Certiport Network Security Study Guide
Question 1.
A VPN encapsulates and encrypts data to provide a secure connection.
ANSWER
True
Question 2.
Which controls are looked at as technical Controls A) IDs B) Training manual C) Firewall D) AUP
ANSWER
IDs & Firewall
Question 3.
Which type of injection attack uses keywords such as select and update to manipulate data through a web form
ANSWER
SQL injection
Question 4.
An end user calls the help desk complaining about a webpage not loading the most current date for the page unless the user
refreshes the page. What should the help desk agent have the user do first?
ANSWER
Clear out the cache
Question 5.
When one suspects a device has been affected by malware what is the first step that should be taken to remediate the device?
ANSWER
disconnect the device from the network
Question 6.
A good audit plan may collect both successful and failed events,
ANSWER
True
Question 7.
Audit events take up computer resources and personnel time so you should be selective about the events to audit
ANSWER
True
, Question 8.
You should always audit log on successes
ANSWER
False, track failed logon attempts instead
Question 9.
_________________ redirects internet traffic from one website to an identical-looking site to trick the user into entering their
username and password into their database
ANSWER
Spoofing
Question 10.
What must take place for someone trying to enter a physical area of a building before access control takes place
ANSWER
Authentication
Question 11.
What is true about networks
ANSWER
1) WPA, and WPA2 can require authentication servers
2) WEP has been cracked and should no longer be in use
3) MAc filtering is best used for small wireless networks as MAC addresses need to be added to a MAC filtering table manually
Question 12.
One of the layers of defence in the anti-phishing and malware protection strategies developed by Microsoft is?
ANSWER
Smartscreen filter
Question 13.
One of the ways you can protect your computer from hackers and malicious software to use _____________?
ANSWER
Windows firewall
Question 14.
What is considered the minimum length of a good password
ANSWER
8 Characters
, Question 15.
______________________ allows multiple computers on an internal network to share one public address?
ANSWER
NAT (Network Address translation)
Question 16.
Which type of VPN will often have a user connect through a web browser?
ANSWER
SSL
Question 17.
Which type of VPN connection usually connects two business entities?
ANSWER
site-to-site
Question 18.
What email filtering technique uses a list of verified DNS domains to verify that an email is coming from a trusted IP address?
ANSWER
SPF (Sender policy framework )
Question 19.
Application-level firewalls can provide content filtering and virus protection
ANSWER
True
Question 20.
Application-level firewall support caching
ANSWER
True
Question 21.
Application-level firewalls tend to be less resource-intensive than that of a traditional firewall
ANSWER
False
Question 22.
Application-level firewalls tend to be less resource intensive than that of a traditional firewall when they process application-level
queries
ANSWER
True
Question 1.
A VPN encapsulates and encrypts data to provide a secure connection.
ANSWER
True
Question 2.
Which controls are looked at as technical Controls A) IDs B) Training manual C) Firewall D) AUP
ANSWER
IDs & Firewall
Question 3.
Which type of injection attack uses keywords such as select and update to manipulate data through a web form
ANSWER
SQL injection
Question 4.
An end user calls the help desk complaining about a webpage not loading the most current date for the page unless the user
refreshes the page. What should the help desk agent have the user do first?
ANSWER
Clear out the cache
Question 5.
When one suspects a device has been affected by malware what is the first step that should be taken to remediate the device?
ANSWER
disconnect the device from the network
Question 6.
A good audit plan may collect both successful and failed events,
ANSWER
True
Question 7.
Audit events take up computer resources and personnel time so you should be selective about the events to audit
ANSWER
True
, Question 8.
You should always audit log on successes
ANSWER
False, track failed logon attempts instead
Question 9.
_________________ redirects internet traffic from one website to an identical-looking site to trick the user into entering their
username and password into their database
ANSWER
Spoofing
Question 10.
What must take place for someone trying to enter a physical area of a building before access control takes place
ANSWER
Authentication
Question 11.
What is true about networks
ANSWER
1) WPA, and WPA2 can require authentication servers
2) WEP has been cracked and should no longer be in use
3) MAc filtering is best used for small wireless networks as MAC addresses need to be added to a MAC filtering table manually
Question 12.
One of the layers of defence in the anti-phishing and malware protection strategies developed by Microsoft is?
ANSWER
Smartscreen filter
Question 13.
One of the ways you can protect your computer from hackers and malicious software to use _____________?
ANSWER
Windows firewall
Question 14.
What is considered the minimum length of a good password
ANSWER
8 Characters
, Question 15.
______________________ allows multiple computers on an internal network to share one public address?
ANSWER
NAT (Network Address translation)
Question 16.
Which type of VPN will often have a user connect through a web browser?
ANSWER
SSL
Question 17.
Which type of VPN connection usually connects two business entities?
ANSWER
site-to-site
Question 18.
What email filtering technique uses a list of verified DNS domains to verify that an email is coming from a trusted IP address?
ANSWER
SPF (Sender policy framework )
Question 19.
Application-level firewalls can provide content filtering and virus protection
ANSWER
True
Question 20.
Application-level firewall support caching
ANSWER
True
Question 21.
Application-level firewalls tend to be less resource-intensive than that of a traditional firewall
ANSWER
False
Question 22.
Application-level firewalls tend to be less resource intensive than that of a traditional firewall when they process application-level
queries
ANSWER
True
