Quiz
GKT Exam 200-260
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (60)
1What form or type of attack is the most difficult to detect and block?
- AScripting
- BZero day
- CInput manipulation
- DEavesdropping
2An attack which is transmitted to a target through an HTTP response which is not properly validated could result in page hijacking, cache-poisoning, cross-site scripting, cookie manipulation,and other compromises. This attack is often classified as?
- AHeader manipulation
- BCookie hijacking
- CXML injection
- DBluesnarfing
3What is the first step in reducing the impact of an intrusion attempt?
- ADisabling unused interfaces and unused application service ports
- BConfigure a firewall
- CEnable detailed connection logging
- DPerform compliance testing
4Which of the following is not a useful tool in detecting the presence of a rogue machine on a private network?
- AEnterprise switch (with port security)
- BMonitoring MAC addresses
- CNetwork focused IDS/IPS
- DStateful inspection firewall
5What risk assessment metric predicts the likelihood of a threat being realized within a given time frame?
- ASingle Loss Expectancy
- BExposure Factor
- CAnnualized Rate of Occurrence
- DAcceptable Risk
6A logic bomb can be triggered by a number of events, which of the following is likely not an example of a delivery mechanism used to plant a logic bomb?
- Apassword guessing
- Bvirus
- Cworm
- DTrojan horse
7What form of malware attempts to extort money out of victims?
- ARansomware
- BLogic bomb
- CBackdoor
- DTrojan horse
8Which of the following is not directly associated with man-in-the-middle attacks?
- ADNS poisoning
- BDDoS
- CRougue proxy server
- DFalse HOSTS file
9A Smurf attack relies on what form of traffic to flood a victim?
- AUDP
- BTCP SYN packets
- CICMP Type 0
- DEncryption
10What is SPIM?
- ASerial Port Indicator Mechanism
- BSecure Personal Information Management
- CA name resolver service
- DUnwanted junk communication over IM
11What type of attack aims at redirecting traffic intended for a legitimate Web site to an illegitimae Web site?
- APhishing
- BPharming
- CFraggle
- DSQL injection
12Using a screen film to reduce the angle of visibility on a monitor protects against what form of attack?
- Aphishing
- Bshoulder surfing
- Cvishing
- Dspoofing
13Which of the following does not represent Pll?
- APhone number
- BUser name
- CFingerprint
- DFavorite dessert
14A clean desk policy requires?
- ADesks are free from debris or overt signs of wear and use
- BAnti-bacterial wipes are used to prevent the spread of germs and disease
- CPaperwork is filed away at the end of every work period
- DUser's desktops contain only authorized OS elements
15What is role-based training?
- ASocial engineering that attempts to groom victims
- BSkits illustrating current issues to enhance cultural awareness
- CPeer-controlled brainstorming for on-the-job learning
- DJob specific education to assist with security compliance
16HVAC is used to manage two important aspects of the environment,temperature and?
- AFire
- BHumidity
- CMagnetic fields
- DCapacitance
17The HVAC implementation that alternates airway passages located between walls of rack mounted systems as air vent and air return is commonly known as?
- ACyclonic circulation
- BRAID C/F
- CHot and cold aisles
- DConvection systems
18All of the following are generally considered detection controls. However,which also has the added benefit of being a preventative control as well?
- ASecurity cameras
- BPerimeter breach detectors
- CSecurity guards
- DProximity sensors
19High availability of a resource could be achieved through the implementation of what service?
- ASSD storage
- BOffsite backups
- CClustering
- DOptical network links
20Which of the following is used to describe a situation where an alert is sent to an administrator when an event is mistakenly recognized as malicious?
- ATrue negative
- BTrue positive
- CFalse negative
- DFalse positive
21What business security policy focuses on directing subjects to perform business tasks and avoid wasting resources?
