Quiz
Security fundamentals
Questions in this quiz (99)
1Windows Firewall is a built-in. host-based, stateless firewall.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- AStateful
- BNetwork layer
- CPacket filter
- DNo change is needed
2Bridging is a process of sending packets from source to destination on OSI layer 3.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- ARouting
- BSwitching
- CRepeating
- DNo change is needed
3The primary purpose of Network Access Protection (NAP) is to prevent:
- ALoss of data from client computers on a network.
- BNon-compliant systems from connecting to a network.
- CUsers on a network from installing software.
- DUnauthorized users from accessing a network.
4You want to make your computer resistant to online hackers and malicious software.
What should you do?- AConfigure a forward proxy.
- BInstall anti-virus software.
- CEnable spam filtering.
- DTurn on Windows Firewall.
5Your company requires that users type a series of characters to access the wireless network.
The series of characters must meet the following requirements:
Contains more than 15 characters
Contains at least one letter
Contains at least one number
Contains at least one symbol
Which security technology meets these requirements?- AWEP
- BWPA2 PSK
- CWPA2 Enterprise
- DMAC filtering
6Many Internet sites that you visit require a user name and password.
How should you secure these passwords?- ASave them to a text file
- BEnable session caching
- CConfigure the browser to save passwords
- DSave them to an encrypted file
- EReuse the same password
7Physically securing servers prevents:
- ATheft
- BCompromise of the certificate chain
- CMan-in-the middle attacks
- DDenial of Service attacks
8To prevent users from copying data to removable media, you should:
- ALock the computer cases
- BApply a group policy
- CDisable copy and paste
- DStore media in a locked room
9You are an intern at Wide World Importers and help manage 1000 workstations. All the workstations are
members of an Active Domain.
You need to push out an internal certificate to Internet Explorer on all workstations.
What is the quickest method to do this?- ALocal policy
- BLogon script
- CWindows Update
- DGroup policy
10In Internet Explorer 8, the InPrivate Browsing feature prevents:
- AUnauthorized private data input.
- BUnencrypted communication between the client computer and the server.
- CUser credentials from being sent over the Internet.
- DAny session data from being stored on the computer.
11The purpose of a digital certificate is to verify that a:
- APublic key belongs to a sender.
- BComputer is virus-free.
- CPrivate key belongs to a sender.
- DDigital document is complete.
12A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- ADecrease the chances of a virus getting to a client machine
- BVerify that the senders of the messages are legitimate
- CEnsure that all links in the messages are trustworthy
- DNo change is needed
13You are volunteering at an organization that gets a brand new web server. To make the server more
secure, you should add a second administrator account.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- ADisable unused services
- BEnable LM authentication
- CEnable NTLM authentication
- DNo change is needed
14Role separation improves server security by:
- AEnforcing principle of least privilege.
- BInstalling applications on separate hard disks.
- CPhysically separating high security servers from other servers.
- DPlacing servers on separate VLANs.
15The Windows Firewall protects computers from unauthorized network connections.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed'' if the underlined text makes the statement correct.- AEmail viruses
- BPhishing scams
- CUnencrypted network access
- DNo change is needed
16Coho Winery wants to increase their web presence and hires you to set up a new web server. Coho
already has servers for their business and would like to avoid purchasing a new one.
Which server is best to use as a web server, considering the security and performance concerns?- ASQL Server
- BFile Server
- CDomain Controller
- DApplication Server
17A user who receives a large number of emails selling prescription medicine is probably receiving pharming
mail.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- AMalware
- BSpoofed mail
- CSpam
- DNo change is needed
18The client computers on your network are stable and do not need any new features.
Which is a benefit of applying operating system updates to these clients?- AKeep the software licensed
- BKeep the server ports available
- CUpdate the hardware firewall
- DClose existing vulnerabilities
19Which password attack uses all possible alpha numeric combinations?
- ASocial engineering
- BBrute force attack
- CDictionary attack
- DRainbow table attack
20A digitally signed e-mail message:
- AValidates the recipient
- BValidates the sender
- CIs encrypted
- DIs virus-free
21Passwords that contain recognizable words are vulnerable to a:
- ADenial of Service attack
- BHashing attack
- CDictionary attack
- DReplay attack
22Account lockout policies are used to prevent which type of security attack?
- ABrute force attacks
- BUsers sharing passwords
- CSocial engineering
- DPasswords being reused immediately
23What is the standard or basic collection of NTFS permissions?
- ARead and execute, read, write, full control, modify, list folder contents
- BChange permissions, read permissions, write permissions
- CRead attributes, list folder/read data, traverse folder/execute file
- DCreate files/write data, create folders/append data, take ownership
24Which is the minimum requirement to create BitLocker-To-Go media on a client computer?
- AWindows XP Professional Service Pack 3
- BWindows Vista Enterprise Edition
- CWindows 7 Enterprise Edition
- DWindows 2000 Professional Service Pack 4
25Which enables you to change the permissions on a folder?
- ATake ownership
- BExtended attributes
- CAuditing
- DModify
26A group of users has access to Folder A and all of its contents. You need to prevent some of the users
from accessing a subfolder inside Folder A.- ADisable folder sharing
- BHide the folder
- CChange the owner
- DBlock inheritance
27What are three examples of two-factor authentication? (Choose three.)
- AA fingerprint and a pattern
- BA password and a smart card
- CA username and a password
- DA password and a pin number
- EA pin number and a debit card
28You need to limit the programs that can run on client computers to a specific list.
Which technology should you implement?- AWindows Security Center
- BSecurity Accounts Manager
- CSystem Configuration Utility
- DAppLocker group policies
29The purpose of User Account Control (UAC) is to:
- AEncrypt the user's account
- BLimit the privileges of software
- CSecure your data from corruption
- DFacilitate Internet filtering
30What does implementing Windows Server Update Services (WSUS) allow a company to manage?
- AShared private encryption key updates
- BUpdates to Group Policy Objects
- CActive Directory server replication
- DWindows updates for workstations and servers
31The purpose of Microsoft Baseline Security Analyzer is to:
- AList system vulnerabilities.
- BApply all current patches to a server.
- CSet permissions to a default level.
- DCorrect a company's security state.
32The Graphic Design Institute hires you to help them set up a server for their 20-person team.
As a general practice of hardening the server, you start by performing which two tasks? (Choose two.)- ADisable the guest account.
- BRename the admin account.
- CRemove the account lockout policy.
- DFormat partitions with FAT32.
33What are two attributes that an email message may contain that should cause a user to question whether
the message is a phishing attempt? (Choose two.)- AAn image contained in the message
- BSpelling and grammar errors
- CThreats of losing service
- DUse of bold and italics
34Keeping a server updated:
- AMaximizes network efficiency
- BFixes security holes
- CSpeeds up folder access
- DSynchronizes the server
35Before you deploy Network Access Protection (NAP), you must install:
- AInternet Information Server (IIS)
- BNetwork Policy Server (NPS)
- CActive Directory Federation Services
- DWindows Update Service
36What is a common method for password collection?
- AEmail attachments
- BBack door intrusions
- CSQL Injection
- DNetwork sniffers
37Which provides the highest level of security in a firewall?
- AStateful inspection
- BOutbound packet filters
- CStateless inspection
- DInbound packet filters
38The primary method of authentication in an SSL connection is passwords.
To answer, choose the option "No change is needed" if the underlined text is correct. If the underlined text
is not correct, choose the correct answer.- ANo change is needed
- BCertificates
- CIPsec
- DBiometrics
39You are setting up Remote Desktop on your computer. Your computer is a member of a domain.
Your firewall configuration is shown in the following image:
You need to allow Remote Desktop to be able to get through your firewall for users on your company's
network.
Which settings should you enable?
- ARemote Assistance: Home/Work (Private)
- BRemote Desktop: Public
- CRemote Desktop: Home/Work (Private)
- DRemote Assistance: Domain
40You are trying to connect to an FTP server on the Internet from a computer in a school lab. You cannot get
a connection. You try on another computer with the same results. The computers in the lab are able to
browse the Internet.
You are able to connect to this FTP server from home.
What could be blocking the connection to the server?- AA layer-2 switch
- BA wireless access point
- CA firewall
- DA layer-2 hub
41What does NAT do?
