question

Which of the following prevents access based on website ratings and classifications?

answer

Content filtering

question

Which of the following is a valid security measure to protect e-mail from viruses?

answer

Use blockers on e-mail gateways.

question

Drag the Web threat protection method on the left to the correct definition on the right.

answer

Prevents visiting malicious Web sites. Web threat filtering. Prevents outsided attempts to access confidential information. Antiphishing software. Identifies and disposes of infected content. Virus blockers. Prevents unwanted email from reaching your network. Gateway email spam blockers. Prevents visiting restricted Web sites. URL content filtering.

question

You are investigating the use of Web site and URL content filtering to prevent users from visiting certain Web sites. Which benefits are the result of implementing this technology in your organization? (Choose two.)

answer

Enforcement of the organization's Internet usage policy. An increase in bandwidth availability.

question

Which of the following is the best countermeasure against man-in-the-middle attacks?

answer

IPSec

question

What is modified in the most common form of spoofing on a typical IP packet?

answer

Source address

question

Which type of Denial of Service (DoS) attack occurs when a name server receives malicious or misleading data that incorrectly maps host names and IP addresses?

answer

DNS poisoning

question

Which of the following describes a man-in-the-middle attack?

answer

A false server intercepts communications from a client by impersonating the intended server.

question

Capturing packets as they travel from one host to another with the intent of altering the contents of the packets is a form of which security concern?

answer

Man-in-the-middle attack

question

When the TCP/IP session state is manipulated so that a third party is able to insert alternate packets into the communication stream, what type of attack has occurred?

answer

Hijacking

question

What is the goal of a TCP/IP hijacking attack?

answer

Executing commands or accessing resources on a system the attacker does not otherwise have authorization to access

question

Which of the following is not a protection against session hijacking?

answer

DHCP reservations

question

Which of the following is the most effective protection against IP packet spoofing on a private network?

answer

Ingress and egress filters

question

While using the Internet, you type the URL of one of your favorite sites in the browser. Instead of going to the correct site, however, the browser displays a completely different website. When you use the IP address of the Web server, the correct site is displayed. Which type of attack has likely occurred?

answer

DNS poisoning.

question

Which of the following attacks tries to associate an incorrect MAC address with a known IP address?

answer

ARP poisoning

question

What are the most common network traffic packets captured and used in a replay attack?

answer

Authentication

question

When a malicious user captures authentication traffic and replays it against the network later, what is the security problem you are most concerned about?

answer

An unauthorized user gaining access to sensitive resources

question

A router on the border of your network detects a packet with a source address that is from an internal client but the packet was received on the Internetfacing interface. This is an example of what form of attack?

answer

Spoofing

question

An attacker uses an exploit to push a modified hosts file to client systems. This hosts file redirects traffic from legitimate tax preparation sites to malicious sites to gather personal and financial information. What kind of exploit has been used in this scenario? (Choose two. Both responses are different names for the same exploit.)

answer

Pharming DNS poisoning

question

Which of the following features on a wireless network allows or rejects client connections based on the hardware address

answer

MAC address filtering

question

Which remote access authentications protocol allows for the use of smart cards for authentication?

answer

EAP

question

You are concerned about sniffing attacks on your wireless network. Which of the following implementations offers the best countermeasure to sniffing?

answer

WPA2 and AES

question

How does WPA2 differ from WPA?

answer

WPA2 uses AES for encryption; WPA uses TKIP

question

You've just finished installing a wireless access point for a client. What should you do to prevent unauthorized users from accessing the access point (AP) configuration utility?

answer

Change the administrative password on the AP

question

Which of the following recommendations should you follow when placing access points to provide wireless access for users within your company building?

answer

Place access points above where most clients are.

question

Which of the following features are supplied by WPA on a wireless network?

answer

Encryption

question

You want to implement 802.1x authentication on your wireless network. Where would you configure passwords that are used for authentication?

answer

on a RADIUS driver

question

Which of the following measures will make your wireless network invisible to the casual attacker performing war driving?

answer

Disable SSID broadcast

question

Which of the following locations will contribute the greatest amount of interference for a wireless access point. (select two)

answer

Near cordless phones AND near backup generators

question

Which of the following wireless security methods uses a common shared key configured on the wireless access point and all wireless clients?

answer

WEP, WPA Personal, and WPA2 personal

question

You need to configure the wireless network card to connect to your network at work. The connections should use a user name and password for authentication with AES Encryption. What should you do?

answer

Configure the connection to use WPA2-Enterprise

question

What purposes does a wireless site survey serve? (Choose two)

answer

1. Identify existing or potential sources of interference 2. To identify the coverage area and preferred placement of access points.

question

You need to add security for your wireless network. You would like to use the most secure method. Which method should you implement?

answer

WPA2

question

WiMax is an implementation of which IEEE committee?

answer

802.16

question

Which of the following measures will make your wireless network invisible to the casual attacker performing war driving?

answer

Disable SSID broadcast

question

Which remote access authentication protocol allows for the use of smart cards for authentication?

answer

EAP

question

Which of the following do switches and wireless access points use to control access through the device?

answer

MAC Filtering

question

You want to implement 802.1x authentication on your wireless network. Where would you configure passwords that are used for authentication?

answer

On a RADIUS Server

question

You are the wireless network admin for your org. As the size of the org has grown, you've decided to upgrade your wireless network to use 802.1x authentication instead of pre-shared keys. You've decided to use LEAP to authenticate wireless clients. To do this, you configured a Cisco RADIUS server and installed the neccessary Cisco client software on each RADIUS client. Which of the following is true concerning this implementation?

answer

The system is vulnerable because LEAP is susceptible to dictionary attacks.

question

You are the wireless network admin for your org. As the size of the org has grown, you've decided to upgrade your wireless network to use 802.1x authentication instead of pre-shared keys. To do this, you need to configure a RADIUS Server and RADIUS clients. You want the server and the clients to mutually authenticate with each other. What should you do? (Select two. Each response is part of the complete solution)

answer

Configure the RADIUS server with a server certificate and Configure all wireless access points with client certificates.

question

Which implementation is most secure?

answer

EAP-TLS

question

Which of the following features on a wireless network allows or rejects client connections based on the hardware address?

answer

MAC address filtering

question

You've just finished installing a wireless access point for a client. What should you do to prevent unauthorized users from accessing the access point (AP) configuration utility?

answer

Change the administrative password on the AP.

question

You are concerned about sniffing attacks on your wireless network. Which of the following implementations offers the best countermeasure to sniffing?

answer

WPA2 and AES

question

What is the least secure place to locate an access point with an omni-directional antenna when creating a wireless cell?

answer

Near a window

question

What purpose does a wireless site survey serve? (Choose two)

answer

To identify existing or potential sources of interference. To identify the coverage area and preferred placement of access points.

question

You need to place a wireless access point in your two story building. While trying to avoid interference, which of the following is the best location for the access point?

answer

In the top floor

question

You are designing a wireless network implementation for a small business. the business deals with sensitive customer information, so data emanation must be reduces as much as possible. The floor plan of the office is shown below. Match each type of access point antenna with the appropriate location on the floorplan.

answer

Location = type A= Directional B= Directional C=Omnidirectional D= Directional E= Directional F= Directional G= Directional

question

The owner of a hotel has contracted with you to implement a wireless network to provide Internet access for guests. The owner has asked that you implement security controls such that only paying guests are allowed to use the wireless network. She wants guests to be presesnted with a loging page when they initially connect to the WLAN. After entering a code provided at check in, guests should then be allowed full access to the Internet. If a user does not provide the correct code, they should not be allowed access to the internet. What should you do?

answer

Implement a captive portal

question

Your company security policy states that wireless networks are not to be used because of the potential security risk they present to your network. One day you find that an employee has connected a wireless access point to the network in his office. What type of security risk is this?

answer

A rogue access point

question

Which of the following describes marks that attackers place outside a building to identify an open wireless network?

answer

Warchalking

question

The process of walking around an office building with an 802.11 signal detector is known as what?

answer

Wardriving

question

Which of the following describes Bluesnarfing?

answer

Unauthorized viewing calendar, emails, and messages on a mobile device

question

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

answer

Bluejacking

question

Which of the following is the best protection to prevent attacks on mobile phones through the Bluetooth protocol?

answer

Disable Bluetooth on the phone

question

You are troubleshooting a wireless connectivity issue in a small office. You determine that the 2.4 GHz cordless phones used in the office are interfering with the wireless network transmissions. If the cordless phones are causing the interference, which of the following wireless standards could the network be using?(Select two)

answer

Bluetooth and 802.11g

question

Your organization uses an 802.11g wireless network. Recently, other tenants installed the following equipment in your building:....since this equipment was installed, your wireless network has been experiencing significant interference. Which system is to blame?

answer

The wireless TV system

question

Which of the following best describes an evil twin?

answer

An access point that is configured to mimic a valid access point to obtain logon credentials and other sensitive information

question

Network packet sniffing is often used to gain the information needed to conduct more specific and detailed attacks. Which of the following is the best defense against packet sniffing?

answer

Encryption

question

Which of the following common network monitoring or diagnostic activity can be used as a passive malicious attack?

answer

Sniffing

question

You are concerned that wireless access points may have been deployed within your organization without authorization. What should you do? (Select two. Each response is a complete solution.

answer

Check the MAC addresses of devices connected to your wired switch and conduct a site survey

question

Match the malicious interference type with the appropriate characteristic.

answer

Spark Jamming = Repeatedly blasts receiving equipment with high-intensity, short-duration RF bursts at a rapid pace Random Noise Jamming = Produces RF signals using random amplitudes and frequencies Random Pulse Jamming = uses radio pulses of random amplitude and frequency

question

The attacker has hidden an NFC reader behind an NFC-based kiosk in an airport. The attacker uses the device to capture NFC data in transit between end-user devices and the reader in the kiosk. She then uses that information later on to masquerade as the original end-user device and establish an NFC connection to the kiosk. What kind of attack has occurred in this scenario?

answer

NFC Relay Attack

question

You are implementing a wireless network in a dentist's office. The dentist's practice is small, so you choose an inexpensive, consumer grade access point. While reading the documentation, you notice that the access point supports Wi-Fi protected Setup (WPS) using a PIN. You are concerned about the security implications of this functionality. What should you do to reduce the risk?

answer

Disable WPS in the access point's configuration

question

Which of the following wireless security methods uses a common shared key configured on the wireless access point and all wireless clients?

answer

WEP, WPA Personal, and WPA2 Personal

question

Which of the following offers the weakest form of encryption for an 802.11 wireless network?

answer

WEP

question

Which of the following features are supplied by a WPA2 on a wireless network?

answer

Encryption

question

You need to secure your wireless network. Which security protocol would be the best choice?

answer

WPA2

question

You need to configure a wireless network. You want to use WPA2 Enterprise. Which of the following components will be a part of your design? (select two)

answer

AES encryption 802.1x

question

Which of the following locations will contribute the greatest amount of interference for a wireless access point?

answer

near a cordless phone and near backup generators

question

You need to implement a wireless network link between two buildings on a college campus. A wired network has already been implemented within each building. The buildings are 100 meters apart. What type of wireless antenna should you use on each side of the link? (select two)

answer

High-gain and Parabolic

question

How does WPA2 differ from WPA?

answer

WPA2 uses AES for encryption; WPA uses TKIP

question

You need to configure the wireless network card to connect to your network at work. The connection should use a user name and password for authentication with AES encryption. What should you do?

answer

Configure the connection to use WPA2 Enterprise

question

Match the wireless networking security standard with its associated characteristics

answer

WEP = Short initialization vector makes key vulnerable WPA2 = Uses AES for encryption WEP = Uses RC4 for encryption WPA = Uses TKIP for encryption WPA2 = Uses CBC-MAC for data integrity WPA2 = Uses CCMP for key rotation

question

You need to add security for your wireless network. You would like to use the most secure method. Which method should you implement?

answer

WPA2

question

Which of the following is used on a wireless network to identify the network name?

