Network Security Essentials Exam
Correct 100%
Back Orifice is an example of a backdoor. T/F - ANSWER True
A group of compromised computers that have software installed by a worm or Trojan is
known as which of the following?
A. Botnet
B. Virus
C. Honeypot
D. Zombie - ANSWER A. Botnet
Which of the following is an inline device that checks all packets?
A. Host-biased intrusion detection system
B. Statistical anomaly
C. Network intrusion detection system
D. Personal software firewall - ANSWER A. Host-biased intrusion detection system
By turning on the phishing filter a person can prevent spyware. T/F - ANSWER True
Ransomware holds a user's files for ransom by encrypting them. T/F - ANSWER True
Which of the following can help to secure the BIOS of a computer? Select two:
- Use a case lock
- Use a BIOS supervisor password.
- Configure a user password
- Disable USB ports - ANSWER Use a case lock
Which of the following is the best mode to use when scanning for viruses?
- Safe mode
- Last known good configuration
- Command prompt only
- Boot into Windows normally - ANSWER
Which of the following methods of malware delivery is used in computer programs to
bypass normal authentication?
- Privilege escalation
- Active interception
- Backdoor
- Rootkit - ANSWER
Which one of the following navigiational paths shows the current service pack level to
the user?
- Click start, right-click network, and select properties
,- Click start, right click computer, and select properties
- Click start, right click computer, and select manage
- Click start, right click network, and select manage - ANSWER Click Start, right-click
Computer, and select Properties
An IT security technician needs to establish host based security for company
workstations. Which of the following will BEST meet this requirement?
- Implement IIS hardening by restricting service accounts
- Implement database hardening y applying vendor guidelines
- Implement perimeter firewall rules to restrict access
- Implement OS hardening by applying GPOs - ANSWER Implement OS hardening by
applying GPOs
Which of the following should you implement to keep a well-maintained computer?
- Update the firewall
- Update the BIOS
- Use a surge protector
- Remove the unnecessary firewall - ANSWER Update the BIOS
To open the Local Group Policy console window, a user can only use the MMC in the
Run prompt. T/F - ANSWER False
The convert command converts an NTFS drive to FAT32. T/F - ANSWER False
The systeminfo commands show a list of hot fixes that have been installed to the
operating system. - ANSWER True
The option Never Click for Updates is recommended by Microsoft. T/F - ANSWER
A service pack is a group of updates, bug fixes, updated drivers, and security fixes. T/F
- ANSWER True
A recently installed application update caused a vital application to crash during the
middle of the
workday. The application remained down until a previous version could be reinstalled on
the
server, and this resulted in a significant loss of data and revenue.
Which of the following could BEST prevent this issue from occurring again?
A. Application configuration baselines
B. Application hardening
C. Application access controls
D. Application patch management - ANSWER
Which commands disable a service in the command line?
- net stop
- net start
, -net disable
-sc config - ANSWER sc config
Hardening is the act of configuring an OS securely, updating it, and removing
unnecessary applications. T/F - ANSWER True
Which of the following encompasses application patch management?
- Configuration management
- Policy management
- Cross-site request forgery
- Fuzzing - ANSWER Configuration management
Which of the following is required to allow multiple servers to exist on one physical
server?
- Software as a Service (SaaS)
- Platform as a Service (PaaS)
- Virtualization
- Infrastructure as a Service(IaaS) - ANSWER Virtualization
After a company has standardized to a single operating system, not all servers are
immune to a
well-known OS vulnerability. Which of the following solutions would mitigate this issue?
A. Host based firewall
B. Initial baseline configurations
C. Discretionary access control
D. Patch management system - ANSWER Patch management system
Which of the following application security testing techniques is implemented when an
automated system generates random input data?
- Fuzzing
- XSRF
-Hardening
-Input validation - ANSWER Fuzzing
ActiveX controls can run on any browser platform. T/F - ANSWER False
A MAC flood is when a person accesses a single port of a switch that was not physically
secured. T/F - ANSWER False
Which of the following technologies can store multi-tenant data with different security
requirements?
