Quiz
Mobility Chapter 8
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (15)
1 1. What type of attack involves the use of sophisticated equipment to intercept cellular phone signals?
- AA. Tower spoofing
- BB. Wardriving
- CC. Warchalking
- DD. Rogue access point
22. You suspect that someone has broken into encrypted communications between a remote user and the corporate network for the purposes of intercepting sensitive data. What type of attack is this called?
- AA. Cracking
- BB. Man-in-the-middle
- CC. Spoofing
- DD. DoS
3 4. All of the following can result from jailbreaking a mobile device, EXCEPT:
- AA. “Bricking” the device
- BB. Root-level access
- CC. Unauthorized functionality
- DD. Replacement device from the manufacturer after it is rendered unusable
4 5. Which of the following types of malware can self-replicate across a network?
- AA. Virus
- BB. Trojan
- CC. Worm
- DD. Spyware
56. A hacker is able to make phone calls and send text messages from a company cellular phone number, seemingly at will. The legitimate device user insists that she did not make the calls or send the text messages, and she has her smartphone on her at all times. What is one likely explanation for this scenario?
- AA. The device has been rooted.
- BB. The device has been cloned.
- CC. The device has been jailbroken.
- DD. The device has a virus.
67. Which of the following is the key issue in the BYOD paradigm?
- AA. Users making unauthorized phone calls
- BB. User control and privacy
- CC. Use of non-approved apps
- DD. Bill sharing between the company and the user
7 9. Which type of security measure can be installed on a host’s operating system to filter potentially malicious traffic?
- AA. Hardware firewall
- BB. Intrusion detection system
- CC. Proxy server
- DD. Software firewall
811. Which of the following is a security mitigation used to contain applications in their own restricted memory space?
- AA. Data containerization
- BB. Sandboxing
- CC. Virtual device
- DD. Jailbreaking
912. Which of the following can be used to encrypt a device and require authentication to access the device even before the operating system loads?
- AA. Data containers
- BB. Sandbox
- CC. Certificate-based authentication
- DD. Trusted Platform Module
1014. You have been directed by corporate management to prevent certain types of files from entering the network, including mobile devices. Which of the following would help accomplish this?
- AA. DLP
- BB. Content filtering
- CC. Port blocking
- DD. Sandboxing
1115. You have been directed to implement a Data Loss Prevention (DLP) program in the infrastructure. All of the following are elements of DLP you should implement, EXCEPT:
- AA. Anonymous access
- BB. Content filtering
- CC. Information removal detection algorithms
- DD. Metadata marking
1216. All of the following are typical device hardening best practices, EXCEPT:
- AA. Updating antivirus software
- BB. Permitting users to be administrators on the device
- CC. Locking down the device configuration
- DD. Restrictive permissions
1318. Which of the following types of Intrusion Detection Systems must learn the network traffic patterns?
- AA. Network-based IPS
- BB. Host-based IDS
- CC. Anomaly-based IDS
- DD. Signature-based IPS
1419. Your supervisor would like for you to investigate an incident involving unauthorized access of an organizationally-owned workstation in a secure area. You wish to collect all of the relevant incident-related documentation for your investigation. All of the following are considered valid incident documentation, EXCEPT:
- AA. Security video
- BB. System logs
- CC. User statements
- DD. Security advisories
1520. Your organization has not previously developed an incident response capability, and must now do so in order to meet compliance requirements with government regulations. Your company’s CEO has directed that you should immediately write incident response procedures, but you state to her that corporate-level governance must be developed first. Which of the following is the primary source for incident response governance in an organization?
- AA. Incident response plan
- BB. Incident response policy
- CC. Security logs
- DD. Incident response procedures
Informações
- Descrição
- CIS Cloud Quiz sobre Mobility Chapter 8, criado por . . em 01-05-2017.
- Autor
- . .
- Idioma
- English
- Visualizações
- 5
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz