MTA SecFundamentals Day 2

Role separation improves server security by:

•  Enforcing principle of least privilege.
• Installing applications on separate hard disks.
• Physically separating high security servers from other servers.
• Placing servers on separate VLANs.

Cookies impact security by enabling:

• Storage of Web site passwords. + Web sites to track browsing habits.
• Higher security Web site protections. + Secure Sockets Layer (SSL).

Evaluate the statement pick the correct answer for the underlined phrase.

A user who receives a large number of emails selling prescription medicine is probably receiving pharming mail.

• Malware

• Spoofed mail

• Spam

• No Change is Needed

Keeping a server updated:

• Maximizes network efficiency
• Fixes security holes
• Speeds up folder access
• Synchronizes the server

Phishing is an attempt to:

• Obtain information by posing as a trustworthy entity.
•  Limit access to e-mail systems by authorized users.
• Steal data through the use of network intrusion.
• Corrupt e-mail databases through the use of viruses.

What is an example of non-propagating malicious code?

• A back door
• A hoax
• A Trojan horse
• A worm

Windows Server Update Services (WSUS) is a tool that:

• Updates data stored in Windows servers
• Manages the services that run on a server
• Updates licensing for Windows servers
• Manages updates for Microsoft software

The purpose of Microsoft Baseline Security Analyzer is to:

• List system vulnerabilities.
• Apply all current patches to a server.
• Set permissions to a default level.
• Correct a company's security state

You suspect a user's computer is infected by a worm.

What actions should you take?

• Restart the computer in safe mode

• Replace the computer's hard disk drive

• Disconnect the computer from the network in connected to business network

• Run an on demand antivirus scan of all files

The purpose of User Account Control (UAC) is to:

• Encrypt the user's account
• Limit the privileges of software
• Secure your data from corruption
• Facilitate Internet filtering