ITF - Quiz 13.1 - Securing Devices

What is device hardening?

• A set of policies that make mobile and workstation computers and network appliances more secure

• A type of malware that aims to damage a computer or steal information from it

• A program that monitors user activity and sends the information to someone else

• A type of malware that tries to extort money from the victim

What is the purpose of anti-virus/anti-malware software?

• To detect the presence of malware and prevent it from running

• To insert virus code into another executable program or script

• To affect Microsoft Office documents exploiting the macro programming language

• To replicate over network resources by exploiting faults in software programs

Why is it important to keep computers and other devices up-to-date with patches and firmware?

• To prevent malware from exploiting vulnerabilities in the OS files, driver software, and firmware

• To enable the use of an account without a password, PIN, or screen lock

• To protect network devices from default/weak passwords

• To test anti-virus software using the EICAR test string

Why should all computing devices be protected by requiring the user to input credentials to gain access?

• To prevent the device from being highly exploitable in the event of theft

• To allow other users to impersonate the user

• To change the default management password of network devices

• To detect the presence of malware and prevent it from running

What should be done with default/weak passwords of network devices?

• They should be changed on installation and replaced with strong passwords

• They should be left unchanged to maintain compatibility with other devices

• They should be used as they are provided by the device vendor

• They should be tested using the EICAR test string

What is the purpose of the EICAR test string?

• To test anti-virus software

• To insert virus code into another executable program or script

• To affect Microsoft Office documents exploiting the macro programming language

• To replicate over network resources by exploiting faults in software programs

How do email attachment viruses often use the infected host's electronic address book?

• They spoof the sender's address when replicating

• They delete files on the hard drive

• They capture credit card numbers by recording key strokes

• They display threatening messages and block access to the computer

How can removable media be configured to mitigate the chances of malware infection?

• By not running untrusted programs and disabling AutoRun or prompt

• By allowing infected applications to run via AutoPlay default action

• By installing a different shell program to block access to the computer

• By encrypting data files on fixed, removable, and network drives

What is a Trojan Horse?

• A malicious program that pretends to be something else to bypass security measures.

• A program that monitors user activity and sends the information to someone else

• A type of malware that tries to extort money from the victim

• A design flaw that can cause the application security system to be circumvented

What is the purpose of spyware?

• To monitor user activity and send the information to someone else

• To replicate over network resources by exploiting faults in software programs

• To encrypt data files on fixed, removable, and network drives

• To display threatening messages and block access to the computer