IT-IAS02 Seatwork

You suspect that a system is infected with a Trojan Horse program and is sending data outbound from the system. Which of the following can be used to detect this activity?

A. Anti-spam software
B. Pop-up blocker
C. HIDS
D. Personal firewall

• A

• B

• C

• D

Which of the following is an advantage of using virtual machines?

A. Reduces the need to install OS software updates

B. Allows an OS to run in its own separate, secure area on a system

C. Helps secure the hardware from unauthorized access

D. Anti-virus software has to be installed only once

• A

• B

• C

• D

You receive an e-mail stating that it should be forwarded to 20 of your friends or else you will receive a virus that will damage your system. What should you do?

A. Check the e-mail’s MIME type.

B. Forward it to 10 of your friends to see the result.

C. Delete the e-mail—it is a hoax.

D. Forward the e-mail to 20 friends to be safe.

• A

• B

• C

• D

Why should SMTP relay be disabled or restricted on an e-mail server?

A. SMTP is used only for file transfer.

B. You don’t need it if you run anti-virus software.

C. SMTP prevents unauthorized users from checking their e-mail.

D. SMTP prevents unauthorized users from sending e-mail through your server.

• A

• B

• C

• D

As a network administrator, you need to set up a file transfer service for customers so they can retrieve confidential files from your servers. What service should you set up?

A. SFTP

B. FTP

C. Windows File Sharing

D. P2P sharing

• A

• B

• C

• D

Some kind of HTTP worm is trying to infect a file server, which also seems to be running an HTTP web server on port 80. The server does not need any type of web services. What should be done?

A. Install anti-virus software.

B. Change the web server to use a different port.

C. Disable the web server.

D. Update your firewall software to the latest version.

• A

• B

• C

• D

A security patch for your OS was released about a week after you applied the latest service pack. What should you do?

A. Wait until the release of the next full service pack.

B. Download the patch only if you experience problems with the OS.

C. Do nothing—the security patch was probably included with the service pack.

D. Download and install the security patch.

• A

• B

• C

• D

A user wants to encrypt a sensitive e-mail message before sending it to an HR manager. What of the following types of encryption can be used for e-mail?

A. SSL

B. S/MIME

C. DES

D. AES-128

• A

• B

• C

• D

Which of the following is the term used to describe when a malicious user inserts his own code into a database query that can reveal or damage confidential data?

A. SQL injection

B. LDAP insert attack

C. Buffer overflow

D. Denial-of-service

• A

• B

• C

• D

To protect the privacy of web surfing habits, which of the following should be deleted on a regular basis?

A. Download history

B. SSL certificates

C. Cookies

D. Plug-ins

• A

• B

• C

• D