Font size
WorksheetsTestout Security 4.1-4.2
Total questions: 20
Worksheet time: 11mins
You have hired 10 new temporary workers who will be with the company for three months. You want to make sure that the user accounts cannot be used for login after that time period. What should you do?
Configure account expiration in the user accounts.
Configure account lockout in Group Policy.
Configure account policies in Group Policy.
Configure day/time restrictions in the user accounts.
Which Microsoft tool can be used to review a system's security configuration against recommended settings?
Windows Defender
Registry Editor
Microsoft Internet Explorer
Microsoft Security Compliance Toolkit
Which type of update should be prioritized even outside of a normal patching window?
Monthly updates
Microsoft updates
Security updates
Critical updates
Prepare to Document means establishing the process you will use to document your network.
Which of the following makes this documentation more useful?
Automate administration as much as possible.
Have a printed hard copy kept in a secure location.
Identify the choke points on the network.
Identify who is responsible for each device.
Documenting procedures and processes are part of which milestone in the NSA's Manageable Network Plan?
Document Your Network
Control Your Network
Prepare to Document
Reach Your Network
In which milestone should you use a network scanner and then confirm the scan manually with a room-by-room walkthrough?
Prepare to Document
Protect Your Network
Reach Your Network
Map Your Network
Windows Server Update Services (WSUS) is used to accomplish which part of a manageable network?
Documentation
Device accessibility
Patch management
User access
You have recently been hired as the new network administrator for a startup company. The company's network was implemented prior to your arrival. One of the first tasks you need to complete in your new position is to develop a manageable network plan for the network.
You have already completed the first and second milestones, in which documentation procedures were identified and the network was mapped. You are now working on the third milestone, which is identifying ways to protect the network.
Which tasks should you complete as a part of this milestone? (Select two.)
Identify and document each user on the network.
Apply critical patches whenever they are released.
Physically secure high-value systems.
Create an approved application list for each network device.
Set account expiration dates.
For Milestone 4 (Reach Your Network), which of the following would be considered a secure protocol to use to reach your network?
Telnet
FTP
HTTP
SSH
As you go through the process of making your network more manageable, you discover that employees in the sales department are on the same network segment as the human resources department.
Which of the following steps can be used to isolate these departments?
Move the sales department into the DMZ.
Create a separate VLAN for each department.
Identify the choke points on your network.
Implement the principle of least privilege for the human resources department.
Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)
Security Configuration and Analysis
Security Templates
WSUS
Group Policy
Which of the following describes a configuration baseline?
A set of performance statistics that identifies normal operating performance
A list of common security settings that a group or all devices share
A collection of security settings that can be automatically applied to a device
The minimum services required for a server to function
What should you consider security baselines?
Unchangeable
Suggestion
Dynamic
Static
By definition, what is the process of reducing security exposure and tightening security controls?
Social engineering
Passive reconnaissance
Active scanning
Hardening
Which of the following is the strongest form of multi-factor authentication?
Two-factor authentication
A password, a biometric scan, and a token device
A password and a biometric scan
Two passwords
You have recently experienced a security incident with one of your servers. After some research, you determine that a new hotfix has recently been released, which would have protected the server.
Which of the following recommendations should you follow when applying the hotfix?
Apply the hotfix immediately to the server. Apply the hotfix to other devices only as the security threat manifests itself.
Test the hotfix and then apply it to the server that had the problem.
Test the hotfix and then apply it to all servers.
Apply the hotfix immediately to all servers.
Which of the following actions should you take to reduce the attack surface of a server?
Install anti-malware software.
Install the latest patches and hotfixes.
Disable unused services.
Install a host-based IDS.
Which of the following do security templates allow you to do? (Select two.)
Block malicious websites
Quickly apply settings to multiple computers
Fix a specific software problem
Apply new software patches
Configure consistent security settings between devices
You have just purchased a new network device and are getting ready to connect it to your network. Which of the following actions should you take to increase its security? (Select two.)
Apply all patches and updates.
Remove any backdoors.
Implement separation of duties.
Change default account passwords.
Conduct privilege escalation.
Which of the following is defined as an operating system that comes hardened and validated to a specific security level as defined in the Common Criteria for Information Technology Security Evaluation (CC)?
OS X
TOS
UNIX
Windows