answer

SSID

question

Which of the following are true about Wi-Fi Protected Access 2 (WPA2)? (Select two)

answer

Uses AES for encryption Upgrading from a network using WEP typically requires installing new hardware.

question

WiMAX is an implementation of which IEEE Committee?

answer

802.16

question

You want to connect a laptop computer running Windows 7 to a wireless network. The wireless network uses multiple access points and WPA2-Personal. You want to use the strongest authentication and encryption possible. SSID broadcast has been disabled. What should you do?

answer

Configure the connection with a preshared key and AES encryption.

question

You have a company network with a single switch. All devices connect to the network through the switch. You want to control which devices will be able to connect to your network. For devices that do not have the latest operating system patches, you want to prevent access to all network devices except for a special server that holds the patches that the computers need to download. Which of the following components will be part of your solution?(Select two)

answer

Remediation servers AND 802.1x authentication

question

Which step is required to configure a NAP on a Remote Desktop(RD) Gateway server?

answer

Edit the properties for the server and select Request clients to send a statement of health.

question

In a NAP system, what is the function of the System Health Validator?

answer

Compare the statement of health submitted by the client to the health requirements

question

How does IPsec NAP enforcement differ from other NAP enforcement methods?

answer

Clients must be issued a valid certificate before a connection to the private network is allowed.

question

Which of the following is NOT an advantage when using an internal auditor to examine security systems and relevant documentation?

answer

Findings in which the audit and subsequent summations are viewed as objective.

question

Properly configured passive IDS and System Audit Logs are an integral part of a comprehensive security plan. What step must be taken to ensure that the information is useful in maintaining a secure environment?

answer

Periodic reviews must be conducted to detect malicious activity or policy violations

question

Which of the following describes Privilege Auditing?

answer

Rights and privileges of users and groups are checked to guard against creeping privileges.

question

Which of the following terms identifies the process of reviewing log files for suspicious activity and threshold compliance?

answer

auditing

question

What is the purpose of audit trails?

answer

Detect security-violation events

question

Which of the following is a collection of recorded data that may include details about logons, object access and other activities deemed important by your security policy that is often used to detect unwanted and unauthorized user activity?

answer

audit trail

question

A recreation of historical events is made possible through?

answer

audit trails

question

The process of walking around an office building with an 802.11 signal detector is known as what?

answer

War Driving

question

Your company security policy states that wireless networks are not to be used because of the potential security risk they present to your network. One day you find that an employee has connected a wireless access point to the network in his office. What type of security risk is this?

answer

Rogue Access Point

question

Which of the following sends unsolicited business cards and messages to a Bluetooth device?

answer

Bluejacking

question

Which of the following best describes Bluesnarfing?

answer

Unauthorized viewing calendar, emails, and messages on a mobile device

question

Which of the following describes marks that attackers place outside a building to identify an open wireless network?

answer

War chalking

question

Network packet sniffing is often used to gain the information needed to conduct more specific and detailed attacks. Which of the following is the best defense against packet sniffing?

answer

Encryption

question

A user calls to report that she is experiencing intermittent problems while accessing the wireless network from her laptop computer. While she normally works from her office, today she is trying to access the wireless network from a conference room which is across the hall and next to the elevator. What is the most likely cause of her connectivity problem?

answer

Interference is affecting the wireless signal.

question

You are troubleshooting a wireless connectivity issue in a small office. You determine that the 2.4 GHz cordless phones used in the office are interfering with the wireless network transmissions. If the cordless phones are causing the interference, which of the following wireless standards could the network be using?(Select two)

answer

Bluetooth AND 802.11b

question

Which of the following best describes an evil twin?

answer

An access point that is configured to mimic a valid access point to obtain logon credentials and other sensitive information

question

Your organization uses an 802.11b wireless network. Recently, other tenants installed the following equipment in your building:....since this equipment was installed, your wireless network has been experiencing significant interference. Which system is to blame?

answer

The wireless TV system

question

Which of the following common network monitoring or diagnostic activity can be used as a passive malicious attack?

answer

Sniffing

question

Which of the following is the best protection to prevent attacks on mobile phones through the Bluetooth protocol?

answer

Disable Bluetooth on the phone

question

Which IPsec subprotocol provides data encryptions?

answer

ESP

question

PPTP is quickly becoming obsolete because of what VPN protocol?

answer

L2TP

question

You have a group of salesmen who would like to access your private network through the Internet while they are traveling. You want to control access to the private network through a single server. Which solution should you implement?

answer

VPN concentrator

question

Which VPN protocol typically employs IPsec as its data encryption mechanism?

answer

L2TP

question

Which of the following is NOT a VPN tunnel protocol?

answer

RADIUS

question

A VPN is used primary for what purpose?

answer

Support secured communications over an untrusted network.

question

Which is the best countermeasure for someone attempting to view your network traffic?

answer

VPN

question

What is the primary use of tunneling?

answer

Supporting private traffic through a public communication medium

question

Which statement best describes IPsec when used in tunnel mode?

answer

The entire data packet, including headers is encapsulated.

question

In addition to Authentication Header (AH), IPsec is comprised of what other service?

answer

Encapsulating Security Payload (ESP)

question

A salesperson in your organization spends most of her time traveling between customer sites. After a customer visit, she must complete various managerial tasks, such as updating your organization's order database. Because she rarely comes back to your home office, she usually accesses the network from her notebook computer using WiFi access provided by hotels, restaurants, and airports. Many of these locations provide unencrypted public WiFi access, and you are concerned that sensitive data could be exposed. To remedy this situation, you decide to configure her notebook to use a VPN when accessing the home network over an open wireless connection. Which key steps should you take when implementing this configuration? (Select two.

answer

Configure the VPN connection to use IPsec. Configure the browser to send HTTPS requests through the VPN connection.

question

You have a small network at home that is connected to the internet. On your home network you have a server with the IP address of 192.168.55.199/16. You have a single public address that is shared by all hosts on your private network. You want to configure the server as a web server and allow Internet hosts to contact the server to browse a persona Web site. What should you use to allow access?

answer

Static NAT

question

Which of the following in NOT one of the ranges of IP addresses define in RFC 1918 that are commonly used behind a NAT server?

answer

169.254.0.0-169.254.255.255

question

You are the network administrator for a small company that implements NAT to access the Internet. However, you recently acquired 5 servers that must be accessible from outside your network. Your ISP has provided you with 5 additional registered IP addresses to support these new servers but you don't want the public to access these servers directly. You want to place these servers behind your firewall on the inside network yet still allow them to be accessible to the public from the outside. Which method of NAT translation should you implement for these 5 servers?

answer

Static

question

Which of the following network devices or services prevent the use of IPsec in most cases?

answer

NAT

question

YOU want to connect your small company network to the Internet. Your ISP provides you with a single IP address that is to be shared between all hosts on your private network. You do not want external hosts to be able to initiate connection to internal hosts. What type of NAT should you implement?

answer

Dynamic

question

Which of the following is NOT a benefit of NAT?

answer

Improving the throughput rate of traffic

question

Which of the following is the best device to deploy to protect your private network from a public untrusted network?

answer

Firewall

question

Which of the following are true of a circuit proxy filter firewall?(Select two)

answer

Operates at the Session Layer AND Verifies sequencing of session packets

question

You have just installed a packet-filtering firewall on your network. What options will you be able to set on your firewall? Select all that apply.

answer

Source address of a packet, Destination address of a packet, AND Port Number

question

When designing a firewall, what is the recommended approach for opening and closing ports?

answer

Close all ports; open only ports required by applications inside the DMZ

question

You have a router that is configured as a firewall. The router is a layer 3 device only. Which of the following does the router use for identifying allowed or denied packets?

answer

IP address

question

Which of the following are characteristics of a packet filtering firewall?(Select two)

answer

Stateless AND Filters IP address and port

question

You have been given a laptop to use for work. You connect the laptop to your company network, use it from home, and use it while traveling. You want to protect the laptop from Internet-bases attacks. What solution should you use?

answer

Host based firewall

question

Which of the following functions are performed by proxies?(Select two)

answer

Block employees from accessing certain Web sites AND Cache web pages

question

You want to install a firewall that can reject packets that are not part of an active session. Which type of firewall should you use?

answer

Circuit-level

question

You connect your computer to a wireless network available at the local library. You find that you can access all web sites you want on the Internet except two. What might be causing the problem?

answer

A proxy server is blocking access to the web sites

question

Which of the following does a router acting as a firewall use to control which packets are forwarded or dropped?

answer

ACL

question

Which of the following are characteristics of a circuit-level gateway?(Select two)

answer

Filters based on sessions AND Stateful

question

Which of the following is a firewall function?

answer

Packet filtering

question

Which of the following firewall types can be a proxy between servers and clients?(Select two)

answer

Application layer firewall AND Circuit proxy filtering firewall

question

You provide Internet access for a local school. You want to control Internet access based on user, and prevent access to specific URLs. Which type of firewall should you install?

answer

Application level

question

Which of the following terms describes a network device that is exposed to attacks and has been hardened against those attacks?

answer

Bastion or sacrificial host

question

Your company has a connection tot he Internet that allows users to access the Internet. You also have a Web server and an e-mail server that you want to make available to Internet users. You want to create a DMZ for these two servers. Which type of device should you use to create the DMZ?

answer

Network based firewall

question

Of the following security zones, which one can serve as a buffer network between a private secured network and the untrusted Internet?

answer

DMZ

question

In which of the following situations would you most likely implement a demilitarized zone(DMZ)?

answer

You want to protect a public Web server from attack

question

You have a company network that is connected to the Internet. You want all users to have Internet access, but need to protect your private network and users. You also need to make a Web server publicly available to Internet users. Which solution should you use?

answer

Use firewalls to create a DMZ. Place the Web server inside the DMZ, and the private network behind the DMZ.

question

Which of the following is likely to be located in a DMZ?

answer

FTP Server

question

Members of the sales team use laptops to connect to the company network. While traveling, they connect their laptops to the Internet through airport and hotel networks. You are concerned that these computers will pick up viruses that could spread to your private network. You would like to implement a solution that prevents the laptops from connecting to your network unless anti-virus software and the latest operating system patches have been installed. Which solution should you use?

answer

NAC

question

You have used firewalls to create a demilitarized zone. You have a Web server that needs to be accessible to Internet users. The Web server must communicate with a database server for retrieving product, customer and order information. How should you place devices on the network to best protect the servers?(Select two.)

answer

Put the database server on the Private network AND put the Web server inside the DMZ

question

Which type of active scan turns off all flags in a TCP header?

answer

Null

question

Which of the following is the main difference between a DoS attack and a DDoS attack?

answer

The DDoS attack uses zombie computers.

question

Which of the following could easily result in a denial of service attack if the victimized system had too little free storage capacity?

answer

Spam

question

You need to enumerate the devices on your network and display the configuration details of the network. Which of the following utilities should you use?

answer

nmap

question

You suspect that an Xmas tree attack is occurring on a system. Which of the following could result if you do not stop the attack? (Select two.)

answer

The threat agent will obtain information about open ports on the system. The system will unavailable to respond to legitimate requests.

question

Which of the following Denial of Service (DoS) attacks uses ICMP packets and will only be successful if the victim has less bandwidth than the attacker?

answer

Ping Flood

question

Which of the following Denial of Service (DoS) attacks does the victim's system rebuild invalid UDP packets, causing the system to crash or reboot?

answer

Teardrop

question

An attacker is conducting passive reconnaissance on a targeted company. Which of the following could he be doing? (#2)

answer

Browsing the organization's website.

question

What are the most common network traffic packets captured and used in a replay attack?

answer

Authentication

question

A router on the border of your network detects a packet with a source address that is from an internal client but the packet was received in the Internet-facing interface. This is an example of what form of attack? (#1)

answer

Spoofing

question

Which of the following is a form of denial of service attack that uses spoofed ICMP packets to flood a victim with echo requests using a bounce/amplification network?

answer

Smurf

question

Which of the following best describes the ping of death?

answer

An ICMP packet that is larger than 65,536 bytes

question

A SYN attack or a SYN flood exploits or alters which element of the TCP three-way handshake?

