Deck 17: Security

Question 1

The file system has no impact on how secure a computer will be against intruders.

Answer 1

False

Question 2

Individual personal computers can be secured through the use of a smart card and the user's PIN number.

Answer 2

True

Question 3

Locking a workstation immediately can be achieved by pressing the Windows Logo key+L abruptly on the keyboard to log off the user.

Answer 3

True

Question 4

Pretexting is a method of social engineering that can be stopped by both users and antiphishing programs.

Question 5

The power users group has the least amount of permissions out of all the accounts on a Windows system.

Question 6

If a folder is moved to a different location of the same volume, the folder inherits permissions of the parent folder to which it was copied.

Question 7

The BIOS setup password can be reset by simply removing the battery for several minutes.

Question 8

If a wireless router or WAP is configured with a provided encryption type, that identical type must also be configured among wireless clients.

Question 9

Unused wireless connections within Windows XP and Windows Vista should be reviewed and deleted when no longer used.

Question 10

WAP and wireless routers often have firmware updates. These updates solve only operational problems, whereas added features and security enhancements remain neglected.

Question 11

By default NTFS encrypts files and folder contents.

Question 12

Bit Locker encrypts the entire disk while EFS encrypts only individual files and folders.

Question 13

The Power Users group can do everything administrators can do except install driver updates.

Question 14

When an authentication server is used on a network, users need only a local login credential to access network resources.

Question 15

Biometrics refers to the biological information gathered from a human body to authenticate a user. All the following are types of biometrics except ________?

A) Fingerprint reader
B) Retina scanner
C) Personal identification card
D) Voice recognition

Question 16

Two-way firewalls provide protection against unauthorized ______ and ______ traffic.

A) Malware
B) Virus
C) Outbound
D) Inbound

Question 17

All the following are standards for wireless encryption except ________?

A) WEP
B) WPA
C) WPA2
D) EFS

Question 18

Which of the following wireless encryption standards uses AES encryption?

A) WEP
B) WPA
C) WPA2
D) EFS

Question 19

To prevent an attacker from detecting your wireless network signals, what should be changed from the manufacturer defaults?

A) Change the SSID.
B) Disable the SSID broadcast.
C) Add MAC address filtering.
D) Change the default administrator password.
E) All the options provided are correct.

Question 20

Which of the following features can be used as a simple firewall within wireless routers and WAPs?

A) Filtering
B) Access logs
C) VPNs
D) NAT

Question 21

What types of Local Security Policies can be applied to protect data residing on a system?

A) Enable auditing.
B) Shutdown.
C) Interactive logon.
D) All answers provided are correct.

Question 22

Securing backups with password protection gives added protection. However, if the backup program does not support password protection, what must be done to the backup media?

A) Leave it on the system that was backed up.
B) Place it on your supervisor's desk.
C) Physically secure it to prevent access.
D) All answers provided are correct.

Question 23

Social engineering is composed of a variety of methods to manipulate users into performing actions or providing information. Which of the following are among the many methods used during social engineering?

A) Pretexting
B) Phishing
C) Baiting
D) All answers provided are correct.

Question 24

There are three standard account levels within Windows XP. Which of the following is not a standard account level?

A) Multiuser account
B) Guest account
C) Administrator account
D) Limited account

Question 25

Which of the following features within the BIOS can be enabled to prevent unauthorized users from altering BIOS setup information?

A) Boot sector virus protection
B) BIOS setup password
C) Boot sequence
D) BIOS HDD password

Question 26

Which of the following settings could affect a user from joining a wireless network? (Choose all that apply.)

A) Incorrect SSID
B) Incorrect encryption type
C) Incompatible wireless adapter type
D) Incompatible operating system

Question 27

Windows XP can be installed on either _____ or ______ file systems.

A) FAT12
B) FAT16
C) FAT32
D) NTFS

Question 28

A software ______ is a program designed to block unauthorized data packers while permitting authorized data packets on a network.

A) Router
B) Filter
C) Policy
D) Firewall

Question 29

EFS files can be opened only by which of the following except ________?

A) The domain user
B) The owner who encrypted them
C) The administrator
D) EFS keyholders

Question 30

One reason why an administrator might give someone the list permission but not the read permission is

A) The person is a guest with only a temporary login.
B) The person is a member of the Power User's group.
C) The person is a low-level employee who is not allowed to read files.
D) The person's role is to back up important data without knowing the contents.

Question 31

Login Authentication involves verifying which of the following? (Choose all that apply.)

A) Something the user knows
B) Something the user has
C) Something the user says
D) Something the user does
E) Something the user is
F) All the above

Question 32

The Local Security Policy can be use to accomplish which of the following? (Choose all that apply.)

A) Disable the interactive logon.
B) Enable auditing.
C) Format the system drive.
D) Unencrypt a drive encrypted by BitLocker.

Question 33

If you copy a folder to a location on the same drive, or to different drive, which of the following describes the effect this action has on the permissions.

A) The folder retains its original permissions.
B) The folder permissions must be re-created by the administrator.
C) The person who copied the file now has full control if he did not have it before.
D) The folder inherits the permissions of the target parent folder it was copied into.

Question 34

Match the following terms with their description

-Biometrics

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 35

Match the following terms with their description

-Firewall

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 36

Match the following terms with their description

-SSID

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 37

Match the following terms with their description

-EFS

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 38

Match the following terms with their description

-Virus

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 39

Match the following terms with their description

-Malware

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 40

Match the following terms with their description

-Smart card

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 41

Match the following terms with their description

- Password management

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 42

Match the following terms with their description

-Incident reporting

A) The biological information gathered from a human body to authenticate a user
B) A network device or software designed to block unauthorized data packers while permitting authorized data packets on a network
C) An identifier used to provide information on a particular LAN
D) A file system driver that provides encryption at the file-system level
E) A program that can copy itself and infect a system without permission
F) A software-based program that can infiltrate a system and conduct damage without the user's knowledge
G) A device used to store information and contain a simple microprocessor or RFID chip
H) The process to secure user passwords to accounts through the use of local security policy and group policy
I) Procedures that organizations follow for reporting security-related occurrences.

Question 43

Match the following types of data threats

-Virus

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software

Question 44

Match the following types of data threats

-Trojan horse

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software

Question 45

Match the following types of data threats

-Rootkit

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software

Question 46

Match the following types of data threats

-Spyware

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software

Question 47

Match the following types of data threats

-Adware

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software

Question 48

Match the following types of data threats

-Spam

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software

Question 49

Match the following types of data threats

-Phishing

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software

Question 50

Match the following types of data threats

-Baiting

A) A program that infects files in an operating system to make the system perform unauthorized actions
B) A program that hides behind the name of a presumed utility or system process but actually installs unauthorized software
C) Helps prevent detection of malware
D) Provides for surveillance and recording of computer-related activities
E) Software that displays commercial content without invitation
F) Unwanted email sent by bulk emailers
G) Soliciting of personal information by pretending to be an authoritative representative
H) Providing easy access to a desirable data transfer object such as a USB memory stick for the purpose to run unauthorized software