stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security fundamentals Flashcards | StudBud
Explore
/
Security fundamentals
Security fundamentals
50 terms
·
StudBud Administration
·
40 plays
Imported from external platform
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
You can configure an email event notification for an audited activity
YES
NO
2
You need to limit the programs that can run on client computers to a specific list.Which technology should you implement
AppLocker group policies
Security Accounts Manager
System Configuration Utility
Windows Security Center
3
Passwords that contain recognizable words are vulnerable to a:
Denial of Service attack
Dictionary attack
Replay attack
Hashing attack
4
Role separation improves server security by:
Physically separating high security servers from other servers.
Installing applications on separate hard disks.
Enforcing principle of least privilege.
Placing servers on separate VLANs.
5
What is the standard or basic collection of NTFS permissions?
Create files/write data, create folders/append data, take ownership
Change permissions, read permissions, write permissions
Read attributes, list folder/read data, traverse folder/execute file
Read and execute, read, write, full control, modify, list folder contents
6
What are three examples of two-factor authentication? (Choose three.)
A pin number and a debit card
A fingerprint and a pattern
A username and a password
A password and a smart card
7
Which enables you to change the permissions on a folder?
Extended attributes
Take ownership
Auditing
Modify
8
Which statements are true about firewalls
Application-level firewalls provide content filthering and virus protection
Application-level firewalls support caching
Application-level firewalls tend to be less resource intensive
9
An example of biometric device is a fingerprint scanner
YES
NO
10
Which is a benefit of applying operating system updates to these clients?
Close existing vulnerabilities
Update the hardware firewall
Keep the software licensed
Keep the server ports available
11
Biometric data is usually encryptedwhen it is gathered
YES
NO
12
WEP security is strong as long as it has a 128-bit key
YES
NO
13
Contains more than 15 characters Contains at least one letter Contains at least one number Contains at least one symbol
MAC filtering
WPA2 Enterprise
WPA2 PSK
MAC filtering
14
Audit logs have a set size limit and cannot be adjusted
YES
NO
15
You want to make your computer resistant to online hackers and malicious software.What should you do?
Turn on Windows Firewall.
Install anti-virus software.
Configure a forward proxy.
Enable spam filtering.
16
Biometrics are used to authenticate users
NO
YES
17
To prevent users from copying data to removable media, you should:
Lock the computer cases
Disable copy and paste
Store media in a locked room
Apply a group policy
18
A digitally signed e-mail message:
Is virus-free
Validates the recipient
Is encrypted
Validates the sender
19
The purpose of User Account Control (UAC) is to:
Limit the privileges of software
Encrypt the user's account
Secure your data from corruption
Facilitate Internet filtering
20
Account lockout policies are used to prevent which type of security attack?
Social engineering
Passwords being reused immediately
Brute force attacks
Users sharing passwords
21
System administrators should use a standarad user account when performing routine functionslike reading emails
NO
YES
22
because senior executives have rights to access sensitive data. they should use administrator accounts
NO
YES
23
The User Account Control (UAC) has one overall goal: grant users the lowest level permissions required required.
NO
YES
24
Besides using Windows Update, what can be used to keep servers updated and patched properly? (choose two)
WSUS
SCCM
MBSA
MDT
25
Physically securing servers prevents:
Man-in-the middle attacks
Compromise of the certificate chain
Denial of Service attacks
Theft
26
By setting up a honey pot, an administrator can get insightful information about the attacker, such as IP address
No
Yes
27
IPsec encrypts data
no
yes
28
In Internet Explorer 8, the InPrivate Browsing feature prevents:
Any session data from being stored on the computer.
User credentials from being sent over the Internet.
Unencrypted communication between the client computer and the server.
Unauthorized private data input.
29
IPsec adds overhead for all network communications for which it is used
Yes
No
30
which statement is true
A stealth virus hides itself in the master boot record.
A polymorphic virus changes its code so that it cannot be detected easily.
A virus does not need a carrier in order to propagate itself.
31
What does implementing Windows Server Update Services (WSUS) allow a company to manage?
Active Directory server replication
Shared private encryption key updates
Updates to Group Policy Objects
Windows updates for workstations and servers
32
"Bridging" is a process of sending packets from source to destination on OSI layer 3.
Repeating
No change is needed.
Switching
Routing
33
Which protocols are considered unsecure and should be avoided in a server environment?(choose two)
PAP
Telnet
SSH
CHAP
34
IPsec reequires network applications to be IPsec aware
Yes
No
35
An intruder can spoof MAC addresses to get around MAC address filthering
Yes
No
36
Intruders can find a wireless network if the Service Set Identifier (SSID) is hidden
YES
NO
37
You need to push out an internal certificate to Internet Explorer on all 1000 Active Domain workstations. QUICKEST
Logon script
Windows Update
Group policy
Local policy
38
Which is the minimum requirement to create BitLocker-To-Go media on a client computer?
Windows XP Professional Service Pack 3
Windows Vista Enterprise Edition
Windows 2000 Professional Service Pack 4
Windows 7 Enterprise Edition
39
Windows Firewall is a built-in. host-based, "stateless" firewall.
Packet filter
No change is needed
Network layer
Stateful
40
ROOTKIT targets____ (all that apply)
Administrator-level access
Kernel
BIOS
Hypervisor
41
The primary purpose of Network Access Protection (NAP) is to prevent:
Users on a network from installing software.
Loss of data from client computers on a network.
Non-compliant systems from connecting to a network.
Unauthorized users from accessing a network.
42
A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing.
Verify that the senders of the messages are legitimate
Ensure that all links in the messages are trustworthy
No change is needed.
Decrease the chances of a virus getting to a client machine
43
The purpose of a digital certificate is to verify that a:
Digital document is complete.
Public key belongs to a sender.
Computer is virus-free.
Private key belongs to a sender.
44
When enabling Secure Dynamic DNS, who can create records on a DNS server?
Members of an Active Directory domain
Domain admins
Server admins
DNS admins
45
You can audit logs in the Event Viewer
YES
NO
46
Honey pots primarily used to attact potential attackers or hackers
No
Yes
47
The Windows Firewall protects computers from "unauthorized network connections".
Unencrypted network access
Phishing scams
No change is needed
Email viruses
48
A user who receives a large number of emails selling prescription medicine is probably receiving "pharming" mail.
Spam
Spoofed mail
Malware
No change is needed.
49
Many Internet sites that you visit require a user name and password.How should you secure these passwords?
Save them to an encrypted file
Configure the browser to save passwords
Enable session caching
Reuse the same password
50
Which password attack uses all possible alpha numeric combinations?
Brute force attack
Dictionary attack
Social engineering
Rainbow table attack
