Click Advanced and Run as Adminstrator

What is the primary purpose of NAP?

Prevent noncompliant computers from connecting to a network

the broadcast name of an access point

Policies, Procedures, Awareness

InPrivate Browsing prevents:

Any session data from being stored on the computer

The first step in doing a security audit should always be_______________________

Take an inventory of the technology assets

studbud

CHS EssSec Study Guide

135 termsStudBud Administration566 plays

CS Study Guide

Flashcards135 cardsFPractice quizPHost liveL

Questions 135

Answers

1
Clients can verify the DNS server they are communicating with is legitimate.
False
True
2
Answer the question:
A security group
The Everyone Group
A distribution group
The authenticated users group
3
Answer the question:
Click Securitytab and give admin rightsto your standard acct
Click Run and choose Run as Adminstrator
Click Advanced and Run as Adminstrator
4
Answer the following question:
Dumpster divng
Social egineering
Man in the Middle
Trojan horse
5
True or False
False
True
6
You suspect your computer has a virus. The first thing you should do is
Call tech support
Disconnect from the Internet
Replace the hard drive
Install antivirus
7
Setting a minimum age restricts when users can:
Change their passwords
Request a password reset
Set their own password expiration
Log on by using their passwords
8
True or False
True
False
9
Answer the question.
Update the hardware firewall
Keep the software licensed
Close existing vulnerabilities
Keep the server ports open
10
Answer the question:
Network health
Server hardening
Virus scanning
Buffer overflows
11
Answer the question:
L2TP
Server Core domain Controller
PPTP
Read Only Domain controller
12
UAC reduces your permissions to that of a standard user unless higher permissions are required.
True
False
13
DNSSEC prevents Man in the Middle attacks for DNS queries.
False
True
14
T/F Securing nw communication thru IP packet signing ensures data integrity while in transit.
False
True
15
When granting a group of users write access to a file on a network share, you should:
A distribution group
Add users to a security group
The Everyone Group
Add users to the Authenticated users group
16
(True or False)
False
True
17
Which of the following is a special folder permission?
Read
Delete
Take Ownership
Modify
18
Which of the following would you do to prevent users from copying data to removable media?
Store media in a locked room.
Disable copy and paste
Lock the computer cases
Apply a group policy
19
Email spoofing:
Is a man in the middle attack
Obscures the receiver
sends large amounts of spam mail
Obscures the sender
20
True or False
False
True
21
Why would you implement a wireless intrusion prevention system?
detect packet theft
To enforce SSID broadcasting
prevent rogue access points
prevent wireless interference
22
A malicious user who intercepts information and modifies that information would be known as a:
grey hat hacker
white hat hacker
man-in-the-middle
black hat hacker
23
Answer the following question:
B
D
C
A
24
What is the primary purpose of NAP?
Prevent noncompliant computers from connecting to a network
Prevent users from installing software
Prevent loss of data from client computers on a network
Prevent unauthorized users from accessing a network
25
Bitlocker to Go works on Windows Vista and Windows XP
True
False
26
Digitally signed emails validate the receiver.
True
False
27
What is an SSID?
the broadcast name of an access point
a wireless encryption standard
the wireless LAN transmission
a security protocol
28
Answer the following question:
False
True
29
Answer the question:
Physical Security
Data Defenses
Policies, Procedures, Awareness
Perimeter Defenses
30
What technology enables you to filter communication between a program and the Internet?
NAP
WSUS
Antivirus software
software firewall
31
A user receiving large amounts of emails selling prescription drugs is most likely receiving
pharming emails
spam
spoofed email
malware
32
Malware is any type of unwanted software that is installed without permission.
False
True
33
Answer the following:
C, D, E only
A, B, E only
A, B, C only
All of the above
34
You would use ________ to protect users from phishing scams on Internet Explorer.
InPrivate Browsing
Antivirus
Smart Screen Filter
Ad blocker
35
Read the following question
A WAP
A firewall
A layer 2 switch
A proxy server
36
Answer the following question:
Password
fingerprint
PIN
USB flash drive key
37
Digitally signed emails:
are virus free
validate the receiver
validate the sender
Are encrypted
38
True or false:
True
False
39
FAT32 has built in security features that users can control.
True
False
40
You can view audit logs in the Event Viewer.
False
True
41
Answer the following question:
physical location
configuration
warranty
encryption level
42
What would you use to prevent buffer overflows?
A proxy server
Event auditing
an intrusion detection system
Data Execution Prevention
43
What type of attack listens to network traffic on a network device?
dumpster diving
eavesdropping
denial of service
resource gathering
44
What application allows you to encrypt drives?
EFS
DEP
Bitlocker to Go
NTFS
45
Where is the best place to lock up server backup tapes?
Your office
Offsite firesafe
Server closet
Tape library
46
InPrivate Browsing prevents:
Any session data from being stored on the computer
Unencrypted communication between client and server
