Quiz
Test your Readiness Bad
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (30)
1A manager recently resigned and left your organization. Later, IT personnel determined that he deleted several files and folders on a server share after he left the organization. Further, they determined that he did so during the weekend while the organization was closed. Which of the following account management practices would have prevented his actions?
- AUsage auditing and review
- BPermission auditing and review
- CTime-of-day restrictions
- DOnboarding
- EOffboarding
2An attacker has launched several successful XSS attacks on a web application within your DMZ. Which of the following are the BEST choices to protect the web server and prevent this attack? (Select TWO.)
- AInput validation
- BNormalization
- CCode obfuscation
- DWAF
- EDynamic code analysis
3Your organization has a strict policy requiring administrators to disable user accounts during the exit interview This provides several security benefits. Which of the following choices BEST identifies a security benefit of this practice?
- AEnsures that user security keys are retained
- BEnsures that users cannot log on remotely
- CEnsures that user files are retained
- DEnsures that the account can be enabled again if the employee returns
4An attacker has been analyzing encrypted data that he intercepted. He knows that the end of the data includes a template sent with all similar messages. He uses this knowledge to decrypt the message. Which of the following types of attacks BEST describes this attack?
- AKnown ciphertext
- BBrute force
- CKnown plaintext
- DRainbow table
5Attackers recently attacked a web server hosted by your organization. Management has tasked administrators with configuring the servers following the principle of least functionality. Which of the following will meet this goal?
- AIdentifying the baseline
- BInstalling and updating antivirus software
- CInstalling a NIDS
- DDisabling unnecessary services
6Lisa is monitoring the logs of a network-based IDS console. She noticed several connections from an internal host to a suspicious Internet-based domain. Which of the following tools would help her analyze the network traffic?
- ANmap
- BProtocol analyzer
- CNetstat
- DTracert
7You suspect that a computer in your network is connecting to a remote computer without any user interaction. You want to verify this and identify the remote computer. Additionally, you want to identify how this connectior is being initiated. Which of the following will BEST meet this need?
- Atcpdump
- Bnmap
- Cnetstat
- Dtracert
- Enetcat
8Web developers are implementing error handling in a web site application. Which of the following represents a best practice for this?
- ADisplaying a generic error message and logging generic information on the error
- BDisplaying a detailed error message and logging detailed information on the error
- CDisplaying a generic error message but logging detailed information on the error
- DDisplaying a detailed error message but logging generic information on the error
9A man in a maintenance uniform walked up to your organization's receptionist desk. He asked for access to the wiring closet used for the phones. The receptionist asked the man to show his building access badge and then she verified that he was on the list of approved personnel to access this secure area. What type of attack will the checks performed by the receptionist prevent?
- ATailgating
- BWhaling
- CPhishing
- DShoulder surfing
- EImpersonation
10Your organization is planning to implement a wireless network using WPA2 Enterprise. Of the following choices, what is required?
- AAn authentication server with WEP running on the access point
- BAn authentication server with DNS installed on the authentication server
- CAn authentication server with DHCP installed on the authentication server
- DAn authentication server with a digital certificate installed on the authentication server
11Managers within your organization want to implement a secure boot process for some key computers. During the boot process, each computer should send data to a remote system to check the computer's configuration. Which of the following will meet this goal?
- ARemote attestation
- BHardware root of trust
- CTrusted operating system
- DTrusted Platform Module
12Your organization has decided to implement a biometric solution for authentication. One of the goals is to ensure that the biometric system is highly accurate. Which of the following provides the BEST indication of accuracy with the biometric system?
- AThe lowest possible FRR
- BThe highest possible FAR
- CThe highest possible CER
- DThe lowest possible CER
13You want to test new security controls before deploying them. Which of the following technologies provides the MOST flexibility to meet this goal?
- ABaselines
- BHardening techniques
- CVirtualization technologies
- DPatch management programs
14A security administrator recently noticed abnormal activity on a workstation. It is connecting to systems outside the organization's internal network using uncommon ports. The administrator discovered the computer is also running several hidden processes. Which of the following choices BEST describes this activity?
- ABackdoor
- BRootkit
- CTrojan
- DSpam
15Your organization wants to increase security for VolP and video teleconferencing applications used within the network. Which of the following protocols will BEST support this goal?
