54 von 125

1

Which one of the following statements about wireless networks is TRUE?

Wähle eine der folgenden:

They cannot be intercepted by unknown users.
They limit accessibility to other users.
They limit visibility to other users.
They can be accessible to other users.

Erklärung

Frage 55 von 125

1

Which one of the following is the recommended action to prevent the risk of access to a network by other users?

Wähle eine der folgenden:

Disconnect the computer from the network.
Complain to the System Administrator.
Change the default WEP or WPA access key to one that only you know.
Adjust the Internet security settings.

Erklärung

Frage 56 von 125

1

Which one of the following describes Bluetooth?

Wähle eine der folgenden:

Short-range wired protocol for exchanging data.
Short-range wireless protocol for exchanging data.
Long-range wireless protocol for exchanging data.
Long-range wired protocol for exchanging data.

Erklärung

Frage 57 von 125

1

Which one of the following describes why Bluetooth device settings should be adjusted?

Wähle eine der folgenden:

To increase the range of the device.
To improve the quality of reception.
To prevent the risk of unauthorised access.
To reduce interference from other devices.

Erklärung

Frage 58 von 125

1

Which one of the following would result in the loss of contact details if it were stolen?

Wähle eine der folgenden:

Printer
Mobile Phone.
Modem
MP3

Erklärung

Frage 59 von 125

1

Which one of the following should you do to ensure that your USB storage device is kept safe and secure?

Wähle eine der folgenden:

Only use it in private surroundings.
Do not access it using a Bluetooth device.
Use firewall software.
Never leave it unattended.

Erklärung

Frage 60 von 125

1

Which one of the following departments would usually hold guidelines and procedures for the secure use of IT within an organisation?

Wähle eine der folgenden:

The IT Department.
The Marketing Department.
The Sales Department.
The Finance Department.

Erklärung

Frage 61 von 125

1

Which one of the following describes why you should follow guidelines and procedures while using IT resources in an organisation?

Wähle eine der folgenden:

To ensure easy access to information on your computer.
To ensure the secure use of IT resources.
To ensure the IT Department is able to monitor all activity.
To ensure the Finance Department is able to monitor the costs of IT resources.

Erklärung

Frage 62 von 125

1

Which one of the following should you approach if you are unsure of the IT security procedure to follow when uninstalling an application on your computer?

Wähle eine der folgenden:

A technically well-informed team member.
A senior colleague in the Finance Department.
The Maintenance Department.
The Systems Administrator.

Erklärung

Frage 63 von 125

1

Which one of the following describes how a breach in IT security should be reported?

Wähle eine der folgenden:

Using the telephone.
By emailing to the IT Manager.
Using any means of communication.
Using the method listed in the organisation’s security policy.

Erklärung

Frage 64 von 125

1

Which one of the following describes how to find out about an organisation’s privacy policy?

Wähle eine der folgenden:

By reading the office newsletter.
By reading the policy in the organisation’s policy manual.
By speaking to the Finance Department.
By speaking to the Sales Department.

Erklärung

Frage 65 von 125

1

Which one of the following would prevent the theft of a laptop?

Wähle eine der folgenden:

Anti-virus software.
Spyware
A security cable.
A webcam

Erklärung

Frage 66 von 125

1

Bridging is a process of sending packets from source to destination on OSI layer 3. Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Wähle eine der folgenden:

Routing
Switching
Repeating
No change is needed.

Erklärung

Frage 67 von 125

1

Windows Firewall is a built-in. host-based, stateless firewall. Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Wähle eine der folgenden:

Stateful
Network layer
Packet filter
No change is needed

Erklärung

Frage 68 von 125

1

The primary purpose of Network Access Protection (NAP) is to prevent:

Wähle eine der folgenden:

Loss of data from client computers on a network.
Non-compliant systems from connecting to a network.
Users on a network from installing software.
Unauthorized users from accessing a network.

Erklärung

Frage 69 von 125

1

Your company maintains a Web server that is accessible to the public. It should be placed in a/an:

Wähle eine der folgenden:

primary DNS zone.
enterprise domain.
perimeter network.
Virtual Private Network (VPN).