answer

ACK

question

A SYN packet is received by a server. The SYN packet has the exact same address for both the sender and receiver addresses, which is the address of the server. This is an example of what type of attack?

answer

Land Attack

question

When a SYN flood is altered so that the SYN packets are spoofed in order to define the source and destination address as a single victim IP address, the attack is now called what?

answer

Land attack

question

Which of the following is a form of denial of service attack that subverts the TCP threeway handshake process by attempting to open numerous sessions on a victim server but intentionally failing to complete the session by not sending the final required packet?

answer

SYN flood

question

A Smurf attack requires all but which of the following elements to be implemented?

answer

Padded cell

question

You suspect that an Xmas tree attack is occurring on a system. Which of the following could result if you do not stop the attack?(Select two)

answer

The system will be unavailable to respond to legitimate requests AND the threat agent will obtain information about open ports on the system

question

An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind of attacks?

answer

DDoS

question

Which of the following best dedscribes a man-in-the-middle attack?

answer

A false server intercepts communications from a client by impersonating the intended server

question

Which of the following attacks tried to associate an incorrect MAC address with a known IP address?

answer

ARP Poisoning

question

How would you prevent your browser from running JavaScript commands that are potentially harmful?

answer

Client-side scripts

question

What is the main difference between a DoS attack and a DDoS attack?

answer

DDoS uses zombie computers DDoS - distributed DoS

question

What could easily result in a denial of service attack if the victimized system had too little free storage capacity?

answer

Spam

question

Fraggle

answer

DoS attack - similar to Smurf but uses UDP packets directed to port 7 (echo) and port 19 (chargen)

question

Smurf

answer

DoS attack - spoofs the source address in ICMP packets and sends the packets to an amplification network (bounce site). The site responds to the victim site w/thousands of messages.

question

What is the best protection measure during a Smurf attack?

answer

Communicate with your upstream provider

question

Xmas tree attack

answer

Conducts recon by scanning for open ports. Also conducts a DoS attack if sent in large amounts

question

Pharming

answer

legitimate traffic is redirected to incorrect sites for phishing purposes - usually used with DNS pharming

question

Domain name kiting

answer

spammers exploit domain registration by taking advantage of the five-day grace period w/out paying for the registration

question

What is the most common attack waged against Web servers?

answer

buffer overflow

question

Data diddling

answer

Changing or corrupting of data

question

TOC/TOU

answer

logon session replay attack

question

What is the goal of a TCP/IP hijacking attack?

answer

Executing commands or accessing resources on a system the attacker does not otherwise have authorization to access

question

What is the best way to protect log files (accessed and/or deleted)?

answer

Use syslog to send entries to another server

question

PTZ

answer

Pan Tilt Zoom camera

question

C-Mount

answer

Camera w/interchangable lenses

question

bullet

answer

camera round in shape

question

dome

answer

protected by glass/plastic dome

question

resolution

answer

number of lines in an image higher = sharper image

question

focal length

answer

magnification of a lens higher = greater distance

question

lux

answer

sensitivity to light lower = less light needed for clear image

question

What type of scan does not complete the full three-way handshake of TCP, but listens for either SYN/ACK or RST/ACK packets?

answer

TCP SYN scan

question

You want to be able to identify the services running on a set of servers on your network. What tool would best give you the info you need?

answer

Vulnerability scanner

question

Wireshark

answer

protocol analyzer (sniffer) that allows a user to copy and few frame contents - can also view source/destination info

question

OVAL

answer

Open Vulnerablity and Assessment Language - international standard for testing, analyzing, and reporting

question

Retina

answer

vulnerability scanner

question

Nessus

answer

vulnerability scanner

question

MBSA

answer

Microsoft Baseline Security Analyzer (MBSA) vulnerability scanner Checks for these weaknesses: Open ports Active IP addresses Running applications/services Missing critical patches Active default user accounts Default, blank, or common passwords

question

You need to enumerate the devices on your network and display the config details. What utility should you use?

answer

nmap

question

samspade

answer

identify the source of spam emails

question

active fingerprinting

answer

form of system enumeration that is designed to gain as much info about a specific computer as possible

question

passive fingerprinting

answer

goal is the same as active fingerprinting but does not utilize active probes of systems.

question

Granular password policies

answer

Use to force different password policy requirements for different users

question

Password and account lockout policies

answer

enforced in GPO linked to the domain - not individual OUs

question

Steps for granular passwords

answer

1) create the password settings object w/necessary settings 2) edit the msDS-PSOAppliesTo property in the PSO to identify users or global security groups 3) If policy was applied to a group, add members to group

question

Linux command to display listening/non-listening sockets

answer

netstat -a

question

How would you identify rogue WAPs?

answer

1) conduct a site survey 2) check the MAC addresses of devices connected to your wire switch

question

Spark Jamming

answer

Repeatedly blasts receiving equipment with high-intensity, short-duration RF bursts at a rapid pace

question

Random Noise Jamming

answer

Produces RF signals using random amplitudes and frequencies

question

Random Pulse Jamming

answer

uses radio pulses of random amplitude and frequency

question

NFC relay attack

answer

an attacker captures NFC data in transit and then later uses that info to masquerade as the original device

question

How would you reduce the risk of a WAP with Wi-Fi Protected Setup using a PIN?

answer

Disable WPS in the access point's configuration

question

Manageable Network Plan (1-4)

answer

1) Prepare to document - establish the process to be used to document your network. Include timestamped documents 2) Map your network - list used protocols, list devices 3) Protect your network - identify choke points, segregate/isolate networks, physically secure high-value systems, identify users 4) Reach your network - ensure remote access connections are secure, remove insecure protocols

question

Manageable Network Plan (5-8)

answer

5) Control Your Network - least privilege 6) Manage Your Network 1 - update management process 7) Manage Your Network 2 - establish baselines 8) Document Your Network

question

What is not a protection against session hijacking?

answer

DHCP reservations

question

What can a packet sniffer do?

answer

1) ID types of network traffic 2) view packet exchange between devices 3) analyze packets 4) view packet contents

question

Fingerprinting

answer

identifies an OS or network service based on response to ICMP messages

question

Which type of active scan turns off all flags in a TCP header?

answer

Null

question

Which of the following could easily result in a denial of service attack if the victimized system had too little free storage capacity?

answer

Spam

question

Which of the following Denial of Service (DoS) attacks uses ICMP packets and will only be successful if the victim has less bandwidth than the attacker?

answer

Ping Flood

question

Which of the following Denial of Service (DoS) attacks does the victim's system rebuild invalid UDP packets, causing the system to crash or reboot?

answer

Teardrop

question

An attacker is conducting passive reconnaissance on a targeted company. Which of the following could he be doing? (#2)

answer

Browsing the organization's website.

question

What are the most common network traffic packets captured and used in a replay attack?

answer

Authentication

question

A router on the border of your network detects a packet with a source address that is from an internal client but the packet was received in the Internet-facing interface. This is an example of what form of attack? (#1)

answer

Spoofing

question

Which of the following is a form of denial of service attack that uses spoofed ICMP packets to flood a victim with echo requests using a bounce/amplification network?

answer

Smurf

question

Which of the following best describes the ping of death?

answer

An ICMP packet that is larger than 65,536 bytes

question

A SYN attack or a SYN flood exploits or alters which element of the TCP three-way handshake?

answer

ACK

question

A SYN packet is received by a server. The SYN packet has the exact same address for both the sender and receiver addresses, which is the address of the server. This is an example of what type of attack?

answer

Land Attack

question

You suspect that an Xmas tree attack is occurring on a system. Which of the following could result if you do not stop the attack?(Select two)

answer

The system will be unavailable to respond to legitimate requests AND the threat agent will obtain information about open ports on the system

question

An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind of attacks?

answer

DDoS

question

Which of the following best dedscribes a man-in-the-middle attack?

answer

A false server intercepts communications from a client by impersonating the intended server

question

Which of the following attacks tried to associate an incorrect MAC address with a known IP address?

answer

ARP Poisoning

question

Which of the following will enter random data to the inputs of an application?

answer

Fuzzing

question

Which of the following is specifically meant to ensure that a program operates on clean, correct and useful data?

answer

Input validation

question

During the application development cycle, an application tester creates multiple virtual machines on a hypervisor, each with a different version and edition of Windows installed. She then installs the latest build of the application being developed on each virtual machine and evaluates them for security vulnerabilities. Which assessment technique was used in this scenario?

answer

Configuration testing

question

During the application development cycle, a developer asks several of his peers to assess the portion of the application he was assigned to write for security vulnerabilities. Which assessment technique was used in this scenario?

answer

Code review

question

You've been assigned to evaluate NoSQL databases as a part of a big data analysis initiative in your organization. You've downloaded an Open Source NoSQL database from the Internet and installed it on a test system in an isolated lab environment. Which of the following are likely to be true about this test system? (Select two.)

answer

The database admin user has no password assigned. Data will be stored in the database in unencrypted format.

question

You've been assigned to evaluate NoSQL databases as a part of a big data analysis initiative in your organization. You've downloaded an Open Source NoSQL database from the Internet and installed it on a test system in an isolated lab environment. What should you do to harden this database before implementing it in a production environment? (Select two.)

answer

Implement an Application layer protocol to encrypt data prior to saving it in the database. Disable anonymous access.

question

Flexibility

answer

Performing a physical-to-virtual migration (P2V).

question

Testing

answer

Verifying that security controls are working as designed.

question

Server consolidation

answer

Isolating a virtual machine from the physical network

question

Sandboxing

answer

Moving virtual machines between hypervisor hosts.

question

You are implementing a iSCSI SAN that will be used by the file servers in your organization. You are concerned about security, so your design specifies that iSCSI initiators and targets must authenticate with each other before connection over the SAN will be allowed. In addition, you want data being transferred over the SAN to be encrypted. Which of the following are true in the scenario? (select two) - The Encapsulating Security Payload (ESP) protocol can be used to encrypt data in transit. - The Challenge-Handshake Authentication Protocol (CHAP) and Reverse CHAP can be used to mutually authenticate SAN hosts. - The Fibre Channel Authentication Protocol (FCAP) can be used to mutually authenticate SAN hosts. - The Internet Protocol Security (IPSec) protocol can be used to encrypt the data in transit. - The Diffie-Hellman Challenge Handshake Authentication Protocol (DC-CHAP) can be used to mutually authenticate SAN hosts.

answer

- The Challenge-Handshake Authentication Protocol (CHAP) and Reverse CHAP can be used to mutually authenticate SAN hosts. - The Internet Protocol Security (IPSec) protocol can be used to encrypt data in transit.

question

Your organization recently purchased 30 tablet devices for your traveling sales force. These devices have Windows RT preinstalled on them. To increase the security of these devices, you want to apply a default set of security-related configuration settings. What is the best approach to take to accomplish this? (select two) -Link the Group Policy Object to the container where the tablets' computer objects reside. - Manually configure security settings using the Local Group Policy Editor. - Configure security settings in a Group Policy Object. - Enroll the devices in a mobile device management system. - Configure and apply security policy settings in a mobile device management system. - Join the tablets to your domain.

answer

- Enroll the devices in a mobile device management system. - Configure and apply security policy settings in a mobile device management system.

question

You are designing a Fibre Channel SAN Implementation that will be used to file servers in your organization. Multiple volumes will be configured on the SAN, each used by different departments in your organization. It's very important that only the appropriate server be able to connect to a given volume on the SAN. For example, the Sales and Marketing server must not be allowed to connect to the SAN volume used by Human Resources. To enable this, you decided to use LUN Masking. Which of the following is true of this scenario? - LUN Masking provides weak security as it only obscures volumes on the disk. - LUN masking is enforced by the SAN switch using ACLs. - Encryption protocols such as ESP are not compatible with LUN masking. - Authentication protocols such as DH-CHAP are not compatible with LUN masking.

answer

- LUN Masking provides weak security as it only obscures volumes on the disk.

