Module 8

Which of the following is an external perimeter defense method?

• Barrier
• Electronic lock
• Demilitarized zone (DMZ)
• Fire suppression

Answer explanation

A barrier is an external perimeter defense method.

In an interview, you are asked to change the permissions of a file on a Linux system so that the file can only be accessed by its owner. Which of the following tools should you use?

• chmod
• grep
• Nessuss
• Cuckoo

Answer explanation

File permissions in Linux can be set using chmod.

Which of the following can prevent macros attacks?

• VBA
• Protected view
• Private DNS server
• PowerShell

Answer explanation

Protected view allows users to open suspicious files in a protected view so that macros embedded in the file do not automatically run.

During an interview, you are provided the following scenario: The enterprise that you recently joined is using the ISP DNS server to resolve domain names. You are asked which specific attack will need to be mitigated first to secure the enterprise network. Which of the following attacks should you choose?

• DDoS attack
• MAC cloning
• DNS hijacking
• Session replay attack

Answer explanation

The enterprise network is highly vulnerable to a DNS hijacking attack because the ISP DNS server is accessible to the public.

Which of the following best describes a faraday cage?

• A Faraday cage is used to dispose of electronic waste.
• A Faraday cage is an enclosure used to block electromagnetic fields.
• A Faraday cage blocks suspicious packets from entering an electronic device.
• A Faraday cage is used to charge the electronic devices.

Answer explanation

A faraday cage is a metallic enclosure that prevents the entry or escape of an electromagnetic field.

Which of the following best describes trusted location in MS Office?

• Trusted location is used to lock important files.
• Trusted location allows you to run macros-enabled files with no security restrictions.
• Trusted location allows you to prevent infected files from damaging the system.
• Trusted location is the place where operating system files are stored.

Answer explanation

If the source of a file is trusted, you have the option to move the file to a trusted location where the file will open without any security restrictions.

Which of the following is a third-party network analysis tool?

• netstat
• curl
• hping
• nmap

Answer explanation

nmap is a third-party tool used for network discovery and security auditing.

Maze must establish a communication channel between two data centers. After conducting a study, she came up with the idea of establishing a wired connection between them since they have to communicate in unencrypted form. Considering the security requirements, Maze proposed using an alarmed carrier PDS over a hardened carrier PDS. Why would Maze make this suggestion in her proposal?

• Network speeds would be slowed too much if they used a hardened carrier PDS.
• Using a hardened carrier PDS would require someone to conduct periodic visual inspections.
• Using a hardened carrier PDS would restrict their ability to transfer large amounts of data.
• Data transmission between buildings wouldn't be possible if they used a hardened carrier PDS.

Answer explanation

A hardened carrier PDS requires regular visual inspections. An alarmed carrier PDS provides continuous monitoring and does not require visual inspection.

You are a cyber forensic expert wanting to protect devices retrieved from a crime scene from being remotely wiped of evidence. Which of the following physical security equipment should you use so that inbound and outbound signals cannot be sent or received?

• Cable locks
• Protected cable distribution
• Faraday bags
• Mantraps

Answer explanation

Faraday bags are often used in crime scene investigations. Phones, tablets, or laptops found on scene are placed in faraday bags, thus eliminating inbound and outbound signals and preventing the devices from being remotely wiped of evidence.

Which of the following best describes bash?

• Bash is a physical security measure.
• Bash is computer hardware.
• Bash is a network assessment tool.
• Bash is a command language interpreter.

Answer explanation

Bash is a command language interpreter that is also used to write scripts.