MILLERS BLOCK 4 STUDY GUIDE

What Category would “open ports on a USAF computer were scanned with no DoS or mission impact” be considered?

In this TH Strategy one would isolate the problem using context clues and then divide the problem into smaller portions.

NPM is a powerful affordable network monitoring software allowing you to detect, diagnose, and resolve network issues.

In what step of troubleshooting does one rank possible causes & determine if issues are hardware or software related?

Log Aggregation is the process of combining logs together from similar formats from similar systems to work together.

______ is the process of analyzing logs from separate systems in order to determine if events are related.

The NCC, NOSC, and AFNOC are the primary entities that record suspicious, unauthorized network access and activity.

A user cannot access websites on Firefox but has zero issues connecting on Chrome. On what layer would this be resolved?

What Category would “the use of an USAF computer was denied due to overwhelming unauthorized network traffic” be?

In this step of the troubleshooting process the previously formulated action plan is IMPLEMENTED.

The most common type of security incidents within the information system environment are “Classified Message Incidents”.

In this TH strategy system components and wires are double checked to ensure they are plugged in and secure.

Windows Event Viewer maintains logs about a computers programs, security, and system events.

This TH strategy works best when a supply of known working parts is available to draw from.

____ is a multi-vendor flow analysis tool designed to proactively reduce network downtime.

What Category would “an un-authorized user gained user level privileges on an Air Force computer” be considered?

____ is a common method of gathering information about a network before an attack.

An incident may also involve a violation of law.

SolarWinds Orion Platform is a powerful, scalable monitoring and management platform used by the government for IT supp.

What Category would “a USAF computer / info system was incorrectly configured” be considered?

If a user is STILL having issues after their IP setting are properly configured you would look at these two layers.

One of the primary NetOps duties is to ___________ ___________.

All end users accessing the AFNet are required to report unusual network, information system, and stand alone events.

A system called ______ is employed to collect, aggregate and apply pattern matching to volumes of data.

The tech/ user who discovers a violation should maintain positive control of the system until I can be safely passed on.

A _____ is any defect that can leave a system open to attack.

Data being sent between systems on a network can easily be intercepted by this preventative measure.

Whenever a violation of law is evident or suspected, it must be reported to law enforcement for appropriate actions.

What category would “an un-authorized person targeted a service in order to gain access but was denied” be considered?

In this step of the troubleshooting process one must reflect and observe the results of their actions.

What Category would “an un-authorized user gained root level access to an Air Force system or device” be considered?

A computer having issues accessing websites and shares drives would be a problem with the ________ of the TCP/IP Model?

If the the action plan that was executed in step 5 wasn’t effective; what step involves creating revisions of said plan?

This step of the troubleshooting process involves creating an action plan, gathering tools, & cross referencing archives

What Category would “hostile code successfully infected an USAF network device” be considered?

____ occurs when a higher classification level of data is placed on a lower classification level system.

_____ is designed to monitor your applications and their infrastructure whether it’s running on premise or in the cloud.

This TH Strategy involves installing non-functioning hardware into a KNOWN working machine one piece at a time.

The 8th step of the troubleshooting process (Documentation of the solution) is critical to a successful organization.

Which of the following is NOT an example of an Intermittent Problem?

Which of the following is a “Troubleshooting Resource”?

A _____ refers to any event that threatens the Confidentiality, integrity or availability of an information system.

Which of the following is NOT an Incident Type.

In what step of troubleshooting does one use administrative tools to confirm details about the problem?

Which of the following are considered to be a common Hardware Issue?

Generally, intermittent software & hardware problems are more difficult to solve.

In what step of troubleshooting should one ask clarifying questions such as Who? What? Where? When? & Why?

The primary detection tool deployed across the AFNet is ______.

_______ is a kind of network access control solution that uses policy based decision making to determine network access.