Module 5 Security Part 2

After years as sys ops, you move over to the UDM office, but the IDS blocks you from UDM files. What detection method?

What tool can clients utilize to schedule software updates, install applications, and deploy operating systems?

What tool would you use to conduct vulnerability scans on your base's servers?

A NIDS can analyze network traffic, report suspicious activity, and block intrusion attempts.

You manage a web server that provides information to anonymous internet users. What type of service does the server run?

Javascript is injected into a social media post, causing the site to read and transmit visitor info to the attacker.

What is wrong with the following passphrase? djf88H#nc90H1nsdf098hNHDS*;%

On Amazon, you can view your shopping list as well as lists that other users have shared with you. This refers to:

An adversary attempts to infect your critical systems with malware. What DCO tool can best help deny this effort?

Port 22 is used by all of the following protocols, except for:

It is possible to encrypt TCP connections with SSL

While writing a PowerShell script, you regularly stop to check it for functionality and security issues. This refers to:

Out of 100 systems, there are 2 that the NOS was unable to patch. As a local base admin, what is your responsibility?

You and your neighbor's PCs have the IP 198.162.10.3, but there is no conflict. What technology makes this possible?

What network security system filters packets coming in and out of your network based on an Access Control List?

After determining what vulnerabilities are present on your base's servers, what tool would you use to patch them?

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

To test your new program, you simulate attacks while monitoring the code while it runs. This refers to:

What tool would you use to conduct a manual audit of your system's compliance with DISA STIGs?

While logged in to E-Shop, you click a link in a spam e-mail. You then get a confirmation # for items you didn't order.

The BEST way to encrypt TCP connections is to use the ___, which is the latest version of ____

An admin logs into a server and hides a logic bomb that will delete your database software. What tool could stop this?

What type of detection method could your IDS use to identify a well-documented type of attack?

What type of patch deployment targets all non-exempt systems and automatically updates them after a 24-hr grace period?

A website uniquely identifies and tracks your connection. Based on this info, which observation is the most accurate?

You ensure adversaries cannot see your sensitive data by converting it from plaintext to ciphertext . This refers to:

The ISSM/ISSO is responsible for all of the following System-Level RMF tasks, except for:

You buy things on http://www.e-shop.com while on public wi-fi. You later learn that your password and CC #s are stolen.

What MECM role provides a primary point of contact between the configuration manager client and site server?

What tool would you use to automatically scan your base's servers and determine how well they comply with STIGs?

You login to your user account with a CAC and pin number. What application security feature is being used here?

Permissions control access to objects like files / Rights enable users to perform predefined tasks.

Someone tampered with an electronic contract after you digitally signed it. What TLS component addresses this situation?

What did DISA develop to establish configuration standards for DoD IA systems?

Out of 100 systems, 2 were unable to recieve mandatory updates from MECM. What is a likely cause for this?