ITS Network Security
Question 1.
Which controls are looked at as technical controls?
ANSWER
Firewall and Intrusion Detection System (IDS)
Question 2.
Which type of injection attack uses keywords such as SELECT and UPDATE to manipulate data through a web form?
ANSWER
SQL injection
Question 3.
An end user calls the help desk complaining about a web page not loading the most current data for the page unless the user
refreshes the page. What should the help desk agent have the user do first?
ANSWER
Clear out the cache
Question 4.
When one suspects a device has been affected by malware, what is the first step that should be taken to remediate the device?
ANSWER
Disconnect the device from the network
Question 5.
A good Audit Plan may collect both successful and failed events.
ANSWER
True
Question 6.
Audit events take up computer resources and personnel time, so you should be selective about the events to audit.
ANSWER
True
Question 7.
You should always audit log-on successes.
ANSWER
False
, Question 8.
[Spoofing] redirects Internet traffic from one website to an identical-looking site in order to trick you into entering your username and
password into their database.
ANSWER
Pharming
Question 9.
What must take place for someone trying to enter a physical area of a building before access control takes place?
ANSWER
Authentication
Question 10.
MAC Filtering is best suited for large wireless networks.
ANSWER
False, Mac Filtering is best suited for small wireless networks.
Question 11.
WEP is the strongest form of encryption for a wireless network.
ANSWER
False, its WAP
Question 12.
WPA/WPA2 can require an authentication server.
ANSWER
True, if using 802.1x mode
Question 13.
One of the layers of defense in the anti-phishing and malware protection strategies developed by Microsoft is ___.
ANSWER
SmartScreen Filter
Question 14.
One ways you can protect your computer from hackers and malicious software is to use ___.
ANSWER
Windows Firewall
Question 15.
What is considered the minimum length of a good password?
ANSWER
Eight characters
, Question 16.
While launching a diagnostic software package, you select to RunAs Admin, this action grants the executioner the ___ permissions.
ANSWER
Least restrictive
Question 17.
If you were to launch a diagnostic software package without selecting RunAs Admin, this action grants the executioner the ___
permissions.
ANSWER
Most restrictive
Question 18.
___ allows multiple computers on an internal network to share one public IP address.
ANSWER
Network Address Translation (NAT)
Question 19.
Which type of VPN will often have a user connect through a web browser?
ANSWER
Secure Sockets Layer (SSL)
Question 20.
Which type of VPN connection usually connects two business entities?
ANSWER
Site-to-Site
Question 21.
What email filtering technique uses a list of verified DNS domains to verify that an email is coming from a trusted IP address?
ANSWER
Sender Policy Framework (SPF)
Question 22.
Applications-level firewalls can provide content filtering and virus protection.
ANSWER
True
Question 23.
Application-level firewalls support caching.
ANSWER
True
Question 1.
Which controls are looked at as technical controls?
ANSWER
Firewall and Intrusion Detection System (IDS)
Question 2.
Which type of injection attack uses keywords such as SELECT and UPDATE to manipulate data through a web form?
ANSWER
SQL injection
Question 3.
An end user calls the help desk complaining about a web page not loading the most current data for the page unless the user
refreshes the page. What should the help desk agent have the user do first?
ANSWER
Clear out the cache
Question 4.
When one suspects a device has been affected by malware, what is the first step that should be taken to remediate the device?
ANSWER
Disconnect the device from the network
Question 5.
A good Audit Plan may collect both successful and failed events.
ANSWER
True
Question 6.
Audit events take up computer resources and personnel time, so you should be selective about the events to audit.
ANSWER
True
Question 7.
You should always audit log-on successes.
ANSWER
False
, Question 8.
[Spoofing] redirects Internet traffic from one website to an identical-looking site in order to trick you into entering your username and
password into their database.
ANSWER
Pharming
Question 9.
What must take place for someone trying to enter a physical area of a building before access control takes place?
ANSWER
Authentication
Question 10.
MAC Filtering is best suited for large wireless networks.
ANSWER
False, Mac Filtering is best suited for small wireless networks.
Question 11.
WEP is the strongest form of encryption for a wireless network.
ANSWER
False, its WAP
Question 12.
WPA/WPA2 can require an authentication server.
ANSWER
True, if using 802.1x mode
Question 13.
One of the layers of defense in the anti-phishing and malware protection strategies developed by Microsoft is ___.
ANSWER
SmartScreen Filter
Question 14.
One ways you can protect your computer from hackers and malicious software is to use ___.
ANSWER
Windows Firewall
Question 15.
What is considered the minimum length of a good password?
ANSWER
Eight characters
, Question 16.
While launching a diagnostic software package, you select to RunAs Admin, this action grants the executioner the ___ permissions.
ANSWER
Least restrictive
Question 17.
If you were to launch a diagnostic software package without selecting RunAs Admin, this action grants the executioner the ___
permissions.
ANSWER
Most restrictive
Question 18.
___ allows multiple computers on an internal network to share one public IP address.
ANSWER
Network Address Translation (NAT)
Question 19.
Which type of VPN will often have a user connect through a web browser?
ANSWER
Secure Sockets Layer (SSL)
Question 20.
Which type of VPN connection usually connects two business entities?
ANSWER
Site-to-Site
Question 21.
What email filtering technique uses a list of verified DNS domains to verify that an email is coming from a trusted IP address?
ANSWER
Sender Policy Framework (SPF)
Question 22.
Applications-level firewalls can provide content filtering and virus protection.
ANSWER
True
Question 23.
Application-level firewalls support caching.
ANSWER
True
