Hawerth Castro
Quiz by , created more than 1 year ago

Security Fundamentals Quizzes

83
0
0
Hawerth Castro
Created by Hawerth Castro over 7 years ago
Close

CET_TARDE - Security Fundamentals 2017 - Part 1

CET_TARDE - Security Fundamentals 2017 - Part 1

Question 1 of 99

1

Which type of malware can copy itself and infect a computer without the user’s consent or knowledge?

Select one of the following:

  • virus

  • Trojan horse

  • rootkit

  • backdoor

Explanation

Question 2 of 99

1

What type of self-replicating program copies itself to other computers on a network without any user intervention and consumes bandwidth and computer resources?

Select one of the following:

  • virus

  • Trojan horse

  • worm

  • backdoor

Explanation

Question 3 of 99

1

What malware looks like a useful or desired executable program but is in reality program that is supposed to cause harm to your computer or steal information from your computer?

Select one of the following:

  • virus

  • Trojan horse

  • worm

  • backdoor

Explanation

Question 4 of 99

1

What malware collects a user’s personal information or details about your browsing habits without your knowledge?

Select one of the following:

  • virus

  • Trojan horse

  • worm

  • spyware

Explanation

Question 5 of 99

1

What malware gives administrator-level control over a computer system?

Select one of the following:

  • rootkit

  • Trojan horse

  • worm

  • spyware

Explanation

Question 6 of 99

1

What software component comes with Windows Vista and Windows 7 to defend against spyware?

Select one of the following:

  • Windows Firewall

  • Windows Defender

  • UAC

  • Windows Anti-virus

Explanation

Question 7 of 99

1

What do you call a message warning you to delete an essential Windows file?

Select one of the following:

  • virus hoax

  • keylogger

  • backdoor

  • worm

Explanation

Question 8 of 99

1

What server can be used to install Windows updates for your organization?

Select one of the following:

  • SCOM

  • WSUS

  • IIS

  • WDS

Explanation

Question 9 of 99

1

What do you call multiple Windows updates that have been packaged together as one installation and are well tested?

Select one of the following:

  • service packs

  • cumulative packs

  • critical update

  • optional update

Explanation

Question 10 of 99

1

What Windows feature notifies you when something tries to make changes to your computer without your knowledge?

Select one of the following:

  • WDS

  • NAT

  • Windows Defender

  • UAC

Explanation

Question 11 of 99

1

What host firewall is included with Windows 7?

Select one of the following:

  • Windows Firewall

  • Windows Defender

  • Microsoft Protector

  • Microsoft Safety Net

Explanation

Question 12 of 99

1

What do you call unsolicited junk email?

Select one of the following:

  • spam

  • j-mail

  • junkettes

  • Infected mail

Explanation

Question 13 of 99

1

What email validation system is designed to stop spam that uses source address spoofing?

Select one of the following:

  • Foremost Relay System

  • Sender Policy Framework

  • Spam Checking Networking

  • Spoof Checker

Explanation

Question 14 of 99

1

What do spammers and hackers look for when they want to send email through your network?

Select one of the following:

  • open SMTP servers

  • open web servers

  • open POP3 servers

  • open FTP servers

Explanation

Question 15 of 99

1

Which tab in Internet Explorer settings would you use to delete history and cookies?

Select one of the following:

  • General

  • Privacy

  • Security

  • Advanced

Explanation

Question 16 of 99

1

Which Internet Explorer zone is the least secure?

Select one of the following:

  • Internet zone

  • local intranet zone

  • trusted sites zone

  • restricted sites zone

Explanation

Question 17 of 99

1

What technique is used to send you to a fake, but realistic-looking, website to verify your account information?

Select one of the following:

  • spoofing

  • smurfing

  • man-in-the-middle

  • phishing

Explanation

Question 18 of 99

1

Which of the following terms indicates that information is to be read only by those people for whom it is intended?

Select one of the following:

  • confidentiality

  • integrity

  • availability

  • accounting

Explanation

Question 19 of 99

1

What technology is not used to implement confidentiality?

Select one of the following:

  • encryption

  • access controls

  • auditing

  • authentication

Explanation

Question 20 of 99

1

Which of the following makes sure that data is not changed when it not supposed to be?

Select one of the following:

  • confidentiality

  • integrity

  • availability

  • accounting

Explanation

Question 21 of 99

1

Which of the following is not a response when dealing with a risk?

