L3: Understanding Security Policies

The default password length for a Windows Server domain controller is:

• 0
• 5
• 7
• 14

A network sniffer is software or hardware that:

• Records user activity and transmits it to the server
• Captures and analyzes network communication
• Protects workstations from intrusions
• Catalogs network data to create a secure index

Your password is 1Vu*cI!8sT.
Which attack method is your password vulnerable to?

• Rainbow table
• Brute force
• Spidering
• Dictionary

Roblox requires a user name and password. How should Karl secure this password?

• Save them to a text file

• Enable session caching

• Configure the browser to save passwords

• Save it to an encrypted file

Which two characteristics would you recommend for Cames Joncannon's* Roblox password?

*Names, characters, businesses, places, events, locales, and incidents are either the products of the author's imagination or used in a fictitious manner. Any resemblance to actual persons, living or dead, or actual events is purely coincidental.

• Hard to guess + Easy to remember

• Includes Unicode characters + Easy to increment

• Hard to guess + Unicode

• Easy to remember + easy to increment

Account lockout policies are used to prevent which type of security attack?

• Brute force attacks
• Users sharing passwords
• Social engineering
• Passwords being reused immediately

What is a common method for password collection?

• Email attachments
• Back door intrusions
• SQL Injection
• Network sniffers

Basic security questions used to reset a password are susceptible to:

• Hashing
• Social engineering
• Network sniffing
• Trojan horses

Password history policies are used to prevent:

• Brute force attacks
• Users from sharing passwords
• Social engineering
• Passwords from being reused immediately

3.14 signed up for an online bank account. Every 6 months, the bank requires 3.14 to change the password. 3.14 has changed the password 5 times in the past. Instead of coming up with a new password, 3.14 decides to use one of their past passwords, but the bank's password history prevents 3.14 from doing so.

• Minimum password age

• Maximum password duration

• Password complexity

• No change is needed.