ITS network security
What would firewall controls be an example of? – answer technical controls
What would intrusion detection system controls be an example of? – answer technical
controls
What are technical controls? - answer Controls that enforce security.
Which type of injection attack uses keywords such as SELECT and UPDATE to
manipulate data through a web form? – answer SQL injection
What should a user do if a web page is not loading the most current data for a web
page unless the user refreshes the page? – answer Clear out the cache.
What does a cache do? - answer Stores web page data on your computer so that it
loads faster.
What does clearing a cache do? - answer Causes the web page to open like it is the
first time you are opening it.
What is the first thing you do if you think your device is affected by malware? -
answerDisconnect from the internet.
Why should not everything be audited? - answerThey take up computer resources and
personal time.
What makes up a good audit plan? - answerSuccessful and failed events.
What redirects internet traffic from one site to another by taking an entire DNS or
website over to trick you into entering your username and password? - answerPharming
What must take place for someone trying to enter a physical area of a building before
access control takes place? - answerAuthentication
What are examples of authentication? - answerBiometrics, multifactor authentication,
token authentication
What is authentication? - answerProving that someone is who they say that they are.
What is authorization? - answerDetermines access levels related to system resources
for a person.
, What networks is MAC filtering best suited for? - answerSmall wireless networks
because MAC addresses need to be manually added to a filtering table.
Can WPA/WPA2 require an authentication server? - answerYes
What is default on Windows that can protect your computer from hackers and malicious
software? - answerWindows Firewall
Why would you use run as administrator? - answerTo have the least restrictive
permissions.
What does network address translation do? - answerAllows multiple computers on an
internal network to share one public IP address.
How does NAT work? - answerIt maps multiple local private addresses to a public one
before transferring the information.
What is secure sockets layer or SSL? - answerAn encryption based internet security
protocol.
What does sender policy framework do? - answerFilters emails using a list of verified
DNS domains to verify that an email is coming from a trusted IP address.
Can application level firewalls provide content filtering and virus protection? -
answerYes
Do application level firewalls support caching? - answerYes
Does an application level firewall tend to be more or less resource intensive than a
traditional firewall? - answerIt tends to be more resource intensive.
What permissions are basic NTFS permissions? - answerRead, write, list folder
contents, read and execute, modify, full control
What two protocols are unsecure and should be avoided in server environments? -
answerPassword authentication protocol and telnet because they both transmit data in
clear text.
What type of DNS record contains an IP address that is then used to look up an
associated host or domain name? - answerPTR or pointer
What is a zero day attack? - answerAny attack that is not curable using current malware
signatures. Exposes a vulnerability that was not previously known.
What type of malware bypasses pop-up blockers and floods users with ads? -
answerAdware
What would firewall controls be an example of? – answer technical controls
What would intrusion detection system controls be an example of? – answer technical
controls
What are technical controls? - answer Controls that enforce security.
Which type of injection attack uses keywords such as SELECT and UPDATE to
manipulate data through a web form? – answer SQL injection
What should a user do if a web page is not loading the most current data for a web
page unless the user refreshes the page? – answer Clear out the cache.
What does a cache do? - answer Stores web page data on your computer so that it
loads faster.
What does clearing a cache do? - answer Causes the web page to open like it is the
first time you are opening it.
What is the first thing you do if you think your device is affected by malware? -
answerDisconnect from the internet.
Why should not everything be audited? - answerThey take up computer resources and
personal time.
What makes up a good audit plan? - answerSuccessful and failed events.
What redirects internet traffic from one site to another by taking an entire DNS or
website over to trick you into entering your username and password? - answerPharming
What must take place for someone trying to enter a physical area of a building before
access control takes place? - answerAuthentication
What are examples of authentication? - answerBiometrics, multifactor authentication,
token authentication
What is authentication? - answerProving that someone is who they say that they are.
What is authorization? - answerDetermines access levels related to system resources
for a person.
, What networks is MAC filtering best suited for? - answerSmall wireless networks
because MAC addresses need to be manually added to a filtering table.
Can WPA/WPA2 require an authentication server? - answerYes
What is default on Windows that can protect your computer from hackers and malicious
software? - answerWindows Firewall
Why would you use run as administrator? - answerTo have the least restrictive
permissions.
What does network address translation do? - answerAllows multiple computers on an
internal network to share one public IP address.
How does NAT work? - answerIt maps multiple local private addresses to a public one
before transferring the information.
What is secure sockets layer or SSL? - answerAn encryption based internet security
protocol.
What does sender policy framework do? - answerFilters emails using a list of verified
DNS domains to verify that an email is coming from a trusted IP address.
Can application level firewalls provide content filtering and virus protection? -
answerYes
Do application level firewalls support caching? - answerYes
Does an application level firewall tend to be more or less resource intensive than a
traditional firewall? - answerIt tends to be more resource intensive.
What permissions are basic NTFS permissions? - answerRead, write, list folder
contents, read and execute, modify, full control
What two protocols are unsecure and should be avoided in server environments? -
answerPassword authentication protocol and telnet because they both transmit data in
clear text.
What type of DNS record contains an IP address that is then used to look up an
associated host or domain name? - answerPTR or pointer
What is a zero day attack? - answerAny attack that is not curable using current malware
signatures. Exposes a vulnerability that was not previously known.
What type of malware bypasses pop-up blockers and floods users with ads? -
answerAdware