Select one of the following:

  • avoidance

  • mitigation

  • transfer

  • patching

Explanation

Question 22 of 99

1

What do you call the security discipline that requires that a user is given no more privilege necessary to perform his or her job?

Select one of the following:

  • defense in depth

  • reduction of attack surface

  • risk transfer

  • principle of least privilege

Explanation

Question 23 of 99

1

What do you call the scope that hacker can use to break into a system?

Select one of the following:

  • defense in depth

  • attack surface

  • principle of least privilege

  • risk mitigation

Explanation

Question 24 of 99

1

What method used by a hacker relies on the trusting nature of the person being attacked?

Select one of the following:

  • social engineering

  • attack surface

  • principle of least privilege

  • risk avoidance

Explanation

Question 25 of 99

1

What is the best way to protect against social engineering?

Select one of the following:

  • stronger encryption

  • stronger authentication

  • employee awareness

  • risk mitigation

Explanation

Question 26 of 99

1

What is needed to highly secure a system?

Select one of the following:

  • lots of time

  • more money

  • system update

  • disabled administrator account

Explanation

Question 27 of 99

1

What is the first line of defense when setting up a network?

Select one of the following:

  • physically secure the network

  • configure authentication

  • configure encryption

  • configure an ACL

Explanation

Question 28 of 99

1

Which concept determines what resources users can access after they log on?

Select one of the following:

  • authentication

  • auditing

  • access control

  • defense in depth

Explanation

Question 29 of 99

1

What is used to provide protection when one line of defense is breached?

Select one of the following:

  • defense in depth

  • attack surface

  • principle of least privilege

  • risk mitigation

Explanation

Question 30 of 99

1

What is used to identify a person before giving access?

Select one of the following:

  • authentication

  • encryption

  • access control

  • auditing

Explanation

Question 31 of 99

1

What is used to verify that an administrator is not accessing data that he should not be accessing?

Select one of the following:

  • authentication

  • encryption

  • access control

  • auditing

Explanation

Question 32 of 99

1

What type of device can be easily lost or stolen or can be used for espionage?

Select one of the following:

  • processors

  • RAM chips

  • removable devices

  • servers

Explanation

Question 33 of 99

1

What is a physical or logical device used to capture keystrokes?

Select one of the following:

  • USB flash drive

  • PDA

  • Smartphone

  • keylogger

Explanation

Question 34 of 99

1

In dealing with risks, which response is done by buying insurance to protect your bottom line if such a disaster or threat is realized?

Select one of the following:

  • risk avoidance

  • risk acceptance

  • risk mitigation

  • risk transfer

Explanation

Question 35 of 99

1

What type of device isolates a network by filtering the packets that can enter it?

Select one of the following:

  • firewall

  • bridge

  • gateway

  • switch

Explanation

Question 36 of 99

1

What seven-layer model is often used to describe networking technologies and services?

Select one of the following:

  • OSI

  • TCP/IP

  • IPX/SPX

  • DIX

Explanation

Question 37 of 99

1

On which OSI layer do routers function?

Select one of the following:

  • 1

  • 2

  • 3

  • 4

Explanation

Question 38 of 99

1

On which OSI layer do TCP and UDP function?

Select one of the following:

  • 1

  • 2

  • 3

  • 4

Explanation

Question 39 of 99

1

What OSI layer do switches and bridges use?

Select one of the following:

  • 1

  • 2

  • 3

  • 4

Explanation

Question 40 of 99

1

What port does SMTP use?

Select one of the following:

  • 21

  • 23

  • 25

  • 443

Explanation

Question 41 of 99

1

What port does LDAP use?

Select one of the following:

  • 25

  • 443

  • 389

  • 3389

Explanation

Question 42 of 99

1

What type of firewall filters packets based on IP address and ports?

Select one of the following:

  • packet-filtering

  • circuit-filtering

  • application-level

  • stateful

Explanation

Question 43 of 99

1

What type of firewall is also known as a proxy server?

Select one of the following:

  • packet-filtering

  • circuit-filtering

  • application-level

  • stateful

Explanation

Question 44 of 99

1

What type of firewall looks at the previous conversations to determine if a packet should enter a network?

Select one of the following:

  • packet-filtering

  • circuit-filtering

  • application-level

  • stateful

Explanation

Question 45 of 99

1

What Microsoft technology can verify that a client has the newest Windows updates and has an updated antivirus software package before being allowed access to the network?

