Which Microsoft tool can be used to review a system's security configuration against recommended settings?

Which type of update should be prioritized even outside of a normal patching window?

Prepare to Document means establishing the process you will use to document your network. Which of the following makes this documentation more useful?

Documenting procedures and processes are part of which milestone in the NSA's Manageable Network Plan?

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

Which of the following describes a configuration baseline?

What should you consider security baselines?

By definition, what is the process of reducing security exposure and tightening security controls?

Which of the following is the strongest form of multi-factor authentication?

You have placed a File Transfer Protocol (FTP) server in your DMZ behind your firewall. The FTP server is to be used to distribute software updates and demonstration versions of your products. However, users report that they are unable to access the FTP server. What should you do to enable access?

FTPS uses which mechanism to provide security for authentication and data transfer?

To transfer files to your company's internal network from home, you use FTP. The administrator has recently implemented a firewall at the network perimeter and disabled as many ports as possible. You can no longer make the FTP connection. You suspect the firewall is causing the issue. Which ports need to remain open so you can still transfer the files? (Select two.)

You want to close all ports associated with NetBIOS on your network's firewalls to prevent attacks directed against NetBIOS. Which ports should you close?

Which of the following file transfer protocols use SSH to provide confidentiality during the transfer? (Select two.)

You need to increase the security of your Linux system by finding and closing open ports. Which of the following commands should you use to locate open ports?

Which action would you use in a rule to disallow a connection silently?

In which of the iptables default chains would you configure a rule to allow an external device to access the HTTPS port on the Linux server?

Which type of packet would the sender receive if they sent a connection request to TCP port 25 on a server with the following command applied? sudo iptables -A OUTPUT -p tcp --dport 25 -j REJECT

You have configured the following rules. What is the effect? sudo iptables -A INPUT -p tcp --dport 25 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT sudo iptables -A OUTPUT -p tcp --sport 25 -m conntrack --ctstate ESTABLISHED -j ACCEPT

Which command would you use to list all of the currently defined iptables rules?

When a cryptographic system is used to protect data confidentiality, what actually takes place?

An SSL client has determined that the certificate authority (CA) issuing a server's certificate is on its list of trusted CAs. What is the next step in verifying the server's identity?

Which of the following would require that a certificate be placed on the CRL?

Which technology was developed to help improve the efficiency and reliability of checking the validity status of certificates in large, complex environments?

A PKI is an implementation for managing which type of encryption?

A remote access user needs to gain access to resources on the server. Which of the following processes are performed by the remote access server to control access to resources?

Audit trails produced by auditing activities are which type of security control?

Which of the following is used for identification?

Which of the following are examples of Something You Have authentication controls? (Select two.)

Which of the following identification and authentication factors are often well known or easily discovered by others on the same network or system?

Which of the following is a password that relates to things that people know, such as a mother's maiden name or a pet's name?

What is the process of controlling access to resources such as computers, files, or printers called?

Which of the following objects identifies a set of users with similar access needs?

Which of the following account types is a cloud-based identity and access management service that provides access to both internal and external resources?

Which of the following account types uses a single sign-on system that lets you access Windows, Office 365, Xbox Live, and more?

You manage an Active Directory domain. All users in the domain have a standard set of internet options configured by a GPO linked to the domain, but you want users in the Administrators OU to have a different set of internet options. What should you do?

You want to make sure that all users have passwords over eight characters in length and that passwords must be changed every 30 days. What should you do?

You are teaching new users about security and passwords. Which of the following is the BEST example of a secure password?

You are configuring the Local Security Policy of a Windows system. You want to prevent users from reusing old passwords. You also want to force them to use a new password for at least five days before changing it again. Which policies should you configure? (Select two.)

Where should an organization's web server be placed?

Which of the following is a privately controlled portion of a network that is accessible to some specific external entities?

You want to create a collection of computers on your network that appear to have valuable data but actually store fake data that could entice a potential intruder. Once the intruder connects, you want to be able to observe and gather information about the attacker's methods. Which feature should you implement?

A honeypot is used for which purpose?

Which of the following devices can apply quality of service and traffic-shaping rules based on what created the network traffic?

Which item would provide the BEST security for this situation?

Which of the following terms describes a network device that is exposed to attacks and has been hardened against those attacks?

Of the following security zones, which one can serve as a buffer network between a private secured network and the untrusted internet?

Which of the following is the MOST likely to happen if the firewall managing traffic into the DMZ fails?

