Test
Ch. 9 - Client and Application Security
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (40)
1A compiled code test is used to ensure that the projected application meets all specifications at that point
- AVerdadero
- BFalso
2An access log is a record or list of individuals who have permission to enter a secure area, along with the time they entered and the time they left the area.
- AVerdadero
- BFalso
3An automated patch update service is used to manage patches within the enterprise instead of relying on the vendor's online updates.
- AVerdadero
- BFalso
4An independently rotating large cup affixed to the top of a fence prevents the hands of intruders from gripping the top of a fence to climb over it. What is the name for this technology?
- Atop hat
- Bfence
- Croller barrier
- Dbollard
5Anti-virus products typically utilize what type of virus scanning analysis?
- AWildcard scanning analysis
- BString scanning analysis
- CHeuristic detection analysis
- DStatic analysis
6A spiked collar that extends horizontally for up to 3 feet from the pole is an example of what kind of technology?
- ARoller barrier
- BRotating spikes
- CAnti-climb
- DSpiked barrier
7A Wi-Fi enabled microSD card is an example of what type of device?
- ASecure Digital
- BPCIe
- Cmobile card
- DSDIO
8How can an area be made secure from a non-secured area via two interlocking doors to a small room?
- AUsing a pit
- BUsing a mantrap
- CUsing a lockout
- DUsing a closet
9In Microsoft Windows, what type of templates are a collection of security configuration settings?
- Aadministrator
- Buser
- Csecurity
- Dsystem
10In the production stage the application is released to be used in its actual setting.
- AVerdadero
- BFalso
11Most portable devices, and some computer monitors have a special steel bracket security slot built into the case, which can be used in conjunction with a:
- AU-lock
- Bcable lock
- Cshield lock
- Dsafe lock
12One tool for change management is version control software that allows changes to be automatically recorded and if necessary "rolled back" to a previous version of the software.
- AVerdadero
- BFalso
13Static program analyzers are tools that examine the software without actually executing the program; instead, the source code is reviewed and analyzed.
- AVerdadero
- BFalso
14The BIOS was software that was integrated into the computer's motherboard.
- AVerdadero
- BFalso
15The testing state is a "quality assurance" test to verify that the code functions as intended.
- AVerdadero
- BFalso
16Tightening security during the design and coding of an OS is called "locking".
- AVerdadero
- BFalso
17What is the name for a cumulative package of all patches and hot-fixes as well as additional features up to a given point?
- Afeature pack
- Bservice pack
- Cpatch
- Droll-up
18What monitors emails for spam and other unwanted content to prevent these messages from being delivered?
- Acode emulation
- Bfirewall
- Crouter gateway
- Dmail gateway
19What publicly released software security update is intended to repair a vulnerability?
- Aservice pack
- Bupdate
- Crenewal
- Dpatch
20What security concept states a user should only be given the minimum set of permissions required to perform necessary tasks?
- Afunction limiting
- Bblacklisting
- Cleast functionality
- Dwhitelisting
21What security standard was introduced in conjunction with UEFI?
- AFirmware Interface
- BSecure Boot
- CBIOS
- DUnified Boot
22What software methodology includes security automation?
- ADevOps
- BAgile
- CSecure Agile
- DSecure DevOps
23What specific process in application development removes a resource that is no longer needed?
- Aversion control
- Bdeprovisioning
- Cchange management
- Dbaselining
24What specific software can examine a computer for any infections as well as monitor computer activity and scan new documents that might contain a virus?
- Aanti-malware
- Bantivirus
- Cfirewall
- Dsecurity applications
25What type of filtering software divides email messages that have been received into two piles, spam and non-spam and then analyzes every word in each email and determines how frequently a word occurs in the spam pile compared to the not-spam pile?
- AExtension filtering
- BWhitelist filtering
- CBayesian filtering
- DBlacklist filtering
26What type of OS in firmware is designed to manage a specific device like a video game console?
- Anetwork OS
- Bworkstation OS
- Cappliance OS
- Dclient OS
27What type of OS manages hardware and software on a client computer?
- Aworkstation OS
- Bappliance OS
- Cclient OS
- Dnetwork OS
28What type of storage is used on mobile devices?
- ARAM
- Bflash memory
- CROM
- Dvolatile memory
29What type of tools are involved in effective patch management? (Choose all that apply)
- Apatch reception
- Bpatch monitoring
- Cpatch verification
- Dpatch distribution
30What type of update does not allow a user to refuse or delay security updates?
- Asecurity
- Bpreventative
- Cforced
- Dmandatory
31What type of video surveillance is typically used by banks, casinos, airports, and military installations, and commonly employs guards who actively monitor the surveillance?
- AITV
- BICTV
- CIPTV
- DCCTV
32What U.S. government classified standard is intended to prevent attackers from picking up electromagnetic fields from government buildings?
- AEMIF
- BTEMPEST
- CMaSec
- DRAIN
33When securing a laptop, it can be placed in an office or a desk drawer.
- AVerdadero
- BFalso
34Which application development life-cycle model uses a sequential design process?
- Alinear
- Bagile
- Cwaterfall
- Dserial
35Which AV approach uses a variety of techniques to spot the characteristics of a virus instead of attempting to make matches?
- Apattern detection
- Bhybrid monitoring
- Ccombination detection
- Dheuristic monitoring
36Which of the following are application development stages? (Choose all that apply)
- Astaging
- Banalysis
- Cproofing
- Dtesting
37Which of the following are considered to be a part of a typical OS security configuration? (Choose all that apply)
- APassword auditing
- BDisabling default accounts/passwords
- CEmploying least functionality
- DDisabling unnecessary ports and services
38Which of the following is an AV heuristic monitoring technique?
- AOS simulation
- Benvironment scanning
- Ccode emulation
- Dcode monitoring
39Which of the following is a popular type of removable data storage used on mobile devices?
- ASSD
- BHDD
- CSD
- DUSB
40Which OS hardening technique removes all unnecessary features that may compromise an operating system?
- Akernel pruning
- BOS priority
- Creduce capabilities
- Dleast privilege
Información
- Descripción
- (Security+ Quizzes) Information Technology Test sobre Ch. 9 - Client and Application Security, creado por C Danvers el 22/05/2018.
- Autor
- C Danvers
- Idioma
- English
- Visitas
- 93
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test