Quiz
CET_TARDE - Security Fundamentals 2017 - Part 1
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (99)
1Which type of malware can copy itself and infect a computer without the user’s consent or knowledge?
- Avirus
- BTrojan horse
- Crootkit
- Dbackdoor
2What type of self-replicating program copies itself to other computers on a network without any user intervention and consumes bandwidth and computer resources?
- Avirus
- BTrojan horse
- Cworm
- Dbackdoor
3What malware looks like a useful or desired executable program but is in reality program that is supposed to cause harm to your computer or steal information from your computer?
- Avirus
- BTrojan horse
- Cworm
- Dbackdoor
4What malware collects a user’s personal information or details about your browsing habits without your knowledge?
- Avirus
- BTrojan horse
- Cworm
- Dspyware
5What malware gives administrator-level control over a computer system?
- Arootkit
- BTrojan horse
- Cworm
- Dspyware
6What software component comes with Windows Vista and Windows 7 to defend against spyware?
- AWindows Firewall
- BWindows Defender
- CUAC
- DWindows Anti-virus
7What do you call a message warning you to delete an essential Windows file?
- Avirus hoax
- Bkeylogger
- Cbackdoor
- Dworm
8What server can be used to install Windows updates for your organization?
- ASCOM
- BWSUS
- CIIS
- DWDS
9What do you call multiple Windows updates that have been packaged together as one installation and are well tested?
- Aservice packs
- Bcumulative packs
- Ccritical update
- Doptional update
10What Windows feature notifies you when something tries to make changes to your computer without your knowledge?
- AWDS
- BNAT
- CWindows Defender
- DUAC
11What host firewall is included with Windows 7?
- AWindows Firewall
- BWindows Defender
- CMicrosoft Protector
- DMicrosoft Safety Net
12What do you call unsolicited junk email?
- Aspam
- Bj-mail
- Cjunkettes
- DInfected mail
13What email validation system is designed to stop spam that uses source address spoofing?
- AForemost Relay System
- BSender Policy Framework
- CSpam Checking Networking
- DSpoof Checker
14What do spammers and hackers look for when they want to send email through your network?
- Aopen SMTP servers
- Bopen web servers
- Copen POP3 servers
- Dopen FTP servers
15Which tab in Internet Explorer settings would you use to delete history and cookies?
- AGeneral
- BPrivacy
- CSecurity
- DAdvanced
16Which Internet Explorer zone is the least secure?
- AInternet zone
- Blocal intranet zone
- Ctrusted sites zone
- Drestricted sites zone
17What technique is used to send you to a fake, but realistic-looking, website to verify your account information?
- Aspoofing
- Bsmurfing
- Cman-in-the-middle
- Dphishing
18Which of the following terms indicates that information is to be read only by those people for whom it is intended?
- Aconfidentiality
- Bintegrity
- Cavailability
- Daccounting
19What technology is not used to implement confidentiality?
- Aencryption
- Baccess controls
- Cauditing
- Dauthentication
20Which of the following makes sure that data is not changed when it not supposed to be?
- Aconfidentiality
- Bintegrity
- Cavailability
- Daccounting
21Which of the following is not a response when dealing with a risk?
- Aavoidance
- Bmitigation
- Ctransfer
- Dpatching
22What do you call the security discipline that requires that a user is given no more privilege necessary to perform his or her job?
- Adefense in depth
- Breduction of attack surface
- Crisk transfer
- Dprinciple of least privilege
23What do you call the scope that hacker can use to break into a system?
- Adefense in depth
- Battack surface
- Cprinciple of least privilege
- Drisk mitigation
24What method used by a hacker relies on the trusting nature of the person being attacked?
- Asocial engineering
- Battack surface
- Cprinciple of least privilege
- Drisk avoidance
25What is the best way to protect against social engineering?
- Astronger encryption
- Bstronger authentication
- Cemployee awareness
- Drisk mitigation
26What is needed to highly secure a system?
- Alots of time
- Bmore money
- Csystem update
- Ddisabled administrator account
27What is the first line of defense when setting up a network?
- Aphysically secure the network
- Bconfigure authentication
- Cconfigure encryption
- Dconfigure an ACL
28Which concept determines what resources users can access after they log on?
- Aauthentication
- Bauditing
- Caccess control
- Ddefense in depth
29What is used to provide protection when one line of defense is breached?
- Adefense in depth
- Battack surface
- Cprinciple of least privilege
- Drisk mitigation
30What is used to identify a person before giving access?
- Aauthentication
- Bencryption
- Caccess control
- Dauditing
31What is used to verify that an administrator is not accessing data that he should not be accessing?
- Aauthentication
- Bencryption
- Caccess control
- Dauditing
32What type of device can be easily lost or stolen or can be used for espionage?
- Aprocessors
- BRAM chips
- Cremovable devices
- Dservers
33What is a physical or logical device used to capture keystrokes?
- AUSB flash drive
- BPDA
- CSmartphone
- Dkeylogger
34In dealing with risks, which response is done by buying insurance to protect your bottom line if such a disaster or threat is realized?
- Arisk avoidance
- Brisk acceptance
- Crisk mitigation
- Drisk transfer
35What type of device isolates a network by filtering the packets that can enter it?
- Afirewall
- Bbridge
- Cgateway
- Dswitch
36What seven-layer model is often used to describe networking technologies and services?
- AOSI
- BTCP/IP
- CIPX/SPX
- DDIX
37On which OSI layer do routers function?
- A1
- B2
- C3
- D4
38On which OSI layer do TCP and UDP function?
- A1
- B2
- C3
- D4
39What OSI layer do switches and bridges use?
- A1
- B2
- C3
- D4
40What port does SMTP use?
- A21
- B23
- C25
- D443
41What port does LDAP use?
- A25
- B443
- C389
- D3389
42What type of firewall filters packets based on IP address and ports?
- Apacket-filtering
- Bcircuit-filtering
- Capplication-level
- Dstateful
43What type of firewall is also known as a proxy server?
- Apacket-filtering
- Bcircuit-filtering
- Capplication-level
- Dstateful
44What type of firewall looks at the previous conversations to determine if a packet should enter a network?
- Apacket-filtering
- Bcircuit-filtering
- Capplication-level
- Dstateful
45What Microsoft technology can verify that a client has the newest Windows updates and has an updated antivirus software package before being allowed access to the network?
- AIPSec
- BNAP
- CSCCM
- DSCOM
46What technology can you use to isolate a network of servers so that they cannot interact with other servers?
- Abridge
- Bswitch
- Crouter
- DVLAN
47What type of device looks at a packet and forwards it based on its destination IP address?
- Abridge
- Bswitch
- Crouter
- DVLAN
48Which type of routing protocol sends the entire routing table to its neighbors?
- Adistance vector
- Blink state
- Cscalable driven
- Dinfinity
49Which type of system detects unauthorized intruders and then takes action to stop them from proceeding?
- AIDS
- BIPS
- CVLAN
- DNAT
50What type of server would you install that would be used to trap a hacker?
- Ahoneypot
- BNAT
- CIPS
- DIDS
51What special area serves as a buffer area between the Internet and the internal network and can be used to hold web servers that are accessed from the Internet?
- ADMZ
- BNAT
- CVLAN
- DPLC
52How many firewalls would you use to create a sandwich DMZ?
- A1
- B2
- C3
- D4
53You have several Internet web servers that need to communicate with a SQL server. Where would you place the SQL server?
- Ainternal network
- BDMZ
- CInternet
- Disolated VLAN
54Which of the following servers would you not place on the DMZ?
- AInternet web server
- Bemail relay servers
- Cemail mailbox servers
- Dproxy servers
55What technology allows a user at home to connect to the corporate network?
- ANAT
- BVPN
- CDMZ
- DPLC
56Which IPsec protocol provides integrity protection for packet headers, data, and user authentication but does not encrypt the data load?
- AAH
- BESP
- CIKE
- DLDAP
57What is the process of identifying an individual?
- Aauthentication
- Bauthorization
- Caccounting
- Dauditing
58What do you call the process in which a user is identified via a username and password?
- Aauthentication
- Bauthorization
- Caccounting
- Dauditing
59What is the process of giving individual access to a system or resource?
- Aauthentication
- Bauthorization
- Caccounting
- Dauditing
60What is the process of keeping track of a user’s activity?
- Aauthentication
- Bauthorization
- Caccounting
- Dauthoring
61What process prevents someone from denying that she accessed a resource?
- Aaccounting
- Bauthorization
- Csniffing
- Dnonrepudiation
62Which of the following is a secret numeric password used for authentication?
- Asecurity token
- Bdigital certificate
- Cdigital signature
- DPIN
63What type of electronic document contains a public key?
- Adigital certificate
- Bbiometrics
- CPIN
- DPAN
64What item, about the size of a credit card, allows access to a network and its resources?
- Adigital certificate
- Bsmart card
- Csecurity token
- Dbiometric
65What type of authentication method identifies and recognizes people based on physical traits such as fingerprints?
- Adigital certificates
- BWEP
- Cbiometrics
- DRADIUS
66What authentication type is the default for Active Directory?
- ANTLM
- BKerberos
- CMS-CHAP
- DMS-CHAPv2
67What directory service is used with Windows domains?
- AActive Directory
- BE-Directory
- CPAM
- DKerberos
68What type of server runs Active Directory?
- Amember server
- Bfile server
- Cdomain controller
- DNTLAN server
69When you access permissions to a folder, you should first grant permissions to __________ rather than users.
- Agroups
- Bcomputers
- Ccollections
- Dorganizational units
70When you create a local user on a computer running in Windows 7, where is the user account stored?
- AActive Directory
- BSAM
- CPAN
- DSQL database
71Which type of group can be granted rights and permissions?
- Asecurity
- Bdistribution
- Cauthorizing
- DSAM
72What authorizes a user to perform certain actions in Windows such as logging on or performing a backup?
- Aright
- Bpermission
- Caccessible
- Dkey
73When you grant access to print to a printer, what are you granting?
- Aright
- Bpermission
- Caccessible
- Dkey
74Where are users and permissions stored for an NTFS folder?
- Aaccess log
- Baccess file
- Cregistry
- DACL
75What type of permissions are assigned directly to a file or folder?
- Aexplicit
- Binherited
- Cencompassing
- Doverriding
76What is the process of converting data into a format that cannot be read by another user?
- Aencryption
- Blocking
- Ckeying
- Dregistering
77Which authentication sends the username and password in plain text?
- AMS-CHAP
- BCHAP
- CPAP
- DSPAP
78In Windows, what do you use to enable auditing?
- Aregistry
- Bgroup policies
- CNTFS permissions
- Daccess log
79A user receives a phone call from a person who claims to represent IT services and then asks that user for confirmation of username and password for auditing purposes. Which security threat does this phone call represent?
- Asocial engineering
- Banonymous keylogging
- Cspam
- DDDoS
80Which two security precautions will help protect a workplace against social engineering? (Choose two.)
- Aensuring that each use of an access card allows access to only one user at the time
- Bensuring that all operating system and antivirus software is up to date
- Cencrypting all sensitive data stored on the servers
- Dperforming daily data backups
- Eregistering and escorting all visitors to the premises
81What are two typical physical security precautions that a business can take to protect its computers and systems? (Choose two.)
- APerform daily data backups.
- BReplace any software firewalls with a hardware firewall.
- CImplement biometric authentication.
- DEnsure that all operating system and antivirus software is up to date.
- EDisable the autorun feature in the operating system.
82Which physical security technology can hold user authentication information, include software license protection, provide encryption, and provide hardware and software authentication that is specific to the host system?
- Abiometric authentication
- BTrusted Platform Module (TPM)
- Ccard key access
- Dtwo-factor security
83It has been noted that the computers of employees who use removable flash drives are being infected with viruses and other malware. Which two actions can help prevent this problem in the future? (Choose two.)
- ASet virus protection software to scan removable media when data is accessed.
- BConfigure the Windows Firewall to block the ports that are used by viruses.
- CEnable the TPM in the CMOS settings.
- DRepair, delete, or quarantine the infected files.
- EDisable the autorun feature in the operating system.
84In which situation would a computer technician use the fixmbr command at the command prompt of a Windows XP computer to resolve a security issue?
