Quiz
Chapter 12 Quiz
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (34)
1Which of the following scanners provides information about the Windows Registry?
- ACerberus
- BNetCop
- CSATAN
- DSAINT
2How should used media be disposed of?
- AIt should be disposed of normally after 5 years.
- BIt should be archived and never destroyed if it contains sensitive data.
- CIt should not be. It should be archived.
- DIt should be destroyed thoroughly prior to disposal.
3What must one consider in evaluating the value of the information on a system?
- AThe impact of such data being made public.
- BThe threats the system must withstand.
- CThe type of information stored on the system.
- DThe probability of such data being made public.
4Perhaps the most critical first step in assessing network security is to:
- Aaudit policies and procedures.
- Bprobe the network for vulnerabilities with a network scanner.
- Cinstall antivirus software.
- Dcheck logs and patches.
5Which of the following is the most fundamental aspect of security?
- AShutting down unused services
- Bpatching the operating system
- CImplementing an IDS
- DConducting periodic security audits
6What is the greatest threat to most networks?
- AHackers
- BDenial of service attack
- CSpyware
- DVirus infection
7The only way to know of impending attacks is by installation and use of which of the following?
- AA proxy-server
- BA firewall
- CAnti-spyware software
- DAn IDS
8Which is perhaps the most important reason to scan a network with NetStat or NetStat Live?
- ATo track intruders as they access network resources.
- BTo identify the source and frequency of network intrusions.
- CTo determine if a hacker is attempting to access the network.
- DTo identify normal network traffic and traffic patterns as a baseline.
9What is the best device, method, or technique to help you be aware of attacks in progress?
- AIDS
- BWhat is the best device, method, or technique to help you be aware of attacks in progress?
- CFirewall logs
- DServer logs
- ENAT
10VPNs should be used for what type of communications?
- AAll internal communications
- BAll external connections to your network
- CAll internal communications that might transmit sensitive data
- DAll external connections that might transmit sensitive data
11Which is NOT one of the “Six P’s” the author refers to in the stages of assessing a system’s security?
- APolicies
- BProbe
- CPorts
- DProblems
12Which is true about written policies regarding patching systems?
- AAudits should be performed to confirm that policies are actually being followed.
- BPatching should be done on a daily basis.
- CEstablishing written policies can ensure that patches are kept up-to-date.
- DAutomated systems have not proven efficient in maintaining patches.
13What is not a primary reason for documenting your security activities and audits?
- ATo demonstrate how much work the network administrators actually do
- BTo prove due diligence in case of litigation
- CTo provide information in case of any external or internal audit
- DTo get new personnel up to speed on the current state of security
14What is the best security threat score a system can achieve with the author’s system?
- A10
- B-8
- C1
- D-30
15Which of the following is the least necessary security device/software?
- AFirewall at the perimeter
- BEncryption for all internal transmission
- CAnti-spyware on all machines
- DAntivirus on all machines
16Which of the following utilities can reveal shared drives on a system?
- ANetBrute
- BNetCop
- CNetGuard
- DNetMaster
17What port numbers are assigned and used by well-known protocols?
- A0-255
- B1-2048
- C1-1024
- D0-1024
18What is the minimum level of security, using the 1-10 scale, that any organizational network should have?
- A7
- B1
- C5
- D3
19Which automated patching system will actually monitor the network for “rogue” devices not using the automated patching system?
- APatchLink
- BZen Works
- CePolicy Orchestrator
- DHFNNetChkPro
20What is the most distinctive feature of SAINT?
- AIts capability to map network traffic.
- BIts prioritization of vulnerabilities
- CIts scans for shared drives
- DIts registry report
21Physical security measures are intended to protect all of the following EXCEPT:
- Arouters.
- BAll of these require physical security.
- Claptops.
- Dbackup tapes.
22Which of the following scanners is a Unix-only tool popular with hackers?
- ACerberus
- BSATAN
- CSAINT
- DNetCop
23What is the worst security threat score a system can achieve with the author’s system?
- A30
- B-30
- C0
- D19
24What does the author consider the absolute minimum patching frequency for any organization?
- AMonthly
- BWeekly
- CBi-weekly
- DQuarterly
25Which is a Windows application that displays detailed listings of TCP and UDP endpoints on a system including remote addresses connection state?
- AFport
- BActiveScan
- CTCPView
- DSuperScan
26Which does the author suggest is perhaps the most fundamental part of security?
- ALocking down unused ports
- BPatching systems
- CUser policies
- DAdequate login procedures
27When should a security audit report be filed and maintained?
- AOn a quarterly basis.
- BEvery time a security audit is performed.
- CWhenever an audit identifies a problem.
- DOn a monthly basis.
28What is the most important reason to use NetState or NetStat Live?
- ATo determine normal network traffic
- BTo find registry vulnerabilities
- CTo detect DoS attempts
- DTo check passwords
29In evaluating security aspects to arrive at a numeric score, which is NOT an aspect the author included?
- ANature of system information
- BLevel of security
- CAttractiveness to attackers
- DThreats to system security
30The author’s security evaluation scoring system is based on scoring several factors on a scale of:
- A-30 to 30
- B0 to10
- C1 to 10
- D-10 to 10
31What is the best approach when using scanners?
- AUse three or four different scanners
- BUse ever scanner type you can find.
- CFind the most thorough scanner and use it
- DPick any single scanner and use it
32Which is a scanner that can provide reports on registry entries, shared drives, services running, and operating system flaws?
- ANetStat
- BCerberus
- CActive Ports
- DSATAN
33What tools, besides port and security scanners, might you wish to use to assess security?
- AAn IDS
- BA virus
- CA password cracker
- DA firewall
34Which is NOT an advantage to an organization provided by a proxy server?
- AProvides records of what Web sites employees access.
- BPermits filtering Web access.
- CMasks internal IP addresses.
- DProtects against virus infections.
Informações
- Descrição
- Information Technology Quiz sobre Chapter 12 Quiz, criado por Mary Sunseri em 29-04-2018.
- Autor
- Mary Sunseri
- Idioma
- English
- Visualizações
- 35
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz