Quiz
net security q2
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (20)
1If you have a web server that needs to be accessible from both your internal network as well as the Internet, the most secure way to do this is to place the server;
- Aon the internet
- Bon your internal network behind a firewall
- Cin a DMZ
- Din a dual configuration
2The best way to ensure that a role like DNS is installed on your Windows server using recognized industry practices is to use:
- ASCW
- BBPA
- Csconfig
- Dwinrm
3If you wish to test all your WIndows updates before allowing your clients to install the updates, you should
- AUse GPO's to share updates and push them to your clients
- Bhave your clients download the updates from the Internet
- CUse a WSUS server
- DUse Mac clients, they don't need security updates
4Window's "Core" refers to...
- AThe main product offerings in the Window's office suite, including Word, Excel, and PowerPoint
- BThe Kernel and network configuration of he operating system
- CThe parts of the Windows security centre which helps to secure a client machine
- DAn installation of Windows Server which has an extremely limited user interface and software installation
5During startup/logon, a Microsoft client will apply policies from different places, effecting how the machine is managed.
What order are these policies applied in?- AOU, Domain, Site, Local
- BLocal, Site, Domain, OU
- CLocal, Site, OU, Domain
- DDomain, OU, Local, Site
6Fred is logged in as his standard (non-Root) user account. He needs to mount an external drive, fortunately his account is listed in the sudoers file; to run the mount command he can type;
- Amount /dev/sda1 /~/usb
- Bsu -l THEN mount /dev/sda1 /~/usb
- Csudo mount /dev/sda1 /~/usb
- Drootmount /dev/sda1 /~/usb
7In the previous question, assuming fred uses the correct command, and it works as expected, what will the result be?
- AThe external USB drive will be mounted
- BFred will be prompted for his password
- CFred will be prompted for the root password
- DFred will be informed he cannot perform the action
8You don't need to configure a default gateway to browse Internet websites if you have; *****
- AA firewall
- BA proxy server
- CA NAT server
- DYou ALWAYS have to have a default gateway to get access of of your network.
9Deploying multiple Honeypots on your network is considered a;
- Ahoneynet
- Bbeehive
- Choneyfarm
- Dmasquerade
10What is the advantage of having an IDS system in the DMZ of your network
- AIt can stop attacks that are occurring against your servers that are hosted there
- BIt doesn't slow internal network traffic from reaching the Internet
- CIt can lure attacks against your systems away from your actual servers
- DIt can log both the types of attacks and where they are originating from against your servers
11To more securely host services that are accessible from the Internet you could;
- APlace Internet servers in a screened subnet
- BPlace Internet servers behind your Firewall
- CPut your servers in an Intranet
- DPut your servers in a Supernet
12Why would you want to use Direct Access for your remote clients to allow access rather than a Virtual Private Network?
- ADirect Access uses Kerberos for authentication, so user credentials are not passed over the Internet
- BDirect Access occurs automatically when a user is not on the internal network, allowing the machine to be updated without user interaction
- CBecause Direct Access uses a separate secure tunnel to transmit credentials over the Internet
- DDirect Access uses the PKI of the Active Directory Network, making it more secure than a VPN
13NAT is an example of:
- AA stateful firewall
- BIPv4 to IPv6 translation
- CAn application firewall
- DAn IPSEC concentrator
14In terms of threat assessment, what is a vulnerability?
- AAn extra gateway onto your network
- BUsing Internet Explorer
- CA security weakness that could be exploited by a threat
- DHaving low bandwidth and throughput on your gateway
15In Linux, the firewall implements as..
- Aipchains
- Bnatd
- Ciptables
- Dsecured
16On the inside of a properly firewalled network...
- AThere is no need for a local firewall
- BA local firewall provides depth of defense
- CA local firewall can stop unwanted traffic from compromised internal machines from reaching other machines on the inside
- DBoth B and C above
17A way to build a secure server configuration that can be exported to other servers is to;
- ARun the BPA
- BRun sconfig
- Crun winrm
- Drun the SCW
18To build a set of GPO's and policies to secure laptop machines on your network you can use;
- AUse the Security Configuration Manager to generate the policies
- BGhost the laptop with an image
- CPlace the laptop in the DMZ
- Dmake sure the laptop is properly updated
19What is an advantage to installing a Certificate Authority into your Active Directory structure and creating a PKI?
- AIt will encrypt all the data on your network
- BIt stops the use of Kerberos authentication which is not very secure
- CIt allows you to browse non-trusted web sites on the Internet securely
- DIt can allow for trusted connection to Domains and computers outside your Domain
20What is one of the security challenges of using imaging to setup your systems on the network?
- AImages can be modified while getting pushed out to target machines
- BSystems are not updated properly
- CAdministrative accounts have the same password on all machine
- DBase images can have rootkits installed into them
Informações
- Descrição
- information technology
- Autor
- Ali Sahar
- Idioma
- English
- Visualizações
- 13
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz