Quiz
Chapter 12 Quiz
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (34)
1Which of the following scanners provides information about the Windows Registry?
- ACerberus
- BNetCop
- CSATAN
- DSAINT
2How should used media be disposed of?
- AIt should be disposed of normally after 5 years.
- BIt should be archived and never destroyed if it contains sensitive data.
- CIt should not be. It should be archived.
- DIt should be destroyed thoroughly prior to disposal.
3What must one consider in evaluating the value of the information on a system?
- AThe impact of such data being made public.
- BThe threats the system must withstand.
- CThe type of information stored on the system.
- DThe probability of such data being made public.
4Perhaps the most critical first step in assessing network security is to:
- Aaudit policies and procedures.
- Bprobe the network for vulnerabilities with a network scanner.
- Cinstall antivirus software.
- Dcheck logs and patches.
5Which of the following is the most fundamental aspect of security?
- AShutting down unused services
- Bpatching the operating system
- CImplementing an IDS
- DConducting periodic security audits
6What is the greatest threat to most networks?
- AHackers
- BDenial of service attack
- CSpyware
- DVirus infection
7The only way to know of impending attacks is by installation and use of which of the following?
- AA proxy-server
- BA firewall
- CAnti-spyware software
- DAn IDS
8Which is perhaps the most important reason to scan a network with NetStat or NetStat Live?
- ATo track intruders as they access network resources.
- BTo identify the source and frequency of network intrusions.
- CTo determine if a hacker is attempting to access the network.
- DTo identify normal network traffic and traffic patterns as a baseline.
9What is the best device, method, or technique to help you be aware of attacks in progress?
- AIDS
- BWhat is the best device, method, or technique to help you be aware of attacks in progress?
- CFirewall logs
- DServer logs
- ENAT
10VPNs should be used for what type of communications?
- AAll internal communications
- BAll external connections to your network
- CAll internal communications that might transmit sensitive data
- DAll external connections that might transmit sensitive data
11Which is NOT one of the “Six P’s” the author refers to in the stages of assessing a system’s security?
- APolicies
- BProbe
- CPorts
- DProblems
12Which is true about written policies regarding patching systems?
- AAudits should be performed to confirm that policies are actually being followed.
- BPatching should be done on a daily basis.
- CEstablishing written policies can ensure that patches are kept up-to-date.
- DAutomated systems have not proven efficient in maintaining patches.
13What is not a primary reason for documenting your security activities and audits?
- ATo demonstrate how much work the network administrators actually do
- BTo prove due diligence in case of litigation
- CTo provide information in case of any external or internal audit
- DTo get new personnel up to speed on the current state of security
14What is the best security threat score a system can achieve with the author’s system?
- A10
- B-8
- C1
- D-30
15Which of the following is the least necessary security device/software?
- AFirewall at the perimeter
- BEncryption for all internal transmission
- CAnti-spyware on all machines
- DAntivirus on all machines
16Which of the following utilities can reveal shared drives on a system?
- ANetBrute
- BNetCop
- CNetGuard
- DNetMaster
17What port numbers are assigned and used by well-known protocols?
- A0-255
- B1-2048
- C1-1024
- D0-1024
18What is the minimum level of security, using the 1-10 scale, that any organizational network should have?
- A7
- B1
- C5
- D3
19Which automated patching system will actually monitor the network for “rogue” devices not using the automated patching system?
- APatchLink
- BZen Works
- CePolicy Orchestrator
- DHFNNetChkPro
20What is the most distinctive feature of SAINT?
- AIts capability to map network traffic.
- BIts prioritization of vulnerabilities
- CIts scans for shared drives
- DIts registry report
21Physical security measures are intended to protect all of the following EXCEPT:
- Arouters.
- BAll of these require physical security.
- Claptops.
- Dbackup tapes.
22Which of the following scanners is a Unix-only tool popular with hackers?
- ACerberus
- BSATAN
- CSAINT
- DNetCop
23What is the worst security threat score a system can achieve with the author’s system?
- A30
- B-30
- C0
- D19
24What does the author consider the absolute minimum patching frequency for any organization?
- AMonthly
- BWeekly
- CBi-weekly
- DQuarterly
25Which is a Windows application that displays detailed listings of TCP and UDP endpoints on a system including remote addresses connection state?
- AFport
- BActiveScan
- CTCPView
- DSuperScan
26Which does the author suggest is perhaps the most fundamental part of security?
- ALocking down unused ports
- BPatching systems
- CUser policies
- DAdequate login procedures
27When should a security audit report be filed and maintained?
- AOn a quarterly basis.
- BEvery time a security audit is performed.
- CWhenever an audit identifies a problem.
- DOn a monthly basis.
28What is the most important reason to use NetState or NetStat Live?
- ATo determine normal network traffic
- BTo find registry vulnerabilities
- CTo detect DoS attempts
- DTo check passwords
29In evaluating security aspects to arrive at a numeric score, which is NOT an aspect the author included?
- ANature of system information
- BLevel of security
- CAttractiveness to attackers
- DThreats to system security
30The author’s security evaluation scoring system is based on scoring several factors on a scale of:
- A-30 to 30
- B0 to10
- C1 to 10
- D-10 to 10
31What is the best approach when using scanners?
- AUse three or four different scanners
- BUse ever scanner type you can find.
- CFind the most thorough scanner and use it
- DPick any single scanner and use it
32Which is a scanner that can provide reports on registry entries, shared drives, services running, and operating system flaws?
- ANetStat
- BCerberus
- CActive Ports
- DSATAN
33What tools, besides port and security scanners, might you wish to use to assess security?
- AAn IDS
- BA virus
- CA password cracker
- DA firewall
34Which is NOT an advantage to an organization provided by a proxy server?
- AProvides records of what Web sites employees access.
- BPermits filtering Web access.
- CMasks internal IP addresses.
- DProtects against virus infections.
Information
- Description
- Information Technology Quiz on Chapter 12 Quiz, created by Mary Sunseri on 29/04/2018.
- Author
- Mary Sunseri
- Language
- English
- Views
- 35
- Tags
- Rating
- No ratings yet Rate this quiz