- Awhen unauthorized users have changed the CMOS settings and the CMOS password must be reset
- Bwhen a virus has damaged the master boot record of the system disk
- Cwhen a virus has damaged the boot sector of the system disk
- Dwhen the folder permissions for user members of a group are incorrect
85All users working with a particular Windows 7 computer are able to install unauthorized software. In addition to educating the users about correct security behavior, which action should also be performed to solve this issue?
- ASet the user folder permissions to Deny.
- BDisable the users’ accounts.
- CChange the user file permissions to Read Only.
- DEnable UAC on the computer.
86You want to dispose of a 2.5 terabyte hard drive that contains confidential financial information. What is the recommended procedure to achieve this?
- AUse data wiping.
- BDrill through the HDD.
- CSmash the platters with a hammer.
- DImmerse the HDD in a weak solution of bicarbonate of soda.
87What is the most effective way of securing wireless traffic?
- AWPA2
- BSSID hiding
- CWEP
- Dwireless MAC filtering
88Which two items are used in asymmetric encryption? (Choose two.)
- Aa token
- Ba TPM
- Ca private key
- Da DES key
- Ea public key
89Which two characteristics describe a worm? (Choose two.)
- Ahides in a dormant state until needed by an attacker
- Binfects computers by attaching to software code
- Cexecutes when software is run on a computer is self-replicating
- Dtravels to new computers without any intervention or knowledge of the user
90Which type of security threat uses email that appears to be from a legitimate sender and asks the email recipient to visit a website to enter confidential information?
- Aworm
- Bphishing
- Cadware
- Dstealth virus
91Which three questions should be addressed by organizations developing a security policy? (Choose three.)
- AHow should future expansion be done?
- BWhat are the possible threats to the assets of the organization?
- CWhat is to be done in the case of a security breach?
- DWhen do the assets need protecting?
- EWhat assets require protection?
- FWhat insurance coverage is required?
92What does a malware detection program look for when running a scan?
- Aa service pack
- Bpatterns in the programming code of the software on a computer
- Cmirror sites
- Dpatches that prevent a newly discovered virus or worm from making a successful attack
93Port triggering has been configured on a wireless router. Port 25 has been defined as the trigger port and port 113 as an open port. What effect does this have on network traffic?
- AAny traffic that is using port 25 going out of the internal network will also be allowed to transmit out port 113.
- BAll traffic that is sent into port 25 to the internal network will also be allowed to use port 113.
- CAll traffic that is sent out port 25 will open port 113 to allow inbound traffic into the internal network through port 113.
- DAny traffic that comes into port 25 allows outgoing port 113 to be used.
94Which two characteristics of network traffic are being monitored if a network technician configures the company firewall to operate as a packet filter? (Choose two.)
- Apacket size
- Bphysical addresses
- Cprotocols
- Dpacket speed
- Eports
95What is the primary goal of a DoS attack?
- Ato facilitate access to external networks
- Bto prevent the target server from being able to handle additional requests
- Cto scan the data on the target server
- Dto obtain all addresses in the address book within the server
96Which question would be an example of an open-ended question that a technician might ask when troubleshooting a security issue?
- AHave you scanned your computer recently for viruses?
- BWhat symptoms are you experiencing?
- CDid you open any attachments from a suspicious email message?
- DIs your security software up to date?
97Which action would help a technician to determine if a denial of service attack is being caused by malware on a host?
- AInstall rogue antivirus software on the host.
- BLog on to the host as a different user.
- CDisable ActiveX and Silverlight on the host.
- DDisconnect the host from the network.
98A technician is troubleshooting a computer security issue. The computer was compromised by an attacker as a result of the user having a weak password. Which action should the technician take as a preventive measure against this type of attack happening in the future?
- AEnsure the security policy is being enforced.
- BCheck the computer for the latest OS patches and updates.
- CScan the computer with protection software.
- DVerify the physical security of all offices.
99A user has reported that a computer web browser will not display the correct home page even if the default page is reset. What is the likely cause of this problem?
- AA virus has damaged the boot sector of the system disk.
- BThe computer has been infected with spyware.
- CUAC has been disabled on the computer.
- DFolder permissions have been changed from Deny to Allow.
Information
- Description
- Security Fundamentals Quizzes
- Author
- Hawerth Castro
- Language
- Português
- Views
- 130
- Tags
- Rating
- No ratings yet Rate this quiz