Module 5 Security Part 2

After determining what vulnerabilities are present on your base's servers, what tool would you use to patch them?

Out of 100 systems, there are 2 that the NOS was unable to patch. As a local base admin, what is your responsibility?

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

A NIDS can analyze network traffic, report suspicious activity, and block intrusion attempts.

You manage a web server that provides information to anonymous internet users. What type of service does the server run?

To test your new program, you simulate attacks while monitoring the code while it runs. This refers to:

What tool would you use to conduct a manual audit of your system's compliance with DISA STIGs?

Javascript is injected into a social media post, causing the site to read and transmit visitor info to the attacker.

An admin logs into a server and hides a logic bomb that will delete your database software. What tool could stop this?

What is wrong with the following passphrase? djf88H#nc90H1nsdf098hNHDS*;%

You buy things on http://www.e-shop.com while on public wi-fi. You later learn that your password and CC #s are stolen.

You login to your user account with a CAC and pin number. What application security feature is being used here?

While logged in to E-Shop, you click a link in a spam e-mail. You then get a confirmation # for items you didn't order.

What did DISA develop to establish configuration standards for DoD IA systems?

What network security system filters packets coming in and out of your network based on an Access Control List?

On Amazon, you can view your shopping list as well as lists that other users have shared with you. This refers to:

The BEST way to encrypt TCP connections is to use the ___, which is the latest version of ____

What type of patch deployment targets all non-exempt systems and automatically updates them after a 24-hr grace period?

A website uniquely identifies and tracks your connection. Based on this info, which observation is the most accurate?

What tool would you use to conduct vulnerability scans on your base's servers?

Someone tampered with an electronic contract after you digitally signed it. What TLS component addresses this situation?

After years as sys ops, you move over to the UDM office, but the IDS blocks you from UDM files. What detection method?

You ensure adversaries cannot see your sensitive data by converting it from plaintext to ciphertext . This refers to:

You and your neighbor's PCs have the IP 198.162.10.3, but there is no conflict. What technology makes this possible?

While writing a PowerShell script, you regularly stop to check it for functionality and security issues. This refers to:

What tool can clients utilize to schedule software updates, install applications, and deploy operating systems?

What tool would you use to automatically scan your base's servers and determine how well they comply with STIGs?

Out of 100 systems, 2 were unable to recieve mandatory updates from MECM. What is a likely cause for this?

What MECM role provides a primary point of contact between the configuration manager client and site server?

Permissions control access to objects like files / Rights enable users to perform predefined tasks.

It is possible to encrypt TCP connections with SSL

What type of detection method could your IDS use to identify a well-documented type of attack?

An adversary attempts to infect your critical systems with malware. What DCO tool can best help deny this effort?