- AAcceptable Use Policy
- BService Level Agreement
- CRetention Policy
- DBusiness Continuity Plan
22Which of the following can be described as the amount of data loss that can be survived or accepted as measured in time?
- AMaximum tolerable downtime
- BMean time between failure
- CRecovery time objective
- DRecovery point objective
23What is the process of adding new employees to the company's identity and management (IAM) system?
- ASuccession planning
- BOn-boarding
- CFormal Enrollment
- DIdentity Proofing
24Which of the following is not a legal document,does not formally declare commitments,nor is it a binding contract?
- ASPA
- BMOU
- CSLA
- DISA
25Which of the following security mechanisms is the most effective at preventing unauthorized data sharing or data leakage?
- AMultifactor authentication
- BDetailed authorization settings
- CStorage encryption
- DGranular logging
26When network access control is used to maintain patch levels and configurations, a system returning from weeks in the field is often placed where?
- Ain quarantine with a remediation server
- Bin a VPN
- Cin an extranet
- Din the intranet
27The most effective method to reduce the risk of war dialing is?
- ABlock Caller ID
- BInstall video cameras in the parking area
- CRemove all modems
- DDisable SSID broadcasting
28When a company deploys a private cloud,which of the following is true?
- AThe company is leasing access to a cloud service from a third-party provider
- BThe company is installing cloud servers within their own building
- CThe company can only access their cloud resources over their internal network
- DThe company is not able to access their cloud resources over the Internet
29Which of the following high-speed data-storage solution options can be implemented over existing network infrastructure, assuming it supports at least 10 Gbps?
- AiSCSI
- BFibre Channel
- CFCoE
- DSCP
30The SCP replacement for insecure RCP uses what for its security services?
- ASSL
- BSSH
- CSHA
- DSRPC
31What ports does SNMP operate over?
- AUDP 161 and 162
- BTCP 20 and UDP 53
- CTCP 53 and UDP 53
- DTCP 25 and 110
32Which layer of the OSI model stack is not secured by SSL or TLS?
- AApplication
- BPresentation
- CSession
- DTransport
33An S/FTP server is deployed within your intranet but is accessible to external users. You are not allowed to change the configuration of the network by relocating existing services. Which of the following is the most important security solution to implement ?
- AInstall strong password management policies
- BInstall a host firewall
- CInstall a VPN server
- DInstall a Network IDS
34How does a switch determine which port to use to transmit a packet once it is received?
- AIP routes
- BSecurity associations
- CACLs
- DMAC tables
35What hardware device can both filter content and cache data?
- ASwitch
- BProxy
- CRouter
- DVPN concentrator
36What tool can be used to distribute network data for the optimization of performance across multiple computers and networks?
- AMultiplexer
- BSwitch trunking
- CLoad balancer
- DNATing
37A malware scanner is least effective against what type of attack?
- Apharming
- Blogic bomb
- CTrojan horse
- Dbackdoor
38Which of the following is the most important security concern related to a unified threat management (UTM) solution?
- AUse of packet filtering firewall services
- BPerforming SPAM filtering
- CBeing a single point of failure
- DProviding NAT/PAT
39What trust model is used to link the environments of a large enterprise and the smaller organization just acquired through a corporate takeover?
- Ahierarchical trust
- Bbridge trust
- Cweb of trust
- Dtrust list
40The CEO's mobile phone was lost during a business lunch. After contacting the restaurant, cab companies, and other attendees, no trace of the device is uncovered. What is the best mechanism to ensure against data disclosure?
- ATrack the device using GPS location services
- BSend a text message to the phone asking for it to be returned
- CRemotely sanitize or wipe the device's memory and storage
- DUse whole hard drive encryption
41Which feature of a wireless phone represents the most likely privacy violation of the owner/user of the device which can be easily disabled?
- Acall history
- BGPS tracking
- CRemote sanitization
- Dthird-party app support
42In order to prevent both the installation of new software and the execution of standalone programs, whether malicious or benign,which of the following should be implemented?
