CET_TARDE - Security Fundamentals 2017 - Part 2

Pregunta 1 de 125

1

A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?

Selecciona una de las siguientes respuestas posibles:

Trojan horse
Brute force
Ping of death
SYN flooding

Explicación

Pregunta 2 de 125

1

What environment would be best suited for a two-firewall network design?

Selecciona una de las siguientes respuestas posibles:

large corporate environment
A home environment with 10 or fewer hosts
A home environment that needs VPN access
A smaller, less congested business environment

Explicación

Pregunta 3 de 125

1

While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?

Selecciona una de las siguientes respuestas posibles:

Worm
Virus
Trojan horse
Denial of service

Explicación

Pregunta 4 de 125

1

Which two statements are true concerning anti-spam software? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

Anti-spam software can be loaded on either the end-user PC or the ISP server, but not both.
When anti-spam software is loaded, legitimate e-mail may be classified as spam by mistake.
Installing anti-spam software should be a low priority on the network.
Even with anti-spam software installed, users should be careful when opening e-mail attachments.
Virus warning e-mails that are not identified as spam via antispam software should be forwarded to other users immediately.

Explicación

Pregunta 5 de 125

1

What type of advertising is typically annoying and associated with a specific website that is being visited?

Selecciona una de las siguientes respuestas posibles:

Adware
Popups
Spyware
Tracking cookies

Explicación

Pregunta 6 de 125

1

What part of the security policy states what applications and usages are permitted or denied?

Selecciona una de las siguientes respuestas posibles:

Dentification and authentication
Remote access
Acceptable use
Incident handling

Explicación

Pregunta 7 de 125

1

To which part of the network does the wireless access point part of a Linksys integrated router connect?

Selecciona una de las siguientes respuestas posibles:

DMZ
External
Internal
A network other than the wired network

Explicación

Pregunta 8 de 125

1

Identify three techniques used in social engineering. (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

Fishing
Vishing
Phishing
Spamming
Pretexting
Junk mailing

Explicación

Pregunta 9 de 125

1

What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?

Selecciona una de las siguientes respuestas posibles:

Brute force
Spam
Spyware
Tracking cookies

Explicación

Pregunta 10 de 125

1

Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?

Selecciona una de las siguientes respuestas posibles:

SPI
DMZ
ISR
ISP

Explicación

Pregunta 11 de 125

1

During a pretexting event, how is a target typically contacted?

Selecciona una de las siguientes respuestas posibles:

By e-mail
By phone
In person
Through another person

Explicación

Pregunta 12 de 125

1

What is a major characteristic of a Worm?

Selecciona una de las siguientes respuestas posibles:

Malicious software that copies itself into other executable programs
Tricks users into running the infected software
A set of computer instructions that lies dormant until triggered by a specific event
Exploits vulnerabilities with the intent of propagating itself across a network

Explicación

Pregunta 13 de 125

1

What term is used to describe a dedicated hardware device that provides firewall services?

Selecciona una de las siguientes respuestas posibles:

Server-based
Integrated
Personal
Appliance-based

Explicación

Pregunta 14 de 125

1

What best practice relates to wireless access point security?

Selecciona una de las siguientes respuestas posibles:

Activation of a popup stopper
A change of the default IP address
An update in the antivirus software definitions
Physically securing the cable between the access point and client

Explicación

Pregunta 15 de 125

1

Which statement is true about port forwarding within a Linksys integrated router?

Selecciona una de las siguientes respuestas posibles:

Only external traffic that is destined for specific internal ports is permitted. All other traffic is denied.
Only external traffic that is destined for specific internal ports is denied. All other traffic is permitted.
Only internal traffic that is destined for specific external ports is permitted. All other traffic is denied.
Only internal traffic that is destined for specific external ports is denied. All other traffic is permitted.

Explicación

Pregunta 16 de 125

1

What statement is true about security configuration on a Linksys integrated router?

Selecciona una de las siguientes respuestas posibles:

A DMZ is not supported.
The router is an example of a server-based firewall.
The router is an example of an application-based firewall.
Internet access can be denied for specific days and times.

Explicación

Pregunta 17 de 125

1

What is one function that is provided by a vulnerability analysis tool?

Selecciona una de las siguientes respuestas posibles:

It provides various views of possible attack paths.
It identifies missing security updates on a computer.
It identifies wireless weak points such as rogue access points.
It identifies all network devices on the network that do not have a firewall installed.
It identifies MAC and IP addresses that have not been authenticated on the network.