question

You manage the Information systems for a large manufacturing firm. Supervisory control and data acquisition (SCADA) devices are used on the manufacturing floor to manage your organization's automated factory equipment. The SCADA devices use embedded smart technology, allowing them to be managed using a mobile device app over an Internet connection. You are concerned about the security of these devices. What can you do to increase their security posture? -Enroll each device in a mobile device management system. - Install a network monitoring agent on each device. - Verify that your network's existing security infrastructure is working properly. - Install anti-malware software on each device. - Install the latest firmware updates from the device manufacturer.

answer

- Verify that your network's existing security infrastructure is working properly. - Install the latest firmware updates from the device manufacturer.

question

You have recently experienced a security incident with one of your servers. After some research, you determine that the hotfix #568994 that has recently been released would have protected the server. Which of the following recommendations should you follow when applying the hotfix? - Test the hotfix, then apply it to the server that had the problem. - Test the hotfix, then apply it to all servers. - Apply the hotfix immediately to the server; apply the hotfix to other devices only as the security threat manifests itself. - Apply the hotfix immediately to all servers.

answer

- Test the hotfix, then apply it to all servers.

question

You've been assigned to evaluate NoSQL databases as a part of a big data analysis initiative in your organization. You've downloaded an Open Source NoSQL database from the Internet and installed it on a test system in an isolated lab environment. Which of the following are likely to be true about this test system? - Data will be stored in the database in unencrypted format. - The database is more susceptible to SQL injection attacks than traditional SQL databases. - The database admin user has no password assigned. - The default admin user password is admin. - Data will be stored in the database in encrypted format by default.

answer

- Data will be stored in the database in unencrypted format. - The database admin user has no password assigned.

question

You have a development machine that contains sensitive Information relative to your business. You are concerned that spyware and malware might get installed while browsing websites and could compromise your system or pose a confidentially risk. Which of the following would best protect your system? - Run the browser within a virtual environment. - Run the browser in protected mode. - Change the security level for the Internet zone to High. - Configure the browser to block all cookies and pop-ups.

answer

- Run the browser within a virtual environment.

question

Which of the following is specifically meant to ensure that a program operates on clean, correct and useful data? - Error and exception handling - Application hardening - Input validation - Process spawning

answer

- Input validation

question

What is the main function of a TPM hardware chip? - Generate and store cryptographic keys - Perform bulk encryption in a hardware processor - Provide authentication credentials on a hardware device - Control access to removable media

answer

- Generate and store cryptographic keys

question

Your organization has recently purchased 20tablet devices for the Human Resources department to use for training sessions. You are concerned that these device could represent a security risk to your network and want to strengthen their security profile as much as possible. Which actions should you take? (select two) - Install the devices in your organization's directory services tree. - Join the devices to your organization's domain. - Configure a Group Policy object (GPO) contain mobile device-specific security settings. - Implement storage segmentation - Enable device encryption.

answer

- Implement storage segmentation - Enable device encryption

question

You are implementing a Fibre Channel SAN that will be used by the database servers in your organization. You are concered about security, so your design specifies that SAN hosts must authenicate with each other before a connection over the SAN will be allowed. In addition, you want data being transferred over the SAN to be encrypted. Which of the following are true in this scenario? - The Internet Protocol Security (IPSec) protocol can be used to encrypt data in transit. - The Challenge-Handshake Authentication Protocol (CHAP) and reverse CHAP can be used to mutually authenticate SAN hosts. - Kerberos can be used to mutually authenticate SAN hosts. - The Encapsulating Security Payload (ESP) protocol can be used to encrypt data in transit. - The Diffie-Hellman Challenge Handshake Authentication Protocol (DH-CHAP) can be used to mutually authenticate SAN hosts.

answer

- The Encapsulating Security Payload (ESP) protocol can be used to encrypt data in transit. - The Diffie-Hellman Challenge Handshake Authentication Protocol (DH-CHAP) can be used to mutually authenticate SAN hosts.

question

You want to protect data on hard drives for users with laptops. You want the drive to be encrypted, and you want to prevent the laptops from booting unless a special USB drive is inserted. In addition, the system should not boot if a change is detected in any of the boot files. What should you do? -Implement BitLocker without a TPM -Implement BitLocker with a TPM -Have each user encrypt the entire volume with EFS - Have each user encrpyt user files with EFS

answer

-Implement BitLocker with a TPM

question

Preventing Malware infections

answer

Implement a network access control (NAC) solution

question

Supporting mobile device users

answer

Specify who users can call for help with mobile device apps in your acceptable use policy

question

Preventing loss of control of sensitive data

answer

Enroll devices in a mobile device management system.

question

Preventing malicious insider attacks

answer

Specify where and when mobile devices can be possessed in your acceptable use policy.

question

Applying the latest anti-malware definitions

answer

Implement a network access control (NAC) solution

question

You manage the information systems for a large co-location data center. Networked environmental controls are used to manage the temperature within the data center. These controls use embedded smart technology allowing them to be managed using a mobile device app over an Internet connection. You are concerned about the security of these devices. What can you do to increase their security posture? -Rely on the device manufacture to maintain device security with automated firmware updates. - Verify that your network's existing security infrastructure is working properly. - Install anti-malware software on each device. - Enroll each device in a mobile device management system.

answer

- Verify that your network's existing security infrastructure is working properly.

question

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? -Group Policy -WSUS -Security Templates -Security Configuration and Analysis

answer

-Group Policy -WSUS Windows Software Update Services (WSUS) is a patch management tool that allows clients on a network to download software updates from a WSUS server internal to their organization.

question

You want to prevent your browser from running JavaScript commands that are potentially harmful. Which of the following would you restrict to accomplish this?

answer

client-side scripts

question

A programmer that fails to check the length of input before processing leaves his code vulnerable to what form of common attack?

answer

buffer overflow

question

Which of the following is an attack that injects malicious scripts into Web pages to redirect users to fake websites or gather personal information?

answer

xss

question

when you browse to a website, a pop-up window tells you that your computer has been infected with a virus. You click on the window to see what the problem is.

answer

drive-by download

question

Having poor software development practices and failing to program input validation checks during development of custom software can result in a system vulnerable to which type of attack?

answer

buffer overflow

question

Which type of attack is the act of exploiting a software program's free acceptance of input in order to execute arbitrary code on a target?

answer

buffer overflow

question

an attacker inserts SQL database commands into a data input field of an order form used by a web-based application

answer

implementing client-side validation

question

while using a web-based order form, an attacker enters an unusually large value in the quantity field. the value she entered is so large that it exceeds the maximum value supported by the variable type used to store the quantity in the web application.

answer

integer overflow

question

flash explotation

answer

lso exploit

question

Use of which of the ff. is a possible violation of privacy?

answer

cookies

question

Which of the ff. is not true regarding cookies?

answer

they operate within a security sandbox

question

Which of the ff. is a text file provided by a Web site to client that is stored on a user's hard drive in order to track and record information about the user?

answer

cookie

question

You want to allow e-commerce Web site that you visit to keep track of your browsing history for shopping carts and other information, but want to prevent that information from being tracked by sites linked to the sites you explicitly visit. How should you configure the browser settings?

answer

Allow first party cookies but block third-party cookies

question

To help prevent browser attacks, users of public computers should do which of the ff.?

answer

clear the browser cache

question

You manage several Windows systems. Deskstop users access an in-house application that is hosted on you intranet Web server. When a user clicks a specific option in the application, they receive an error message that the popup was blocked. You need to configure the security settings so that users can see the pop-up without compromising overall security. What should you do?

answer

Add the URL of the Web site to the Local Intranet zone.

question

you manage several windows systems. all computers are members of domain. you use an internal website that uses integrated windows authentication. you attempt to connect the website and are promted for authentication

answer

add the internal website to the local intranet zone

question

You have been getting a lot of phishing e-mails sent from the domain Kenyan.msn.pl. Links within these e-mails open new browser windows at youneedit.com.pl You want to make sure that these e-mails never reach your Inbox, but the e-mails from other senders are not affected. What should you do?

answer

Add Kenyan.msn.pl to the e-mail blacklist.

question

Which type of malicious activity can be described as numerous unwanted and unsolicited e-mail messages sent to a wide range of victims?

answer

spamming

question

an attacker sends an unwanted and unsolicited email message to multiple recipients with an attachment that contains malware

answer

spam

question

you want to use a protocol for encrypting e-mails that uses a PKI with x.509 certificates. which method should you choose

answer

S/MIME

question

What is the most common means of virus distribution

answer

e-mail

question

you install a new linux distribution on a server in your network.

answer

open SMTP relay

question

users in your organization receive email messages informing them that suspicious activity has be detected on their bank account

answer

phishing

question

What common design feature among Instant Messaging clients make them more insecure than other means of communicating over the Internet?

answer

peer-to-peer networking

question

What type of attack is most likely to succeed against communications between Instant Messaging clients?

answer

SNIFFING

question

Instant Messaging does not provide which of the ff.?

answer

privacy

question

Which of the ff. are disadvantages to server virtualization?

answer

a compromise of the host system might affect multiple servers;

question

You have a development machine contains sensitive information relative to your business. You are concerned that spyware and malware installed while browsing websites could compromise your system or pose a confidentiality risk. Which of the ff. would best protect your system?

answer

Run the browser within a virtual environment

question

Which of the ff. is an advantage of virtual browser?

answer

Protects the operating system from malicious downloads

question

Which of the ff. will enter random data to the inputs of an application?

answer

fuzzing

question

Which of the ff. is specifically meant to ensure that a program operates on clean, correct and useful data?

answer

input validation

question

during the application development cycle, an application tester creates multiple virtual machines on a hypervisor, each with a different version

answer

configuration testing

question

during the application dev cycle, a developer asks serveral of his peers to asses the portion of the application he was assigned to write

answer

code review

question

You are implementing security at a local high school that is concerned with students accessing inappropriate material on the Internet from the library's computers. The students will use the computers to search the Internet for research paper content. The school budget is limited. Which content filtering option would you choose?

answer

Restrict content based on content categories

question

Which of the following is a privately controlled portion of a network that is accessible to some specific external entities?

answer

Extranet

question

You are the office manager of a small financial credit business. Your company handles personal, financial information for clients seeking small loans over the Internet. You are aware of your obligation to secure clients records, but budget is an issue. Which item would provide the best security for this situation?

answer

All-in-one security appliance

question

You have been using SNMP on your network for monitoring and management. You are concerned about the security of this configuration. What should you do?

answer

Implement version 3 of SNMP

question

You want to implement a protocol on your network that allows computers to find the IP address of a host from a logical name. What protocol should you implement?

answer

DNS

question

Which of the following protocols allows hosts to exchange messages to indicate problems with packet delivery?

answer

ICMP

question

You are configuring a network firewall to allow SMTP outbound email traffic, and POP3 inbound email traffic. Which of the following TCP/IP ports should you open on the firewall? (Select Two)

answer

25, 110

question

Which port number is used by SNMP?

answer

161

question

Which of the following ports does FTP use to establish sessions and manage traffic?

answer

20, 21

question

Using the Netstat command you notice that a remote system has made a connection to your Windows server 2003 system using TCP/IP port 21. Which of the following actions is the remote system most likely to be performing ?

answer

Downloading a file

question

To increase security on your company's internal network, the administrator has disabled as many ports as possible. Now, however, though you can browse the Internet, you are unable to perform some secure credit card transactions.

answer

443

question

Which of the following network services or protocols uses TCP/IP port 22?

answer

SSH

question

Matching ports to associated services

answer

SNMP = 161 TCP and UDP SSH = 22 TCP and UDP TFTP = 69 UDP SCP = 22 TCp and UDP Telnet = 23 TCP HTTPS = 443 TCP and UDP HTTP = 80 TCP FTP = 20 TCP SMTP = 25 TCP POP3 = 110 TCP

question

Which of the following lists accurately describes TCP and UDP?

answer

TCP: connection-oriented, reliable, sequenced, high overhead UDP: connectionless, unreliable, unsequenced, low overhead

question

You are an application developer creating applications for a wide variety of customers. In which two of the following situations would you select a connectionless protocol?(Select 2)

answer

A gaming company wants to create a networded version fo its latest game AND A company connects two networks through an expensive WAN link. The communication media is reliable, but very expensive. They want to minimize connection times.

