Security Fundamentals

Question 1

Your company requires that users type a series of characters to access the wireless network.

Accepted Answer

WPA2 PSK

Question 2

To prevent users from copying data to removable media, you should:

Accepted Answer

Apply a group policy

Question 3

A user who receives a large number of emails selling prescription medicine is probably receiving pharming mail.

Accepted Answer

Spam

Question 4

WEP uses AES Encryption.

Accepted Answer

False

Question 5

Before you deploy Network Access Protection (NAP), you must install:

Accepted Answer

Network Policy Server (NPS)

Question 6

Firewall Configuration is shown in the following image:

Accepted Answer

Remote Assistance: Home/Work (Private

Question 7

Which of the following can NAP not inspect and isolate?

Accepted Answer

Windows XP SP2

Question 8

Keeping a server updated:

Accepted Answer

Fixes security holes

Question 9

A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing.

Accepted Answer

Decrease the chances of a virus getting to a client machine

Question 10

Cookies impact security by enabling: (Choose two)

Accepted Answer

Web sites to track browsing habits., Storage of Web site passwords

Question 11

You need to limit the programs that can run on client computers to a specific list.

Accepted Answer

Windows Security Center

Question 12

E-mail spoofing:

Accepted Answer

Obscures the true e-mail sender

Question 13

What process prevents someone from denying that they accessed a resource?

Accepted Answer

Non-repudation

Question 14

What is the primary advantage of using Active Directory Integrated Zones?

Accepted Answer

Secure replication

Question 15

Account lockout policies are used to prevent which type of security attack?

Accepted Answer

Brute force attacks

Question 16

What is the standard or basic collection of NTFS permissions?

Accepted Answer

Read and execute, read, write, full control, modify, list folder contents

Question 17

As a general practice of hardening the server, you start by performing which two tasks? (Choose two.)

Accepted Answer

Disable the guest account., Rename the admin account.

Question 18

Which of the following can't be used to update a system?

Accepted Answer

DNS

Question 19

You need to allow both LDAP and Secure LDAP through a firewall. What ports need opening?

Accepted Answer

389 and 636

Question 20

What are three examples of two-factor authentication? (Choose three.)

Accepted Answer

A password and a smart card, A pin number and a debit card, A fingerprint and a pattern

Question 21

What is meant by reducing the attack surface of a system?

Accepted Answer

Removing unneeded protocols

Question 22

Confidentiality is to ensure only the approved individuals have access to the information.

Accepted Answer

True

Question 23

What does implementing Windows Server Update Services (WSUS) allow a company to manage?

Accepted Answer

Windows updates for workstations and servers

Question 24

Which is the minimum requirement to create BitLocker-To-Go media on a client computer?

Accepted Answer

Windows XP Professional Service Pack 3

Question 25

Passwords that contain recognizable words are vulnerable to a:

Accepted Answer

Dictionary attack

Question 26

select Yes for what statements are true, select No for ones that are false.

Accepted Answer

yes,no,yes

Question 27

What can be used to prevent tailgating?

Accepted Answer

Mantrap

Question 28

You need to deploy a domain controller to a office with little physical security what do you do?

Accepted Answer

Deploy a read-only domain controller

Question 29

The Windows Firewall protects computers from unauthorized network connections.

Accepted Answer

No change is needed

Question 30

The client computers on your network are stable and do not need any new features. which is a benefit?

Accepted Answer

Close existing vulnerabilities

Question 31

Simplicity is described as making a secure system simple from the outside but complex from the inside.

Accepted Answer

False

Question 32

In Internet Explorer 8, the InPrivate Browsing feature prevents:

Accepted Answer

Any session data from being stored on the computer.

Question 33

What does NAT do?

Accepted Answer

It translates public IP addresses to private addresses and vice versa

Question 34

Select Yes if the statement is true. Otherwise select No.

Accepted Answer

No, Yes, Yes

Question 35

An implementation of what ensures that secrets remain secret?

Accepted Answer

Confidentiality

Question 36

The Windows Firewall protects computers from unauthorized network connections.

Accepted Answer

No change is needed

Question 37

Which two security settings can be controlled by using group policy? (Choose two.)

Accepted Answer

Password complexity, Access to the Run... command

Question 38

A Threat Vector is a flaw or weakness that allows a threat or agent to bypass security.

Accepted Answer

False

Question 39

A group of users has access to Folder A and all of its contents. You need to prevent users from accessing the folder.

Accepted Answer

Disable folder sharing

Question 40

Of the following choices, which is a one-way hashing function?

Accepted Answer

SHA-1

Question 41

The primary method of authentication in an SSL connection is passwords.

Accepted Answer

Certificates

Question 42

The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS PIN.

Accepted Answer

Service Set Identifier (SSID)

Question 43

Coho Winery wants to increase their web presence and hires you to set up a new web server.

Accepted Answer

Domain Controller

Question 44

Role separation improves server security by:

Accepted Answer

Enforcing principle of least privilege.

Question 45

Which enables you to change the permissions on a folder?

Accepted Answer

Modify

Question 46

The default password length for a Windows Server domain controller is:

Accepted Answer

7

Question 47

The purpose of a digital certificate is to verify that a:

Accepted Answer

Public key belongs to a sender.

Question 48

select Yes if the statement is true. Otherwise, select No

Accepted Answer

Yes, No, Yes

Question 49

The purpose of User Account Control (UAC) is to:

Accepted Answer

Limit the privileges of software

Question 50

A digitally signed e-mail message:

Accepted Answer

Validates the sender

Question 51

Physically securing servers prevents:

Accepted Answer

Theft

Security Fundamentals

Questions 51

Security Fundamentals

Questions 51