Explicación

Pregunta 18 de 125

1

Which statement is true regarding anti-virus software?

Selecciona una de las siguientes respuestas posibles:

Only e-mail programs need to be protected.
Only hard drives can be protected.
Only after a virus is known can an anti-virus update be created for it.
Only computers with a direct Internet connection need it.

Explicación

Pregunta 19 de 125

1

Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.

Selecciona una de las siguientes respuestas posibles:

Periodically update anti-virus software.
Be aware of normal network traffic patterns.
Periodically update the host operating system.
Activate the firewall on a Linksys integrated router.
Configure login permissions on the integrated router.
Disable the wireless network when a vulnerability analysis is being performed.

Explicación

Pregunta 20 de 125

1

Refer to the graphic. In the Linksys Security menu, what does the SPI Firewall Protection option Enabled provide?

Selecciona una de las siguientes respuestas posibles:

It prevents packets based on the application that makes the request.
It allows packets based on approved internal MAC or IP addresses.
It requires that packets coming into the router be responses to internal host requests.
It translates an internal address or group of addresses into an outside, public address.

Explicación

Pregunta 21 de 125

1

Passwords that contain recognizable words are vulnerable to a:

Selecciona una de las siguientes respuestas posibles:

replay attack
dictionary attack
hashing attack
Denial of service attack

Explicación

Pregunta 22 de 125

1

A digitally signed e-mail message:

Selecciona una de las siguientes respuestas posibles:

is encrypted
validates the sender
is virus-free
validates the recipient

Explicación

Pregunta 23 de 125

1

Which password attack uses all possible alpha numeric combinations?

Selecciona una de las siguientes respuestas posibles:

dictionary attack
social engineering
brute force attack
rainbow table attack

Explicación

Pregunta 24 de 125

1

What is the minimum OS to configure BitLocker?

Selecciona una de las siguientes respuestas posibles:

Windows Vista Enterprise
Windows 7 Enterprise
Windows XP Pro
Windows 2000

Explicación

Pregunta 25 de 125

1

Account lockout policies are used to prevent which type of security attack?

Selecciona una de las siguientes respuestas posibles:

passwords being reused immediately
users sharing passwords
brute force attacks
social engineering

Explicación

Pregunta 26 de 125

1

A group of users has access to Folder A and all of its contents. You need to prevent some users from accessing a subfolder inside folder A. What should you do first?

Selecciona una de las siguientes respuestas posibles:

Change the owner
Hide the folder
Block inheritance
Disable folder sharing

Explicación

Pregunta 27 de 125

1

Which enables you to change the permissions on a folder?

Selecciona una de las siguientes respuestas posibles:

Auditing
Take ownership
Extended attributes
Modify

Explicación

Pregunta 28 de 125

1

You want to make your computer resistant to online hackers and malicious software. What should you do?

Selecciona una de las siguientes respuestas posibles:

Turn on Windows Firewall
Configure a forward proxy
Enable spam filtering
Install anti-virus software

Explicación

Pregunta 29 de 125

1

The primary purpose of Network Access Protection (NAP) is to prevent:

Selecciona una de las siguientes respuestas posibles:

loss of data from client computers on a network
users on a network from installing software
unauthorized users from accessing a network
non-compliant systems from connection to a network

Explicación

Pregunta 30 de 125

1

Many Internet sites that you visit require a username and password. How should you secure these passwords?

Selecciona una de las siguientes respuestas posibles:

Enable session caching
Save them to a text file
Save them to an encrypted file
Reuse the same password
Configure the browser to save passwords

Explicación

Pregunta 31 de 125

1

The purpose of a digital certificate is to verify that a:

Selecciona una de las siguientes respuestas posibles:

digital document is complete
computer is virus-free
private key belongs to a sender
public key belongs to a sender

Explicación

Pregunta 32 de 125

1

In IE8, InPrivate Browsing feature prevents:

Selecciona una de las siguientes respuestas posibles:

unauthorized private data input
unencrypted communication between the client computer and the server
any session data from being stored on the computer
user credentials from being sent over the Internet

Explicación

Pregunta 33 de 125

1

Physically securing servers prevents:

Selecciona una de las siguientes respuestas posibles:

DOS attacks
man-in-the-middle attacks
compromise os the certificate chain
theft

Explicación

Pregunta 34 de 125

1

The Windows Firewall protects computers from:

Selecciona una de las siguientes respuestas posibles:

email virus
phishing scams
unencrypted network access
unauthorized network connections

Explicación

Pregunta 35 de 125

1

Role separation improve server security by:

Selecciona una de las siguientes respuestas posibles:

placing servers on separate VLAN’s
enforcing principle of least privilege
installing applications on separate hard disk
physically separating high security servers from others server

Explicación

Pregunta 36 de 125

1

Which one of the following describes spam?