Erklärung

Frage 70 von 125

1

A network sniffer is software or hardware that:

Wähle eine der folgenden:

captures and analyzes network communication.
records user activity and transmits it to the server
protects workstations from intrusions.
catalogs network data to create a secure index

Erklärung

Frage 71 von 125

1

Which enables an employee to connect securely to a corporate network by using the Internet?

Wähle eine der folgenden:

Virtual Private Networking (VPN)
Remote Desktop Protocol (RDP)
Network Address Translation (NAT)
Network Access Protection (NAP)

Erklärung

Frage 72 von 125

1

You are trying to establish communications between a client computer and server. The server is not responding. You confirm that both the client and the server have network connectivity. Which should you check next?

Wähle eine der folgenden:

Data Execution Prevention
Microsoft Update
Active Directory Domains and Trusts
Windows Firewall

Erklärung

Frage 73 von 125

1

You have an application that communicates by using plain text. You want to secure communications between the application and a server at the network layer. What should you implement?

Wähle eine der folgenden:

IPSec
SFTP
TLS
SSH

Erklärung

Frage 74 von 125

1

Which technology enables you to filter communications between a program and the Internet?

Wähle eine der folgenden:

Antivirus software
BitLocker To Go
RADIUS Server
Software firewall

Erklärung

Frage 75 von 125

1

The primary purpose of Network Access Protection (NAP) is to prevent:

Wähle eine der folgenden:

loss of data from client computers on a network.
non-compliant systems from connecting to a network.
unauthorized users from accessing a network.
users on a network from installing software.

Erklärung

Frage 76 von 125

1

A malicious user who intercepts and modifies communications is known as a:

Wähle eine der folgenden:

red hat hacker
man-in-the-middle
network sniffer.
white hate hacker.

Erklärung

Frage 77 von 125

1

Which three file system objects can you specify the NTFS permissions for? (Choose three.)

Wähle eine oder mehr der folgenden:

Parents
Folders
Extensions
Files
Subfolders

Erklärung

Frage 78 von 125

1

You need to prevent unauthorized users from reading a specific file on a portable computer if the portable computer is stolen. What should you implement?

Wähle eine der folgenden:

Advanced Encryption Standard (AES)
Folder level permissions
File-level permissions
Distributed File System (DFS)
BitLocker

Erklärung

Frage 79 von 125

1

Basic security questions used to reset a password are susceptible to:

Wähle eine der folgenden:

social engineering.
hashing
network sniffing.
Trojan horses.

Erklärung

Frage 80 von 125

1

Which displays a user’s level of access to a particular file or folder on the server?

Wähle eine der folgenden:

The Resultant Set of Policy
The object's Effective Permission
The client computer's registry
The object's Advanced Attributes

Erklärung

Frage 81 von 125

1

When conducting a security audit, the first step is to:

Wähle eine der folgenden:

set up a virus quarantine area.
inventory the company's technology assets.
set up the system logs to audit security events.
install auditing software on your servers.

Erklärung

Frage 82 von 125

1

Biometrics are used to:

Wähle eine der folgenden:

study hacking behavior.
perform security audits.
authenticate users.
measure the attack surface.

Erklärung

Frage 83 von 125

1

A group of users has access to Folder A and all of its contents. You need to prevent some of the users from accessing a sub-folder inside Folder A.

Wähle eine der folgenden:

Disable folder sharing
Change the owner
Block inheritance
Hide the folder

Erklärung

Frage 84 von 125

1

How can you confirm whether a computer on your network is the target of a brute force attack?

Wähle eine der folgenden:

Run the show all access command
Use antivirus software to scan the computer
Check your Windows folder for unsigned files
Check the security log for failed authentication attempts

Erklärung

Frage 85 von 125

1

The default password length for a Windows Server domain controller is:

Wähle eine der folgenden:

0
5
7
14

Erklärung

Frage 86 von 125

1

Which is the minimum requirements to create BitLocker To Go media on a client computer?