- Data loss prevention
-Trusted platform module
-Hard drive encryption
-Cloud computing - ANSWER Cloud computing
Correct 100%
Back Orifice is an example of a backdoor. T/F - ANSWER True
A group of compromised computers that have software installed by a worm or Trojan is
known as which of the following?
A. Botnet
B. Virus
C. Honeypot
D. Zombie - ANSWER A. Botnet
Which of the following is an inline device that checks all packets?
A. Host-biased intrusion detection system
B. Statistical anomaly
C. Network intrusion detection system
D. Personal software firewall - ANSWER A. Host-biased intrusion detection system
By turning on the phishing filter a person can prevent spyware. T/F - ANSWER True
Ransomware holds a user's files for ransom by encrypting them. T/F - ANSWER True
Which of the following can help to secure the BIOS of a computer? Select two:
- Use a case lock
- Use a BIOS supervisor password.
- Configure a user password
- Disable USB ports - ANSWER Use a case lock
Which of the following is the best mode to use when scanning for viruses?
- Safe mode
- Last known good configuration
- Command prompt only
- Boot into Windows normally - ANSWER
Which of the following methods of malware delivery is used in computer programs to
bypass normal authentication?
- Privilege escalation
- Active interception
- Backdoor
- Rootkit - ANSWER
Which one of the following navigiational paths shows the current service pack level to
the user?
- Click start, right-click network, and select properties
,- Click start, right click computer, and select properties
- Click start, right click computer, and select manage
- Click start, right click network, and select manage - ANSWER Click Start, right-click
Computer, and select Properties
An IT security technician needs to establish host based security for company
workstations. Which of the following will BEST meet this requirement?
- Implement IIS hardening by restricting service accounts
- Implement database hardening y applying vendor guidelines
- Implement perimeter firewall rules to restrict access
- Implement OS hardening by applying GPOs - ANSWER Implement OS hardening by
applying GPOs
Which of the following should you implement to keep a well-maintained computer?
- Update the firewall
- Update the BIOS
- Use a surge protector
- Remove the unnecessary firewall - ANSWER Update the BIOS
To open the Local Group Policy console window, a user can only use the MMC in the
Run prompt. T/F - ANSWER False
The convert command converts an NTFS drive to FAT32. T/F - ANSWER False
The systeminfo commands show a list of hot fixes that have been installed to the
operating system. - ANSWER True
The option Never Click for Updates is recommended by Microsoft. T/F - ANSWER
A service pack is a group of updates, bug fixes, updated drivers, and security fixes. T/F
- ANSWER True
A recently installed application update caused a vital application to crash during the
middle of the
workday. The application remained down until a previous version could be reinstalled on
the
server, and this resulted in a significant loss of data and revenue.
Which of the following could BEST prevent this issue from occurring again?
A. Application configuration baselines
B. Application hardening
C. Application access controls
D. Application patch management - ANSWER
Which commands disable a service in the command line?
- net stop
- net start
, -net disable
-sc config - ANSWER sc config
Hardening is the act of configuring an OS securely, updating it, and removing
unnecessary applications. T/F - ANSWER True
Which of the following encompasses application patch management?
- Configuration management
- Policy management
- Cross-site request forgery
- Fuzzing - ANSWER Configuration management
Which of the following is required to allow multiple servers to exist on one physical
server?
- Software as a Service (SaaS)
- Platform as a Service (PaaS)
- Virtualization
- Infrastructure as a Service(IaaS) - ANSWER Virtualization
After a company has standardized to a single operating system, not all servers are
immune to a
well-known OS vulnerability. Which of the following solutions would mitigate this issue?
A. Host based firewall
B. Initial baseline configurations
C. Discretionary access control
D. Patch management system - ANSWER Patch management system
Which of the following application security testing techniques is implemented when an
automated system generates random input data?
- Fuzzing
- XSRF
-Hardening
-Input validation - ANSWER Fuzzing
ActiveX controls can run on any browser platform. T/F - ANSWER False
A MAC flood is when a person accesses a single port of a switch that was not physically
secured. T/F - ANSWER False
Which of the following technologies can store multi-tenant data with different security
requirements?
- Data loss prevention
-Trusted platform module
-Hard drive encryption
-Cloud computing - ANSWER Cloud computing
