Technical Controls and System Security Quiz

Latisha’s organization has faced a significant increase in successful phishing attacks, resulting in compromised accounts. She knows that she needs to implement additional technical controls to prevent successful attacks. Which of the following controls will be the most effective while remaining relatively simple and inexpensive to deploy?

• Increased password complexity requirements

• Application or token-based multifactor authentication

• Biometric-based multifactor authentication

• OAuth-based single sign-on

After restoring a system from 30-day-old backups after a compromise, administrators at Piper’s company return the system to service. Shortly after that, Piper detects similar signs of compromise again. Why is restoring a system from a backup problematic in many cases?

• Backups cannot be tested for security issues.

• Restoring from backup may reintroduce the original vulnerability.

• Backups are performed with the firewall off and are insecure after restoration.

• Backups cannot be properly secured.

Geoff is responsible for hardening systems on his network and discovers that a number of network appliances have exposed services, including telnet, FTP, and web servers. What is his best option to secure these systems?

• Enable host firewalls.

• Install patches for those services.

• Turn off the services for each appliance.

• Place a network firewall between the devices and the rest of the network.

Greg suspects that an attacker is running an SSH server on his network over a nonstandard port. What port is normally used for SSH communications?

• 21

• 22

• 443

• 444

What services will the following nmap scan test for? nmap -sV -p 22,25,53,389 192.168.2.50/27

• Telnet, SMTP, DHCP, MS-SQL

• SSH, SMTP, DNS, LDAP

• Telnet, SNMP, DNS, LDAP

• SSH, SNMP, DNS, RDP

During a port scan of a server, Miguel discovered that the following ports are open on the internal network:

■ TCP port 25 ■ TCP port 80 ■ TCP port 110 ■ TCP port 443 ■ TCP port 1433 ■ TCP port 3989

The scan results provide evidence that a variety of services are running on this server. Which one of the following services is not indicated by the scan results?

• Web

• Database

• SSH

• RDP

• Email

Which one of the following risk management strategies is most likely to limit the probability of a risk occurring?

• Risk acceptance

• Risk avoidance

• Risk transference

• Risk mitigation

A hospital needs to ensure patient data is only accessible to authorized medical staff. Which security principle is MOST important in this scenario?

• Integrity

• Availability

• Confidentiality

• Non-repudiation

A company wants to ensure that its employees are aware of the latest phishing scams. Which of the following is the MOST effective way to achieve this?

• Implementing a new firewall

• Enforcing a strong password policy

• Conducting regular security awareness training

• Encrypting all company data

A company wants to allow its employees to securely access the internal network from home. Which of the following technologies should they use?

• Firewall

• Intrusion Detection System (IDS)

• Virtual Private Network (VPN)

• Load balancer