Wähle eine der folgenden:

Windows Vista Enterprise Edition
Windows 2000 Professional Service Pack 4
Windows 7 Enterprise Edition
Windows XP Professional Service Pack 3

Erklärung

Frage 87 von 125

1

Software designed to infiltrate or damage a computer without the user’s consent is referred to as:

Wähle eine der folgenden:

Embedded
Freeware
Malware
Unsigned

Erklärung

Frage 88 von 125

1

You need to be able to track file access. Which type of auditing should you implement?

Wähle eine der folgenden:

Object access
Process tracking
Directory services
Logon events

Erklärung

Frage 89 von 125

1

A solution designed to detect unauthorized user activities, attacks, and network compromises that can also take action to prevent a breach from occurring.

Wähle eine der folgenden:

intrusion prevention systems (IPS)
intrusion detection systems (IDS)
DNS Security Extensions (DNSsec)
Unified Threat Management (UTM)

Erklärung

Frage 90 von 125

1

A conceptual model, created by the International Organization for Standardization (ISO) to describe a network architecture that allows the passage of data between computer systems. Although never fully utilized as model for a protocol, the OSI model is nonetheless the standard for discussing how networking works.

Wähle eine der folgenden:

Secure Content Management (SCM)
DMZ (demilitarized zone)
stateful inspection
Open Systems Interconnect (OSI)

Erklärung

Frage 91 von 125

1

A system that is designed to protect a computer or a computer network from network-based attacks. A firewall does this by filtering the data packets that are traversing the network.

Wähle eine der folgenden:

Firewall
host firewall
Honeypot
Honey net

Erklärung

Frage 92 von 125

1

An attack against the cached information on your DNS server.

Wähle eine der folgenden:

Honeypot
DNS spoofing
DNS poisoning
Spoofing

Erklärung

Frage 93 von 125

1

The consistency, accuracy, and validity of data or information. One of the goals of a successful information security program is to ensure that data is protected against any unauthorized or accidental changes.

Wähle eine der folgenden:

Risk
Availability
Threat
Integrity

Erklärung

Frage 94 von 125

1

Klicke auf jeden orangenen Punkt und wähle die korrekte Antwort.

Answer Area

Erklärung

Frage 95 von 125

1

Klicke auf jeden orangenen Punkt und wähle die korrekte Antwort.

Answer Area

Erklärung

Frage 96 von 125

1

Klicke auf jeden orangenen Punkt und wähle die korrekte Antwort.

You are preparing a local audit policy for your workstation. No auditing is enabled. The settings of your policy are shown in the following image:

Erklärung

Frage 97 von 125

1

To keep third-party content providers from tracking your movements on the web, enable InPrivate Browsing.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Wähle eine der folgenden:

InPrivate Filtering
SmartScreen Filter
Compatibility Mode
No change is needed

Erklärung

Frage 98 von 125

1

Humongous Insurance needs to set up a domain controller in a branch office. Unfortunately, the server cannot be sufficiently secured from access by employees in that office, so the company is installing a Primary Domain Controller.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Wähle eine der folgenden:

Read-Only Domain Controller
Backup Domain Controller
Active Directory Server
No change is needed.

Erklärung

Frage 99 von 125

1

Dumpster diving refers to a physical threat that a hacker might use to look for information about a computer network.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Wähle eine der folgenden:

Minimum password age
Maximum password duration
Password complexity
No change is needed.

Erklärung

Frage 100 von 125

1

Which attack listens to network traffic of a computer resource?

Wähle eine der folgenden:

Resource gathering
Denial of service
ARP poisoning
Eavesdropping
Logic bomb

Erklärung

Frage 101 von 125

1

To implement WPA2 Enterprise, you would need a/an:

Wähle eine der folgenden:

RADIUS server
SSL server
WEP server
VPN server

Erklärung

Frage 102 von 125

1

The company that you work for wants to set up a secure network, but they do not have any servers. Which three security methods require the use of a server? (Choose three.)

Wähle eine oder mehr der folgenden:

802.1x
WPA2 Personal
WPA2 Enterprise
RADIUS
802.11ac

Erklärung

Frage 103 von 125

1

You suspect a user’s computer is infected by a virus. What should you do first?