question

You want to maintain tight security on your internal network so you restrict access to the network through certain port numbers. If you want to allow users to continue to use DNS, which port should you enable?

answer

53

question

Your company's network provides HTTP, HTTPS, and SSH access to remote employees. Which ports must be opened on the firewall to allow this traffic to pass?

answer

80, 443, 22

question

Your network recently experienced a series of attacks at the Telnet and FTP services. You have rewritten the security policy to abolish the unsecured services, and now you must secure the network using your firewall and routers. Which ports must be closed to prevent traffic directed to these two services?

answer

23, 21

question

Which of the following best describes the purpose of using subnets?

answer

Subnets divide an IP address into multiple addresses.

question

Which of the following is NOT a reason to use subnets of a network?

answer

Combine different media type on the same subnet.

question

Which of the following IPv6 addresses is the equivalent of IPv4 loop-back address of 127.0.0.1?

answer

::1

question

Which of the following describes an IPv6 address? (select two)

answer

128-bit address; eight hexadecimal quartets

question

Which of the following correctly describe the most common format for expressing IPv6 addresses? (select two)

answer

Hexadecimal numbers; 32 nubmers, grouped using colons

question

Which of the following are valid IPv6 addresses? (select two)

answer

6384:1319:7700:7631:446A:5511:8940:2552 AND 141:0:0:0:15:0:0:1

question

Which of the following is a valid IPv6 address?

answer

FEC0::AB;9007

question

Routers operate at which level of the OSI model?

answer

Network layer OR layer 3

question

You've decided to use a subnet mask of 255.255.192.0 on the 172.17.0.0 network to create four separate subnets. Which network IDs will be assigned to these subnets in this configuration? (selec two)

answer

172.17/128.0 AND 172.17.0.0

question

Which of the following are improvements to SNMP that are included within SNMP version 3?

answer

Authentication for agents and managers. Encryption of SNMP messages.

question

Which protocol does HTTPS use to offer greater security for Web transactions?

answer

SSL.

question

Talnet is inherently insecure because its communication is in plain text and is easily interpreted. Which of the following is an acceptable alternative to Talnet?

answer

SSH.

question

Which of the protocols is used for securely browsing a Web site?

answer

HTTPS

question

You have been using SNMP on your network for monitoring and management. You are concerned about the security of this configuration. What should you do?

answer

Implement version 3 of SNMP.

question

Which of the following protocols can be used to securely manage a network device from a remote connection?

answer

SSH.

question

Which of the following protocols are often added to other protocols to provide secure transmission of data?

answer

TLS. SSL.

question

You have just downloaded a file. You create a hash of the file and compare it to the hash posted on the Web site. The two hashes match. What do you know about the file

answer

Your copy is the same as the copy posted on the website.

question

Which of the following is the strongest hashing algorithm

answer

SHA-1

question

Which of the following best describes high amplifications when applied to hashing algorithms

answer

A small change in the message results in a big change in the hash value.

question

Which of the following is the weakest hashing algorithm

answer

MD-5

question

When two different messages produce the same hash value, what has occurred

answer

Collision

question

Hashing algorithms are used to perform what activity

answer

Create a message digest

question

Your company system is a participant in an asymmetric cryptography system. You've crafted a message to be sent another user. Before transmission, you hash the message, then encrypt the hashing using your private key. You then attach this encrypted hash to your message as a digital signature before sending it to the other user. In this example, what protection does the hashing activity provide

answer

Integrity

question

Which of the following is used to verify that a downloaded file has not been altered

answer

Hash

question

By definition, which security concept uses the ability to prove that a sender sent an encrypted message

answer

Non-repudiation

question

You create a new document and save it to a hard drive on a file server on your company's network. Then, you employ an encryption tool to encrypt the file using AES. This activity is an example of accomplishing what security goal

answer

Confidentiality

question

By definition, which security concept ensures that only authorized parties can access data

answer

Confidentiality

question

What is the cryptography mechanism which hides secret communications within various forms of data

answer

Steganography

question

Which of the following encryption methods combines a random value with the plaintext to produce the cipher text

answer

One-time pad

question

By definition, which security concept uses the ability to prove that a sender sent an encrypted message?

answer

Non-repudiation

question

Which of the following is not a valid example of steganography

answer

Encrypting a data file with an encryption key

question

When a cryptographic system is used to protect confidentiality of data, what is actually protected

answer

Unauthorized users are prevented from viewing or accessing the resource.

question

What form of cryptography is best suited for bulk encryption because it is so fast

answer

Symmetric key cryptography

question

Which of the following is not true concerning symmetric key cryptography

answer

Key management is easy when implemented on a large scale.

question

Which of the following algorithms are used in symmetric encryption (Select three.)

answer

Blowfish, AES, 3DES

question

What type of key or keys are used in symmetric cryptography

answer

A shared private key

question

Which of the following is the weakest symmetric encryption method

answer

DES

question

You want to encrypt data on a removable storage device. Which encryption method would you choose to use the strongest method possible

answer

AES

question

How many keys are used with symmetric key cryptography

answer

One

question

Which of the following is used for secure exchange of symmetric encryption keys

answer

Diffie-Hellaman

question

Which of the following algorithms are used in asymmetric encryption (Select two.)

answer

Diffie-Hellman, RSA

question

Which of the following are characteristics of ECC (Select two.)

answer

Asymmetric encryption, Uses a finite set of values within an algebraic field.

question

A receiver wants to verify the integrity of a message received from a sender. A hashing value is contained within the digital signature of the sender. What must the receiver use to access the hashing value to the verify the integrity of the transmission

answer

Sender's public key

question

How many keys are used with asymmetric or public key cryptography

answer

Two

question

Which of the following is the employment of two separate key pairs in order to separate the security functions of confidentiality and integrity in a communication system

answer

Dual key pair

question

A PKI is a method for managing which type of encryption

answer

Asymmetric

question

Which of the following protocols are most likely used with digital signatures (Select two.)

answer

ECC, RSA

question

What is the purpose of key escrow

answer

To provide a means to recover from a lost private key

question

Which of the following is an entity that accepts and validates information contained within a request for certificate

answer

Registration authority

question

What is a PKI

answer

A hierarchy of computers for issuing certificates

question

What is the most obvious means of providing non-repudiation in a cryptography system

answer

Digital signatures

question

Which of the following items are contained in a digital certificate

answer

Validity period, public key

question

Which of the following generates the key pair used in asymmetric cryptography

answer

CSP

question

Which of the following would you find on a CPS

answer

A declaration of security that the organization is implementing for all certificates

question

Which of the following best describes the content of the CRL

answer

A list of all revoked certificates

question

Certificate revocation should occur under all but which of the following conditions

answer

The certificate owner has held the certificate beyond the established lifetime timer

question

Which of the following security measures encrypts the entire contents of a hard drive

answer

Drive Lock

question

You want to protect data on hard drives for users with laptops. You want to drive to be encrypted, and you want to prevent the laptops from booting unless a special USB drive is inserted. In addition, the system should not boot if a change is detected in any of the boot files. What should you do

answer

Implement BitLocker with a TPM

question

You want to implement BitLocker to encrypt data on a hard disk even if it is moved to another system. You want the system to boot automatically without providing a startup key on an external USB device. What should you do

answer

Enable the TPM in the BIOS

question

Which of the following would require that a certificate be placed on the CRL

answer

The private key is compromised.

question

Which of the following is the best countermeasure for man-in-the-middle attacks

answer

Public Key Infrastructure (PKI)

question

What action is taken when the private key associated with a digital certificate becomes compromised

answer

The certification is revoked and added to the Certificate Revocation List

question

When a sender encrypts a message using their own private key, what security service is being provided to the recipient

answer

Non-repudiation

question

A private key has been stolen. What action should be taken to deal with this crisis

answer

Add the digital certificate to the CRL

question

Mary wants to send a message to Sam. She wants to digitally sign the message to prove that she sent it. Which key would Mary use to create the digital signature

answer

Mary's private key

question

Which of the following statements is true when comparing symmetric and asymmetric cryptography

answer

Asymmetric key cryptography is used to distribute symmetric keys.

question

You have a Web server that will be used for secure transactions for customers who access the Web site over the Internet. The Web server requires a certificate to support SSL. Which method would you use to get a certificate for the server

answer

Obtain a certificate from a public PKI

question

Mary wants to send a message to Sam so the only Sam can read it. Which key would be used to encrypt the message

answer

Sam's public key

question

What is the main function of a TPM hardware chip

answer

Generate and store cryptographic keys

question

Which of the following security solutions would prevent a user from reading a file which she did not create

answer

EFS

question

Which of the following network layer protocols provides authentication and encryption services of IP based network traffic

answer

IPSec

question

Which protocol is used for securely browsing a Web site

answer

HTTPS

question

Which IPSec sub protocol provides data encryption

answer

Encapsulating Security Payload (ESP)

question

You are purchasing a hard disk over the Internet from an online retailer. What does your browser use to ensure the other cannot see your credit card number on the Internet

answer

SSL

question

Which of the following can be used to encrypt Web, e-mail, telnet, file transfer, and SNMP traffic

answer

IPSec (Internet protocol security)

question

Which of the following technologies is based upon SSL (Secure Socket Layer)

answer

TLS (Transport Layer Security)

question

Which of the following is the best countermeasure against man-in-the-middle attacks

answer

IPSec

question

You want to allow traveling users to connect to your private network through the Internet. Users will connect from various locations including airports, hotels, and public access points such as coffee shops and libraries. As such, you won't be able to configure the firewalls that might be controlling access to the Internet in these locations.

answer

SSL

question

Which of the following protocols can be used to securely manage a network device from a remote connection?

answer

SSH

question

Which standard is most widely used for certificates?

answer

X.509

question

What's the primary function of the IKE protocol use with IPSec?

answer

Create a security association between communicating partners

question

The session keys employed by SSL (Secure Socket Layer) are available in what bit lengths?

answer

128 bit and 40 bit

question

Which of the following protocols can TLS for key exchange?

answer

RSA, Diffie- Hellman

question

Telnet is inherently insecure its communications is in plain text and easily intercepted. Which of the following is an acceptable alternative to Telnet?

answer

SSH

question

Which of the following are characteristics of MLPS?(Select Two)

answer

Adds labels to data units, Supports variable-length data units

question

Which of the following is WAN technology that allows for interoperability of vendor hardware for fiber optic networking?

answer

SONET

question

Which type of network establishes a dedicated connection between two hosts who need to communicate on the network, not allowing any other host to use the medium until the communication is complete?

answer

Circuit-switched

question

Which of the following terms identifies the network of dial-up telephone and the long-distance lines?

answer

PSTN

question

Which of the following are characteristics of ATM?(Select Two)

answer

Uses fixed-length cells of 53-bytes

question

If the SONET (OC-1) base data rate is 51.84 Mbps, how much data can the Optical Carrier level 12 (OC-12) transfer in one second?

answer

622.08 Mb

question

You have a site in your network that is connected to multiple other sites. A single virtual circuit is used to connect to all other sites.

answer

Point-to-multipoint

question

What must install between your network and a T1 line for your network to use the T1 line?

answer

CSU/DSU

question

Which of the following describes the lines used in local loop for dial-up telephone access?

answer

POTS

question

Which type of network divides data to be transmitted into small units and routes these units from the originating system to the destination system, allowing multiple, concurrent communications on the network medium?

answer

Packet-switched

question

What is the speed of an OC-3 connection?

answer

155 mbps

question

Which of the following correctly describes the T1 carrier system?(select two)

answer

A single T1 channel can transfer data at 64 Kbps, T1 lines use pairs of copper wire

question

You are implementing Internet connectivity for a new start-up company. Your client will provide on-line storefronts for retailers. To do this, they have calculated that their Internet connection must provide a data rate of at least 20 - 30 Mbps. Which type of service should you implement?

answer

T3

question

Which of the following technologies uses variable-length packets and adds labels to packets as they enter the WAN cloud, with the labels being used to switch packets and prioritize traffic?