User credentials from being sent over the Inrernet
Unauthorized private data input
47
An attacker would use_______ to obtain DNS zone information
phishing
footprinting
Eavesdropping
MITM
48
What would you configure on an access point if you want to prevent users from seeing each other
client bridge mode
Disable SSID broadcasting
MAC address filtering
client isolation mode
49
The first step in doing a security audit should always be_______________________
Set up a NAP
Make sure there is auditing software on the servers
Set the system to email security events
Take an inventory of the technology assets
50
IPsec requires network applications to be IPsec aware
False
True
51
What is the default password length for a Windows Server domain controller?
8
There is no minimum
14
7
52
IPsec encrypts ____________.
IP Packets
Data
VOIP
hard drives
53
Answer the following question:
Enable Object access
Enable auditing
Create a domain group policy
Create a local security policy on each computer.
54
Passwords that contain words are vulnerable to a
rainbow table attack
replay attack
brute force attack
dictionary attack
55
You would use a ________ to prevent users from acquiring information about your network.
Layer 3 switch
Firewall
Proxy server
router
56
Biometric data is usually encrypted when gathered.
False
True
57
Answer the following question:
False
True
58
_________ is the process sending packets from source to destination on OSI Layer 3
Routing
Switching
Bridging
Repeating
59
What type of server would a web server be considered?
application server
domain controller
SQL server
file server
60
Most websites use IPsec to secure communication between webservers and web clients
False
True
61
What type of malware is used to steal passwords typed into a computer?
rootkit
trojan
backdoor
keylogger
62
A Trusted Platform Module (TPM) chip is a microprocessor that
stores the encrypted data
stores the encryption keys
provides system lockout
maintains the CMOS
63
Answer the following:
User account Controls
NTFS Permissions
Active Directory
Registry
64
Account lockout policies are used to prevent which type of security attacks?
man in the middle attacks
brute force attacks
Users sharing passwords
Passwords being reused immediately
65
Why would you scan for viruses in incoming emails?
Increase the speed of email processing
Verify that the senders of the message are legitimate
Decrease chances of a virus getting to a client machine
Ensure that all the links in the message are trustworthy
66
IPsec adds overhead for all network communications.
False
True
67
Answer the following question:
Enable full access to the Everyone group
Inherit the destinationfolders permissions
Retain the original folders permissions
Restrict access to the Administrators group
68
If you want to make sure your computer is resistant to hackers and malware, you should
turn on spam filtering
install antivirus software
turn on the firewall
put it in a perimter network
69
DNSSEC prevents spoofing of query responses.
False
True
70
A network sniffer is hardware or software that:
Protects networks from being attacked
records user activity and transmits it to the server.
captures and analyzes network data.
catalogs network data to create a NAP index
71
Answer the following question:
Signed by using a 4096 bit key
Signed by using a 1024 bit key
Issued by a public certificate authority
Signed by an enterprise certificate authority
72
Windows firewall protects computers from _________.
Email viruses
unauthorized network connections
phishing scams
unencrypted information
73
All users on the same FAT32 file system have access rights to all files.
False
True
74
Scheduled and On-Demand scanning are features of:
enterprise antivirus protection
packet scanning
a firewall
VLANS
75
True or false:
True
False
76
Answer the following question:
software firewall
Radius server
Hardware firewall
Virus software
77
What do you need to implement WPA2 Enterprise?
A RADIUS server
a VPN server
Two client computers
A file server
78
Which of the following devices examines packet header info to determine if traffic is allowed?
Antivirus
firewall
Bitlocker
Malwarebytes
79
Answer the following:
WPA2 Enterprise
WPA2-PSK (or WPA2 Personal)
MAC filtering
WEP
80
True or False
True
False
81
Role separation improves server security by
placing servers on separate VLAND
installing applications on separate hard disks
physically separating high security servers from others
enforcing principle of least privilege
82
True or False
True
False
83
Setting up a folder to read-only is an example of
confidentiality
availability
Accessibility
Integrity
84
Incoming emails are scanned for viruses to
speed up the process of sending
verify the receiver of the email
verify the senders of the email
Decrease the chance of a virus infecting the machine.
85
NAP can enforce policies such as requiring client computers to run a firewall.
False
True
86
IPsec is used to secure communication between web servers and web browsers.
True
False
87
A primary benefit to applying OS updates is
Conserving power
Update the firewall
Close existing vulnerabilities
Keep the software licensed
88
Installing a system file checksum verification app is an example of ensuring:
integrity
confidentiality
accessibility
authenticity
89
True orFalse
False
True
90
Answer the question
Takes the permission of the other files in the same dir.
Does not take any permissions
