NEW
Font size
WorksheetsDomain 2 - Network Security
Total questions: 55
Worksheet time: 27mins
Practicing separation of services reduces the ___________ on each server.
Traffic
Attack surface
Data speed
Data latency
Which is NOT a step that users can take to harden devices, including servers?
Configure remote access
Disable unnecessary accounts
Remove administrative accounts
Transfer server to a separate subnet
Part of patch management entails making sure either a device or an app always has the latest patches, which usually involve__________
New software
Password updates
Security updates
New features
Which command is used to make a device update to any Group policies that apply to that device?
Gpupdate/now
Gpupdate/device
Gpforce/update
Gpupdate/force
Which is one way to get server updates?
Use a WSUS server
Use a RODC server
Use a NECC database
Use a WCSS database
Which dynamic update setting, when enabled, ensures that each update must be installed manually?
Nonsecure only
Secure only
None
Nonsecure and secure
Which 3 protocols should be disabled due to a lack of encryption?
PAP
Telnet
Anonymous FTP
Anonymous FTP
SFTP
FTP with passwords
Telnet
Anonymous FTP
FTP with passwords
PAP
Telnet
FTP with passwords
A user wants Set up Remote Access for their device. Which protocol should they use instead of Telnet?
Telent 2.0
PSP
Secure shell (SSH)
HTTP
Which items should be installed in a branch office to secure information from a domain controller in a headquarters office?
RODC
OSP
NVHS
OSP
In a RODC updates are _____ controlled and pushed down from a full domain controller.
Centrally
User
Admin
Globally
Remotely
Which Items need to be updated regularly in an antivirus software program?
Programs
Drivers
Definitions
Policies
Which 3 items help protect against unwanted software installations?
Third-party restriction software
Devices Guard
Group policy
Group policy
Single factor authentication
Adware
Devices Guard
Single factor authentication
Group policy
Third-party restriction software
Devices Guard
Adware
Which item helps prevent potentially harmful programs from making changes to a user’s computer?
Device-Guard
Encryption tab
Antivirus software
User account control
Which are 3 authentication factors?
What you have
What you are
What you know
What you have
What you say
What you do
What you have
What you say
What you are
What you are
What you know
What you do
Strong passwords have at test ______ characters.
10
7
12
8
Which version of windows is required at minimum to host a remote connection on a device?
Windows Vista
Windows 10 Professional
Windows 7
Windows 10
What do virtual smart cards use for authentication?
TPM chip
Biometrics
Card reader
Password
What do physical smart cards use for authentication?
TMP chip
Biometrics
Card reader
Biometrics
RADIUS is used to authenticate which 3 outside connections to a network?
Proxy servers
Web servers
VPNs
VPNs
Dial-ins
SQL servers
Proxy servers
VPNs
SQL servers
Web servers
VPNs
Dial-ins
Biometrics is also known as which form of authentication?
What you do
What you say
What you have
What you are
When running an app that requires elevated privileges, which windows feature should be used?
Run as
Safe mode
UAC
Administrative mode
Which 2 users or groups are created via the computer Management tool?
Global users
Local users
Local groups
Global groups
Local users
Local groups
Global users
Global groups
When an administrator grants permissions on a folder to a group, which 3 permission levels are assigned by default?
Read & execute
List folder contents
Read
Read & execute
List folder contents
Modify
List folder contents
Modify
Write
Read & execute
List folder contents
Write
Which 2 permission levels are available to assign to a user or group when creating a basic share on a folder?
Change
Read
Read/Write
Read
Own
Change
Read/Write
Change
Which command is used to access the registry?
Regedit
Registry
Rerun
Rechange
Which registry hive stores file associations?
HKEY_CLASSES_ROOT
HKEY_LOCAL_MACHINE
HKEY_CURRENT_CONFIG
HKEY_CURRENT_USER
In the registry, data is stored in _______ and _______
Boxes, drives
Hives, composites
Keys, subkeys
Containers, subcontainers
Active Directory stores all users and __________ on a domain-based network.
Permissions
Passwords
Networks
Servers
Which 2 are network authentication protocols?
NTLM
Kerberos
LOAP
NTLM
SSO
Kerberos
NTLM
SSO
Which Active Directory tool allows an administrator to create and run scripts for automation purposes?