- AIt encrypts and authenticates IP packets.
- BIt provides caching and reduces network traffic.
- CIt translates public IP addresses to private addresses and vice versa.
- DIt analyzes incoming and outgoing traffic packets.
42The default password length for a Windows Server domain controller is:
- A0
- B5
- C7
- D14
43You create a web server for your school. When users visit your site, they get a certificate error that says
your site is not trusted.
What should you do to fix this problem?- AInstall a certificate from a trusted Certificate Authority (CA).
- BUse a digital signature.
- CGenerate a certificate request.
- DEnable Public Keys on your website.
44What is an example of non-propagating malicious code?
- AA back door
- BA hoax
- CA Trojan horse
- DA worm
45A brute force attack:
- AUses response filtering
- BTries all possible password variations
- CUses the strongest possible algorithms
- DTargets all the ports
46Humongous Insurance is an online healthcare insurance company. During an annual security audit a
security firm tests the strength of the company's password policy and suggests that Humongous Insurance
implement password history policy.
What is the likely reason that the security firm suggests this?- APast passwords were easily cracked by the brute force method.
- BPast passwords of users contained dictionary words.
- CPrevious password breaches involved use of past passwords.
- DPast passwords lacked complexity and special characters.
47The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS
PIN.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- AService Set Identifier (SSID)
- BAdmin password
- CWEP key
- DNo change is needed
48What are three major attack vectors that a social engineering hacker may use? (Choose three.)
- ATelephone
- BReverse social engineering
- CWaste management
- DHoney pot systems
- EFirewall interface
49Which two security settings can be controlled by using group policy? (Choose two.)
- APassword complexity
- BAccess to the Run... command
- CAutomatic file locking
- DEncrypted access from a smart phone
50Cookies impact security by enabling: (Choose two.)
- AStorage of Web site passwords.
- BHigher security Web site protections.
- CSecure Sockets Layer (SSL).
- DWeb sites to track browsing habits.
51To keep third-party content providers from tracking your movements on the web, enable InPrivate
Browsing.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed'' if the underlined text makes the statement correct.- AInPrivate Filtering
- BSmartScreen Filter
- CCompatibility Mode
- DNo change is needed
52Which enables access to all of the logged-in user's capabilities on a computer?
- AJava applets
- BActiveX controls
- CActive Server Pages (ASP)
- DMicrosoft Silverlight
53You need to install a domain controller in a branch office. You also need to secure the information on the
domain controller. You will be unable to physically secure the server.
Which should you implement?- ARead-Only Domain Controller
- BPoint-to-Point Tunneling Protocol (PPTP)
- CLayer 2 Tunneling Protocol (L2TP)
- DServer Core Domain Controller
54E-mail spoofing:
- AForwards e-mail messages to all contacts
- BCopies e-mail messages sent from a specific user
- CObscures the true e-mail sender
- DModifies e-mail routing logs
55What is the primary advantage of using Active Directory Integrated Zones?
- AZone encryption
- BPassword protection
- CNon-repudiation
- DSecure replication
56Which two are included in an enterprise antivirus program? (Choose two.)
- AAttack surface scanning
- BOn-demand scanning
- CPacket scanning
- DScheduled scanning
57Phishing is an attempt to:
- AObtain information by posing as a trustworthy entity.
- BLimit access to e-mail systems by authorized users.
- CSteal data through the use of network intrusion.
- DCorrupt e-mail databases through the use of viruses.
58Humongous Insurance needs to set up a domain controller in a branch office. Unfortunately, the server
cannot be sufficiently secured from access by employees in that office, so the company is installing a
Primary Domain Controller.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- ARead-Only Domain Controller
- BBackup Domain Controller
- CActive Directory Server
- DNo change is needed.
59Where should you lock up the backup tapes for your servers?
- AThe server room
- BA filing cabinet
- CThe tape library
- DAn offsite fire safe
60Which is a special folder permission?
- ARead
- BModify
- CWrite
- DDelete
61When conducting a security audit the first step is to:
- AInventory the company's technology assets
- BInstall auditing software on your servers
- CSet up the system logs to audit security events
- DSet up a virus quarantine area
62You are an intern at Litware, Inc. Your manager asks you to make password guess attempts harder by
limiting login attempts on company computers.
