CET_TARDE - Security Fundamentals 2017 - Part 3

1

Windows Firewall is a built-in. host-based, stateless firewall.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

Bridging is a process of sending packets from source to destination on OSI layer 3.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

The primary purpose of Network Access Protection (NAP) is to prevent:

1

You want to make your computer resistant to online hackers and malicious software.

What should you do?

1

Your company requires that users type a series of characters to access the wireless network.

The series of characters must meet the following requirements:
Contains more than 15 characters
Contains at least one letter
Contains at least one number
Contains at least one symbol

Which security technology meets these requirements?

1

Many Internet sites that you visit require a user name and password.
How should you secure these passwords?

1

Physically securing servers prevents:

1

To prevent users from copying data to removable media, you should:

1

You are an intern at Wide World Importers and help manage 1000 workstations. All the workstations are
members of an Active Domain.

You need to push out an internal certificate to Internet Explorer on all workstations.

What is the quickest method to do this?

1

In Internet Explorer 8, the InPrivate Browsing feature prevents:

1

The purpose of a digital certificate is to verify that a:

1

A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

You are volunteering at an organization that gets a brand new web server. To make the server more
secure, you should add a second administrator account.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

Role separation improves server security by:

1

The Windows Firewall protects computers from unauthorized network connections.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed'' if the underlined text makes the statement correct.

1

Coho Winery wants to increase their web presence and hires you to set up a new web server. Coho
already has servers for their business and would like to avoid purchasing a new one.

Which server is best to use as a web server, considering the security and performance concerns?

1

A user who receives a large number of emails selling prescription medicine is probably receiving pharming
mail.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

The client computers on your network are stable and do not need any new features.

Which is a benefit of applying operating system updates to these clients?

1

Which password attack uses all possible alpha numeric combinations?

1

A digitally signed e-mail message:

1

Passwords that contain recognizable words are vulnerable to a:

1

Account lockout policies are used to prevent which type of security attack?

1

What is the standard or basic collection of NTFS permissions?

1

Which is the minimum requirement to create BitLocker-To-Go media on a client computer?

1

Which enables you to change the permissions on a folder?

1

A group of users has access to Folder A and all of its contents. You need to prevent some of the users
from accessing a subfolder inside Folder A.

1

What are three examples of two-factor authentication? (Choose three.)

1

You need to limit the programs that can run on client computers to a specific list.
Which technology should you implement?

1

The purpose of User Account Control (UAC) is to:

1

What does implementing Windows Server Update Services (WSUS) allow a company to manage?

1

The purpose of Microsoft Baseline Security Analyzer is to:

1

The Graphic Design Institute hires you to help them set up a server for their 20-person team.

As a general practice of hardening the server, you start by performing which two tasks? (Choose two.)

1

What are two attributes that an email message may contain that should cause a user to question whether
the message is a phishing attempt? (Choose two.)

1

Keeping a server updated:

1

Before you deploy Network Access Protection (NAP), you must install:

1

What is a common method for password collection?

1

Which provides the highest level of security in a firewall?

1

The primary method of authentication in an SSL connection is passwords.

To answer, choose the option "No change is needed" if the underlined text is correct. If the underlined text
is not correct, choose the correct answer.

1

You are setting up Remote Desktop on your computer. Your computer is a member of a domain.

Your firewall configuration is shown in the following image:

You need to allow Remote Desktop to be able to get through your firewall for users on your company's
network.

Which settings should you enable?

1

You are trying to connect to an FTP server on the Internet from a computer in a school lab. You cannot get
a connection. You try on another computer with the same results. The computers in the lab are able to
browse the Internet.

You are able to connect to this FTP server from home.

What could be blocking the connection to the server?

1

What does NAT do?

1

The default password length for a Windows Server domain controller is:

1

You create a web server for your school. When users visit your site, they get a certificate error that says
your site is not trusted.

What should you do to fix this problem?

1

What is an example of non-propagating malicious code?