Select one of the following:

  • IPSec

  • NAP

  • SCCM

  • SCOM

Explanation

Question 46 of 99

1

What technology can you use to isolate a network of servers so that they cannot interact with other servers?

Select one of the following:

  • bridge

  • switch

  • router

  • VLAN

Explanation

Question 47 of 99

1

What type of device looks at a packet and forwards it based on its destination IP address?

Select one of the following:

  • bridge

  • switch

  • router

  • VLAN

Explanation

Question 48 of 99

1

Which type of routing protocol sends the entire routing table to its neighbors?

Select one of the following:

  • distance vector

  • link state

  • scalable driven

  • infinity

Explanation

Question 49 of 99

1

Which type of system detects unauthorized intruders and then takes action to stop them from proceeding?

Select one of the following:

  • IDS

  • IPS

  • VLAN

  • NAT

Explanation

Question 50 of 99

1

What type of server would you install that would be used to trap a hacker?

Select one of the following:

  • honeypot

  • NAT

  • IPS

  • IDS

Explanation

Question 51 of 99

1

What special area serves as a buffer area between the Internet and the internal network and can be used to hold web servers that are accessed from the Internet?

Select one of the following:

  • DMZ

  • NAT

  • VLAN

  • PLC

Explanation

Question 52 of 99

1

How many firewalls would you use to create a sandwich DMZ?

Select one of the following:

  • 1

  • 2

  • 3

  • 4

Explanation

Question 53 of 99

1

You have several Internet web servers that need to communicate with a SQL server. Where would you place the SQL server?

Select one of the following:

  • internal network

  • DMZ

  • Internet

  • isolated VLAN

Explanation

Question 54 of 99

1

Which of the following servers would you not place on the DMZ?

Select one of the following:

  • Internet web server

  • email relay servers

  • email mailbox servers

  • proxy servers

Explanation

Question 55 of 99

1

What technology allows a user at home to connect to the corporate network?

Select one of the following:

  • NAT

  • VPN

  • DMZ

  • PLC

Explanation

Question 56 of 99

1

Which IPsec protocol provides integrity protection for packet headers, data, and user authentication but does not encrypt the data load?

Select one of the following:

  • AH

  • ESP

  • IKE

  • LDAP

Explanation

Question 57 of 99

1

What is the process of identifying an individual?

Select one of the following:

  • authentication

  • authorization

  • accounting

  • auditing

Explanation

Question 58 of 99

1

What do you call the process in which a user is identified via a username and password?

Select one of the following:

  • authentication

  • authorization

  • accounting

  • auditing

Explanation

Question 59 of 99

1

What is the process of giving individual access to a system or resource?

Select one of the following:

  • authentication

  • authorization

  • accounting

  • auditing

Explanation

Question 60 of 99

1

What is the process of keeping track of a user’s activity?

Select one of the following:

  • authentication

  • authorization

  • accounting

  • authoring

Explanation

Question 61 of 99

1

What process prevents someone from denying that she accessed a resource?

Select one of the following:

  • accounting

  • authorization

  • sniffing

  • nonrepudiation

Explanation

Question 62 of 99

1

Which of the following is a secret numeric password used for authentication?

Select one of the following:

  • security token

  • digital certificate

  • digital signature

  • PIN

Explanation

Question 63 of 99

1

What type of electronic document contains a public key?

Select one of the following:

  • digital certificate

  • biometrics

  • PIN

  • PAN

Explanation

Question 64 of 99

1

What item, about the size of a credit card, allows access to a network and its resources?

Select one of the following:

  • digital certificate

  • smart card

  • security token

  • biometric

Explanation

Question 65 of 99

1

What type of authentication method identifies and recognizes people based on physical traits such as fingerprints?

Select one of the following:

  • digital certificates

  • WEP

  • biometrics

  • RADIUS

Explanation

Question 66 of 99

1

What authentication type is the default for Active Directory?

Select one of the following:

  • NTLM

  • Kerberos

  • MS-CHAP

  • MS-CHAPv2

Explanation

Question 67 of 99

1

What directory service is used with Windows domains?

Select one of the following:

  • Active Directory

  • E-Directory

  • PAM

  • Kerberos

Explanation

Question 68 of 99

1

What type of server runs Active Directory?