answer

MPLS

question

Which of the following are characteristics of SONET? (Select Two)

answer

Transport protocol used for other traffic types, dual counter-rotating fiber optic rings

question

You have a series of WAN links that connects your site to multiple other sites. Each remote site is connected to your site using a dedicated link What type of connection is being used?

answer

Point-to-point

question

Which of the following devices is used on a WAN to convert synchronous serial signals into digital signals?

answer

CSU/DSU

question

You are traveling throughout North America to many metropolitan and rural areas. Which single form of Internet connectivity provides the greatest potential connectivity wherever you travel?

answer

PSTN

question

Which of the following is the most susceptible to interference related to atmospheric conditions?

answer

Satellite

question

Which of the following services are available regardless of whether the telephone company network is available?

answer

Cable modem

question

What is the maximum data rate of an ISDN BRI line?

answer

128 Kbps

question

Which of the following are characteristics of VDSL? (Select Two)

answer

Unequal download and upload speeds, Supports both data and voice at the same time

question

Which of the following is a characteristic of SDSL?

answer

Supports data traffic only (no voice)

question

Which of the following Internet connection technologies requires that the location be within a limited distance of the telephone company central office?

answer

DSL

question

Which two of the following describe the channels and the data transfer rates used for ISDN BRI(Select Two)

answer

One D channel operating at 16 Kbps, Two B channels operating at 64 Kbps each

question

To access the Internet through the PSTN, what kind of connectivity device must you use?

answer

Modem

question

Which of the following Internet services provides equal upload and download bandwidth?

answer

SDSL

question

Which WAN connection types use digital communications over POTS?(Select two)

answer

ISDN, DSL

question

A healthcare organization provides mobile clinics throughout the world. Which network technology should you select to transfer patient statistical data to a central database via the Internet to ensure network connectivity for any clinic located anywhere in the world, even remote areas?

answer

Satellite

question

Which three of the following are characteristics of ISDN?

answer

It provides enough bandwidth to transmit data at much higher speeds than standard modems and analog lines, It is a dial-up service that uses existing copper wires for the local loop, It lets you transmit voice, video, and data over the same lines.

question

You want to set up a service to allow multiple users to dial into the office server from modems on their home computers. What service should you implement?

answer

RAS

question

Which of the following is a platform independent authentication system that maintains a database of user accounts and passwords that centralizes the maintenance of those accounts?

answer

RADIUS

question

Which of the following protocols of services is commonly used on cable Internet connections for user authentication?

answer

PPPoE

question

You often travel away from the office. While traveling, you would like to use a modem on your laptop computer to connect directly to a server in your office and access files on that server that you need. You want the connection to be as secure as possible. Which type of connection will you need?

answer

Remote access

question

Which of the following are characteristics TACACS+?(Chose Two)

answer

Uses TCP, Allows for a possible of three different servers, one each for authentication, authorization, and accounting

question

You have decided to implement a remote access solution that uses multiple remote access servers. You want to implement RADIUS to centralize remote access authentication and authorization.

answer

Configure the remote access servers as RADIUS servers.

question

Which of the following are methods for providing centralized authentication, authorization, and accounting for remote access? (Select two)

answer

TACACS+, RADIUS

question

You have just signed up for Internet access using a local provider that gives you a fiber optic line into your house. From there, Ethernet and wireless connections are used to create a small network within your home. Which of the following protocols would be used to provide authentication, authorization, and accounting for the Internet connection?

answer

PPPoE

question

Which of the following are differences between RADIUS and TACACS+?

answer

RADIUS combines authentication and authorization into a single function; TACACS+ allows these services to be split between different servers.

question

You are configuring your computer to dial up to the Internet. What protocol should you use?

answer

PPP

question

Users on your network report that they have received an email stating that the company has just launched a new website for employees, and to access the Web site they need to go there and enter their user name and password information. No one in your company has sent this email. What type of attack is this?

answer

Phishing

question

Which of the following statements about the use of anti-virus software is correct?

answer

Anti-virus software should be configured to download updated virus definition files as soon as they become available.

question

An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind of attack?

answer

Denial of Service

question

A Smurf attack requires all but which of the following elements to be implemented?

answer

Padded cell

question

Your company security policy states that wireless networks are not to be used because of the potential security risk they present to your network. One day you find that an employee has connected a wireless access point to the network office. What type of security risk is this?

answer

Rouge access point

question

Which of the following describes a man-in-the -middle?

answer

A false server intercepts communications from a client by impersonating the intended server.

question

What is the primary countermeasure to social engineering?

answer

Awareness

question

Which is a form of attack that either exploits a software flaw or floods a system with traffic in order to prevent legitimate activities or transactions from occurring?

answer

Denial of Service attack

question

Which of the following is a form of denial of service attack that uses spoofed ICMP PACKETS TO FLOOD A VICTIM WITH ECHO REQUESTs USING A BOUNCE/AMPLIFICATION network?

answer

Smurf

question

What is the main difference between a worm and a virus?

answer

A worm can replicate itself and does not need a host for distribution.

question

How can an organization help prevent social engineering attacks?(Select Two)

answer

Educate employees on the risks and countermeasures, Publish and enforce clearly written security policies.

question

Capturing packets as they travel from one host to another with the with the intent of altering the contents of the packets is a form of which security concern?

answer

Man-in-the-middle attack

question

What is the common name for a program that has no useful purpose, but attempts to spread itself to other systems and often damages resources on the systems where it found?

answer

Virus

question

You have worked as the network administrator for a company for seven months. One day all picture files on the server become corrupted. You discover that user download a virus from the Internet onto his workstation, and it propagated to the server. You successfully restore all files from backup, but your boss is adamant that this situation doe not occur. What should you do?

answer

Install a network virus detection software solution.

question

Which of the following measures are you most likely to implement in order to protect against a worm or a Trojan horse?

answer

Anti-virus software

question

Which of the following is the best countermeasure against man-in-the-middle attacks?

answer

IPSec

question

Which of the following is NOT a primary characteristic of a worm?

answer

It infects the MBR of a hard drive

question

Which of the following are examples of social engineering? (Select Two)

answer

Dumpster diving, Shoulder surfing

question

Which of the following are characteristics of a circuit-level gateway? (Select Two)

answer

Filters based on sessions, Stateful

question

How does a proxy server differ from a packet filtering firewall?

answer

A proxy server operates at the Application layer, while a packet filtering firewall operates at the Network layer.

question

Which port number is used by SNMP?

answer

161

question

You are the administrator for a secure network that uses firewall filtering. Several network users have requested to access Internet Usenet groups but are unable. What needs to be done to allow users to access the newsgroups?

answer

Open port 119 to allow NNTP service.

question

You administer a Web server on your network. The computer has multiple IP addresses. They are 192.168.23.8 to 192.168.23.17. The name of the computer is www.westsim.com. You configured the Web site as follows: IP address: 192.168.23.8, HTTP Port: 1030, SSL Port: 443. Users complain that they can't connect to the web site when they type www.westsim.com. What is the most likely source of the problem?

answer

The HTTP port should be changed to 80.

question

Which of the following functions are performed by proxies? (select two)

answer

Cache web pages, Block employees from accessing certain websites.

question

Your company leases a very fast Internet connection and pays for it based on usage. You have been asked by the company president to reduce Internet line lease costs. You want to reduce the amount of web pages that are downloaded over the leased connection, without decreasing performance. What is the best way to do this?

answer

Install a proxy server.

question

Which protocol and port number is used by BOOTP/DHCP?

answer

UDP 67

question

Which of the following does a router acting as a firewall use to control which packets are forwarded or dropped?

answer

ACL

question

Using the Netstat command you notice that a remote system has made a connection to your Windows server 2003 system using TCP/IP port 21. Which of the following actions is the remote system most likely to be performing ?

answer

Downloading a file

question

You want to install a firewall that can reject packets that are not part of an active session. Which type of firewall should you use?

answer

Circuit-level

question

Haley configures a Web site using Windows 2000 default values. What are the HTTP port and SSL port settings?

answer

80 for HTTP; 443 for SSL

question

You are configuring a network firewall to allow SMTP outbound email traffic, and POP3 inbound email traffic. Which of the following TCP/IP ports should you open on the firewall? (Select Two)

answer

25, 110

question

Which of the following are characteristics of a packet filtering firewall? (Select Two)

answer

Filters IP address and port, Stateless

question

You manage a small network at work. Users use workstations connected to your network. No portable computers are allowed. As part of your security plan, you would like to implement scanning of emails for all users. You want to scan the emails and prevent any emails with malicious attachments from being received by users. Your solution should minimize administration, allowing you to centrally manage the scan settings. Which solution should you use?

answer

Network based firewall

question

You have a company network that is connected to the internet. You want all users to have internet access, but need to protect your private network and users. You also need to make private network and users. You also need to make a Web server publicly available to Internet users. Which solution should use?

answer

Use firewalls to create a DMZ. Place the Web server inside the DMZ, and the private network behind the DMZ

question

Which protocol and port number is used by TFTP?

answer

UDP 69

question

Your company has a connection to the Internet that allows users to access the Internet. You also have a web server and an email server that you want to make available to Internet users. You want to create a DMZ for these servers. Which type of device should you use to create the DMZ?

answer

Network based firewall

question

You have been given a laptop to use for work. You connect the laptop to your company network, use it from home, and use it while traveling. You want to protect the laptop from Internet-based attacks. Which solution should you use?

answer

Host based firewall

question

You have a router that is configured as a firewall. The router is a layer 3 device only. Which of the following does the router use for identifying allowed or denied packets.

answer

IP address

question

IPsec is implemented through two separate protocols. What are these protocols called? (Select Two)

answer

AH, ESP

question

A VPN is used primarily for what purpose?

answer

Support secured communications over an untrusted network.

question

You are in the middle of a big project at work. All of your work files are on a server at the office. You want to be able to access the server desktop, open and edit files, save files on the server, and print files to a printer connected to a computer at home. Which protocol should you use?

answer

RDP

question

You have a group of salesman who would like to access your private network through the Internet while they are traveling. You want to control access to the private network through a single server. Which solution should you implement?

answer

VPN concentrator

question

You want to use a protocol that can encapsulate other LAN protocols and carry the data securely over an IP network.

answer

PPTP

question

You want to allow traveling users to connect to your private network through the internet. Users will connect from various locations including airports, hotels, and public access points such as coffee shops and libraries. As such, you won't be able to configure the firewalls that might be controlling access to the Internet in these locations. Which of the following protocols would be most likely to be allowed through the widest number of firewalls?

answer

SSL

question

Which of following network layer protocols provides authentication and encryption services for IP based network traffic?

answer

IPSec

question

Which of the following protocols can your portable computer use to connect to your company's network via a tunnel through the Internet? (Select two)

answer

L2TP

question

You manage a single subnet with three switches. The switches are connected to provide redundant paths between the switches. Which feature allows the switches to pass VLAN traffic between the switches?

answer

Trunking

question

You manage a network that uses a single switch. All ports within your building connect through the single switch. In the lobby of your building are three RJ-45 ports connected to the switch. You want to allow visitors to plug into these ports to gain Internet access, but they should not have access to any other devices on your private network. Employees connected throughout the rest of your building should have both private and Internet access. Which feature should you implement?

answer

VLANs

question

When configuring VLANs on a switch, what is used to identify VLANs on a switch, what is used to identify VLAN membership of a device?

answer

Switch port

question

Which of the following do switches and wireless access points use to control access through the device?

answer

MAC filtering

question

Which of the following best describes the concept of a virtual LAN?

answer

Devices on the same network logically grouped as if they were grouped on separate networks.

question

Which switch features are typically used with VoIP? (Select Two)

answer

PoE, VLAN

question

Which of the following connectivity hardware is used to create a LAN?

answer

Switch

question

You manage a private network with two switches. The switches are connected together through their Gigabit Ethernet uplink ports. You define VLAN 1, and VLAN 2 on each switch. A device on the first switch in VLAN 1 needs to communicate with a device on the second switch also in VLAN 1. What should you configure to allow communication between these two devices through the switches?

answer

Trunking

question

When configuring VLANs on a switch, what type of switch ports are members of all VLANs defined on the switch?