Selecciona una de las siguientes respuestas posibles:

Gathering information about a person or organisation without their knowledge.
Performing an unauthorised, usually malicious, action such as erasing files.
Putting unnecessary load on the network by making copies of files.
Sending unwanted bulk messages.

Explicación

Pregunta 37 de 125

1

Which one of the following can protect a computer from the risk of unwanted emails?

Selecciona una de las siguientes respuestas posibles:

Anti-spam software.
Anti-virus software.
Anti-spyware software.
PC diagnostic software.

Explicación

Pregunta 38 de 125

1

Which one of the following could lead to the spread of a malicious program?

Selecciona una de las siguientes respuestas posibles:

Using only software that has been checked for viruses.
Maintaining regularly updated anti-virus software.
Opening only virus-checked file attachments from known sources.
Using a USB Flash Drive from an unknown source to exchange data.

Explicación

Pregunta 39 de 125

1

Which one of the following describes why it is important to update antivirussoftware regularly?

Selecciona una de las siguientes respuestas posibles:

To protect your computer from all known viruses.
To ensure the software identifies old viruses.
To protect your computer from unwanted bulk messages.
To prevent the spread of malicious programs on the Internet.

Explicación

Pregunta 40 de 125

1

Which one of the following describes what you should do if you receive a chain letter email?

Selecciona una de las siguientes respuestas posibles:

Forward the email.
Download it onto your system.
Delete the email.
Send a read receipt.

Explicación

Pregunta 41 de 125

1

Which one of the following describes a computer hacker?

Selecciona una de las siguientes respuestas posibles:

A skilled programmer who uses authorised access to exploit information available on a computer.
A skilled programmer who secretly invades computers without authorisation.
A skilled programmer who writes programs to train new employees.
A skilled programmer who helps in the installation of new software for an organisation.

Explicación

Pregunta 42 de 125

1

Which one of the following describes why firewalls are used?

Selecciona una de las siguientes respuestas posibles:

To prevent unauthorised access by incoming transmissions.
To prevent destruction of a computer in the event of a fire.
To enable easy downloading of data from web sites.
To detect and disable viruses already on a computer.

Explicación

Pregunta 43 de 125

1

Which one of the following is MOST likely to be a hoax?

Selecciona una de las siguientes respuestas posibles:

An email from a friend you have not seen recently.
An email with an attachment sent by a colleague using their personal email address.
An email asking you to go to a website for a free computer scan.
An email advertisement from a local shop you subscribe to.

Explicación

Pregunta 44 de 125

1

Which one of the following is the reason that users should log on with ausername and password?

Selecciona una de las siguientes respuestas posibles:

To be aware of who is in the building.
To check up on the time-keeping of users.
To protect computers against unauthorised use.
To enable a personalised greeting for each user.

Explicación

Pregunta 45 de 125

1

Which one of the following statements about a password is TRUE?

Selecciona una de las siguientes respuestas posibles:

It must be changed only if it is compromised.
It cannot contain special character symbols.
It must be registered with the system administrator.
It should be changed regularly.

Explicación

Pregunta 46 de 125

1

Which one of the following should be used to change your password?

Selecciona una de las siguientes respuestas posibles:

Control Panel.
Anti-virus software.
Windows Firewall.
Internet Explorer.

Explicación

Pregunta 47 de 125

1

Which one of the following shows respect for confidentiality of information?

Selecciona una de las siguientes respuestas posibles:

Discussing confidential information over the telephone.
Disclosing confidential information only to authorised individuals.
Uploading confidential information to a shared web site.
Emailing confidential information to a colleague.

Explicación

Pregunta 48 de 125

1

Which one of the following would be considered the BEST way to store a PIN number?

Selecciona una de las siguientes respuestas posibles:

Keep a written note of it with you bank cards.
Store it on your computer.
Memorise it.
Keep a written note of it in your office drawer.

Explicación

Pregunta 49 de 125

1

Which one of the following describes why users should lock their computer when leaving their desk?

Selecciona una de las siguientes respuestas posibles:

To prevent unauthorised access to data.
To prevent a waste of electricity.
To prevent data from getting corrupted.
To prevent the computer from malfunctioning.

