Incoming emails are scanned for viruses to

Decrease the chance of a virus infecting the machine.

What is the primary purpose of NAP?

Prevent noncompliant computers from connecting to a network

Why would you scan for viruses in incoming emails?

Decrease chances of a virus getting to a client machine

The purpose of a digital certificate is to verify that a:

Public key belongs to a sender.

Answer the following question:

Issued by a public certificate authority

the broadcast name of an access point

Phishing is an attempt to:

Obtain information by posing as a trustworthy entity

Policies, Procedures, Awareness

studbud

CHS EssSec Study Guide

135 termsStudBud Administration566 plays

CS Study Guide

Flashcards135 cardsFPractice quizPHost liveL

Questions 135

Answers

1
A primary benefit to applying OS updates is
Keep the software licensed
Close existing vulnerabilities
Conserving power
Update the firewall
2
(True or False)
True
False
3
What is the primary advantage of using Active Directory Integrated Zones?
Secure replication
Non repudiation
Zone encryption
Password protection
4
You can configure an email event notification for an audited activity.
False
True
5
A Trusted Platform Module (TPM) chip is a microprocessor that
provides system lockout
stores the encrypted data
maintains the CMOS
stores the encryption keys
6
You suspect your computer has a virus. The first thing you should do is
Call tech support
Replace the hard drive
Install antivirus
Disconnect from the Internet
7
Incoming emails are scanned for viruses to
verify the receiver of the email
verify the senders of the email
speed up the process of sending
Decrease the chance of a virus infecting the machine.
8
True or false:
True
False
9
__________ controls, enforces and assigns security policies and access rights for all users.
Active Directory
registry
UAC
NTFS permissions
10
True or False
True
False
11
Biometric data is usually encrypted when gathered.
False
True
12
What is the primary purpose of NAP?
Prevent users from installing software
Prevent loss of data from client computers on a network
Prevent noncompliant computers from connecting to a network
Prevent unauthorized users from accessing a network
13
What would you configure on an access point if you want to prevent users from seeing each other
MAC address filtering
client isolation mode
Disable SSID broadcasting
client bridge mode
14
What type of firewall allows for inspection of all characteristics of a packet?
Stateful
NAT
Windows Defender
Stateless
15
The message board https://chsknights/ would be affected by the settings:
In the Internet Zone
In the trusted sites zone
In the Locan Intranet Zone
In the restricted sites zone
16
Why would you scan for viruses in incoming emails?
Ensure that all the links in the message are trustworthy
Decrease chances of a virus getting to a client machine
Increase the speed of email processing
Verify that the senders of the message are legitimate
17
All computer that are not compliant with NAP policies must be manually reconfigured.
True
False
18
When granting a group of users write access to a file on a network share, you should:
A distribution group
Add users to the Authenticated users group
The Everyone Group
Add users to a security group
19
UAC cannot be disabled.
True
False
20
NAP can enforce policies such as requiring client computers to run a firewall.
False
True
21
The purpose of a digital certificate is to verify that a:
Private key belongs to a sender
Computer is virus free
Public key belongs to a sender.
Digital document is complete
22
Bitlocker to Go works on Windows Vista and Windows XP
False
True
23
Answer the question:
Change the owner
Disable folder sharing
Block inheritance
Hide the folder
24
Answer the following question:
router
layer 3 switch
proxy server
firewall
25
You would enable ________in Adv. Audit Policy to see if specific folders have been accessed.
Object Access
Logon/Logoff
Detailed Tracking
Account Logon
26
Answer the following question:
Man in the Middle
Trojan horse
Social egineering
Dumpster divng
27
Answer the following question:
Issued by a public certificate authority
Signed by an enterprise certificate authority
Signed by using a 4096 bit key
Signed by using a 1024 bit key
28
Answer the following:
Local policy
Group policy
Logon script
Windows Update
29
Clients can verify the DNS server they are communicating with is legitimate.
False
True
30
Answer the question:
B
A
C
D
31
Answer the following question:
B
D
C
A
32
Answer the question:
A security group
A distribution group
The Everyone Group
The authenticated users group
33
Answer the following:
C, D, E only
A, B, E only
A, B, C only
All of the above
34
Answer the question:
Server hardening
Virus scanning
Network health
Buffer overflows
35
You would use ________ to protect users from phishing scams on Internet Explorer.
Antivirus
InPrivate Browsing
Smart Screen Filter
Ad blocker
36
What would you use to prevent buffer overflows?
Data Execution Prevention
Event auditing
an intrusion detection system
A proxy server
37
What is an SSID?
the wireless LAN transmission
a wireless encryption standard
the broadcast name of an access point
a security protocol
38
Phishing is an attempt to:
Obtain information by posing as a trustworthy entity
corrupt email databases through the use of viruses
Steal data through the use of network intrusion
Limit access through the use of network intrusion
39
Malware is any type of unwanted software that is installed without permission.