answer

Trunk ports

question

Which type of devices is required to implement port authentication through the switch?

answer

RADIUS server

question

Your company is a small start-up company that has leased office space in a building shared by other businesses. All businesses share a common network infrastructure. A single switch connects all devices in the building to the router that provides Internet access. You would like to make sure that your computers are isolated from computers used by other companies. Which feature should you request to have implemented?

answer

VLAN

question

You manage a network that uses switches. In the lobby of your building are three RJ-45 ports connected to a switch. You want to make sure that visitors cannot plug in their computers to the free network jacks and connect to the network. However, employees who plug into those same jacks should be able to connect to the network. What feature should you configure?

answer

Port authentication

question

You manage a network with two switches. The switches are connected together through their Gigabit uplink ports. You define VLAN 1 and VLAN 2 on each switch. A device on the first switch in the VLAN 1 needs to communicate with a device on the same switch which is in VLAN 2. What should you configure so that the two devices can communicate?

answer

Routing

question

You run a small network for your business that has a single router connected to the Internet and a single switch. You keep sensitive documents on a computer that you would like to keep isolated from other computers on the network. Other hosts on the network should not be able to communicate with this computer through the switch, but you still need to access the network through the computer. What should you use for this situation?

answer

VLAN

question

When using Kerberos authentication, which of the following terms is used to describe the token that verifies the identity of the user to the target system?

answer

Ticket

question

Which of the following are used when implementing Kerberos for authentication and authorization? (Select Two)

answer

Time server, Ticket granting

question

You want to implement an authentication method that uses public and private key pairs. Which authentication method should you use?

answer

EAP

question

You want to increase the security of your network by allowing only authenticated users to be able to access network devices through a switch? Which one of the following should you implement?

answer

802.1x

question

Which of the following applications typically use 802.1x authentication? (Select Two)

answer

Controlling access through a switch, Controlling access though a wireless access point

question

You have been contracted by a firm to implement a new remote access solution based on a Windows Server 2003 system. The customer wants to purchase and install a smart card system to provide a high level of security to the implementation. Which of the following authentication protocols are you most likely to recommend to the client?

answer

EAP

question

Which of the following authentication protocols uses a three-way handshake to authenticate users to the network? (Choose two)

answer

CHAP, MS-CHAP

question

Which of the following is a feature of MS-CHAP v2 that is not included in CHAP?

answer

Mutual authentication

question

Which of the following is a mechanism for granting and validating certificates?

answer

PKI

question

Which of the following authentication methods uses tickets to provide single sign on?

answer

Kerberos

question

You have a Web server that will be used for secure transactions for customers who access the Web site over the Internet. The Web server requires a certificate to support SSL. Which method would you use to get a certificate for the server?

answer

Obtain a certificate from public PKI

question

Which of the following protocols can be used to securely manage a network device from a remote connection?

answer

SSH

question

You have been using SNMP on your network for monitoring and management. You are concerned about the security of this configuration. What should you do?

answer

Implement version 3 SNMP

question

Which of the following protocols are often added to other protocols to provide secure transmission of data? (Select two)

answer

SSL, TLS

question

Which protocol does HTTPS use to offer greater security in Web transactions?

answer

SSL

question

which protocol is used for securely browsing a Web site?

answer

HTTPS

question

Which of the following are improvements to SNMP that are included within SNMP version 3? (Select two)

answer

Authentication for agents and managers, Encryption of SNMP messages

question

Telenet is inherently insecure because its a communication is in plain text and is easily intercepted. Which of the following is an acceptable alternative to Telnet?

answer

SSH

question

As a security precaution, you have implemented IPsec that is used between any two devices on your network. IPsec provides encryption for traffic between devices. You would like to implement a solution that can scan the contents of the encrypted traffic to prevent any malicious attacks. Which solution should you implement?

answer

Host based IDS

question

What actions can a typical passive Intrusion Detection System (IDS) take when it detects an attack? (Select two)

answer

The IDS logs all pertinent data about the intrusion, An alert is generated and delivered via Email, the console, or an SNMP trap.

question

Which of the following is a security service that monitors network traffic in real time or reviews the audit logs on servers looking for security violations?

answer

IDS

question

You are concerned about protecting your network from network based attacks from the Internet. Specifically, you are concerned about "zero day" attacks (attacks that have not yet been identified or that do not have prescribed protections).

answer

Anomaly based IDS

question

You want to make sure that a set of servers will only accept traffic for specific network services, but you also want to make sure that the servers will not accept packets sent to those services. Which tool should you use?

answer

Port scanner

question

What security mechanism can be used to detect attacks originating on the Internet or from within an internal trusted subnet?

answer

IDS

question

Which of the following functions can a port scanner provide?

answer

Discover unadvertised servers, Determining which ports are open on a firewall

question

You are concerned about attacks directed at your network firewall. You want to be able to identify and be notified of any attacks. In addition, you want the system to take immediate action when possible to stop or prevent the attack. Which tool should you use?

answer

IPS

question

Which of the following devices can monitor a network and detect potential security attacks?

answer

IDS

question

Which IDS method searches for intrusion or attack attempts by recognizing patterns or identities list in a database?

answer

Signature based

question

What is the most common form of host based IDS that employs signature or pattern matching detection methods?

answer

Anti-virus software

question

Which of the following devices is capable of detecting and responding to security threats?

answer

IPS

question

Your organization recently purchase 18 iPad tablets for use by the organization's management team. These devices have iOS pre-installed on them. To increase the security of these devices, you wan to apply a default set of security related configuration settings. What is the best approach to take to accomplish this? (Select two. Each option is a part of a complete solution)

answer

Enroll the devices in a mobile device management (MDM) system AND Configure and apply security policy settings in a mobile device management system

question

MATCHING: Jailbreaking = allows apps to be installed from sources other than the app store

answer

Jailbreaking = allows apps to be installed from sources other than the app store

question

MATCHING: Sideloading = Allows apps to be installed from sources other than the Windows Store.

answer

Sideloading = Allows apps to be installed from sources other than the Windows Store.

question

MATCHING: Sandboxing = prevents a running app from accessing data stored by other running apps

answer

Sandboxing = prevents a running app from accessing data stored by other running apps

question

MATCHING: Assigned Access = Defines a whitelist of Windows Store applications

answer

Assigned Access = Defines a whitelist of Windows Store applications

question

Recently, a serious security breach occurred in your organization. An attacker was able to log in to the internal network and steal data through a VPN connections using the credentials assigned to a vice president in your organization. For security reasons, all individuals in upper management in your organization have unlisted home phone numbers and addresses. However, security camera footage from the vice presidents home recorded someone rummaging through her garbage cans prior to the attack. The VP admitted to writing her VPN log in credentials on a sticky note that she subsequently threw away in her household trash. You suspect the attacker found the sticky note in the trash and used the credentials to log in to the network. You've reviewed the VP's social media pages and found pictures of her home posted, but you didn't notice anything in he photos that would give away her home address. She assure you that her smart phone was never misplaced prior to the attack. Which security weakness is the most likely cause of the security breach?

answer

Geo-tagging was enabled on her smart phone

question

Your organization is formulating a bring your own device (BYOD) security policy for mobile devices. Which of the following statements should be considered as you formulate your policy?

answer

You can't use domain-based group policies to enforce security settings on mobile devices.

question

Your organization's security policy specifies that any mobile device (regardless of ownership) that connects to your internal network must have remote wipe enabled. If the device is lost or stolen, then it must be wiped to remove any sensitive data from it. Your organization recently purchased several Windows RT tablets. Which should you do?

answer

sign up for a Windows Intune account to manage the tablets.

question

Your organization provides its sales force with Windows RT 8.1 tablets to use while visiting customer sites. You manage these devices by enrolling them in your cloud-based Windows Intune account. Once of your sales reps left her tablet in an airport. The device contains sensitive information and you need to remove it in case the device is compromised. Which Intune portal should you use to perform a remote wipe?

answer

Admin Portal

question

Your organization provides its sales force with Windows RT 8.1 tablets to use while visiting customer sites. You manage these devices by enrolling them in your cloud-based Windows Intune account. Once of your sales reps left his notebook at a customer's site. The device contains sensitive information and you want to change the password to prevent the data from being compromised. Which Intune portal should you use to remotely change the password?

answer

Admin Portal

question

On your way into the back entrance of the building at work one morning, a man dressed as pluber asks you to let him in so he can "fix the restroom". What should you do?

answer

Direct him to the front entrance and instruct him to check in with the receptionist.

question

Which of the following are solutions that address physical security? (Select two)

answer

Require identification and name badges for all employees. Escort visitors at all times.

question

Which of the following can be used to stop piggybacking that has been occurring at a front entrance where employees should swipe their smart cards to gain entry?

answer

Deploy a mantrap

question

What is a secure doorway that can be used in coordination with a mantrap to allow easy egress from a secured environment but which actively prevents re-entrance through the exit portal?

answer

Turnstiles

question

You want to use CCTV to increase your physical security. You want to be able to remotely control the camera position. Which type of camera type should you choose?

answer

PTZ (Pan Tilt Zoom)

question

you want to use CCTV to increase the physical security of your building. Which of the following camera types would offer the sharpest image at the greatest distance under the lowest lighting conditions?

answer

500 resolution, 50mm, .05L UX

question

Which of the following CCTV camera types lets you adjust the distance that the camera can see (i.e. zoom in or out) ?

answer

Varifocal

question

Which of the following CCTV types would you use in areas with little or no light?

answer

Infrared

question

Which of the following allows for easy exit of an area in the event of an emergency, but prevents entry?(Select two)

answer

Double -entry door. Turnstile.

question

Which of the following controls is an example of a physical access control method?

answer

Locks on doors

question

You are the security administrator for a small business. The floor plan for your organization is shown in the figure below. You've hired a 3rd-party security consultant to review your organization's security measures and she has discovered multiple instances where unauthorized individuals have gained access to your facility, even to very sensitive areas. She recommends that you implement cable locks to prevent theft of computer equipment. Click on the office location where cable locks would be most appropriate.

answer

At the lobby

question

You are the security administrator for a small business. The floor plan for your organization is shown in the figure below. You've hired a 3rd-party security consultant to review your organization's security measures and she has discovered multiple instances where unauthorized individuals have gained access to your facility, even to very sensitive areas. She recommends that you implement mantraps to prevent this from happening in the future. Click on the office location where a mantrap would be most appropriate.

answer

At the lobby

question

You are the security administrator for a small business. The floor plan for your organization is shown in the figure below. You've hired a 3rd-party security consultant to review your organization's security measures and she has discovered multiple instances where unauthorized individuals have gained access to your facility, even to very sensitive areas. She recommends that you provide employees with access badges and implement access badges readers to prevent this from happening in the future. Click on the office location where a mantrap would be most appropriate.

answer

Building entrance in the lobby. Sensitive areas as server room.

question

You are the security administrator for a small business. The floor plan for your organization is shown in the figure below. You've hired a 3rd-party security consultant to review your organization's security measures and she has discovered multiple instances where unauthorized individuals have gained access to your facility, even to very sensitive areas. She recommends that you implement closed-circuit TV (CCTV) surveillance cameras to prevent this from happening in the future. Click on the office location where a mantrap would be most appropriate.

answer

Building entrance. Sensitive areas as the server room.

question

Hardened carrier. Biometric authentication. Barricades. Emergency escape plans. Alarmed carrier. Anti-passback system. Emergency lighting. Exterior floodlights.

answer

Protected cable distribution. Door locks. Perimeter barrier. Safety. Protected cable distribution. Physical access control. Safety. Perimeter barrier.

question

Which of the following is the most important thing to do to prevent console access to the router?

answer

Keep the router in a locked room

question

You have 5 salesmen who work out of your office and who frequently leave their laptops laying on their desk in their cubicles. You are concerned that someone might walk by and take one of these laptops. Which of the following is the best protection to implement to address your concerns?