You have a company network that is connected to the internet. You want all users to have internet access, but you need to protect your private network and users. You also need to make a web server publicly available to internet users. Which solution should you use?

How many network interfaces does a dual-homed gateway typically have?

What needs to be configured on a firewall to allow traffic directed to the public resource in the DMZ?

Which of the following are features of an application-level gateway? (Select two.)

You want to install a firewall that can reject packets that are not part of an active session. Which type of firewall should you use?

Jessica needs to set up a firewall to protect her internal network from the internet. Which of the following would be the BEST type of firewall for her to use?

You want to protect the laptop from internet-based attacks. Which solution should you use?

You want to connect your small company network to the internet. Your ISP provides you with a single IP address that is to be shared between all hosts on your private network. You do not want external hosts to be able to initiate connection to internal hosts. Which type of Network Address Translation (NAT) should you implement?

Which NAT implementation assigns two IP addresses to the public NAT interface, allowing traffic to flow in both directions?

Which device is NAT typically implemented on?

Which problem does NAT help address?

At which layer of the OSI model do NAT routers operate?

How many concurrent connections does NAT support?

A group of salesmen would like to remotely access your private network through the internet while they are traveling. You want to control access to the private network through a single server. Which solution should you implement?

A VPN is primarily used for which of the following purposes?

Which VPN implementation uses routers on the edge of each site?

Which VPN tunnel style routes only certain types of traffic?

Which IPSec subprotocol provides data encryption?

You are investigating the use of website and URL content filtering to prevent users from visiting certain websites. Which benefits are the result of implementing this technology in your organization? (Choose two.)

Travis is sending a highly confidential email to Craig that contains sensitive data. Which of the following should Travis implement to ensure that only Craig is able to read the email?

Which of the following types of proxies would you use to remain anonymous when surfing the internet?

As the security analyst for your organization, you have noticed an increase in emails that attempt to trick users into revealing confidential information. Which web threat solution should you implement to protect against these threats?

Which of the following are functions of gateway email spam filters? (Select two.)

Which of the following NAC agent types would be used for IoT devices?

Which of the steps in the Network Access Control (NAC) implementation process occurs once the policies have been defined?

Which of the following defines all the prerequisites a device must meet in order to access a network?

Which of the following applies the appropriate policies in order to provide a device with the access it's defined to receive?

Which of the following NAC agent types creates a temporary connection?

You are the security analyst for your organization and have discovered evidence that someone is attempting to brute-force the root password on the web server. Which classification of attack type is this?

An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind of attack?

In which of the following zones would a web server most likely be placed?

Which area of focus helps to identify weak network architecture or design?

Which classification of attack type does packet sniffing fall under?

An attacker was able to gain unauthorized access to a mobile phone and install a Trojan horse so that he or she could bypass security controls and reconnect later. Which type of attack is this an example of?

In an effort to increase the security of your organization, programmers have been informed they can no longer bypass security during development. Which vulnerability are you attempting to prevent?

Which of the following are characteristics of a complex password? (Select two.)

An attacker has gained access to the administrator's login credentials. Which type of attack has most likely occurred?

When setting up a new wireless access point, what is the first configuration change that should be made?

Which common design feature among instant messaging clients make them less secure than other means of communicating over the internet?

Which type of application allows users to share and access content without using a centralized server?

Which of the following methods did Microsoft introduce in Windows 10 to help distribute OS updates?

Which of the following is a benefit of P2P applications?

What do application control solutions use to identify specific applications?

Which of the following scenarios would typically utilize 802.1x authentication?

Which feature prevents switching loops and ensures there is only a single active path between any two switches?

When configuring VLANs on a switch, which type of switch ports are members of all VLANs defined on the switch?

Which of the following switch attacks associates the attacker's MAC address with the IP address of the victim's devices?

Which of the following attacks, if successful, causes a switch to function like a hub?

You are adding switches to your network to support additional VLANs. Unfortunately, the new switches are from a different vendor than the current switches. Which standard do you need to ensure that the switches are supported?

When configuring VLANs on a switch, what is used to identify which VLAN a device belongs to?

Which 802.1Q priority is IP phone traffic on a voice VLAN tagged with by default?

A virtual LAN can be created using which of the following?

You are creating a VLAN for voice over IP (VoIP). Which command should you use?

Which of the following should be configured on the router to filter traffic at the router level?

Which of the following happens by default when you create and apply a new ACL on a router?

Which type of ACL should be placed as close to the source as possible?

You are deploying a brand new router. What is one of the first things you should do?

Which of the following can make passwords useless on a router?