False
True
40
Answer the following:
SmartScreen Filtering
Incognito
InPrivate Browsing
InPrivate Filtering
41
Email spoofing:
Obscures the receiver
sends large amounts of spam mail
Is a man in the middle attack
Obscures the sender
42
IPsec adds overhead for all network communications.
True
False
43
Turn on _____in Advanced Audit Policy, in order to enable logging of all local login events.
System
Detailed Tracking
Account Logon
Logon/Logoff
44
True or False
False
True
45
_________ is the process sending packets from source to destination on OSI Layer 3
Repeating
Switching
Routing
Bridging
46
If you want to make sure your computer is resistant to hackers and malware, you should
install antivirus software
turn on spam filtering
turn on the firewall
put it in a perimter network
47
When setting up Bitlocker you must create a ______________________.
encryption key
TPM
PIN
recovery password
48
Which of the following would you do to prevent users from copying data to removable media?
Disable copy and paste
Lock the computer cases
Store media in a locked room.
Apply a group policy
49
Answer the question.
Update the hardware firewall
Keep the software licensed
Keep the server ports open
Close existing vulnerabilities
50
Which of the following is a special folder permission?
Modify
Delete
Read
Take Ownership
51
Answer the question:
Data Defenses
Physical Security
Policies, Procedures, Awareness
Perimeter Defenses
52
Digitally signed emails validate the receiver.
False
True
53
Answer the question:
Click Change Icon and choose "Run as a maximized window"
Click Run and choose :Maximize Window"
Click General tab and change to open as a maximized window
54
A user receiving large amounts of emails selling prescription drugs is most likely receiving
spoofed email
pharming emails
malware
spam
55
IPsec encrypts ____________.
hard drives
VOIP
IP Packets
Data
56
Installing a system file checksum verification app is an example of ensuring:
confidentiality
authenticity
integrity
accessibility
57
Answer the following question:
True
False
58
IPsec packet encryption ensures data is invulnerable to eavesdropping attacks.
True
False
59
Microsoft Baseline Security Analyzer scans for
firmware update
Malware
Missing security updates
Power configurations
60
Where is the best place to lock up server backup tapes?
Server closet
Your office
Tape library
Offsite firesafe
61
True or false:
False
True
62
What is the default password length for a Windows Server domain controller?
14
7
8
There is no minimum
63
Which of the following devices examines packet header info to determine if traffic is allowed?
firewall
Malwarebytes
Bitlocker
Antivirus
64
_______creates a barrier between domain members and non-domain members by IPsec policies:
server filtering
domain isolation
domain filtering
server isolation
65
Answer the following question:
False
True
66
Answer the question:
Read Only Domain controller
Server Core domain Controller
L2TP
PPTP
67
Answer the question:
Click Securitytab and give admin rightsto your standard acct
Click Advanced and Run as Adminstrator
Click Run and choose Run as Adminstrator
68
Answer the following question:
Forward proxy
Remote Access Server (RAS)
VLAN
Roaming profiles
69
Sender Policy Framework aims to reduce spoofed emails by:
List servers that legitimately forward mail for a domain
provides an IP address range so senders can be verified.
Provides an encryption key
Contacting the sender and receiving an IP address
70
What type of attack listens to network traffic on a network device?
denial of service
eavesdropping
dumpster diving
resource gathering
71
All users on the same FAT32 file system have access rights to all files.
False
True
72
What allows you to change permissions on a folder?
Take ownership
modify
Auditing
Extended attributes
73
Account lockout policies are used to prevent which type of security attacks?
Users sharing passwords
man in the middle attacks
brute force attacks
Passwords being reused immediately
74
InPrivate Browsing prevents:
Any session data from being stored on the computer
Unencrypted communication between client and server
User credentials from being sent over the Inrernet
Unauthorized private data input
75
Audit Logs have a set size limit and cannot be adjusted.
True
False
76
Windows firewall protects computers from _________.
phishing scams
Email viruses
unencrypted information
unauthorized network connections
77
IPsec requires network applications to be IPsec aware
False
True
78
What technology enables you to filter communication between a program and the Internet?
Antivirus software
WSUS
software firewall
NAP
79
UAC reduces your permissions to that of a standard user unless higher permissions are required.
False
True
80
What is the minimum OS requirement to create Bitlocker to Go media on a client computer?
Windows Vista
Windows Server 2008
Windows 7 Enterprise Edition
Windows XP Professional
81
True or False
False
True
82
Account lockout policies are used to prevent which type of security attacks?
Brute force attacks
Passwords being reused immediately
Social engineering
Users sharing passwords
83
Answer the following:
NTFS Permissions
Registry
User account Controls
Active Directory
84
DNSSEC prevents Man in the Middle attacks for DNS queries.
True
False
85
Answer the question
Takes the permission of the other files in the same dir.
Takes the permissions of the parent folder
Does not take any permissions
Takes the permissions of the other folders in the same dir.
86