Explicación

Pregunta 50 de 125

1

Which one of the following is an example of phishing?

Selecciona una de las siguientes respuestas posibles:

An email warning the recipient of a computer virus threat.
An email directing the recipient to forward the email to friends.
An email directing the recipient to enter personal details on a fake website.
An email directing the recipient to download an attachment.

Explicación

Pregunta 51 de 125

1

Which one of the following is unsafe online activity?

Selecciona una de las siguientes respuestas posibles:

Using a screen name or nick name that cannot identify you.
Meeting someone you met online face-to-face in the company of your parents.
Keeping your social network profile private.
Giving your home address to someone you met in a chat room.

Explicación

Pregunta 52 de 125

1

Which one of the following describes a public network?

Selecciona una de las siguientes respuestas posibles:

A network where devices outside the network cannot see or communicate directly with computers on the network.
A network where devices outside the network can see but cannot communicate directly with computers on the network.
A network where devices outside the network can see and communicate directly with computers on the network.
A network where devices outside the network cannot see but can communicate directly with computers on the network.

Explicación

Pregunta 53 de 125

1

Which one of the following describes how confidential information should be sent using an unsecured network?

Selecciona una de las siguientes respuestas posibles:

In an unsigned email.
In an encrypted format.
In a compressed format.
In an attachment.

Explicación

Pregunta 54 de 125

1

Which one of the following statements about wireless networks is TRUE?

Selecciona una de las siguientes respuestas posibles:

They cannot be intercepted by unknown users.
They limit accessibility to other users.
They limit visibility to other users.
They can be accessible to other users.

Explicación

Pregunta 55 de 125

1

Which one of the following is the recommended action to prevent the risk of access to a network by other users?

Selecciona una de las siguientes respuestas posibles:

Disconnect the computer from the network.
Complain to the System Administrator.
Change the default WEP or WPA access key to one that only you know.
Adjust the Internet security settings.

Explicación

Pregunta 56 de 125

1

Which one of the following describes Bluetooth?

Selecciona una de las siguientes respuestas posibles:

Short-range wired protocol for exchanging data.
Short-range wireless protocol for exchanging data.
Long-range wireless protocol for exchanging data.
Long-range wired protocol for exchanging data.

Explicación

Pregunta 57 de 125

1

Which one of the following describes why Bluetooth device settings should be adjusted?

Selecciona una de las siguientes respuestas posibles:

To increase the range of the device.
To improve the quality of reception.
To prevent the risk of unauthorised access.
To reduce interference from other devices.

Explicación

Pregunta 58 de 125

1

Which one of the following would result in the loss of contact details if it were stolen?

Selecciona una de las siguientes respuestas posibles:

Printer
Mobile Phone.
Modem
MP3

Explicación

Pregunta 59 de 125

1

Which one of the following should you do to ensure that your USB storage device is kept safe and secure?

Selecciona una de las siguientes respuestas posibles:

Only use it in private surroundings.
Do not access it using a Bluetooth device.
Use firewall software.
Never leave it unattended.

Explicación

Pregunta 60 de 125

1

Which one of the following departments would usually hold guidelines and procedures for the secure use of IT within an organisation?

Selecciona una de las siguientes respuestas posibles:

The IT Department.
The Marketing Department.
The Sales Department.
The Finance Department.

Explicación

Pregunta 61 de 125

1

Which one of the following describes why you should follow guidelines and procedures while using IT resources in an organisation?

Selecciona una de las siguientes respuestas posibles:

To ensure easy access to information on your computer.
To ensure the secure use of IT resources.
To ensure the IT Department is able to monitor all activity.
To ensure the Finance Department is able to monitor the costs of IT resources.

Explicación

Pregunta 62 de 125

1

Which one of the following should you approach if you are unsure of the IT security procedure to follow when uninstalling an application on your computer?

Selecciona una de las siguientes respuestas posibles:

A technically well-informed team member.
A senior colleague in the Finance Department.
The Maintenance Department.
The Systems Administrator.

Explicación

Pregunta 63 de 125

1

Which one of the following describes how a breach in IT security should be reported?

Selecciona una de las siguientes respuestas posibles:

Using the telephone.
By emailing to the IT Manager.
Using any means of communication.
Using the method listed in the organisation’s security policy.

Explicación

Pregunta 64 de 125

1

Which one of the following describes how to find out about an organisation’s privacy policy?

Selecciona una de las siguientes respuestas posibles:

By reading the office newsletter.
By reading the policy in the organisation’s policy manual.
By speaking to the Finance Department.
By speaking to the Sales Department.