1

A brute force attack:

1

Humongous Insurance is an online healthcare insurance company. During an annual security audit a
security firm tests the strength of the company's password policy and suggests that Humongous Insurance
implement password history policy.

What is the likely reason that the security firm suggests this?

1

The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS
PIN.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

What are three major attack vectors that a social engineering hacker may use? (Choose three.)

1

Which two security settings can be controlled by using group policy? (Choose two.)

1

Cookies impact security by enabling: (Choose two.)

1

To keep third-party content providers from tracking your movements on the web, enable InPrivate
Browsing.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed'' if the underlined text makes the statement correct.

1

Which enables access to all of the logged-in user's capabilities on a computer?

1

You need to install a domain controller in a branch office. You also need to secure the information on the
domain controller. You will be unable to physically secure the server.

Which should you implement?

1

E-mail spoofing:

1

What is the primary advantage of using Active Directory Integrated Zones?

1

Which two are included in an enterprise antivirus program? (Choose two.)

1

Phishing is an attempt to:

1

Humongous Insurance needs to set up a domain controller in a branch office. Unfortunately, the server
cannot be sufficiently secured from access by employees in that office, so the company is installing a
Primary Domain Controller.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

Where should you lock up the backup tapes for your servers?

1

Which is a special folder permission?

1

When conducting a security audit the first step is to:

1

You are an intern at Litware, Inc. Your manager asks you to make password guess attempts harder by
limiting login attempts on company computers.

What should you do?

1

You need to grant a set of users write access to a file on a network share. You should add the users to:

1

The certificate of a secure public Web server on the Internet should be:

1

Setting a minimum password age restricts when users can:

1

Basic security questions used to reset a password are susceptible to:

1

You suspect a user's computer is infected by a virus.

What should you do first?

1

You create a new file in a folder that has inheritance enabled.

By default, the new file:

1

Password history policies are used to prevent:

1

The Active Directory controls, enforces, and assigns security policies and access rights for all users.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

Creating MD5 hash for files is an example of ensuring what?

1

Which three elements does HTTPS encrypt? (Choose three.)

1

The company that you work for wants to set up a secure network, but they do not have any servers.

Which three security methods require the use of a server? (Choose three.)

1

Shredding documents helps prevent:

1

Dumpster diving refers to a physical threat that a hacker might use to look for information about a
computer network.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

1

An attorney hires you to increase the wireless network security for the law firm's office. The office has a
very basic network, with just a modem and a router.

Which of these security modes offers the highest security?

1

Which type of firewall allows for inspection of all characteristics of a packet?

1

You are trying to establish communications between a client computer and a server. The server is not
responding.

You confirm that both the client and the server have network connectivity.

Which should you check next?

1

You are an intern and are working remotely.

You need a solution that meets the following requirements:
- Allows you to access data on the company network securely
- Gives you the same privileges and access as if you were in the office

What are two connection methods you could use? (Choose two.)

1

Network Access Protection (NAP) enables administrators to control access to network resources based on
a computer's:

1

Which technology enables you to filter communications between a program and the Internet?

1

This question requires that you evaluate the underlined text to determine if it is correct. The first line of
defense against attacks from the Internet is a software firewall.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed'' if the underlined text makes the statement correct.

1

Which attack listens to network traffic of a computer resource?

1

Which of the following describes a VLAN?

1

A network sniffer is software or hardware that:

1

What is a service set identifier (SSID)?

1

To implement WPA2 Enterprise, you would need a/an:

1

You would implement a wireless intrusion prevention system to:

1

The manager of a coffee shop hires you to securely set up WiFi in the shop.

To keep computer users from seeing each other, what should you use with an access point?

1

E-mail bombing attacks a specific entity by:

1

How does the sender policy framework (SPF) aim to reduce spoofed email?

1

Windows Server Update Services (WSUS) is a tool that:

1

Which two characteristics should you recommend for a user's domain password? (Choose two.)