What do you need to implement WPA2 Enterprise?
Two client computers
a VPN server
A file server
A RADIUS server
87
FAT32 has built in security features that users can control.
True
False
88
True or false:
True
False
89
Why would you implement a wireless intrusion prevention system?
detect packet theft
To enforce SSID broadcasting
prevent rogue access points
prevent wireless interference
90
An attacker would use_______ to obtain DNS zone information
MITM
phishing
Eavesdropping
footprinting
91
What type of malware is used to steal passwords typed into a computer?
rootkit
backdoor
keylogger
trojan
92
Before enabling Bitlocker, you must initialize the _________________.
TPM
Password
Trusted platform module
BIOS
93
Read the following question:
SFTP
VPN
SSH
Radius server
94
True or False
False
True
95
Answer the following:
MAC filtering
WPA2-PSK (or WPA2 Personal)
WPA2 Enterprise
WEP
96
Answer the question:
Data Defenses
Perimeter Defenses
Physical Security
Policies, Procedures, Awareness
97
Answer the following question:
software firewall
Hardware firewall
Virus software
Radius server
98
Read the following question
A WAP
A proxy server
A firewall
A layer 2 switch
99
True or False
False
True
100
You can view audit logs in the Event Viewer.
True
False
101
True or False
False
True
102
Creating MD5 hash is an example of ensuring what?
Integrity
Availablity
Least privilege
Confidentiality
103
Digitally signed emails:
validate the receiver
Are encrypted
validate the sender
are virus free
104
What type of server would a web server be considered?
domain controller
file server
application server
SQL server
105
Answer the following question:
Password
PIN
fingerprint
USB flash drive key
106
Answer the following question:
encryption level
warranty
physical location
configuration
107
Setting a minimum age restricts when users can:
Request a password reset
Log on by using their passwords
Change their passwords
Set their own password expiration
108
Password history policies are used to prevent:
Passwords from being reused immediately
Brute force attacks
Social Engineering
Dictionary attacks
109
Role separation improves server security by
physically separating high security servers from others
enforcing principle of least privilege
installing applications on separate hard disks
placing servers on separate VLAND
110
WSUS is a tool that:
Manages the servives that run the servers
manages updates for Windows servers
Updates licensing for Windows servers
Updates the data stored on a server
111
Answer the following question:
Enable full access to the Everyone group
Retain the original folders permissions
Restrict access to the Administrators group
Inherit the destinationfolders permissions
112
What application allows you to encrypt drives?
DEP
Bitlocker to Go
EFS
NTFS
113
NTFS has built-in security features that control file access.
True
False
114
The purpose of a RADIUS server is to
provide external authentication
provide encryption
provide complex passwords
provide multifactor identification
115
Scheduled and On-Demand scanning are features of:
enterprise antivirus protection
VLANS
packet scanning
a firewall
116
A malicious user who intercepts information and modifies that information would be known as a:
white hat hacker
black hat hacker
grey hat hacker
man-in-the-middle
117
Setting up a folder to read-only is an example of
availability
confidentiality
Integrity
Accessibility
118
Passwords that contain words are vulnerable to a
dictionary attack
replay attack
rainbow table attack
brute force attack
119
Signing in with __________ is an example of two-factor authentication.
retinal scan and voice recognition
fingerprint and password
complex password and passphrase
smart card and a hardware token.
120
IPsec is used to secure communication between web servers and web browsers.
False
True
121
T/F Securing nw communication thru IP packet signing ensures data integrity while in transit.
True
False
122
UAC notifies you when additional permissions are required and asks you if you wish to continue.
True
False
123
You can protect systems from buffer overflows by using:
Antivirus software
A proxy server
Data ExecutionPrevention
An Intruder Prevention System
124
Most websites use IPsec to secure communication between webservers and web clients
False
True
125
Answer the following question:
False
True
126
A network sniffer is hardware or software that:
captures and analyzes network data.
Protects networks from being attacked
records user activity and transmits it to the server.
catalogs network data to create a NAP index
127
True or false:
True
False
128
The first step in doing a security audit should always be_______________________
Make sure there is auditing software on the servers
Take an inventory of the technology assets
Set up a NAP
Set the system to email security events
129
DNSSEC prevents spoofing of query responses.
False
True
130
Answer the following question:
Create a domain group policy
Create a local security policy on each computer.
Enable Object access
Enable auditing
131
True or False
False
True
132
True orFalse
True
False
133
To limit login attempts on a computer, you would
Make password complexity requirements higher
Implement account lockout policy
Enable account auditing
Enforce password history
134
You would use a ________ to prevent users from acquiring information about your network.
Firewall
Layer 3 switch
router
Proxy server
135
Answer the question:
A, B, C
A, B, E
All of the above.
C, D

CHS EssSec Study Guide Flashcards | StudBud