- AWhitelisting
- BSandboxing
- CCredential management
- DBlack box testing
43A hardware security module is most often used to not only store encryption keys but also?
- Asanitize storage
- Bauthenticate end-points
- Cobfuscate content
- Dgenerate keys
44File encryption is usually implemented using a mechanism that randomly selects a symmetric encryption key that is used to secure the data file,then the symmetric key is stored?
- Ausing hashing
- Bby enveloping it with the user's public key
- Cby signing it with the user's private key
- Din the TPM
45What is the mobile device operating system produced by Apple?
- AiSCSI
- BAndroid
- CiOS
- DLinux
46The proprietary remote access AAA service currently available when deploying Cisco hardware is?
- ARADIUS
- BDIAMETER
- CTACACS+
- DIEEE 802. x
47Vishing is a VoIP implementation of a_____attack?
- Akeystroke capturing
- Bsocial engineering
- Cdumpster diving
- DARP spoofing
48Which of the following is a means to infect a group with malware by planting it at a commonly visited location?
- AWatering hole attack
- BIV attack
- CMan-in-the-middle
- DLogic bomb
49Which of the following will allow an unauthorized co-worker to easily impersonate you?
- Aleaving your common access card in your vehicle
- Bwriting down your password under your mouse pad
- Cusing a passphrase
- Dleaving your OTP device in your desk drawer
50Which of the following is most vulnerable to an IV attack?
- AWEP
- BAES
- C802.1x
- DLOAP
51What is WPS?
- AA mechanism for exchanging encryption keys
- BA tool to perform eavesdropping on session negotiation
- CA hacking to used to host a fake version of a W iFi base station
- DA means to add a new wireless client without typing in credentials
52LOAP injection is an attack to exploit the trust of applications that construct LOAP statements or queries based on user input that is applied to a back-end directory service. This attack could result in?
- ANAC quarantine
- BCertificate revocation
- CArbitrary code execution
- DNAT traversal
53Which of the following tasks should generally not be performed when performing network hardening?
- Adisable all unnecessary protocols
- Bconfigure static NAT
- Cfilter traffic using a border firewall
- Dinstall the latest firmware on network devices after testing and approval
54Which of the following is a useful item for quantitative analysis?
- ADelphi technique
- Binterviews
- Casset value
- Dsurveys
55Peer auditing is implemented using?
- ACross training
- BM of N control
- CMandatory vacations
- DExit interviews
56Which of the following is a contract between two entities which defines their working relationship, including expectations and obligations of the endeavor?
- ABPA
- BBCP
- CMAC
- DMOU
57Which is the most effective mechanism to implement in regards to data loss prevention (OLP)?
- AMetal detectors at entrances
- BInventory tracking of equipment
- CStorage encryption
- DLanyards on USB drives
58On a weekly basis, all log files are copied onto backup media for long term storage. You are worried that a rival company has planted a corporate espionage agent in your organization. What mechanism
can you implement to detect attempts to sanitize audit trails so that you will be able to use the recorded evidence in an incident response or investigation?- Adigitally sign the active logs
- Bhash the backup media
- Cencrypt the transmission protocols
- Dmulti-factor authentication
59During an incident investigation,you are looking over a log file from a comprised server when you notice that the system clock is off by 3 mins and 12 seconds from other internal servers. How should you respond to this?
- Arecord the time offset
- Bmanually reset the clock
- Cdiscard all non-synchronized events
- Dsetup NNTP to link the clock to other servers
60In order to properly handle security breaches,what is the most important part of incident response?
- AIncident identification
- BHistorical logs of mitigations
- CPerforming a lessons learned review
- DPreparation
Information
- Description
- Quiz on GKT Exam 200-260, created by cholera_morbus on 14/04/2015.
- Author
- cholera_morbus
- Language
- English
- Views
- 5
- Rating
- No ratings yet Rate this quiz