stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
SEC FUND CHAPTER 9 Flashcards | StudBud
Explore
/
SEC FUND CHAPTER 9
SEC FUND CHAPTER 9
48 terms
·
StudBud Administration
·
141 plays
Imported from external platform
Flashcards
48 cards
F
Practice quiz
P
Host live
L
Questions
48
Answers
1
This tool used to automate the security configuration process accumulates security updates and additional features
Security Patch
Feature Update
Featured Pack
Service Pack
2
what type of lock is this
Keypad lock
Residential key enter lock
Deadbolt
Cipherlock
3
A technique known as Bayesian filtering software divides email messages that have been received into two piles called __
Pop Up Browser/Window Blocking
Spam/Non-spam
Blocker/Blocking
Web Browser/Window Browser
4
A Heuristic monitoring technique where questionable code is executed in a virtual setting to see if it is a virus
Distributed Trust
Code Emulation
Sandboxing
Kernel Pruning
5
what type of lock is this
Keypad lock
Residential key enter lock
Cipherlock
Deadbolt
6
Refers to strongest starting point being hardware, which can't be modified. Security checks are "rooted" in hardware.
Rootkits
UEFI
Chain of Trust
Hardware Root of Trust
7
This type of code testing looks for errors after the program has compiled correctly and is running.
Test Run
Runtime Code Testing
Compiled Code Testing
Model Verification Test
8
What type of barrier is this image an example of
Barricades
post
Bollards
Fencing
9
This OS uses software that manages hardware and software on a client computer
Appliance OS
Workstation OS
Network OS
Server OS
10
This application development lifecycle model uses a sequential design process
Agile Model
Waterfall Model
Production Model
Role Model
11
This lock can be inserted into the security slot of a portable device and connected to an immovable object
Cipher Lock
Safe Lock
Master Lock
Cable Lock
12
This ensures patches are automatically downloaded/installed and that software is always up to date.
Patch Reception
Service Packs
Security Patches
Code emulation
13
This allows changes to be automatically recorded and if necessary "rolled back" to a previous version of the software
Version Control Software
BIOS
Runtime Code Testing
Static Program Analyzers
14
Software testing technique that deliberately provides invalid, unexpected, or random data as inputs to a program
Compiled code testing
Stress Testing
Integrity Measurement
Dynamic Analysis (fuzzing)
15
Amy has noticed that Microsoft has changed it's security update procedures and user options. Which is not a new change?
Up-to-Date Resets
Patch Management
Forced Updates
More Efficient Distribution
16
What type of boot loader is this
UEFI
BIOS
IOS
17
Bob's work. In order to get to his office he has to enter an area where only a single door can only open one at a time?
Protected distribution Sytems
Cage
Mantrap
Door lock
18
bob installed a software that examines a computer for infections what anti malware did he install.
Anti spam
Anti spyware
Anti virus
19
This type of code testing consists of tools that examine software w/o executing the program.Only source code is reviewed
Static Program analyzers
Model Verification
Stress Testing
Runtime Code testing
20
This refers to each element of the boot process relying on the confirmation of the previous element to ensure security.
Supply Chain
Chain Linking
Chain of Trust
Certificate Chaining
21
A Model Verification Test is used to ensure that the projected application meets all specifications at that point
True
False
22
bob found a vulnerability but people are still at work what attack tool should he use?
Service pack
Security update
Feature update
Security patch
23
The following is not part of the trusted OS Hardening Techniques
Application Whitelisting and blacklisting
Least Privilege
Kernel Pruning
Read-Only File System
24
OS Hardening is the loosening of security during the design and coding of the OS
True
False
25
This is the process of removing all unnecessary features that may compromise an OS
Kernel Pruning
PDS
Code Emulation
Feature Updates
26
What is this an image of
Zonetrip
Mantrap
Zonetrap
Mantrip
27
The following is not a component of a typical OS security configuration
Employing least functionality
Code Emulation
Application Whitelisting and Blacklisting
Disabling Unnecessary ports and features
28
Bob is looking into different spam filtering methods in order to create a list of non-approved senders. what can he use.
Blacklist
Whitelist
Blocking
Antispan
29
Bob downloaded a pop-up blocker what type of anti malware is a pop-up blocker
Anti spyware
Anti Virus
Anti Spam
30
This firmware was used on early computers to hold the boot process, however, it opened the door for malware attacks
BIOS
UEFI
FIOS
Antivirus
31
This is a system of cable conduits used to protect classified info that is being transmitted between two secure areas.
Man Traps
Version Control Software
Protection Distribution Systems (PDS)
Bollard
32
Bob was noticing that his documents are being changed what Trust OS Hardening Technique can he use to stop this?
Kernel Pruning
Least Privilege
Reduce Capabilities
Read-only file system
33
This is an "attestation mechanism" designed to convince a remote party that an app is running a set of known executables
Integrity Measurement
Static Program Analyzers
Field Testing
Integrity Test
34
Different steps in the supply chain have opened the door for malware to be injected into product manufacturing know as:
Supply Chain Worms
Supply Chain Infections
Supply Chain Hijacking
Supply Chain Attacks
35
The process of picking up electromagnetic fields and reading the data that is produced by them
Bluejacking
Spyware
Bluesnarfing
Electromagnetic Spying
36
Bob was trying to boot up his PC but one of the digital signatures were no valid what is making this happen?
UEFI
Secure Boot
BIOS
UEFI and Secure Boot
37
What is this an image of
Cable Conducters
Outlet
Cable Conduits
38
This security standard was created in conjunction with UEFI
BIOS
Secure Boot
Hardware Root of Trust
Chain of Trust
39
Bob was worried that some admins accounts can by pass his security settings what Trust OS Hardening Technique can he use
Read-only file system
Kernel Pruning
Reduce Capabilities
Least Privilege
40
She will disable unnecessary ports, services, accounts and passwords. What has she just done to her laptops?
OS Security Configuration
Patch Management
Trusted OS
OS Hardening
41
Provisioning is the enterprise-wide configuration, development, and management of multiple types of IT systems
False
True
42
This type of filtering divides e-mail messages into two piles: spam and non-spam
Black-listing
Bayesian
AntiSpam
Pop-up Blocker
43
Joe is creating a Win. 10 image by creating a __OS. Done by using least privilege, reduce capabilities; hard techniques.
Network
Untrusted
Softening
Trusted
44
This type of PDS consists of specialized optical fibers in the conduit that sense acoustic vibrations.
Hardened Carrier PDS
Alarmed Carrier PDS
SDIO
Mantrap
45
This application development lifecycle model follows an incremental approach
Waterfall model
Testing model
Agile Model
Development model
46
A feature update is a software security update to repair discovered vulnerabilities.
True
False
47
Computer displays are often considered to be "passive" peripherals
True
False
48
Development, Testing, Staging, and Production are stages in Application Development
True
False