answer

Use cable locks to chain the laptop to the desks

question

You are an IT consultant and are visiting a ne client's site to become familiar with their network. As you walk around their facility, you note the following: -When you enter the facility, a receptionist greets you and directs you down the hallway to the office manager's cubicle. The receptionist uses a notebook system that is secured to her desk with cable lock. -The office manager informs you that the organization's servers are kept in a locked closet. Only she has the key to the closet. When you arrive on site, you will be required to get the key from her to access the closet. -She informs you that the server backups are configured to run each night. A rotation of external USB hard disks are used as the backup media. -You notice the organization's network switch is kept in an empty cubicle adjacent to the office manager's workspace. -You notice that a router/firewall/content filter all-in-one device has been implemented in the server closet to protect the internal network from external attacks. Which security-related recommendations should you make to this client? (Select two)

answer

Control access to the work area with locking doors and card readers. Relocate the switch to the locked server closet.

question

You are an IT consultant and are visiting a ne client's site to become familiar with their network. As you walk around their facility, you note the following: -When you enter the facility, a receptionist greets you and escorts you through a locked door to the work area where the office manager sits . -The office manager informs you that the organization's servers are kept in a locked closet. An access card is required to enter the server closet. -She informs you that the server backups are configured to run each night. A rotation of tapes are used as the backup media. -You notice the organization's network switch is kept in the server closet. -You notice that a router/firewall/content filter all-in-one device has been implemented in the server closet to protect the internal network from external attacks. -The office manager informs you that her desktop system will no longer boot and asks you to repair or replace it, recovering as much data as possible in the process. You carry the workstation out to your car and bring it back to your office to work on it. Which security-related recommendations should you make to this client? (Select two)

answer

Implement a hardware checkout policy

question

You walk by the server room and notice a fire has started. What should you do first?

answer

Make sure everyone has cleared the area

question

Which of the following fire extinguisher types is best used for electrical fires that might result when working with computer components?

answer

Class C

question

Which of the following fire extinguisher suppressant types is best used for electrical fires that might result when working with computer components?

answer

Carbon dioxide (CO2)

question

Which of the following fire extinguisher types poses a safety risk to users in the area? (Select two)

answer

Halon CO2

question

Users are complaining that sometimes network communications are slow. You use a protocol analyzer and find that packets are being corrupted as they pass through a switch. You also notice that this only seems to happen when the elevator is running. What should you do?

answer

Install shielded cables near the elevator

question

What is the recommended humidity level for server rooms?

answer

50%

question

Components within your server room are failing at a rapid pace. You discover that the humidity in the server room is at 60% and the temperature is at 80 degrees. What should you do?

answer

Add a separate A/C unit in the server room

question

You maintain the network for an industrial manufacturing company. You are concerned about the dust in the area getting into the server components and affecting the ability of the network. Which of the following should you implement?

answer

Positive pressure system

question

Which of the following statements about ESD is not correct?

answer

ESD is much more likely to ocurre when the relative humidity is above 50%

question

Which of the following is the/least effective power loss protection for computer systems?

answer

Surge protector

question

Besides protecting a computer from under voltages, a typical UPS also performs which 2 actions:

answer

Protects from over voltages. Conditions the power signal.

question

A smart phone was lost at the airport. There is no way to recover the device. Which of the following will ensure data confidentiality on the device?

answer

Remote Wipe

question

Which of the following are not reasons to remote wipe a mobile device?

answer

When the device is inactive for a period of time

question

Which of the following mobile device security consideration will disable the ability to use the device after a short period of inactivity?

answer

Screen lock

question

Most mobile device management (MDM) systems can be configured to track the physical location of enrolled mobile devices. Arrange the location technology on the left in order of accuracy on the right, from most accurate to least accurate.

answer

Most accurate- GPS More accurate- WI-FI triangulation Less accurate- cell phone tower triangulation Least accurate- IP address resolution

question

Your organization has recently purchases 20 tablets devices for the Human Resources department to use for training sessions. You are concerned that these devices could represent a security risk to your network and want to strengthen their security profile as much as possible. Which actions should you take? (select 2)

answer

Implement storage implementation. Enable service device encryption.

question

Over the last several years, the use of mobile devices within your organization has increased dramatically. Unfortunately, many department heads circumvented your Information Systems procurement policies and directly purchased tablets and smartphones for their employees without authorization. As a result there is a proliferation of devices within your organization without accountability. You need to get things under control and begin tracking the devices that are owned by your organization. How should you do this?

answer

Implement a mobile device management (MDM) solution

question

Match each bring your own device (BOYD) security issue on the right with a possible remedy on the left. Each remedy may be used once, more than once, or not at all.

answer

Preventing malware infections- Implement a network acces control (NAC) solution. Supporting mobile device users-Specify who users can call for help with mobile devices apps in your acceptable use policy. Preventing loss of control of sensitive data- Enroll devices in a mobile device management. Preventing malicious insider attacks-Specify where and when mobile devices can be possessed in your acceptable use policy. Applying the latest anti-malware definitions- Implement a network access control (NAC) solution.

question

Match each bring your own device (BOYD) security concern on the right with a possible remedy on the left. Each remedy may be used once, more than once, not at all.

answer

Users take pictures of proprietary processes and procedures- Specify where and when mobile devices can be possessed in your acceptable use policy. Devices with a data plan can e-mail stole data- Specify where and when mobile devices can be possessed inyour

question

Which of the ff. is the single best rule to enforce when designing complex passwords?

answer

longer passwords

question

For users on your network, you want to automatically lock their user accounts if four incorrect passwords are used within 10 minutes. What should you do?

answer

configure account lockout policies in group policy

question

You want to make sure that all users have passwords over 8 character and that passwords must be changed every 30 days. What should you do?

answer

Configure account policies in Group policy

question

You have hired 10 new temporary workers who will be with the company for 3 months. You want to make sure that these users can only log on during regular business hours. What should you do?

answer

configure time and day restrictions

question

You are configuring the local security policy of a Windows 7 system. You want to prevent users from reusing old passwords. You also want to force them to use a new password for at least 5 days before changing it again. Which policies should you configure? (Select two.)

answer

enforce password history; minimum password age

question

You are configuring the local security policy of a Windows 7 system. You want to require users to create passwords that are at least 10 characters long. You also want to prevent logon after three unsuccessful logon attemps. Which policies should you configure? (Select two.)

answer

minimum password length; account lockout threshold

question

You have just configured the password policy and set the minimum password age to 10. What will be the effect of this configuration?

answer

User cannot change the password for 10 days

question

You have implemented lockout with a clipping level of 4. What will be the effect of this setting?

answer

the account will be locked for 4 incorrect attempts

question

Which of the ff. is not important aspect of password management?

answer

enable account lockout

question

You are teaching new users about security and passwords. Which example of the passwords would be the most secure password?

answer

T1a73gZ9!

question

Upon running a security audit in your organization, you discover that several sales employees are using the same domain user account to log in and update the company's customer database. Which action should you take? (2)

answer

Delete the account that the sales employees are currently using. Train some employees to use their own accounts to update the customer database

question

You manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. You define a password and account lockout policy for the domain. However, members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You need to make the change as easily as possible. What should you do???????

answer

implement a granular password policy for the users in the Directors OU

question

You manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. You define a password and account lockout policy for the domain. However, members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You would like to define a granular password policy for these users. Which tool should you use?

answer

ADSI edit

question

You manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. You define a password and account lockout policy for the domain. However, members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You need to make the change as easily as possible. What should you do?

answer

create a granular password policy. apply the policy to all users in the director's OU

question

Yo manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. Members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You define a new granular password policy with the required settings. All users in the Directors OU are currently members of the DirectorsGG group, a global security group in that OU. You apply the new password policy to that group. Matt Barnes is the chief financial officer. He would like his account to have even more strict password policies than is required for other members of the Directors OU. What should you do?

answer

create a granular password policy for Matt. apply the new policy directly to Matt's user account.

question

Which of the following are methods for providing centralized authentication, authorization, and accounting for remote access?

answer

TACACKS+, Radius

question

You have decided to implement a remote access solution that uses multiple remote access servers. You want to implement RADIUS to centralize remote access authentication and authorization. Which of the following would be a required part of your configuration?

answer

configure the remote access servers as RADIUS clients

question

Which of the following are characteristics of TACACS +?

answer

allows for a possible of three different servers, one for each authentication, authorization, and account; uses TCP

question

Which of the following are differences between RADIUS and TACACS+?

answer

Radius combines authentication and authorization into a single function. TACAS+ allows these services to be split between different servers.

question

Which of the ff. protocols can be used to centralize remote access authentication?

answer

TCACS

question

RADIUS is primarily used for what purpose?

answer

authenticating remote clients before access to the network is granted

question

Which of the ff. is a characteristic of TACACS+?

answer

it encrypts the entire packet, not just authentication packets

question

Which of the ff. ports are used with TACACS?

answer

49

question

What does a remote access server use for authorization?

answer

Remote access policies

question

Which of the ff. is the best example of remote access authentication?

answer

user establishes a dialup connection to a server to gain access to shared resources

question

Which of the following is a feature of MS-CHAP v2 that is not included in CHAP

answer

Mutual authentication

question

CHAP performs which of the following security functions?

answer

periodically verifies the identity of a peer using a three-way handshake

question

Which of the following authentication protocols transmits passwords in clear text, and is therefore considered too insecure for modern networks

answer

PAP

question

Which remote access authentication protocol periodically and transparently re-authenticates during logon session by default

answer

CHAP

question

which of the following authentication protocols uses a three-way handshake to authenticate users to the network? (choose 2)

answer

MS-CHAP & CHAP

question

When using Kerberos authentication, which of the following terms is used to describe the token that verifies the identity of the user to the target system?

answer

ticket

question

Which of the following are used when implementing Kerberos for authentication and authorization? (Select Two)

answer

ticket granting server; time synchronization

question

Which of the ff. are requirements to deploy Kerberos on a network? (Select two.)

answer

A centralized database of users and password, Time synchronization between devices

question

Which ports does LDAP use by default? (Select two.)

answer

389 & 636

question

You want to deploy SSL to protect authentication traffic with you LDAP-based directory service. Which port would this use?

answer

636

question

Your LDAP directory service solution uses simple authentication. What should you always do when using simple authentication?

answer

Use SSL

question

You want to use Kerberos to protect LDAP authentication. Which authentication mode should you choose?

answer

SASL

question

A user has just authenticated using Kerberos. What object is issued to the user immediately following logon?

answer

ticket granting ticket

question

What protocol uses port 88?

answer

kerberos

question

Which of the ff. authentication mechanisms is designed to protect a 9-character password from attacks by hashing the first seven characters into a single hash and then hashing the remaining two characters into another separate hash?

answer

LANMAN

question

what is mutual authentication?

answer

A process by which each party in an online communication verifies the identity of the other party

question

A manage has told you she is concerned about her employees writing their passwords for Web sites, network files, and databases resources on sticky notes. Your office runs exclusively in a Windows environment. Which tool could be used to prevent this?

answer

credential manager

question

KWalletManger is a Linux based credential management system that stores encrypted account credentials for network resources. Which encryption methods can KWalletManager use to secure account credentials?(Two)

answer

blowfish & GPG

question

You want to protect the authentication credentials you use to connect to the LAB server in your network by copying them to a USB drive. What option would you hit?

answer

back up credentials

question

In an identity Management System, what is the function of the Authoritative Source?

answer

specify the owner of a data item

question

In an identity Management System, what is the function of the Identity Vault?

answer

ensure that each employee has the appropriate level of access in each system

question

You are the network administrator for a small company. Your organization currently uses the following server systems: • A Windows server that functions as a domain controller and a file server. • A Novell Open Enterprise Server that functions as a GroupWise e-mail server. • A Linux server that hosts your organization's NoSQL database server that is used for big data analysis. Because each of these systems uses its own unique set of authentication credentials, you must spend a considerable amount of time each week keeping user account information updated on each system.In addition, if a user changes his or her password on one system, it is not updated for the user's accounts on the other two systems.

answer

implement an identity vault. implement password synchronization

Final 2 – Flashcards

Unlock all answers in this set

Haven't found what you were looking for?

Search for samples, answers to your questions and flashcards