Explicación

Pregunta 65 de 125

1

Which one of the following would prevent the theft of a laptop?

Selecciona una de las siguientes respuestas posibles:

Anti-virus software.
Spyware
A security cable.
A webcam

Explicación

Pregunta 66 de 125

1

Bridging is a process of sending packets from source to destination on OSI layer 3. Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Selecciona una de las siguientes respuestas posibles:

Routing
Switching
Repeating
No change is needed.

Explicación

Pregunta 67 de 125

1

Windows Firewall is a built-in. host-based, stateless firewall. Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Selecciona una de las siguientes respuestas posibles:

Stateful
Network layer
Packet filter
No change is needed

Explicación

Pregunta 68 de 125

1

The primary purpose of Network Access Protection (NAP) is to prevent:

Selecciona una de las siguientes respuestas posibles:

Loss of data from client computers on a network.
Non-compliant systems from connecting to a network.
Users on a network from installing software.
Unauthorized users from accessing a network.

Explicación

Pregunta 69 de 125

1

Your company maintains a Web server that is accessible to the public. It should be placed in a/an:

Selecciona una de las siguientes respuestas posibles:

primary DNS zone.
enterprise domain.
perimeter network.
Virtual Private Network (VPN).

Explicación

Pregunta 70 de 125

1

A network sniffer is software or hardware that:

Selecciona una de las siguientes respuestas posibles:

captures and analyzes network communication.
records user activity and transmits it to the server
protects workstations from intrusions.
catalogs network data to create a secure index

Explicación

Pregunta 71 de 125

1

Which enables an employee to connect securely to a corporate network by using the Internet?

Selecciona una de las siguientes respuestas posibles:

Virtual Private Networking (VPN)
Remote Desktop Protocol (RDP)
Network Address Translation (NAT)
Network Access Protection (NAP)

Explicación

Pregunta 72 de 125

1

You are trying to establish communications between a client computer and server. The server is not responding. You confirm that both the client and the server have network connectivity. Which should you check next?

Selecciona una de las siguientes respuestas posibles:

Data Execution Prevention
Microsoft Update
Active Directory Domains and Trusts
Windows Firewall

Explicación

Pregunta 73 de 125

1

You have an application that communicates by using plain text. You want to secure communications between the application and a server at the network layer. What should you implement?

Selecciona una de las siguientes respuestas posibles:

IPSec
SFTP
TLS
SSH

Explicación

Pregunta 74 de 125

1

Which technology enables you to filter communications between a program and the Internet?

Selecciona una de las siguientes respuestas posibles:

Antivirus software
BitLocker To Go
RADIUS Server
Software firewall

Explicación

Pregunta 75 de 125

1

The primary purpose of Network Access Protection (NAP) is to prevent:

Selecciona una de las siguientes respuestas posibles:

loss of data from client computers on a network.
non-compliant systems from connecting to a network.
unauthorized users from accessing a network.
users on a network from installing software.

Explicación

Pregunta 76 de 125

1

A malicious user who intercepts and modifies communications is known as a:

Selecciona una de las siguientes respuestas posibles:

red hat hacker
man-in-the-middle
network sniffer.
white hate hacker.

Explicación

Pregunta 77 de 125

1

Which three file system objects can you specify the NTFS permissions for? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

Parents
Folders
Extensions
Files
Subfolders

Explicación

Pregunta 78 de 125

1

You need to prevent unauthorized users from reading a specific file on a portable computer if the portable computer is stolen. What should you implement?

Selecciona una de las siguientes respuestas posibles:

Advanced Encryption Standard (AES)
Folder level permissions
File-level permissions
Distributed File System (DFS)
BitLocker

Explicación

Pregunta 79 de 125

1

Basic security questions used to reset a password are susceptible to:

Selecciona una de las siguientes respuestas posibles:

social engineering.
hashing
network sniffing.
Trojan horses.

Explicación

Pregunta 80 de 125

1

Which displays a user’s level of access to a particular file or folder on the server?

Selecciona una de las siguientes respuestas posibles:

The Resultant Set of Policy
The object's Effective Permission
The client computer's registry
The object's Advanced Attributes

Explicación

Pregunta 81 de 125

1

When conducting a security audit, the first step is to:

Selecciona una de las siguientes respuestas posibles:

set up a virus quarantine area.
inventory the company's technology assets.
set up the system logs to audit security events.
install auditing software on your servers.

