stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec+ SY0-401 4.1, 4.2 Flashcards | StudBud
Explore
/
Sec+ SY0-401 4.1, 4.2
Sec+ SY0-401 4.1, 4.2
13 terms
·
StudBud Administration
·
164 plays
Sec+ SY0-401 4.1, 4.2
Flashcards
13 cards
F
Practice quiz
P
Host live
L
Questions
13
Answers
1
What is Geo-Fencing?
Tracking the use of business devices
Locking low level users out of the system
Geologically deciding where to place your garden
Activating a list of rules in a certain area
2
Why are secure coding concepts important?
Poorly written code helps administer the network
Poorly written code can save money
Secure coding keeps your hard drive safe
Poorly written code is a vulnerability
3
What is a Lockout Policy?
After a # of failed logins, the device deletes storage
After a # of failed logins, the device is locked forever
After a # of failed logins, the device restarts
After a # of failed logins, the device locks
4
Why can Full Device Encryption be good for a BYOD environment?
Users might be trying to hack your network
Users can store personal data on business device
Users could lose their device
Users are good at remembering passwords
5
What is the main concern with Error and Exception handling?
A hacker may encrypt your harddrive
A hacker may expose a hidden part of your network
Your organization may look bad when customers see an error
An attacker may deploy a Polymorphic virus
6
When investigating a BYOD device forensically, is personal data on the device investigated?
No
Yes
It depends
Not sure
7
What is the Principal of Least Privilege?
Users can only access financial documents
Users can set their own permissions
Users can only access what they need
Users have no password
8
How can you prevent XSS? (Cross Site Scripting?)
Review user logs
Deploy and IDS on your network
Validate the user input before processing
Secure Coding Methods
9
Why is Storage Segmentation good on BYOD devices?
Allows users extra access
Allows users to also enjoy personal use
Allows the storage to be encrypted
Allows users to prevent hacking
10
What does MDM stand for?
Million Device Management
Mobile Destination Module
Mobile Device Management
Mobile Device Medium
11
How are NoSQL and SQL different?
NoSQL contains SQL data
NoSQL also includes non relational data
NoSQL does not store data
SQL can inject data to NoSQL
12
What is a good practice for Credential Management?
Keep the usernames and passwords out of the application
Deny unauthorized users
Use a IDS for Credential Management
Use geo-tagging to confirm accuracy
13
Fuzzing requires that an attacker do this:
Send random data in to an application
Attempt to penetrate a Honeypot
Disable 802.1x NAC
Deploy an Evil Twin switch