1

To protect systems from buffer overflow errors, you can use:

1

You sign up for an online bank account. Every 6 months, the bank requires you to change your password.
You have changed your password 5 times in the past. Instead of coming up with a new password, you
decide to use one of your past passwords, but the bank's password history prevents you on doing so.

Select the correct answer if the underlined text does not make the statement correct Select "No change is
needed" if the underlined text makes the statement correct.

1

You need to prevent unauthorized users from reading a specific file on a portable computer if the portable
computer is stolen.

What should you implement?

1

Your password is 1Vu*cI!8sT.

Which attack method is your password vulnerable to?

1

You have a Windows 7 desktop computer, and you create a Standard User account for your roommate so
that he can use the desktop from time to time. Your roommate has forgotten his password.

Which two actions can you take to reset the password? (Choose two.)

1

You have two servers that run Windows Server. All drives on both servers are formatted by using NTFS.

You move a file from one server to the other server. The file's permissions in the new location will:

Test of security fundamentals

CET_TARDE - Security Fundamentals 2017 - Part 3

Windows Firewall is a built-in. host-based, stateless firewall. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

Bridging is a process of sending packets from source to destination on OSI layer 3. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

The primary purpose of Network Access Protection (NAP) is to prevent:

You want to make your computer resistant to online hackers and malicious software. What should you do?

Many Internet sites that you visit require a user name and password. How should you secure these passwords?

Physically securing servers prevents:

To prevent users from copying data to removable media, you should:

You are an intern at Wide World Importers and help manage 1000 workstations. All the workstations are members of an Active Domain. You need to push out an internal certificate to Internet Explorer on all workstations. What is the quickest method to do this?

In Internet Explorer 8, the InPrivate Browsing feature prevents:

The purpose of a digital certificate is to verify that a:

A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

Role separation improves server security by:

The Windows Firewall protects computers from unauthorized network connections. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed'' if the underlined text makes the statement correct.

Coho Winery wants to increase their web presence and hires you to set up a new web server. Coho already has servers for their business and would like to avoid purchasing a new one. Which server is best to use as a web server, considering the security and performance concerns?

A user who receives a large number of emails selling prescription medicine is probably receiving pharming mail. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

The client computers on your network are stable and do not need any new features. Which is a benefit of applying operating system updates to these clients?

Which password attack uses all possible alpha numeric combinations?

A digitally signed e-mail message:

Windows Firewall is a built-in. host-based, stateless firewall.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

Bridging is a process of sending packets from source to destination on OSI layer 3.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

You want to make your computer resistant to online hackers and malicious software.

What should you do?

Many Internet sites that you visit require a user name and password.
How should you secure these passwords?

You are an intern at Wide World Importers and help manage 1000 workstations. All the workstations are
members of an Active Domain.

You need to push out an internal certificate to Internet Explorer on all workstations.

What is the quickest method to do this?

A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

The Windows Firewall protects computers from unauthorized network connections.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed'' if the underlined text makes the statement correct.

Coho Winery wants to increase their web presence and hires you to set up a new web server. Coho
already has servers for their business and would like to avoid purchasing a new one.

Which server is best to use as a web server, considering the security and performance concerns?

A user who receives a large number of emails selling prescription medicine is probably receiving pharming
mail.

Select the correct answer if the underlined text does not make the statement correct. Select "No change is
needed" if the underlined text makes the statement correct.

The client computers on your network are stable and do not need any new features.

Which is a benefit of applying operating system updates to these clients?

A group of users has access to Folder A and all of its contents. You need to prevent some of the users
from accessing a subfolder inside Folder A.

You need to limit the programs that can run on client computers to a specific list.
Which technology should you implement?

The Graphic Design Institute hires you to help them set up a server for their 20-person team.

As a general practice of hardening the server, you start by performing which two tasks? (Choose two.)

What are two attributes that an email message may contain that should cause a user to question whether
the message is a phishing attempt? (Choose two.)