Select one of the following:

  • member server

  • file server

  • domain controller

  • NTLAN server

Explanation

Question 69 of 99

1

When you access permissions to a folder, you should first grant permissions to __________ rather than users.

Select one of the following:

  • groups

  • computers

  • collections

  • organizational units

Explanation

Question 70 of 99

1

When you create a local user on a computer running in Windows 7, where is the user account stored?

Select one of the following:

  • Active Directory

  • SAM

  • PAN

  • SQL database

Explanation

Question 71 of 99

1

Which type of group can be granted rights and permissions?

Select one of the following:

  • security

  • distribution

  • authorizing

  • SAM

Explanation

Question 72 of 99

1

What authorizes a user to perform certain actions in Windows such as logging on or performing a backup?

Select one of the following:

  • right

  • permission

  • accessible

  • key

Explanation

Question 73 of 99

1

When you grant access to print to a printer, what are you granting?

Select one of the following:

  • right

  • permission

  • accessible

  • key

Explanation

Question 74 of 99

1

Where are users and permissions stored for an NTFS folder?

Select one of the following:

  • access log

  • access file

  • registry

  • ACL

Explanation

Question 75 of 99

1

What type of permissions are assigned directly to a file or folder?

Select one of the following:

  • explicit

  • inherited

  • encompassing

  • overriding

Explanation

Question 76 of 99

1

What is the process of converting data into a format that cannot be read by another user?

Select one of the following:

  • encryption

  • locking

  • keying

  • registering

Explanation

Question 77 of 99

1

Which authentication sends the username and password in plain text?

Select one of the following:

  • MS-CHAP

  • CHAP

  • PAP

  • SPAP

Explanation

Question 78 of 99

1

In Windows, what do you use to enable auditing?

Select one of the following:

  • registry

  • group policies

  • NTFS permissions

  • access log

Explanation

Question 79 of 99

1

A user receives a phone call from a person who claims to represent IT services and then asks that user for confirmation of username and password for auditing purposes. Which security threat does this phone call represent?

Select one of the following:

  • social engineering

  • anonymous keylogging

  • spam

  • DDoS

Explanation

Question 80 of 99

1

Which two security precautions will help protect a workplace against social engineering? (Choose two.)

Select one or more of the following:

  • ensuring that each use of an access card allows access to only one user at the time

  • ensuring that all operating system and antivirus software is up to date

  • encrypting all sensitive data stored on the servers

  • performing daily data backups

  • registering and escorting all visitors to the premises

Explanation

Question 81 of 99

1

What are two typical physical security precautions that a business can take to protect its computers and systems? (Choose two.)

Select one or more of the following:

  • Perform daily data backups.

  • Replace any software firewalls with a hardware firewall.

  • Implement biometric authentication.

  • Ensure that all operating system and antivirus software is up to date.

  • Disable the autorun feature in the operating system.

Explanation

Question 82 of 99

1

Which physical security technology can hold user authentication information, include software license protection, provide encryption, and provide hardware and software authentication that is specific to the host system?

Select one of the following:

  • biometric authentication

  • Trusted Platform Module (TPM)

  • card key access

  • two-factor security

Explanation

Question 83 of 99

1

It has been noted that the computers of employees who use removable flash drives are being infected with viruses and other malware. Which two actions can help prevent this problem in the future? (Choose two.)

Select one or more of the following:

  • Set virus protection software to scan removable media when data is accessed.

  • Configure the Windows Firewall to block the ports that are used by viruses.

  • Enable the TPM in the CMOS settings.

  • Repair, delete, or quarantine the infected files.

  • Disable the autorun feature in the operating system.

Explanation

Question 84 of 99

1

In which situation would a computer technician use the fixmbr command at the command prompt of a Windows XP computer to resolve a security issue?

Select one of the following:

  • when unauthorized users have changed the CMOS settings and the CMOS password must be reset

  • when a virus has damaged the master boot record of the system disk

  • when a virus has damaged the boot sector of the system disk

  • when the folder permissions for user members of a group are incorrect

Explanation

Question 85 of 99

1

All users working with a particular Windows 7 computer are able to install unauthorized software. In addition to educating the users about correct security behavior, which action should also be performed to solve this issue?

Select one of the following:

  • Set the user folder permissions to Deny.

  • Disable the users’ accounts.

  • Change the user file permissions to Read Only.

  • Enable UAC on the computer.