What should you do?- AEnforce password sniffing.
- BEnforce password history.
- CMake password complexity requirements higher.
- DImplement account lockout policy.
63You need to grant a set of users write access to a file on a network share. You should add the users to:
- AA security group
- BThe Authenticated Users group
- CThe Everyone group
- DA distribution group
64The certificate of a secure public Web server on the Internet should be:
- AIssued by a public certificate authority (CA)
- BSigned by using a 4096-bit key
- CSigned by using a 1024-bit key
- DIssued by an enterprise certificate authority (CA)
65Setting a minimum password age restricts when users can:
- ARequest a password reset
- BChange their passwords
- CLog on by using their passwords
- DSet their own password expiration
66Basic security questions used to reset a password are susceptible to:
- AHashing
- BSocial engineering
- CNetwork sniffing
- DTrojan horses
67You suspect a user's computer is infected by a virus.
What should you do first?- ARestart the computer in safe mode
- BReplace the computer's hard disk drive
- CDisconnect the computer from the network
- DInstall antivirus software on the computer
68You create a new file in a folder that has inheritance enabled.
By default, the new file:- ATakes the permissions of the parent folder
- BDoes not take any permissions
- CTakes the permissions of other folders in the same directory
- DTakes the permissions of other files in the same directory
69Password history policies are used to prevent:
- ABrute force attacks
- BUsers from sharing passwords
- CSocial engineering
- DPasswords from being reused immediately
70The Active Directory controls, enforces, and assigns security policies and access rights for all users.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- ANTFS permissions
- BUser Account Control
- CRegistry
- DNo change is needed
71Creating MD5 hash for files is an example of ensuring what?
- AConfidentiality
- BAvailability
- CLeast privilege
- DIntegrity
72Which three elements does HTTPS encrypt? (Choose three.)
- ABrowser cookies
- BServer IP address
- CPort numbers
- DWebsite URL
- ELogin information
73The company that you work for wants to set up a secure network, but they do not have any servers.
Which three security methods require the use of a server? (Choose three.)- A802.1x
- BWPA2 Personal
- CWPA2 Enterprise
- DRADIUS
- E802.11ac
74Shredding documents helps prevent:
- AMan-in-the-middle attacks
- BSocial engineering
- CFile corruption
- DRemote code execution
- ESocial networking
75Dumpster diving refers to a physical threat that a hacker might use to look for information about a
computer network.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.- APhishing
- BMalware
- CReverse Social engineering
- DNo change is needed
76An attorney hires you to increase the wireless network security for the law firm's office. The office has a
very basic network, with just a modem and a router.
Which of these security modes offers the highest security?- AWPA-Personal
- BWEP
- CWPA2-Personal
- DWPA-Enterprise
77Which type of firewall allows for inspection of all characteristics of a packet?
- ANAT
- BStateful
- CStateless
- DWindows Defender
78You are trying to establish communications between a client computer and a server. The server is not
responding.
You confirm that both the client and the server have network connectivity.
Which should you check next?- AMicrosoft Update
- BData Execution Prevention
- CWindows Firewall
- DActive Directory Domains and Trusts
79You are an intern and are working remotely.
You need a solution that meets the following requirements:
- Allows you to access data on the company network securely
- Gives you the same privileges and access as if you were in the office
What are two connection methods you could use? (Choose two.)- AForward Proxy
- BVirtual Private Network (VPN)
- CRemote Access Service (RAS)
- DRoaming Profiles
80Network Access Protection (NAP) enables administrators to control access to network resources based on
a computer's:- AEncryption level
- BWarranty
- CPhysical location
- DConfiguration
81Which technology enables you to filter communications between a program and the Internet?
- ARADIUS server
- BAntivirus software
- CSoftware firewall
- DBitLocker To Go
82This question requires that you evaluate the underlined text to determine if it is correct. The first line of
defense against attacks from the Internet is a software firewall.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed'' if the underlined text makes the statement correct.- Ahardware firewall
- Bvirus software
- Cradius server
- DNo change is needed
83Which attack listens to network traffic of a computer resource?