Wähle eine der folgenden:

Restart the computer in safe mode
Replace the computer’s hard disk drive
Disconnect the computer from the network
Install antivirus software on the computer

Erklärung

Frage 104 von 125

1

Malware is any kind of unwanted software that is installed without your consent.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Wähle eine der folgenden:

Viruses are
Worms are
Trojans are
No change is needed.

Erklärung

Frage 105 von 125

1

You need to be able to track file access. Which type of auditing should you implement?

Wähle eine der folgenden:

Object access
Directory services
Logon events
Process tracking

Erklärung

Frage 106 von 125

1

Which networking protocol provides centralized authentication, authorization and accounting?

Wähle eine der folgenden:

SMTP
RADIUS
HTTPS
OpenID

Erklärung

Frage 107 von 125

1

A Virtual Private Network (VPN) is a/an:

Wähle eine der folgenden:

Tunnel that prevents information that passes through it from being modified or stolen
Perimeter network that contains secure virtual servers
Virtual communication method that stores data transmitted in private environment
Intrusion Prevention System that filters unauthorized communications in the enterprise network

Erklärung

Frage 108 von 125

1

Kerberos prevents (Choose two):

Wähle eine oder mehr der folgenden:

File corruption
Spyware distribution
Replay attacks
Eavesdropping
Denial of Service attacks

Erklärung

Frage 109 von 125

1

You are network administrator. All computers run the Microsoft Internet Explorer browser. You need to prevent web cookies from being saved. What you should you enforce?

Wähle eine der folgenden:

SmartScreen Filter (ajuda a identificar sites de phishing e de software maligno)
InPrivate Browsing
Antivirus protection
Cross-Site Scripting Filter (ficheiros HTML)

Erklärung

Frage 110 von 125

1

What are three ways you can reduce the number of opportunities that attackers have to exploit potential weaknesses or vulnerabilities? (Choose three)

Wähle eine oder mehr der folgenden:

Employ content filtering for web browsers
Restrict access to system services
Employ layered defenses
Apply the principle of least privilege
Elevate all accounts to administrator accounts

Erklärung

Frage 111 von 125

1

Wähle von der Dropdown-Liste, um den Text zu vervollständigen.

8. For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

-A wireless MAC filter list allows only specified devices to receive packets sent from an access point ( YES, NO )
-A wireless MAC filter list can be used to either allow or deny access to the wireless network ( YES, NO )
-A wireless MAC filter list automatically applies encryption to a connection ( YES, NO )

Erklärung

Frage 112 von 125

1

Encrypting a hard disk is an example of ensuring:

Wähle eine der folgenden:

Least privilege
Confidentiality
Integrity
Security by default

Erklärung

Frage 113 von 125

1

Installing uninterruptible power sources to your servers is an example of ensuring:

Wähle eine der folgenden:

Integrity
Availability
Accessibility
A backup strategy

Erklärung

Frage 114 von 125

1

Media Access Control (MAC) filtering enables you to:

Wähle eine der folgenden:

Set access permission to a shared folder
Limit access to a network based on the client computer’s network adapter
Prevent communications between specific IP addresses
Restrict communications to specific website

Erklärung

Frage 115 von 125

1

Settings a database to run on a cluster of servers is an example of applying:

Wähle eine der folgenden:

Accessibility
Confidentiality
Availability
Integrity

Erklärung

Frage 116 von 125

1

You have a new computer and want to restrict other people from replacing the operating system. Which action prevents a user from installing an alternate operating system by using physical media if the user has physical access to the computer.

Wähle eine der folgenden:

Password protecting the computer BIOS
Removing the user from the administrators group
Installing drive-level encryption
Disabling removable devices and drives

Erklärung

Frage 117 von 125

1

You need to give a standard user permission to run a program as an administrator. How should you set up the program shortcut to accomplish this?

Wähle eine der folgenden:

In a different Compatibility Mode
By using a smart card
In a separate memory space
By utilizing RunAs

Erklärung

Frage 118 von 125

1

Your anti-spam program is blocking emails from a particular sender. your company needs to receive emails from this sender. What should you do?

