stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Unit 9 SYS8 Flashcards | StudBud
Explore
/
Unit 9 SYS8
Unit 9 SYS8
67 terms
·
StudBud Administration
·
8 plays
Imported from external platform
Flashcards
67 cards
F
Practice quiz
P
Host live
L
Questions
67
Answers
1
Which command lists currently defined iptables rules?
iptables -A INPUT -j DROP
iptables -L
iptables-save
iptables -F
2
How should you control access to files on a file server used by the development department?
Share permissions and file screens
NTFS permissions and share permissions
Share permissions and quotas
NTFS permissions and file screens
3
What action should be taken to protect against CSRF attacks?
Advise users to change passwords
Implement CSRF token
Implement CAPTCHA
Ignore the complaints
4
What are the two main causes of software vulnerabilities?
Obfuscation and normalization
Fuzzing and obfuscation
Coding errors and design flaws
Design flaws and normalization
5
Is bluebugging a Bluetooth device that receives mobile phone commands?
False
True
6
What is used to identify the network name in a wireless network?
IP address
SSID
MAC address
Subnet mask
7
What is the most effective method to control network traffic and detect attacks?
Host-based firewall and IPS
Software and application updates
Penetration testing
Strong password policy
8
What could cause slow wireless network issues after a firmware update?
Incorrect MAC filtering
High Wi-Fi signal strength
Lack of testing
Disabled firewall
9
What is an evil twin?
Sensitive information
Marks outside of buildings
Mimics a valid access point
Obtains logon credentials
10
What action enhances browser privacy and prevents unauthorized access to company data?
Blocking all pop-up windows
Turning off Remember search and form history
Clearing the web browser cache
Disabling all browser add-ons
11
What type of RFID tag can send a signal over long distances?
Passive
Active
NFC
Bluetooth
12
Where should the Wireless LAN controller be installed?
Lobby
Network closet
Roof
Manager's office
13
How can you control internet access for hotel guests?
Captive portal
802.1x authentication
Pre-shared key authentication
MAC address filtering
14
Wireless network interference is causing signal problems.
True
False
15
Which IPsec mode is more compatible with NAT?
Tunnel mode
Transport mode
16
What packet does the sender receive after sending a connection request to TCP port 25?
SYN
ICMP Unreachable Port
ACK
RST
17
What should you do to prevent unauthorized users from using AP configuration?
Implement MAC address filtering
Isolate the AP from the client's wired network
Change the administrative password
Change the channel used by the AP's radio signal
18
What type of attack is executed when an attacker masquerades as the original device?
Bluesnarfing
Cloning
Relay
Disassociation
19
Is the RADIUS server down?
True
False
20
What type of attack occurs when an attacker inserts database commands into input fields?
SQL injection
Buffer overflow
DLL injection
Cross-site scripting
21
Is blocking process spawning a recommended application hardening technique?
True
False
22
What is the first step in ensuring server security?
Connect to network
Install antivirus software
Enforce password policy
Apply baseline template
23
What type of wireless access point is commonly used in a residential setting?
Bridge
SOHO
WLC
LWAP
24
Which fuzz testing program type defines test data based on input models?
Code signing
Memory management
Generation-based
Mutation-based
25
What sends unsolicited business cards and messages to a Bluetooth device?
Bluebugging
Bluejacking
Bluesnarfing
Slamming
26
Where would you configure passwords for wireless network authentication?
On a RADIUS server
On a certificate authority (CA)
On the wireless access point and each device
On the wireless access point
27
Which tools can be used to distribute and install software patches on Windows workstations?
WSUS
Security Configuration and Analysis
Security Templates
Configuration baseline
28
What device would you use to perform a site survey?
Wireless interface
Wi-Fi analyzer
Heat map
Wireless access point
29
What is a configuration baseline?
Performance statistics
Minimum server services
Collection of security settings
List of settings
30
Which action reduces the attack surface of a server?
Host-based IDS
Anti-malware software
Unused service removal
Patches and hotfixes installation
31
How to completely disable access to a network for port security?
Using a captive portal
Implementing IEEE 802.1X
Physically removing the patch cable
MAC filtering
32
Which application hardening technique is most effective in preventing attacks creating new processes?
Block process spawning
Use exception rules
Monitor logs
Implement third-party application hardening tools
33
What should a team do if a feature is too complex to complete in a sprint?
Continue working on the feature
Drop the feature
Break the feature down
Move on to next feature
34
What should the client verify first when using SSL authentication?
Server's certificate-validity period
Asymmetric keys
Intranet DNS resolutions
Non-expiring certificate
35
What type of attack is likely causing interference with your wireless network?
Jamming
Disassociation
Bluesnarfing
Cloning
36
How can you change directory permissions in Linux to provide limited access?
chmod 755
chmod 777
chmod 750
None of the above
37
What is the most effective method to protect logical ports?
Secure protocols
Firewalls
Service hardening
Software updates
38
What is the effect of the following iptables rules?
Allow SMTP traffic
Allow SSH traffic
Block SMTP traffic
Block SSH traffic
39
Can security templates apply new software patches?
False
True
40
What type of interference is caused by motors, heavy machinery, and fluorescent lights?
RFID
NFC
EMI
RFI
41
What is the BEST solution for application hardening?
Block process spawning
Use exception rules
Control access to executable files
Implement third-party application hardening tools
42
What change should an IT company consider to improve its server's security?
Switch off the server whenever it is not in use
Continue to use the default settings but increase monitoring efforts
Limit the privileges of each user on the server
Ignore software and security patches and updates
43
What action disallows a connection silently?
Forward
Accept
Drop
Reject
44
Which tools allow remote management of servers?
FTP and SSL
Telnet and POP3
FTP and SSH
SSH and POP3
45
What should you do if unauthorized wireless access points are deployed within your organization?
Conduct a site survey
Check the MAC addresses of devices connected to your wired switch
Implement an intrusion prevention system (IPS)
Implement a network access control (NAC) solution
46
How can you ensure the security of patient data during transfer using removable media devices?
Implement strict password policy
Update OS and applications
Encrypt data on media
Install antivirus software
47
What should you consider when strategically positioning wireless access points?
Control access to WAPs based on job roles
Position based on management preferences
Minimize interference from electronic devices
Disable the service set identifier (SSID)
48
What type of attack submits a longer stream of data than the input variable is designed to handle?
Data diddling
Buffer overflow attack
Time-of-check to time-of-use attack
Smurf attack
49
What do security templates allow you to do?
Consistent settings
Multiple computer settings
Apply software patches
Fix software problem
50
Is a configuration baseline a collection of security settings that can be automatically applied to a device?
False
True
51
What does bluesnarfing involve?
Cloning a device
Sending electronic cards
Executing commands
Viewing calendar and emails
52
What is a basic hardening guideline for applications?
Allow unrestricted access
Grant administrative privileges
Assume all applications are flawless
Update all applications
53
Which command in Linux displays listening and non-listening sockets?
nexus -s
netstat -l
netsat -r
netstat -a
54
What is an attack that injects malicious scripts into web pages?
SQL injection
XSS
Drive-by download
DLL injection
55
Do switches and wireless access points use IP address filtering?
True
False
56
What is used to control access through a device?
IP address filtering
MAC address filtering
Port number filtering
Session filtering
57
What is the most likely cause of the user not receiving an Access-Accept or Access-Reject message?
Network connection is unstable
User entered wrong password
RADIUS server is down
User not in the server's database
58
Which ports need to remain open for FTP file transfer?
21 and 80
23 and 443
20 and 443
21 and 20
59
What type of security risk is it when an employee connects a wireless access point to the network against policy?
Physical security
On-path attack
Rogue access point
Phishing
60
What benefits does an IPsec tunnel with IKE provide in a VPN setup?
Secure application-level connections
Packet-level encryption with mutual authentication
Protection at the packet level
Mutual authentication using SSL
61
Which type of site survey should be performed first?
Active
Ad hoc
Predictive
Passive
62
What is the most effective action to enhance browser privacy?
Clear browser cache
Disable add-ons
Incognito mode
Restrict cookies
63
Which components are part of a WPA2-Enterprise wireless network?
802.1x
TKIP encryption
Open authentication
WEP encryption
64
Which command shows all installed RPM packages?
dnf list installed
apt list installed
rpm list installed
yum list installed
65
What is the MOST effective strategy to improve server security?
Enable all services
Use simple passwords
Switch off security features
Implement security baseline
66
Where would you configure a rule to allow external access to the HTTPS port?
Accept
Output
Forward
Input
67
How can you mitigate the vulnerability to LDAP Injection attacks in an application?
Disable client-side scripting
Implement input validation
Switch authentication protocol
Enable SSL/TLS encryption