Active Directory sites and services
Active Directory Domains and Trusts
Active Directory Administrative center
Active Directory Module for windows PowerShell
From a folder’s properties, where can an administrator see which folder is a parent folder for inherited permissions?
Advanced button on the security tab
Advanced button on the sharing tab
Edit button on the security tab
Edit button on the sharing tab
When copying a folder from one location to another, the folder’s permissions for the new copy are ___________
Inherited from its parent
Set up full control
Nonexistent and must be reassigned
The same as the original copy
When moving a folder from one location to another on the same drive, the folder’s permissions ___________
Remain the same
Are inherited from its parent
Are nonexistent and must be assigned
Are set to read-only for all groups
If a user is assigned to both the users and administrators groups, which permissions will the user have on a folder when both groups have permissions on that folder?
The group with the most lenient permissions
Inherited permissions from the folder’s parent
The group with the strictest permissions
Cumulative permissions from both groups in the folder
While in advanced security settings, what should an administrator do to view advanced permissions for a specific user or group?
Click the user or group
Click the user or group and click view
Double-click the user or group
Click the user or group and click edit
To delegate control on an organizational unit, an administrator should ___________
Change folder permissions
Run the delegation of control wizard
Change folder ownership
Change the delegation settings on the security tab
Which 3 permissions holders are used in Linux?
Owner
Administrator
User
Owner
Administrator
Others
User
Group
Others
Owner
Administrator
Group
Which 2 options are available for auditing?
Success
Read
Success
Write
Failure
Success
Write
Read
What is used to audit non-Active Directory objects?
Object access
Directory service access
System
Process tracking
Which encryption method is used to encrypt an external hard drive?
BitLocker drives
BitLocker to go
EFS
BitLocker TPM
SSL is an example of which kind of encryption?
Hardware-based encryption
Mail encryption
Software-based encryption
Virtual private network
What are the 2 main methods used to encrypt email?
S/MME
PGP
S/MME
SSID
PAP
SSTP
S/MME
SSTP
Which 3 rules should users follow to ensure secure communication processes?
Ensure information subject to industry regulation is disclosed via email
Use business-specific communication channels
Only disclose PII through email or text channels
Ensure information subject to industry regulation is disclosed via email
Use business-specific communication channels
Avoid posting company information on social media
Use business-specific communication channels
Avoid mixing business and personal information via text
Avoid posting company information on social media
Ensure information subject to industry regulation is disclosed via email
Use business-specific communication channels
Avoid mixing business and personal information via text
Chat windows left open at work are vulnerable to which type of attack?
MITM
Brute force
Phishing
Worms
Hoax Virus
Which 4 are VPN authentication forms?
EAP-MS-CHAPv2
MS-CHAPv2
PAP
CHAP
MS-CHAPv2
PAP
L2TP
CHAP
EAP-MS-CHAPv2
PAP
L2TP
CHAP
EAP-MS-CHAPv2
MS-CHAPv2
L2TP
CHAP
_____ keys are usually used to encrypt data ______ keys are usually used to encrypt data.
Symmetric, Asymmetric
Public, Symmetric
Public, Private
Symmetric, private
Which 3 of these encryption methods uses block ciphers?
3DES
DES
AES
TLS
3DES
DES
SSL
DES
AES
SSL
3DES
DES
Which 3 types of encryption are asymmetric?
SSL
TLS
DES
PGP
SSL
TLS
PGP
TKIP
SSL
PGP
TLS
DES
Which of the following formats allows exporting for both private keys and certificates?
PKCS #7
DER-encoded binary x.509
Base64 encoded x.509
PKCS #12
When viewing a certificate, under which 2 tabs can you find the expiration dates for that certificate?
Details
General
Logins
Details
Certificate path
Logins
Logins
Default Encoding
Certificates that are revoked or expired are stored in which part of a PKI?
CPF
RA
CA
CRL
________ uses code integrity policies to lock devices to run only trusted apps.
Device guard
Block device
Device identifier
EM Shielding
Which administrative tool is used to read auditing logs?
Local security policy
Syslog
Group policy
Event viewer
What are permissions set for viewing audit logs?
In the event viewer
On the folder storing the logs
In the audit log settings
In the security log settings
The _______ encryption method allows a user to copy and paste folders while still maintaining the encryption.
BitLocker
EFS
TPM
TLS
