CIST 2601: Implementing Operating System Security
CIST 2601 Final Exam Questions and
Answers (All Accurately Answered).
Accurate 2025 Exam. A+ Score.
Approximately what percentage of computers use the Windows operating
system? - CORRECT ANS >> 90
Which encryption method is not automatically enabled with the operating system
and must be enabled after installation? - CORRECT ANS >> BitLocker in Windows
Server 2008 R2
What acronym describes each entry in a DACL? - CORRECT ANS >> ACE
____________________ is an approach to securing an IT environment that uses a
collection of strategies. - CORRECT ANS >> Defense in depth
The ______________ is the collection of all computers and network devices
connected to one or more networks that make up an IT environment. - CORRECT
ANS >> IT infrastructure
What is the older Windows authentication method that was popular before
Kerberos? - CORRECT ANS >> NTLM
,CIST 2601: Implementing Operating System Security
Why is encryption used as a common security control? - CORRECT ANS >>
Encryption provides an effective layer of protection in a multi-layered defense.
What is the primary benefit of using kernel loadable modules? - CORRECT ANS
>> The primary benefit of using Kernel Loadable modules is that the kernel is less
Memory intensive. As a secondary benefit, loading only the modules that you will
be using to the kernel decreases the attack surface by not loading modules that
will not be used.
Which Microsoft Server 2008 R2 edition is a cost-effective, entry-level server
operating system for small businesses? - CORRECT ANS >> Foundation
Which structure does Windows use to store access control rules for objects? -
CORRECT ANS >> Access Control List
Which level of EFS may leave traces of unencrypted data on the disk? -
CORRECT ANS >> File
Which core part of an operating system provides essential services? - CORRECT
ANS >> Kernel
Which operating system is the ancestor of today's Microsoft Windows? -
CORRECT ANS >> DOS
In which process would a user be asked to enter a token-generated password? -
CORRECT ANS >> Authorization
, CIST 2601: Implementing Operating System Security
Which default Windows group provides only limited administrative rights,
including the ability to install software? - CORRECT ANS >> Power Users
Which of the following well-known attacks used a worm to exploit vulnerabilities
in Microsoft Internet Information Services (IIS) starting in July of 2001? -
CORRECT ANS >> Code Red
Which authentication method uses data object classification labels? - CORRECT
ANS >> Mandatory Access Control
What does a client need to access a protected resource when using the Kerberos
protocol? - CORRECT ANS >> Access ticket
Which of the following actions allow an attacker to access restricted parts of the
operating system? - CORRECT ANS >> Change a user mode process to
supervisor mode.
The ability to run a backup is an example of which Windows feature? - CORRECT
ANS >> Right
____________ is the common name of the United States Department of Defense
Trusted Computer System Evaluation Criteria. - CORRECT ANS >> Orange Book
CIST 2601 Final Exam Questions and
Answers (All Accurately Answered).
Accurate 2025 Exam. A+ Score.
Approximately what percentage of computers use the Windows operating
system? - CORRECT ANS >> 90
Which encryption method is not automatically enabled with the operating system
and must be enabled after installation? - CORRECT ANS >> BitLocker in Windows
Server 2008 R2
What acronym describes each entry in a DACL? - CORRECT ANS >> ACE
____________________ is an approach to securing an IT environment that uses a
collection of strategies. - CORRECT ANS >> Defense in depth
The ______________ is the collection of all computers and network devices
connected to one or more networks that make up an IT environment. - CORRECT
ANS >> IT infrastructure
What is the older Windows authentication method that was popular before
Kerberos? - CORRECT ANS >> NTLM
,CIST 2601: Implementing Operating System Security
Why is encryption used as a common security control? - CORRECT ANS >>
Encryption provides an effective layer of protection in a multi-layered defense.
What is the primary benefit of using kernel loadable modules? - CORRECT ANS
>> The primary benefit of using Kernel Loadable modules is that the kernel is less
Memory intensive. As a secondary benefit, loading only the modules that you will
be using to the kernel decreases the attack surface by not loading modules that
will not be used.
Which Microsoft Server 2008 R2 edition is a cost-effective, entry-level server
operating system for small businesses? - CORRECT ANS >> Foundation
Which structure does Windows use to store access control rules for objects? -
CORRECT ANS >> Access Control List
Which level of EFS may leave traces of unencrypted data on the disk? -
CORRECT ANS >> File
Which core part of an operating system provides essential services? - CORRECT
ANS >> Kernel
Which operating system is the ancestor of today's Microsoft Windows? -
CORRECT ANS >> DOS
In which process would a user be asked to enter a token-generated password? -
CORRECT ANS >> Authorization
, CIST 2601: Implementing Operating System Security
Which default Windows group provides only limited administrative rights,
including the ability to install software? - CORRECT ANS >> Power Users
Which of the following well-known attacks used a worm to exploit vulnerabilities
in Microsoft Internet Information Services (IIS) starting in July of 2001? -
CORRECT ANS >> Code Red
Which authentication method uses data object classification labels? - CORRECT
ANS >> Mandatory Access Control
What does a client need to access a protected resource when using the Kerberos
protocol? - CORRECT ANS >> Access ticket
Which of the following actions allow an attacker to access restricted parts of the
operating system? - CORRECT ANS >> Change a user mode process to
supervisor mode.
The ability to run a backup is an example of which Windows feature? - CORRECT
ANS >> Right
____________ is the common name of the United States Department of Defense
Trusted Computer System Evaluation Criteria. - CORRECT ANS >> Orange Book