Explicación

Pregunta 82 de 125

1

Biometrics are used to:

Selecciona una de las siguientes respuestas posibles:

study hacking behavior.
perform security audits.
authenticate users.
measure the attack surface.

Explicación

Pregunta 83 de 125

1

A group of users has access to Folder A and all of its contents. You need to prevent some of the users from accessing a sub-folder inside Folder A.

Selecciona una de las siguientes respuestas posibles:

Disable folder sharing
Change the owner
Block inheritance
Hide the folder

Explicación

Pregunta 84 de 125

1

How can you confirm whether a computer on your network is the target of a brute force attack?

Selecciona una de las siguientes respuestas posibles:

Run the show all access command
Use antivirus software to scan the computer
Check your Windows folder for unsigned files
Check the security log for failed authentication attempts

Explicación

Pregunta 85 de 125

1

The default password length for a Windows Server domain controller is:

Selecciona una de las siguientes respuestas posibles:

0
5
7
14

Explicación

Pregunta 86 de 125

1

Which is the minimum requirements to create BitLocker To Go media on a client computer?

Selecciona una de las siguientes respuestas posibles:

Windows Vista Enterprise Edition
Windows 2000 Professional Service Pack 4
Windows 7 Enterprise Edition
Windows XP Professional Service Pack 3

Explicación

Pregunta 87 de 125

1

Software designed to infiltrate or damage a computer without the user’s consent is referred to as:

Selecciona una de las siguientes respuestas posibles:

Embedded
Freeware
Malware
Unsigned

Explicación

Pregunta 88 de 125

1

You need to be able to track file access. Which type of auditing should you implement?

Selecciona una de las siguientes respuestas posibles:

Object access
Process tracking
Directory services
Logon events

Explicación

Pregunta 89 de 125

1

A solution designed to detect unauthorized user activities, attacks, and network compromises that can also take action to prevent a breach from occurring.

Selecciona una de las siguientes respuestas posibles:

intrusion prevention systems (IPS)
intrusion detection systems (IDS)
DNS Security Extensions (DNSsec)
Unified Threat Management (UTM)

Explicación

Pregunta 90 de 125

1

A conceptual model, created by the International Organization for Standardization (ISO) to describe a network architecture that allows the passage of data between computer systems. Although never fully utilized as model for a protocol, the OSI model is nonetheless the standard for discussing how networking works.

Selecciona una de las siguientes respuestas posibles:

Secure Content Management (SCM)
DMZ (demilitarized zone)
stateful inspection
Open Systems Interconnect (OSI)

Explicación

Pregunta 91 de 125

1

A system that is designed to protect a computer or a computer network from network-based attacks. A firewall does this by filtering the data packets that are traversing the network.

Selecciona una de las siguientes respuestas posibles:

Firewall
host firewall
Honeypot
Honey net

Explicación

Pregunta 92 de 125

1

An attack against the cached information on your DNS server.

Selecciona una de las siguientes respuestas posibles:

Honeypot
DNS spoofing
DNS poisoning
Spoofing

Explicación

Pregunta 93 de 125

1

The consistency, accuracy, and validity of data or information. One of the goals of a successful information security program is to ensure that data is protected against any unauthorized or accidental changes.

Selecciona una de las siguientes respuestas posibles:

Risk
Availability
Threat
Integrity

Explicación

Pregunta 94 de 125

1

Haz click en los puntos naranjas y selecciona una respuesta correcta para cada uno de ellos

Answer Area

Explicación

Pregunta 95 de 125

1

Haz click en los puntos naranjas y selecciona una respuesta correcta para cada uno de ellos

Answer Area

Explicación

Pregunta 96 de 125

1

Haz click en los puntos naranjas y selecciona una respuesta correcta para cada uno de ellos

You are preparing a local audit policy for your workstation. No auditing is enabled. The settings of your policy are shown in the following image:

Explicación

Pregunta 97 de 125

1

To keep third-party content providers from tracking your movements on the web, enable InPrivate Browsing.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Selecciona una de las siguientes respuestas posibles:

InPrivate Filtering
SmartScreen Filter
Compatibility Mode
No change is needed

Explicación

Pregunta 98 de 125

1

Humongous Insurance needs to set up a domain controller in a branch office. Unfortunately, the server cannot be sufficiently secured from access by employees in that office, so the company is installing a Primary Domain Controller.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Selecciona una de las siguientes respuestas posibles:

Read-Only Domain Controller
Backup Domain Controller
Active Directory Server
No change is needed.

