Network Security Chapter 3 Quiz Review

What should you do to ensure that user accounts cannot be used for login after a specific time period?

• Configure account lockout in Group Policy

• Configure account policies in Group Policy

• Configure account expiration in the user accounts

• Configure day/timer restrictions in the user accounts

Which Microsoft tool can be used to review a system's security configuration against recommended settings?

• Microsoft Security Compliance Toolkit

• Registry Editor

• Microsoft Internet Explorer

• Windows Defender

Which type of update should be prioritized even outside of a normal patching window?

• Microsoft updates

• Security updates

• Critical updates

• Monthly updates

Which of the following makes documentation more useful?

• Have a printed hard copy kept in a secure location

• Identify the chokepoints on the network

• Automate administration as much as possible

• Identify who is responsible for each device

Documenting procedures and processes are part of which milestone in the NSA's Manageable Network Plan?

• Prepare to Document

• Document Your Network

• Reach Your Network

• Control Your Network

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations?

• WSUS

• Security Templates

• Group Policy

• Security Configuration and Analysis

Which action would you use in a rule to disallow a connection silently?

• Accept

• Drop

• Reject

• Forward

In which of the iptables default chains would you configure a rule to allow an external device to access the HTTPS port on the Linux server?

• Forward

• Input

• Accept

• Output

Which type of packet would the sender receive if they sent a connection request to TCP port 25 on a server with the following command applied? sudo iptables -A OUTPUT -p tcp --dport 25 -j REJECT

• ICMP Unreachable Port

• SYN

• RST

• ACK

You have configured the following rules. What is the effect? sudo iptables -A INPUT -p tcp --dport 25 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT sudo iptables -A OUTPUT -p tcp --sport 25 -m conntrack --ctstate ESTABLISHED -j ACCEPT

• Allow SMTP traffic

• Block SMTP traffic

• Block SSH traffic

• Allow SSH traffic