D317 (DION) PRACTICE EXAM 4 & 5 STUDY
QUESTIONS AND ANSWERS COMPLETE AND
VERIFIED WESTERN GOVERNORS’ UNIVERSITY
A user attempted to go to their favorite social media website this morning from
their laptop. When they typed in Facebook.com, their browser redirected them to
MalwareInfect.com instead. You asked the user to clear their cache, history, and
cookies, but the problem remains. What should you do NEXT to solve this
problem?
check the host’s file
host file
is a local plain text file that maps servers or hostnames to IP addresses. It was the
original method to resolve hostnames to a specific IP address. The hosts file is
usually the first process in the domain name resolution procedure. When a user
requests a webpage, the hosts.ini file is first checked for the IP address. If the IP
address isn't found in the hosts.ini file, then the workstation requests the IP address
from the DNS server. Attackers often modify host.ini files to redirect users to a
malicious webpage instead of one they would commonly use like Google, Facebook,
and others.
A printing company uses an isolated Windows XP workstation to print out large
format banners for its customers on a custom printer. Unfortunately, the printer
does not support newer versions of Windows and would cost $50,000 to replace
it. To mitigate this risk, the workstation is not connected to the internet or a local
area network. When a customer needs a banner printer, the technician takes a
copy of their PDF file and moves it to the Windows XP workstation using a USB
thumb drive. The workstation recently became infected with malware when
printing a customer's file. The technician remediated the issue, but the
workstation became infected again three weeks later. Which of the following
actions did the technician forget to perform?
,Manually update the antivirus on the workstation and set it to perform on-access
scans
Your company recently suffered a small data breach caused by an employee
emailing themselves a copy of the current customer's names, account numbers,
and credit card limits. You are determined that something like this shall never
happen again. Which of the following logical security concepts should you
implement to prevent a trusted insider from stealing your corporate data?
DLP
DLP
Data loss prevention software detects potential data breaches/data ex-filtration
transmissions and prevents them by monitoring, detecting, and blocking sensitive
data while in use (endpoint actions), in-motion (network traffic), and at rest (data
storage). Since the user was an authorized user (employee), changing your password
policy, reconfiguring the firewall, or setting up an MDM solution would not solve this
problem. Instead, a DLP solution must be implemented.
Your company is expanding its operations in the European Union and is
concerned about additional governmental regulations that may apply. Which of
the following regulations applies when processing personal data within the
European Union?
GDPR
GDPR (General Data Protection Regulation)
is a regulation created in the European Union that creates provisions and
requirements to protect the personal data of European Union (EU) citizens. Transfers
of personal data outside the EU Single Market are restricted unless protected by like-
for-like regulations, such as the US's Privacy Shield requirements.
Which of the following is a connectionless protocol that utilizes on UDP?
TFTP
user datagram protocol (UIDP)
,is a protocol in the TCP/IP suite that operates at the transport layer to provide
connectionless, non-guaranteed communication with no sequencing or flow control.
UDP is faster than TCP, but it does not provide reliable delivery of the packets.
The trivial file transfer protocol (TFTP)
is a protocol used to get a file from a remote host or put a file onto a remote host.
TFTP is commonly used with embedded devices or systems that retrieve firmware,
configuration information, or a system image during the boot process. TFTP operates
over UDP port 69. The hypertext transfer protocol (HTTP) is a protocol used to provide
web content to browsers using TCP port 80.
hypertext transfer protocol (HTTP)
is a protocol used to provide web content to browsers using TCP port 80. The
hypertext transfer protocol secure (HTTPS) is a secure protocol used to provide web
content to browsers using SSL/TLS encryption over TCP port 443.
You are installing a new wireless network in your office building and want to
ensure it is secure. Which of the following configurations would create the MOST
secure wireless network?
WPA2 and AES
You are installing a new file server at the offices of Dion Training. The entire
building has a diesel generator installed to protect it from power outages. The file
server must have zero downtime once placed into production. Which of the
following power sources should the file server utilize?
Uninterruptible power supply
uninterruptible power supply (UPS)
is a redundant power system that provides minutes to hours of power from an
internal battery unit
You need to connect to a Linux server to conduct some maintenance. The server
is located in a remote office about 50 miles away. You decide to connect the
server remotely instead of driving to the location to save some time, but you want
, to ensure you do this securely. The Linux server has VNC installed, but it isn't
configured to provide an encrypted connection. Which of the following should you
use to secure the VNC connection to the remote server?
SSH in tunnel mode
Jason checks the Dion Training server room and finds that it currently has only
10% humidity. Which of the following risks to the servers could occur due to this
low humidity level?
Accidental static charge
Dion Training is looking to purchase Microsoft Office for all of its employees to
use. Which of the following licenses would be BEST for this small company to
purchase?
Business
What type of wireless security measure can easily be defeated by a hacker by
spoofing their network interface card's hardware address?
MAC filtering
MAC addresses
are permanently burned into the network interface card by the manufacturer and
serve as the device's physical address.
Wireless Access Points (WAP)
can utilize MAC filtering to ensure only known network interface cards are allowed to
connect to the network. If the hacker changes their MAC address to a trusted MAC
address, they can easily bypass this security mechanism. MAC filtering is considered
a good security practice as part of a larger defense-in-depth strategy, but it won't
stop a skilled hacker for long.
Which of the following remote access tools is a command-line terminal
emulation program operating on port 23?
