Question 1

Securing an application against local-and internet-based attacks is called _______________.

Accepted Answer

application hardening

Question 2

Securing access to files and directories in Solaris is vastly different from most UNIX variants.

Accepted Answer

A) True 
 B)False  False

Question 3

Adding more services and applications to a system helps to harden it.

Accepted Answer

A) True 
 B)False  False

Question 4

_______________ is a term usually applied to a formal,large software update,which may address several software problems.

Accepted Answer

The answer of _______________ is a term usually applied to...

Question 5

In Mac OS X,what does library randomization do?

Accepted Answer

A) It defeats buffer overflows. 
B) It is used for encryption. 
C) It restricts network access. 
D) It increases the ease of code writing. 
A) It defeats buffer overflows. 
B) It is used for encryption. 
C) It restricts network access. 
D) It increases the ease of code writing.

Question 6

Most modern UNIX versions store the passwords associated with a user account in a

Accepted Answer

A) BitLocker 
B) shadow file 
C) passwd file 
D) Registry 
A) BitLocker 
B) shadow file 
C) passwd file 
D) Registry

Question 7

A _________ is a more formal,large software update that may address several or many software problems.

Accepted Answer

A) Script 
B) Log 
C) Hotfix 
D) Patch 
A) Script 
B) Log 
C) Hotfix 
D) Patch

Question 8

Mac OS X FileVault encrypts files with 3DES encryption.

Accepted Answer

A) True 
 B)False

Question 9

What is the process of establishing a system's security state called?

Accepted Answer

A) Hardening 
B) Baselining 
C) Securing 
D) Controlling 
A) Hardening 
B) Baselining 
C) Securing 
D) Controlling

Question 10

List three of the new capabilities of Windows Server 2008.

Accepted Answer

Answers may include any of the following

Question 11

When hardening Mac OS X,the same guidelines for all UNIX systems apply.

Accepted Answer

A) True 
 B)False

Question 12

_______________ are a mechanism for providing interoperation and secure access to a variety of services on different platforms.

Accepted Answer

Pluggable

Question 13

Which of the following is the command to stop a service in UNIX?

Accepted Answer

A) Stop 
B) Kill 
C) End 
D) Finish 
A) Stop 
B) Kill 
C) End 
D) Finish

Question 14

Which of the following is true of the registry permissions area settings in security templates?

Accepted Answer

A) They control who should be allowed to join or be part of certain groups. 
B) They are for services that run on the system. 
C) They control who can access the registry and how it can be accessed. 
D) They are settings that apply to files and folders,such as permission inheritance. 
A) They control who should be allowed to join or be part of certain groups. 
B) They are for services that run on the system. 
C) They control who can access the registry and how it can be accessed. 
D) They are settings that apply to files and folders,such as permission inheritance.

Question 15

Which UNIX command would you use to change permissions associated with a file or directory?

Accepted Answer

A) chmod 
B) chown 
C) chgrp 
D) chng 
A) chmod 
B) chown 
C) chgrp 
D) chng

Question 16

The process of planning,deploying,and testing patches in a controlled manner is called _______________.

Accepted Answer

The answer of The process of planning,deploying,and testing patches in...

Question 17

Which of the following is NOT a UNIX file permission?

Accepted Answer

A) Read 
B) Write 
C) Modify 
D) Execute 
A) Read 
B) Write 
C) Modify 
D) Execute

Question 18

The process of securing and preparing a system for the production environment is called ________.

Accepted Answer

The answer of The process of securing and preparing a...

Question 19

The _______________ of a computer is the basic software that handles things such as input,output,display,memory management,and all the other highly detailed tasks required to support the user environment and associated applications.

Accepted Answer

The answer of The _______________ of a computer is the...

Question 20

Selecting a good password for each user account is critical to protecting information systems.How should you select a good password?

Accepted Answer

A) Use letters in your first name and letters in your last name. 
B) Select a password that is still relatively easy to remember,but still difficult to "guess." 
C) Unfortunately,there is way to keep a password safe,so it really doesn't matter what you use. 
D) Create a password that would be hard to remember,and then write it down so you won't forget it. 
A) Use letters in your first name and letters in your last name. 
B) Select a password that is still relatively easy to remember,but still difficult to "guess." 
C) Unfortunately,there is way to keep a password safe,so it really doesn't matter what you use. 
D) Create a password that would be hard to remember,and then write it down so you won't forget it.

Exam 14: Baselines

Securing an application against local-and internet-based attacks is called _______________.

Securing access to files and directories in Solaris is vastly different from most UNIX variants.

Adding more services and applications to a system helps to harden it.

_______________ is a term usually applied to a formal,large software update,which may address several software problems.

In Mac OS X,what does library randomization do?

Most modern UNIX versions store the passwords associated with a user account in a

A _________ is a more formal,large software update that may address several or many software problems.

Mac OS X FileVault encrypts files with 3DES encryption.

What is the process of establishing a system's security state called?

List three of the new capabilities of Windows Server 2008.

When hardening Mac OS X,the same guidelines for all UNIX systems apply.

_______________ are a mechanism for providing interoperation and secure access to a variety of services on different platforms.

Which of the following is the command to stop a service in UNIX?

Which of the following is true of the registry permissions area settings in security templates?

Which UNIX command would you use to change permissions associated with a file or directory?

The process of planning,deploying,and testing patches in a controlled manner is called _______________.

Which of the following is NOT a UNIX file permission?

The process of securing and preparing a system for the production environment is called ________.

The _______________ of a computer is the basic software that handles things such as input,output,display,memory management,and all the other highly detailed tasks required to support the user environment and associated applications.

Selecting a good password for each user account is critical to protecting information systems.How should you select a good password?

Introduction and Security Trends

General Security Concepts

Operational-Organizational Security

The Role of People in Security

Cryptography

Public Key Infrastructure

Standards and Protocols

Physical Security

Network Fundamentals

Infrastructure Security

Authentication and Remote Access

Wireless

Intrusion Detection Systems and Network Security

Types of Attacks and Malicious Software

E-Mail and Instant Messaging

Web Components

Secure Software Development

Disaster Recovery, Business Continuity, and Organizational Policies

Risk Management

Change Management

Privilege Management

Computer Forensics

Legal Issues and Ethics

Privacy

Filters