- AResource gathering
- BDenial of service
- CARP poisoning
- DEavesdropping
- ELogic bomb
84Which of the following describes a VLAN?
- AIt connects multiple networks and routes data packets.
- BIt is a logical broadcast domain across physical subnets.
- CIt is a subnetwork that reveals a company's externally facing resources to the public network.
- DIt allows different network protocols to communicate between different network segments.
85A network sniffer is software or hardware that:
- ARecords user activity and transmits it to the server
- BCaptures and analyzes network communication
- CProtects workstations from intrusions
- DCatalogs network data to create a secure index
86What is a service set identifier (SSID)?
- AA wireless encryption standard
- BThe wireless LAN transmission type
- CThe broadcast name of an access point
- DA wireless security protocol
87To implement WPA2 Enterprise, you would need a/an:
- ARADIUS server
- BSSL server
- CWEP server
- DVPN server
88You would implement a wireless intrusion prevention system to:
- APrevent wireless interference
- BDetect wireless packet theft
- CPrevent rogue wireless access points
- DEnforce SSID broadcasting
89The manager of a coffee shop hires you to securely set up WiFi in the shop.
To keep computer users from seeing each other, what should you use with an access point?- AClient bridge mode
- BClient isolation mode
- CMAC address filtering
- DClient mode
90E-mail bombing attacks a specific entity by:
- ARedirecting all e-mail to another entity
- BSending high volumes of e-mail
- CTracing e-mail to the destination address
- DTriggering high levels of security alerts
91How does the sender policy framework (SPF) aim to reduce spoofed email?
- AIt provides a list of IP address ranges for particular domains so senders can be verified.
- BIt includes an XML policy file with each email that confirms the validity of the message.
- CIt lists servers that may legitimately forward mail for a particular domain.
- DIt provides an encryption key so that authenticity of an email message can be validated
92Windows Server Update Services (WSUS) is a tool that:
- AUpdates data stored in Windows servers
- BManages the services that run on a server
- CUpdates licensing for Windows servers
- DManages updates for Microsoft software
93Which two characteristics should you recommend for a user's domain password? (Choose two.)
- AHard to guess
- BIncludes Unicode characters
- CEasy to remember
- DEasy to increment
94To protect systems from buffer overflow errors, you can use:
- AAntivirus software
- BData Execution Prevention
- CA proxy server
- DAn Intruder Prevention System
95You sign up for an online bank account. Every 6 months, the bank requires you to change your password.
You have changed your password 5 times in the past. Instead of coming up with a new password, you
decide to use one of your past passwords, but the bank's password history prevents you on doing so.
Select the correct answer if the underlined text does not make the statement correct Select "No change is
needed" if the underlined text makes the statement correct.- AMinimum password age
- BMaximum password duration
- CPassword complexity
- DNo change is needed.
96You need to prevent unauthorized users from reading a specific file on a portable computer if the portable
computer is stolen.
What should you implement?- AFile-level permissions
- BAdvanced Encryption Standard (AES)
- CFolder-level permissions
- DDistributed File System (DFS)
- EBitLocker
97Your password is 1Vu*cI!8sT.
Which attack method is your password vulnerable to?- ARainbow table
- BBrute force
- CSpidering
- DDictionary
98You have a Windows 7 desktop computer, and you create a Standard User account for your roommate so
that he can use the desktop from time to time. Your roommate has forgotten his password.
Which two actions can you take to reset the password? (Choose two.)- AUse your password reset disk.
- BUse your administrator account.
- CBoot into Safe Mode with your roommate's account.
- DFrom your roommate's account press CTRL+ALT+DELETE, and then click Change a password.
99You have two servers that run Windows Server. All drives on both servers are formatted by using NTFS.
You move a file from one server to the other server. The file's permissions in the new location will:- AEnable full access to the everyone group
- BRestrict access to the Administrators group
- CInherit the destination folder's permissions
- DRetain the original folder's permissions
Information
- Description
- Test of security fundamentals
- Author
- Mario Moreno
- Language
- Español
- Views
- 695
- Rating
- No ratings yet Rate this quiz