Question 1

What is the name of the built-in firewall on most Linux distributions?

Accepted Answer

A)  Linux Defender 
B)  netfilter 
C)  iptables 
D)  Security and Privacy 
A)  Linux Defender 
B)  netfilter 
C)  iptables 
D)  Security and Privacy B

Question 2

You are setting up a Windows domain network with 40 Windows 10 clients and six servers, including two domain controllers. You are not satisfied with the default Windows Defender Firewall settings on your client computers. Which of the following is an efficient method for making changes to the settings on all your clients?

Accepted Answer

A)  Temporarily hire technicians to configure the clients. 
B)  Send a memo to users about how to configure the firewall. 
C)  Use Group Policy to configure the firewall settings. 
D)  Export the correct settings from one computer and import them on all other clients. 
A)  Temporarily hire technicians to configure the clients. 
B)  Send a memo to users about how to configure the firewall. 
C)  Use Group Policy to configure the firewall settings. 
D)  Export the correct settings from one computer and import them on all other clients. C

Question 3

Which of the following is true of most host firewalls?

Accepted Answer

A)  They are not useful for stopping inside threats. 
B)  All incoming traffic is allowed while outgoing traffic is disallowed. 
C)  All incoming traffic is disallowed by default. 
D)  They allow all outgoing traffic by default. 
A)  They are not useful for stopping inside threats. 
B)  All incoming traffic is allowed while outgoing traffic is disallowed. 
C)  All incoming traffic is disallowed by default. 
D)  They allow all outgoing traffic by default. D

Question 4

Which protocol works by establishing an association between two communicating devices and can use a preshared key for authentication?

Accepted Answer

A)  EFS 
B)  Kerberos 
C)  IPsec 
D)  SMB 
A)  EFS 
B)  Kerberos 
C)  IPsec 
D)  SMB

Question 5

What type of policy describes the methods involved when a user signs into the network?

Accepted Answer

A)  audit 
B)  privacy 
C)  authentication 
D)  acceptable use 
A)  audit 
B)  privacy 
C)  authentication 
D)  acceptable use

Question 6

A user calls the helpdesk and wants to know where she can find the company's policy about virus protection. To which policy should you refer her?

Accepted Answer

A)  privacy policy 
B)  authentication policy 
C)  Internet use policy 
D)  data protection policy 
A)  privacy policy 
B)  authentication policy 
C)  Internet use policy 
D)  data protection policy

Question 7

Which of the following is NOT a reason to use Windows Server Update Services?

Accepted Answer

A)  You have centralized control over product updates. 
B)  Only approved updates are installed. 
C)  Internet bandwidth usage is reduced. 
D)  Updates are automatically tested. 
A)  You have centralized control over product updates. 
B)  Only approved updates are installed. 
C)  Internet bandwidth usage is reduced. 
D)  Updates are automatically tested.

Question 8

A security policy is a set of system configuration rules that are applied by Group Policy.

Accepted Answer

A) True 
 B)False

Question 9

Your organization's Windows Server 2019 server has 64 GB of RAM but has been running a little slow, so you decide to check the virtual memory configuration. You find that the paging file is located on the D: drive where you are running an accounting app with a SQL server database. The paging file is being managed by Windows. Windows is installed on the C: drive and the E: drive is where archived documents are stored. All three volumes are on separate SSD drives and have at least 300 GB of free space. Is there anything you can do to configure the paging file for optimal performance?

Accepted Answer

A)  Manually increase the paging file size. 
B)  Delete the paging file. 
C)  Move the paging file to the E: drive. 
D)  Manually decrease the paging file size. 
A)  Manually increase the paging file size. 
B)  Delete the paging file. 
C)  Move the paging file to the E: drive. 
D)  Manually decrease the paging file size.

Question 10

Which of the following authentication protocols uses certificates for authentication?

Accepted Answer

A)  Kerberos 
B)  EAP-TLS 
C)  PAP 
D)  MS-CHAP v2 
A)  Kerberos 
B)  EAP-TLS 
C)  PAP 
D)  MS-CHAP v2

Question 11

An incremental backup backs up any files that have changed since the last full or incremental backup.

Accepted Answer

A) True 
 B)False

Question 12

The only way to empty the Windows Recycle Bin is by using the Disk Cleanup Tool.

Accepted Answer

A) True 
 B)False

Question 13

Where is virtual memory located on a Linux system?

Accepted Answer

A)  pagefile.sys 
B)  lower portion of RAM 
C)  swap file system 
D)  upper portion of RAM 
A)  pagefile.sys 
B)  lower portion of RAM 
C)  swap file system 
D)  upper portion of RAM

Question 14

If the minimum password length on a Windows system is set to zero, what does that mean?

Accepted Answer

A)  The user never has to change the password. 
B)  The user can use a blank password. 
C)  The user has to change the password every day. 
D)  The user account is disabled. 
A)  The user never has to change the password. 
B)  The user can use a blank password. 
C)  The user has to change the password every day. 
D)  The user account is disabled.

Question 15

What should an administrator do before installing OS security updates on production servers, if possible?

Accepted Answer

A)  Test them in a test environment. 
B)  Debug them using Task Manager. 
C)  Call the update vendor to verify compatibility. 
D)  Have a white hat test the updates for vulnerabilities. 
A)  Test them in a test environment. 
B)  Debug them using Task Manager. 
C)  Call the update vendor to verify compatibility. 
D)  Have a white hat test the updates for vulnerabilities.

Question 16

Which of the following is true about OS security?