Explicación

Pregunta 99 de 125

1

Dumpster diving refers to a physical threat that a hacker might use to look for information about a computer network.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Selecciona una de las siguientes respuestas posibles:

Minimum password age
Maximum password duration
Password complexity
No change is needed.

Explicación

Pregunta 100 de 125

1

Which attack listens to network traffic of a computer resource?

Selecciona una de las siguientes respuestas posibles:

Resource gathering
Denial of service
ARP poisoning
Eavesdropping
Logic bomb

Explicación

Pregunta 101 de 125

1

To implement WPA2 Enterprise, you would need a/an:

Selecciona una de las siguientes respuestas posibles:

RADIUS server
SSL server
WEP server
VPN server

Explicación

Pregunta 102 de 125

1

The company that you work for wants to set up a secure network, but they do not have any servers. Which three security methods require the use of a server? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

802.1x
WPA2 Personal
WPA2 Enterprise
RADIUS
802.11ac

Explicación

Pregunta 103 de 125

1

You suspect a user’s computer is infected by a virus. What should you do first?

Selecciona una de las siguientes respuestas posibles:

Restart the computer in safe mode
Replace the computer’s hard disk drive
Disconnect the computer from the network
Install antivirus software on the computer

Explicación

Pregunta 104 de 125

1

Malware is any kind of unwanted software that is installed without your consent.
Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

Selecciona una de las siguientes respuestas posibles:

Viruses are
Worms are
Trojans are
No change is needed.

Explicación

Pregunta 105 de 125

1

You need to be able to track file access. Which type of auditing should you implement?

Selecciona una de las siguientes respuestas posibles:

Object access
Directory services
Logon events
Process tracking

Explicación

Pregunta 106 de 125

1

Which networking protocol provides centralized authentication, authorization and accounting?

Selecciona una de las siguientes respuestas posibles:

SMTP
RADIUS
HTTPS
OpenID

Explicación

Pregunta 107 de 125

1

A Virtual Private Network (VPN) is a/an:

Selecciona una de las siguientes respuestas posibles:

Tunnel that prevents information that passes through it from being modified or stolen
Perimeter network that contains secure virtual servers
Virtual communication method that stores data transmitted in private environment
Intrusion Prevention System that filters unauthorized communications in the enterprise network

Explicación

Pregunta 108 de 125

1

Kerberos prevents (Choose two):

Selecciona una o más de las siguientes respuestas posibles:

File corruption
Spyware distribution
Replay attacks
Eavesdropping
Denial of Service attacks

Explicación

Pregunta 109 de 125

1

You are network administrator. All computers run the Microsoft Internet Explorer browser. You need to prevent web cookies from being saved. What you should you enforce?

Selecciona una de las siguientes respuestas posibles:

SmartScreen Filter (ajuda a identificar sites de phishing e de software maligno)
InPrivate Browsing
Antivirus protection
Cross-Site Scripting Filter (ficheiros HTML)

Explicación

Pregunta 110 de 125

1

What are three ways you can reduce the number of opportunities that attackers have to exploit potential weaknesses or vulnerabilities? (Choose three)

Selecciona una o más de las siguientes respuestas posibles:

Employ content filtering for web browsers
Restrict access to system services
Employ layered defenses
Apply the principle of least privilege
Elevate all accounts to administrator accounts

Explicación

Pregunta 111 de 125

1

Selecciona la opción correcta de los menús desplegables para completar el texto.

8. For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

-A wireless MAC filter list allows only specified devices to receive packets sent from an access point ( YES, NO )
-A wireless MAC filter list can be used to either allow or deny access to the wireless network ( YES, NO )
-A wireless MAC filter list automatically applies encryption to a connection ( YES, NO )

Explicación

Pregunta 112 de 125

1

Encrypting a hard disk is an example of ensuring:

Selecciona una de las siguientes respuestas posibles:

Least privilege
Confidentiality
Integrity
Security by default

Explicación

Pregunta 113 de 125

1

Installing uninterruptible power sources to your servers is an example of ensuring:

Selecciona una de las siguientes respuestas posibles:

Integrity
Availability
Accessibility
A backup strategy

Explicación

Pregunta 114 de 125

1

Media Access Control (MAC) filtering enables you to:

Selecciona una de las siguientes respuestas posibles:

Set access permission to a shared folder
Limit access to a network based on the client computer’s network adapter
Prevent communications between specific IP addresses
Restrict communications to specific website

Explicación

Pregunta 115 de 125

1

Settings a database to run on a cluster of servers is an example of applying:

Selecciona una de las siguientes respuestas posibles:

Accessibility
Confidentiality
Availability
Integrity

Explicación

Pregunta 116 de 125

1

You have a new computer and want to restrict other people from replacing the operating system. Which action prevents a user from installing an alternate operating system by using physical media if the user has physical access to the computer.

