Which type of update should be prioritized even outside of a normal patching window?

Prepare to Document means establishing the process you will use to document your network.

Which of the following makes this documentation more useful?

Documenting procedures and processes are part of which milestone in the NSA's Manageable Network Plan?

In which milestone should you use a network scanner and then confirm the scan manually with a room-by-room walkthrough?

Windows Server Update Services (WSUS) is used to accomplish which part of a manageable network?

You have recently been hired as the new network administrator for a startup company. The company's network was implemented prior to your arrival. One of the first tasks you need to complete in your new position is to develop a manageable network plan for the network.

You have already completed the first and second milestones, in which documentation procedures were identified and the network was mapped. You are now working on the third milestone, which is identifying ways to protect the network.

Which tasks should you complete as a part of this milestone? (Select two.)

For Milestone 4 (Reach Your Network), which of the following would be considered a secure protocol to use to reach your network?

As you go through the process of making your network more manageable, you discover that employees in the sales department are on the same network segment as the human resources department.

Which of the following steps can be used to isolate these departments?

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

What should you consider security baselines?

By definition, what is the process of reducing security exposure and tightening security controls?

Which of the following is the strongest form of multi-factor authentication?

Which of the following actions should you take to reduce the attack surface of a server?

You have just purchased a new network device and are getting ready to connect it to your network. Which of the following actions should you take to increase its security? (Select two.)

Which of the following is defined as an operating system that comes hardened and validated to a specific security level as defined in the Common Criteria for Information Technology Security Evaluation (CC)?

You have placed a File Transfer Protocol (FTP) server in your DMZ behind your firewall. The FTP server is to be used to distribute software updates and demonstration versions of your products. However, users report that they are unable to access the FTP server.

What should you do to enable access?

FTPS uses which mechanism to provide security for authentication and data transfer?

You want to close all ports associated with NetBIOS on your network's firewalls to prevent attacks directed against NetBIOS. Which ports should you close?

To increase security on your company's internal network, the administrator has disabled as many ports as possible. However, now you can browse the internet, but you are unable to perform secure credit card transactions.

Which port needs to be enabled to allow secure transactions?

You have a shared folder named Reports. Members of the Managers group have been given Write access to the shared folder.

Mark Mangum is a member of the Managers group. He needs access to the files in the Reports folder, but he should not have any access to the Confidential.xls file.

What should you do?

If Mark has a read-write permission to the share \\fileserver\securefiles and a read-only permission to the file coolstuff.docx on the NTFS file system shared by the file share, he is able to perform which action?

You need to increase the security of your Linux system by finding and closing open ports. Which of the following commands should you use to locate open ports?

What does the netstat -a command show?

Where should an organization's web server be placed?

Which of the following is a privately controlled portion of a network that is accessible to some specific external entities?

You want to create a collection of computers on your network that appear to have valuable data but actually store fake data that could entice a potential intruder. Once the intruder connects, you want to be able to observe and gather information about the attacker's methods.

Which feature should you implement?

A honeypot is used for which purpose?

Which of the following devices can apply quality of service and traffic-shaping rules based on what created the network traffic?

You are the office manager of a small financial credit business. Your company handles personal financial information for clients seeking small loans over the internet. You are aware of your obligation to secure clients records, but the budget is an issue for your company.

Which item would provide the BEST security for this situation?

You are implementing security at a local high school that is concerned with students accessing inappropriate material on the internet from the library's computers. The students use the computers to search the internet for research paper content. The school budget is limited.

Which content filtering option would you choose?

Which of the following BEST describes a honeyfile?

Members of the sales team use laptops to connect to the company network. While traveling, they connect their laptops to the internet through airport and hotel networks.

You are concerned that these computers could pick up viruses that could spread to your private network. You would like to implement a solution that prevents the laptops from connecting to your network unless antivirus software and the latest operating system patches are installed.

Which solution should you use?

A proxy server can be configured to do which of the following?

Which of the following terms describes a network device that is exposed to attacks and has been hardened against those attacks?

Of the following security zones, which one can serve as a buffer network between a private secured network and the untrusted internet?

Which of the following describes how access control lists can be used to improve network security?

Jessica needs to set up a firewall to protect her internal network from the internet. Which of the following would be the BEST type of firewall for her to use?

When designing a firewall, what is the recommended approach for opening and closing ports?

You want to connect your small company network to the internet. Your ISP provides you with a single IP address that is to be shared between all hosts on your private network. You do not want external hosts to be able to initiate connection to internal hosts. Which type of Network Address Translation (NAT) should you implement?

Which device is NAT typically implemented on?v

Which problem does NAT help address?

Which of the following does a NAT router use to associate a port number with a request from a private host?

A network device is given an IP address of 172.16.0.55. Which type of network is this device on?

You are the network administrator for a small company that implements NAT to access the internet. However, you recently acquired five servers that must be accessible from outside your network. Your ISP has provided you with five additional registered IP addresses to support these new servers, but you don't want the public to access these servers directly. You want to place these servers behind your firewall on the inside network, yet still allow them to be accessible to the public from the outside.

Which method of NAT translation should you implement for these servers?