Explanation

Question 86 of 99

1

You want to dispose of a 2.5 terabyte hard drive that contains confidential financial information. What is the recommended procedure to achieve this?

Select one of the following:

  • Use data wiping.

  • Drill through the HDD.

  • Smash the platters with a hammer.

  • Immerse the HDD in a weak solution of bicarbonate of soda.

Explanation

Question 87 of 99

1

What is the most effective way of securing wireless traffic?

Select one of the following:

  • WPA2

  • SSID hiding

  • WEP

  • wireless MAC filtering

Explanation

Question 88 of 99

1

Which two items are used in asymmetric encryption? (Choose two.)

Select one or more of the following:

  • a token

  • a TPM

  • a private key

  • a DES key

  • a public key

Explanation

Question 89 of 99

1

Which two characteristics describe a worm? (Choose two.)

Select one or more of the following:

  • hides in a dormant state until needed by an attacker

  • infects computers by attaching to software code

  • executes when software is run on a computer is self-replicating

  • travels to new computers without any intervention or knowledge of the user

Explanation

Question 90 of 99

1

Which type of security threat uses email that appears to be from a legitimate sender and asks the email recipient to visit a website to enter confidential information?

Select one of the following:

  • worm

  • phishing

  • adware

  • stealth virus

Explanation

Question 91 of 99

1

Which three questions should be addressed by organizations developing a security policy? (Choose three.)

Select one or more of the following:

  • How should future expansion be done?

  • What are the possible threats to the assets of the organization?

  • What is to be done in the case of a security breach?

  • When do the assets need protecting?

  • What assets require protection?

  • What insurance coverage is required?

Explanation

Question 92 of 99

1

What does a malware detection program look for when running a scan?

Select one of the following:

  • a service pack

  • patterns in the programming code of the software on a computer

  • mirror sites

  • patches that prevent a newly discovered virus or worm from making a successful attack

Explanation

Question 93 of 99

1

Port triggering has been configured on a wireless router. Port 25 has been defined as the trigger port and port 113 as an open port. What effect does this have on network traffic?

Select one of the following:

  • Any traffic that is using port 25 going out of the internal network will also be allowed to transmit out port 113.

  • All traffic that is sent into port 25 to the internal network will also be allowed to use port 113.

  • All traffic that is sent out port 25 will open port 113 to allow inbound traffic into the internal network through port 113.

  • Any traffic that comes into port 25 allows outgoing port 113 to be used.

Explanation

Question 94 of 99

1

Which two characteristics of network traffic are being monitored if a network technician configures the company firewall to operate as a packet filter? (Choose two.)

Select one or more of the following:

  • packet size

  • physical addresses

  • protocols

  • packet speed

  • ports

Explanation

Question 95 of 99

1

What is the primary goal of a DoS attack?

Select one of the following:

  • to facilitate access to external networks

  • to prevent the target server from being able to handle additional requests

  • to scan the data on the target server

  • to obtain all addresses in the address book within the server

Explanation

Question 96 of 99

1

Which question would be an example of an open-ended question that a technician might ask when troubleshooting a security issue?

Select one of the following:

  • Have you scanned your computer recently for viruses?

  • What symptoms are you experiencing?

  • Did you open any attachments from a suspicious email message?

  • Is your security software up to date?

Explanation

Question 97 of 99

1

Which action would help a technician to determine if a denial of service attack is being caused by malware on a host?

Select one of the following:

  • Install rogue antivirus software on the host.

  • Log on to the host as a different user.

  • Disable ActiveX and Silverlight on the host.

  • Disconnect the host from the network.

Explanation

Question 98 of 99

1

A technician is troubleshooting a computer security issue. The computer was compromised by an attacker as a result of the user having a weak password. Which action should the technician take as a preventive measure against this type of attack happening in the future?

Select one of the following:

  • Ensure the security policy is being enforced.

  • Check the computer for the latest OS patches and updates.

  • Scan the computer with protection software.

  • Verify the physical security of all offices.

Explanation

Question 99 of 99

1

A user has reported that a computer web browser will not display the correct home page even if the default page is reset. What is the likely cause of this problem?

Select one of the following:

  • A virus has damaged the boot sector of the system disk.

  • The computer has been infected with spyware.

  • UAC has been disabled on the computer.

  • Folder permissions have been changed from Deny to Allow.

Explanation

Previous
Check answer
Next