Selecciona una de las siguientes respuestas posibles:

Password protecting the computer BIOS
Removing the user from the administrators group
Installing drive-level encryption
Disabling removable devices and drives

Explicación

Pregunta 117 de 125

1

You need to give a standard user permission to run a program as an administrator. How should you set up the program shortcut to accomplish this?

Selecciona una de las siguientes respuestas posibles:

In a different Compatibility Mode
By using a smart card
In a separate memory space
By utilizing RunAs

Explicación

Pregunta 118 de 125

1

Your anti-spam program is blocking emails from a particular sender. your company needs to receive emails from this sender. What should you do?

Selecciona una de las siguientes respuestas posibles:

Add the email address to the whitelist
Accept RSS feeds from their domain
List the sender’s email address in DNS
Reconfigure the SMS Gateway

Explicación

Pregunta 119 de 125

1

You want to prevent external users from acquiring information about your network. You should implement a:

Selecciona una de las siguientes respuestas posibles:

Proxy server
Firewall
Layer-3 switch
Router

Explicación

Pregunta 120 de 125

1

Selecciona la opción correcta de los menús desplegables para completar el texto.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

Securing network communication through IPSec packet signing ensures data integrity while in transit ( YES, NO )
IPSec packet ensures that the data is invulnerable to eavesdropping attacks ( YES, NO )
Most websites use IPSec to secure communications between their web servers and client web browsers. ( YES, NO )

Explicación

Pregunta 121 de 125

1

You have an application that communicates by using plain text. You want to secure communications between the application and server at the network layer. What should you implement?

Selecciona una de las siguientes respuestas posibles:

SFTP
SSH
IPSec
TLS

Explicación

Pregunta 122 de 125

1

The process of creating a barrier between domain members and non-domain members by using IPSec policies is referred to as:

Selecciona una de las siguientes respuestas posibles:

Server isolation
Domain isolation
Server filtering
Domain filtering

Explicación

Pregunta 123 de 125

1

An authentication protocol used by Windows stand-alone systems is:

Selecciona una de las siguientes respuestas posibles:

SMB
NTLM
NetBIOS
EAP
Kerberos

Explicación

Pregunta 124 de 125

1

An authentication protocol widely used in 802.11 environments is:

Selecciona una de las siguientes respuestas posibles:

SMB
NTLM
NetBIOS
EAP
Kerberos

Explicación

Pregunta 125 de 125

1

A strong authentication protocol preferred by Windows Server 2012 R2 is:

Selecciona una de las siguientes respuestas posibles:

SMB
NTLM
NetBIOS
EAP
Kerberos

	Creado por Hawerth Castro hace alrededor de 7 años

Security Fundamentals Quizzes

CET_TARDE - Security Fundamentals 2017 - Part 2

Pregunta 1 de 125

A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 2 de 125

What environment would be best suited for a two-firewall network design?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 3 de 125

While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 4 de 125

Which two statements are true concerning anti-spam software? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

Explicación

Pregunta 5 de 125

What type of advertising is typically annoying and associated with a specific website that is being visited?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 6 de 125

What part of the security policy states what applications and usages are permitted or denied?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 7 de 125

To which part of the network does the wireless access point part of a Linksys integrated router connect?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 8 de 125

Identify three techniques used in social engineering. (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

Explicación

Pregunta 9 de 125

What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 10 de 125

Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 11 de 125

During a pretexting event, how is a target typically contacted?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 12 de 125

What is a major characteristic of a Worm?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 13 de 125

What term is used to describe a dedicated hardware device that provides firewall services?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 14 de 125

What best practice relates to wireless access point security?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 15 de 125

Which statement is true about port forwarding within a Linksys integrated router?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 16 de 125

What statement is true about security configuration on a Linksys integrated router?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 17 de 125

What is one function that is provided by a vulnerability analysis tool?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 18 de 125

Which statement is true regarding anti-virus software?

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 19 de 125

Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.

Selecciona una de las siguientes respuestas posibles:

Explicación

Pregunta 20 de 125

Refer to the graphic. In the Linksys Security menu, what does the SPI Firewall Protection option Enabled provide?