Takes the permissions of the parent folder
Takes the permissions of the other folders in the same dir.
91
__________ controls, enforces and assigns security policies and access rights for all users.
UAC
Active Directory
NTFS permissions
registry
92
Answer the question:
Data Defenses
Perimeter Defenses
Physical Security
Policies, Procedures, Awareness
93
Answer the following question:
router
firewall
proxy server
layer 3 switch
94
Answer the question:
Click General tab and change to open as a maximized window
Click Change Icon and choose "Run as a maximized window"
Click Run and choose :Maximize Window"
95
What is the primary advantage of using Active Directory Integrated Zones?
Zone encryption
Password protection
Non repudiation
Secure replication
96
The purpose of a digital certificate is to verify that a:
Computer is virus free
Private key belongs to a sender
Public key belongs to a sender.
Digital document is complete
97
Sender Policy Framework aims to reduce spoofed emails by:
Contacting the sender and receiving an IP address
List servers that legitimately forward mail for a domain
Provides an encryption key
provides an IP address range so senders can be verified.
98
What type of firewall allows for inspection of all characteristics of a packet?
Stateful
NAT
Stateless
Windows Defender
99
Answer the following:
Incognito
SmartScreen Filtering
InPrivate Browsing
InPrivate Filtering
100
Password history policies are used to prevent:
Social Engineering
Brute force attacks
Dictionary attacks
Passwords from being reused immediately
101
UAC cannot be disabled.
True
False
102
What is the minimum OS requirement to create Bitlocker to Go media on a client computer?
Windows Server 2008
Windows XP Professional
Windows Vista
Windows 7 Enterprise Edition
103
Microsoft Baseline Security Analyzer scans for
firmware update
Missing security updates
Power configurations
Malware
104
IPsec packet encryption ensures data is invulnerable to eavesdropping attacks.
False
True
105
True or False
True
False
106
Phishing is an attempt to:
Limit access through the use of network intrusion
corrupt email databases through the use of viruses
Steal data through the use of network intrusion
Obtain information by posing as a trustworthy entity
107
Turn on _____in Advanced Audit Policy, in order to enable logging of all local login events.
Logon/Logoff
Detailed Tracking
System
Account Logon
108
Audit Logs have a set size limit and cannot be adjusted.
False
True
109
Account lockout policies are used to prevent which type of security attacks?
Brute force attacks
Passwords being reused immediately
Social engineering
Users sharing passwords
110
NTFS has built-in security features that control file access.
True
False
111
True or False
False
True
112
The purpose of a RADIUS server is to
provide multifactor identification
provide complex passwords
provide encryption
provide external authentication
113
Before enabling Bitlocker, you must initialize the _________________.
Trusted platform module
TPM
BIOS
Password
114
Answer the following:
Local policy
Logon script
Windows Update
Group policy
115
Creating MD5 hash is an example of ensuring what?
Confidentiality
Least privilege
Integrity
Availablity
116
To limit login attempts on a computer, you would
Make password complexity requirements higher
Implement account lockout policy
Enforce password history
Enable account auditing
117
Answer the following question:
False
True
118
Answer the question:
C
A
D
B
119
You would enable ________in Adv. Audit Policy to see if specific folders have been accessed.
Detailed Tracking
Object Access
Account Logon
Logon/Logoff
120
You can configure an email event notification for an audited activity.
False
True
121
You can protect systems from buffer overflows by using:
Data ExecutionPrevention
A proxy server
An Intruder Prevention System
Antivirus software
122
Answer the question:
Block inheritance
Change the owner
Disable folder sharing
Hide the folder
123
The message board https://chsknights/ would be affected by the settings:
In the trusted sites zone
In the Internet Zone
In the restricted sites zone
In the Locan Intranet Zone
124
_______creates a barrier between domain members and non-domain members by IPsec policies:
domain isolation
domain filtering
server filtering
server isolation
125
Answer the following question:
VLAN
Remote Access Server (RAS)
Roaming profiles
Forward proxy
126
UAC notifies you when additional permissions are required and asks you if you wish to continue.
False
True
127
Answer the question:
A, B, C
All of the above.
C, D
A, B, E
128
WSUS is a tool that:
manages updates for Windows servers
Updates the data stored on a server
Manages the servives that run the servers
Updates licensing for Windows servers
129
True or false:
True
False
130
All computer that are not compliant with NAP policies must be manually reconfigured.
False
True
131
What allows you to change permissions on a folder?
Auditing
Take ownership
Extended attributes
modify
132
Signing in with __________ is an example of two-factor authentication.
complex password and passphrase
smart card and a hardware token.
retinal scan and voice recognition
fingerprint and password
133
When setting up Bitlocker you must create a ______________________.
recovery password
TPM
encryption key
PIN
134
True or false:
False
True
135
Read the following question:
Radius server
SFTP
SSH
VPN

CHS EssSec Study Guide Flashcards | StudBud