Telnet
QUESTIONS AND ANSWERS COMPLETE AND
VERIFIED WESTERN GOVERNORS’ UNIVERSITY
A user attempted to go to their favorite social media website this morning from
their laptop. When they typed in Facebook.com, their browser redirected them to
MalwareInfect.com instead. You asked the user to clear their cache, history, and
cookies, but the problem remains. What should you do NEXT to solve this
problem?
check the host’s file
host file
is a local plain text file that maps servers or hostnames to IP addresses. It was the
original method to resolve hostnames to a specific IP address. The hosts file is
usually the first process in the domain name resolution procedure. When a user
requests a webpage, the hosts.ini file is first checked for the IP address. If the IP
address isn't found in the hosts.ini file, then the workstation requests the IP address
from the DNS server. Attackers often modify host.ini files to redirect users to a
malicious webpage instead of one they would commonly use like Google, Facebook,
and others.
A printing company uses an isolated Windows XP workstation to print out large
format banners for its customers on a custom printer. Unfortunately, the printer
does not support newer versions of Windows and would cost $50,000 to replace
it. To mitigate this risk, the workstation is not connected to the internet or a local
area network. When a customer needs a banner printer, the technician takes a
copy of their PDF file and moves it to the Windows XP workstation using a USB
thumb drive. The workstation recently became infected with malware when
printing a customer's file. The technician remediated the issue, but the
workstation became infected again three weeks later. Which of the following
actions did the technician forget to perform?
,Manually update the antivirus on the workstation and set it to perform on-access
scans
Your company recently suffered a small data breach caused by an employee
emailing themselves a copy of the current customer's names, account numbers,
and credit card limits. You are determined that something like this shall never
happen again. Which of the following logical security concepts should you
implement to prevent a trusted insider from stealing your corporate data?
DLP
DLP
Data loss prevention software detects potential data breaches/data ex-filtration
transmissions and prevents them by monitoring, detecting, and blocking sensitive
data while in use (endpoint actions), in-motion (network traffic), and at rest (data
storage). Since the user was an authorized user (employee), changing your password
policy, reconfiguring the firewall, or setting up an MDM solution would not solve this
problem. Instead, a DLP solution must be implemented.
Your company is expanding its operations in the European Union and is
concerned about additional governmental regulations that may apply. Which of
the following regulations applies when processing personal data within the
European Union?
GDPR
GDPR (General Data Protection Regulation)
is a regulation created in the European Union that creates provisions and
requirements to protect the personal data of European Union (EU) citizens. Transfers
of personal data outside the EU Single Market are restricted unless protected by like-
for-like regulations, such as the US's Privacy Shield requirements.
Which of the following is a connectionless protocol that utilizes on UDP?
TFTP
user datagram protocol (UIDP)
,is a protocol in the TCP/IP suite that operates at the transport layer to provide
connectionless, non-guaranteed communication with no sequencing or flow control.
UDP is faster than TCP, but it does not provide reliable delivery of the packets.
The trivial file transfer protocol (TFTP)
is a protocol used to get a file from a remote host or put a file onto a remote host.
TFTP is commonly used with embedded devices or systems that retrieve firmware,
configuration information, or a system image during the boot process. TFTP operates
over UDP port 69. The hypertext transfer protocol (HTTP) is a protocol used to provide
web content to browsers using TCP port 80.
hypertext transfer protocol (HTTP)
is a protocol used to provide web content to browsers using TCP port 80. The
hypertext transfer protocol secure (HTTPS) is a secure protocol used to provide web
content to browsers using SSL/TLS encryption over TCP port 443.
You are installing a new wireless network in your office building and want to
ensure it is secure. Which of the following configurations would create the MOST
secure wireless network?
WPA2 and AES
You are installing a new file server at the offices of Dion Training. The entire
building has a diesel generator installed to protect it from power outages. The file
server must have zero downtime once placed into production. Which of the
following power sources should the file server utilize?
Uninterruptible power supply
uninterruptible power supply (UPS)
is a redundant power system that provides minutes to hours of power from an
internal battery unit
You need to connect to a Linux server to conduct some maintenance. The server
is located in a remote office about 50 miles away. You decide to connect the
server remotely instead of driving to the location to save some time, but you want
, to ensure you do this securely. The Linux server has VNC installed, but it isn't
configured to provide an encrypted connection. Which of the following should you
use to secure the VNC connection to the remote server?
SSH in tunnel mode
Jason checks the Dion Training server room and finds that it currently has only
10% humidity. Which of the following risks to the servers could occur due to this
low humidity level?
Accidental static charge
Dion Training is looking to purchase Microsoft Office for all of its employees to
use. Which of the following licenses would be BEST for this small company to
purchase?
Business
What type of wireless security measure can easily be defeated by a hacker by
spoofing their network interface card's hardware address?
MAC filtering
MAC addresses
are permanently burned into the network interface card by the manufacturer and
serve as the device's physical address.
Wireless Access Points (WAP)
can utilize MAC filtering to ensure only known network interface cards are allowed to
connect to the network. If the hacker changes their MAC address to a trusted MAC
address, they can easily bypass this security mechanism. MAC filtering is considered
a good security practice as part of a larger defense-in-depth strategy, but it won't
stop a skilled hacker for long.
Which of the following remote access tools is a command-line terminal
emulation program operating on port 23?
Telnet