Accepted Answer

A)  Security flaws discovered by white hats are used to get ransom from vendors. 
B)  Black hats are paid by OS vendors to test for vulnerabilities. 
C)  Security flaws discovered by white hats are reported to the OS vendor. 
D)  Security updates should only be installed if an OS is under attack. 
A)  Security flaws discovered by white hats are used to get ransom from vendors. 
B)  Black hats are paid by OS vendors to test for vulnerabilities. 
C)  Security flaws discovered by white hats are reported to the OS vendor. 
D)  Security updates should only be installed if an OS is under attack.

Question 17

You are configuring the host firewall on a Linux system and want to make sure that the packets sent by the ping program are not processed by the system. Which command should you use?

Accepted Answer

A)  netfilter -A INPUT -p icmp -j DROP 
B)  iptables -A INPUT --dport icmp -j DROP 
C)  netfilter -A INPUT --dport icmp -j DROP 
D)  iptables -A INPUT -p icmp -j DROP 
A)  netfilter -A INPUT -p icmp -j DROP 
B)  iptables -A INPUT --dport icmp -j DROP 
C)  netfilter -A INPUT --dport icmp -j DROP 
D)  iptables -A INPUT -p icmp -j DROP

Question 18

Why do Windows server administrators often change the default update settings on servers?

Accepted Answer

A)  To ensure updates are delayed for at least a month after being issued. 
B)  To prevent unexpected server restarts for updates that require it. 
C)  So they can inform client users of the details of each update. 
D)  To make sure the least critical updates are installed first. 
A)  To ensure updates are delayed for at least a month after being issued. 
B)  To prevent unexpected server restarts for updates that require it. 
C)  So they can inform client users of the details of each update. 
D)  To make sure the least critical updates are installed first.

Question 19

You are describing how Kerberos works to your colleagues and you explain how authentication occurs between a client and a server or between two servers and both parties are identified. What is this type of authentication called?

Accepted Answer

A)  multifactor authentication 
B)  RADIUS authentication 
C)  mutual authentication 
D)  extensible authentication 
A)  multifactor authentication 
B)  RADIUS authentication 
C)  mutual authentication 
D)  extensible authentication

Question 20

Which standard feature on NTFS-formatted disks encrypts individual files and uses a certificate matching the user account of the user who encrypted the file?

Accepted Answer

A)  IPsec 
B)  BitLocker 
C)  VPN 
D)  EFS 
A)  IPsec 
B)  BitLocker 
C)  VPN 
D)  EFS

What is the name of the built-in firewall on most Linux distributions?

Which of the following is true of most host firewalls?

Which protocol works by establishing an association between two communicating devices and can use a preshared key for authentication?

What type of policy describes the methods involved when a user signs into the network?

A user calls the helpdesk and wants to know where she can find the company's policy about virus protection. To which policy should you refer her?

Which of the following is NOT a reason to use Windows Server Update Services?

A security policy is a set of system configuration rules that are applied by Group Policy.

Which of the following authentication protocols uses certificates for authentication?

An incremental backup backs up any files that have changed since the last full or incremental backup.

The only way to empty the Windows Recycle Bin is by using the Disk Cleanup Tool.

Where is virtual memory located on a Linux system?

If the minimum password length on a Windows system is set to zero, what does that mean?

What should an administrator do before installing OS security updates on production servers, if possible?

Which of the following is true about OS security?

You are configuring the host firewall on a Linux system and want to make sure that the packets sent by the ping program are not processed by the system. Which command should you use?

Why do Windows server administrators often change the default update settings on servers?

You are describing how Kerberos works to your colleagues and you explain how authentication occurs between a client and a server or between two servers and both parties are identified. What is this type of authentication called?

Which standard feature on NTFS-formatted disks encrypts individual files and uses a certificate matching the user account of the user who encrypted the file?

Operating Systems Fundamentals

Modern Client and Server Operating Systems

The Central Processing Unit CPU

File Systems

Installing Operating Systems

Devices and Device Drivers

Using and Configuring Storage Devices

Virtualization and Cloud Computing Fundamentals

Network Fundamentals and Configuration

Account and Resource Management

Filters

Exam 11: Securing and Maintaining an Operating System

What is the name of the built-in firewall on most Linux distributions?

Which of the following is true of most host firewalls?

Which protocol works by establishing an association between two communicating devices and can use a preshared key for authentication?

What type of policy describes the methods involved when a user signs into the network?

A user calls the helpdesk and wants to know where she can find the company's policy about virus protection. To which policy should you refer her?

Which of the following is NOT a reason to use Windows Server Update Services?

A security policy is a set of system configuration rules that are applied by Group Policy.

Which of the following authentication protocols uses certificates for authentication?

An incremental backup backs up any files that have changed since the last full or incremental backup.

The only way to empty the Windows Recycle Bin is by using the Disk Cleanup Tool.

Where is virtual memory located on a Linux system?

If the minimum password length on a Windows system is set to zero, what does that mean?

What should an administrator do before installing OS security updates on production servers, if possible?

Which of the following is true about OS security?

You are configuring the host firewall on a Linux system and want to make sure that the packets sent by the ping program are not processed by the system. Which command should you use?

Why do Windows server administrators often change the default update settings on servers?

You are describing how Kerberos works to your colleagues and you explain how authentication occurs between a client and a server or between two servers and both parties are identified. What is this type of authentication called?

Which standard feature on NTFS-formatted disks encrypts individual files and uses a certificate matching the user account of the user who encrypted the file?

Operating Systems Fundamentals

Modern Client and Server Operating Systems

The Central Processing Unit CPU

File Systems

Installing Operating Systems

Devices and Device Drivers

Using and Configuring Storage Devices

Virtualization and Cloud Computing Fundamentals

Network Fundamentals and Configuration

Account and Resource Management

Filters