- ASFTP
- BSRTP
- CTLS
- DSMTP
16You suspect that an attacker is performing a reconnaissance attack against servers in your organization's DMZ. The attacker is attempting to gather as much information as possible on these servers. You decide to check the logs of these servers to determine if the attacker is attempting a banner grabbing attack. Which of the following commands MOST likely indicate that the attacker is launching a banner grabbing attack? (Select FOUR.)
- Atcpdump
- Bgrep
- Ctelnet
- Dnetcat
- Earp
- Fipconfig
- Gping
- Hnmap
17A one-way function converts data into a string of characters. It is not possible to convert this string of characters back to the original state. What type of function is this?
- AHashing
- BStream cipher
- CAsymmetric encryption
- DSymmetric encryption
18A forensic expert is preparing to analyze a hard drive. Which of the following should the expert do FIRST?
- ATake a screenshot
- BCapture an image
- CIdentify the order of volatility
- DCreate a chain of custody document
19Your organization has decided to increase the amount of customer data it maintains and use it for targeted sales. However, management is concerned that they will need to comply with existing laws related to PII. Which of the following should be completed to determine if the customer data is PII?
- AAffinity scheduling
- BTabletop exercise
- CPrivacy threshold assessment
- DPrivacy impact assessment
20Looking at logs for an online web application, you see that someone has entered the following phrase into several queries:
Which of the following is the MOST likely explanation for this?- AA SQL injection attack
- BAn XSS attack
- CA buffer overflow attack
- DA OIL injection attack
21You suspect that a database server used by a web application does not have current patches. Which of the following is the BEST action to take to verify the server has up-to-date patches?
- AVulnerability scan
- BProtocol analyzer
- CPort scan
- DNetwork mapping
22Management at your organization is planning to hire a development firm to create a sophisticated web application. One of their primary goals is to ensure that personnel involved with the project frequently collaborate with each other throughout the project. Which of the following is an appropriate model for this project?
- AWaterfal
- BSecure DevOps
- CSDLC
- DAgile
23You need to perform tests on your network to identify missing security controls. However, you want to have the least impact on systems that users are accessing. Which of the following tools is the BEST to meet this need?
- AA syn stealth scan
- BVulnerability scan
- CPing scan
- DPenetration test
24You need to perform tests on your network to identify missing security controls. However, you want to have the least impact on systems that users are accessing. Which of the following tools is the BEST to meet this need?
- AA syn stealth scan
- BVulnerability scan
- CPing scan
- DPenetration test
25You are tasked with configuring a switch so that it separates VolP and data traffic. Which of the following provides the BEST solution?
- ASRTP
- BVLAN
- CNAC
- DDMZ
26Flancrest Enterprises recently set up a web site utilizing several web servers in a web farm. The web servers access a back-end database. The database is hosted by a database application configured on two database servers. Web servers can access either of the database servers. Which of the following BEST describes the configuration of the database servers?
- AAffinity
- BActive-active
- CRound-robin
- DActive-passive
27Your organization is hosting a wireless network with an 802.1x server using PEAP. On Thursday, users report they can no longer access the wireless network, but they could access it on the previous day. Administrators verified the network configuration matches the baseline, there aren't any hardware outages, and the wired network is operational. Which of the following is the MOST likely cause for this problem?
- AMAC filtering is enabled
- BThe RADIUS server certificate expired.
- CDNS is providing incorrect host names.
- DDHCP is issuing duplicate IP addresses
28Your IPS recently raised an alert from the following log entry on of your organization's web servers: 04/23/18 23:13:50 httpd: GET /wp/forms/process.php?input=cd%20../../../etc;cat%20shadow
Based on this log entry, which of the following is MOST likely occurring- AFalse negative
- BCommand injection attack
- CPassword attack
- DBuffer overflow attack
- EXSS attack
29A recent antivirus scan on a server detected a Trojan. A technician removed the Trojan, but a security administrator expressed concern that unauthorized personnel might be able to access data on the server. The security administrator decided to check the server further. Of the following choices, what is the administrator MOST likely looking for on this server?
- ARootkit
- BBackdoor
- CBotnet
- DLogic bomb
30A security administrator at a shopping mall discovered two wireless cameras pointing at an automatic teller machine. These cameras were not installed by mall personnel and are not authorized. What is the MOST likely goal of these cameras?
- AShoulder surfing
- BVishing
- CTailgating
- DDumpster diving
Information
- Description
- Quiz on Test your Readiness Bad, created by Daniel Villa on 22/03/2019.
- Author
- Daniel Villa
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz