stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
MTA Security Fundamentals (98-367) -vic Flashcards | StudBud
Explore
/
MTA Security Fundamentals (98-367) -vic
MTA Security Fundamentals (98-367) -vic
50 terms
·
StudBud Administration
·
47 plays
Imported from external platform
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
Which two are included in an enterprise antivirus program? (Choose two.)
On-demand scanning
Packet scanning
Scheduled scanning
Attack surface scanning
2
because senior executives have rights to access sensitive data, they should use administrator accounts
True
False
3
What does NAT do?
It translates public IP addresses to private addresses and vice versa
It analyzes incoming and outgoing traffic packets
It provides caching and reduces network traffic
It encrypts and authenticates IP packets
4
What does implementing Windows Server Update Services (WSUS) allow a company to manage?
Active Directory server replication
Windows updates for workstations and servers
Shared private encryption key updates
Updates to Group Policy Objects
5
the question is a picture
MAC filtering
WEP
WPA2 PSK
WPA2 Enterprise
6
You need to limit the programs that can run on client computer to a specific list Which technology should you implement?
Windows Security Center
System Configuration Utility
Security Accounts Manager
AppLocker group policies
7
You want to make your computer resistant to online hackers and malicious software.What should you do?
Configure a forward proxy
Turn on Windows Firewall
Enable spam filtering
Install anti-virus software
8
What is the primary advantage of using Active Directory Integrated Zones?
Secure replication
Zone encryption
Password protection
Non-repudiation
9
IPsec adds overhead for all network communications for which it is used.
False
True
10
IPsec encrypts data
True
False
11
The purpose of User Account Control (UAC) is to:
Encrypt the user's account
Limit the privileges of software
Facilitate Internet filtering
Secure your data from corruption
12
UAC reduces your permissions to that of a standard user unless higher permissions are necessary
True
False
13
Which provides the highest level of security in a firewall?
Stateful inspection
Inbound packet filters
Stateless inspection
Outbound packet filters
14
Which two security settings can be controlled by using group policy? (Choose two.)
Access to the Run... command
Password complexity
Automatic file locking
Encrypted access from a smart phone
15
UAC noties you when additional permissions are required and asks if you wish to continue
True
False
16
The purpose of a digital certificate is to verify that a:
Digital document is complete
Computer is virus-free
Public key belongs to a sender
Private key belongs to a sender
17
Which is the minimum requirement to create BitLocker-To-Go media on a client computer?
Windows 7 Enterprise Edition
Windows XP Professional Service Pack 3
Windows 2000 Professional Service Pack 4
Windows Vista Enterprise Edition
18
Which enables you to change the permissions on a folder?
Modify
Extended attributes
Take ownership
Auditing
19
A brute force attack:
Tries all possible password variations
Uses the strongest possible algorithms
Targets all the ports
Uses response filtering
20
Smart cards can be read from distances of serveal inches to many yards
False
True
21
What are three examples of two-factor authentication? (Choose three.)
A fingerprint and a pattern
A password and a pin number
A password and a smart card
A pin number and a debit card
22
What is a common method for password collection?
Email attachments
Back door intrusions
SQL Injection
Network sniffers
23
A digitally signed e-mail message:
Validates the recipient
Is encrypted
Is virus-free
Validates the sender
24
Which enables access to all of the logged-in user's capabilities on a computer?
Java applets
ActiveX controls
Active Server Pages (ASP)
Microsoft Silverlight
25
When conducting a security audit the first step is to:
Set up the system logs to audit security events
Set up a virus quarantine area
Install auditing software on your servers
Inventory the company's technology assets
26
by setting up a honey pot, an administrator can get insightful information about the attacker, such as the IP address
True
False
27
Smart cards provide a means of securely storing data on the card
True
False
28
Where should you lock up the backup tapes for your servers?
A filing cabinet
The tape library
An offsite fire safe
The server room
29
IPsec requires network applications to be IPsec aware
True
False
30
The “Windows Firewall” protects computers from unauthorized network connections.
Phishing scams
Email viruses
No change is needed
Unencrypted network access
31
All users on the same FAT32 file system have access rights to all files
False
True
32
UAC cannot be disabled
True
False
33
In Internet Explorer 8, the InPrivate Browsing feature prevents:
User credentials from being sent over the Internet
Any session data from being stored on the computer
Unauthorized private data input
Unencrypted communication between the client computer and the server
34
The primary purpose of Network Access Protection (NAP) is to prevent:
Users on a network from installing software.
Non-compliant systems from connecting to a network.
Unauthorized users from accessing a network
Loss of data from client computers on a network.
35
The default password length for a Windows Server domain controller is:
5
0
14
7
36
honey pots are primarily used to attract potential attackers or hackers
True
False
37
Role separation improves server security by:
Enforcing principle of least privilege
Placing servers on separate VLANs
Physically separating high security servers from other servers
Installing applications on separate hard disks
38
You need to grant a set of users write access to a file on a network share. You should add the users to:
The Everyone group
A distribution group
The Authenticated Users group
A security group
39
“Windows Firewall” is a built-in. host-based, stateless firewall.
No change is needed
Packet filter
Network layer
Stateful
40
honey pot is an appliance or piece of software that allows or denies network access based on preconfigured set of rules
True
False
41
Account lockout policies are used to prevent which type of security attack?
Users sharing passwords
Social engineering
Passwords being reused immediately
Brute force attacks
42
The purpose of Microsoft Baseline Security Analyzer is to:
Apply all current patches to a server
Correct a company's security state
List system vulnerabilities
Set permissions to a default level
43
Which password attack uses all possible alpha numeric combinations?
Brute force attack
Rainbow table attack
Dictionary attack
Social engineering
44
"Bridging" is a process of sending packets from source to destination on OSI layer 3.
No change is needed.
Repeating
Switching
Routing
45
TRUE OR FALSE
False
True
46
To prevent users from copying data to removable media, you should:
Disable copy and paste
Apply a group policy
Lock the computer cases
Store media in a locked room
47
Smart cards can be used in biometrics-based systems
True
False
48
What is the standard or basic collection of NTFS permissions?
Read attributes, list folder/read data, traverse folder/execute file
Read and execute, read, write, full control, modify, list folder contents
Change permissions, read permissions, write permissions
Create files/write data, create folders/append data, take ownership
49
What are three major attack vectors that a social engineering hacker may use? (Choose three.)
Firewall interface
Reverse social engineering
Telephone
Waste management
50
What is an example of non-propagating malicious code?
A worm
A back door
A hoax
A Trojan horse