Wähle eine der folgenden:

Add the email address to the whitelist
Accept RSS feeds from their domain
List the sender’s email address in DNS
Reconfigure the SMS Gateway

Erklärung

Frage 119 von 125

1

You want to prevent external users from acquiring information about your network. You should implement a:

Wähle eine der folgenden:

Proxy server
Firewall
Layer-3 switch
Router

Erklärung

Frage 120 von 125

1

Wähle von der Dropdown-Liste, um den Text zu vervollständigen.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

Securing network communication through IPSec packet signing ensures data integrity while in transit ( YES, NO )
IPSec packet ensures that the data is invulnerable to eavesdropping attacks ( YES, NO )
Most websites use IPSec to secure communications between their web servers and client web browsers. ( YES, NO )

Erklärung

Frage 121 von 125

1

You have an application that communicates by using plain text. You want to secure communications between the application and server at the network layer. What should you implement?

Wähle eine der folgenden:

SFTP
SSH
IPSec
TLS

Erklärung

Frage 122 von 125

1

The process of creating a barrier between domain members and non-domain members by using IPSec policies is referred to as:

Wähle eine der folgenden:

Server isolation
Domain isolation
Server filtering
Domain filtering

Erklärung

Frage 123 von 125

1

An authentication protocol used by Windows stand-alone systems is:

Wähle eine der folgenden:

SMB
NTLM
NetBIOS
EAP
Kerberos

Erklärung

Frage 124 von 125

1

An authentication protocol widely used in 802.11 environments is:

Wähle eine der folgenden:

SMB
NTLM
NetBIOS
EAP
Kerberos

Erklärung

Frage 125 von 125

1

A strong authentication protocol preferred by Windows Server 2012 R2 is:

Wähle eine der folgenden:

SMB
NTLM
NetBIOS
EAP
Kerberos

	Erstellt von Hawerth Castro vor etwa 7 Jahre

Security Fundamentals Quizzes

CET_TARDE - Security Fundamentals 2017 - Part 2

CET_TARDE - Security Fundamentals 2017 - Part 2

Frage 1 von 125

A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?

Wähle eine der folgenden:

Erklärung

Frage 2 von 125

What environment would be best suited for a two-firewall network design?

Wähle eine der folgenden:

Erklärung

Frage 3 von 125

While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?

Wähle eine der folgenden:

Erklärung

Frage 4 von 125

Which two statements are true concerning anti-spam software? (Choose two.)

Wähle eine oder mehr der folgenden:

Erklärung

Frage 5 von 125

What type of advertising is typically annoying and associated with a specific website that is being visited?

Wähle eine der folgenden:

Erklärung

Frage 6 von 125

What part of the security policy states what applications and usages are permitted or denied?

Wähle eine der folgenden:

Erklärung

Frage 7 von 125

To which part of the network does the wireless access point part of a Linksys integrated router connect?

Wähle eine der folgenden:

Erklärung

Frage 8 von 125

Identify three techniques used in social engineering. (Choose three.)

Wähle eine oder mehr der folgenden:

Erklärung

Frage 9 von 125

What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?

Wähle eine der folgenden:

Erklärung

Frage 10 von 125

Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?

Wähle eine der folgenden:

Erklärung

Frage 11 von 125

During a pretexting event, how is a target typically contacted?

Wähle eine der folgenden:

Erklärung

Frage 12 von 125

What is a major characteristic of a Worm?

Wähle eine der folgenden:

Erklärung

Frage 13 von 125

What term is used to describe a dedicated hardware device that provides firewall services?

Wähle eine der folgenden:

Erklärung

Frage 14 von 125

What best practice relates to wireless access point security?

Wähle eine der folgenden:

Erklärung

Frage 15 von 125

Which statement is true about port forwarding within a Linksys integrated router?

Wähle eine der folgenden:

Erklärung

Frage 16 von 125

What statement is true about security configuration on a Linksys integrated router?

Wähle eine der folgenden:

Erklärung

Frage 17 von 125

What is one function that is provided by a vulnerability analysis tool?

Wähle eine der folgenden:

Erklärung

Frage 18 von 125

Which statement is true regarding anti-virus software?

Wähle eine der folgenden:

Erklärung

Frage 19 von 125

Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.

Wähle eine der folgenden:

Erklärung

Frage 20 von 125