Which type of injection attack uses keywords such as SELECT and UPDATE to manipulate data through a web form?

An end user calls the help desk complaining about a web page not loading the most current data for the page unless the user refreshes the page. What should the help desk agent have the user do first?

When one suspects a device has been affected by malware, what is the first step that should be taken to remediate the device?

A good Audit Plan may collect both successful and failed events. (T/F)

Audit events take up computer resources and personnel time, so you should be selective about the events to audit. (T/F)

You should always audit log-on successes. (T/F)

Review the underlined text. If the statement is correct, select "No change is needed." If the statement is incorrect, select the answer that best fits in the statement: Spoofing redirects internet traffic from one website to an identical-looking website in order to trick you into entering your username and password into their database.

What must take place for someone trying to enter a physical area of a building before access control takes place?

MAC Filtering is best suited for large wireless networks. (T/F)

WEP is the strongest form of encryption for a wireless network. (T/F)

WPA/WPA2 can require an authentication server. (T/F)

One of the layers of defense in the anti-phishing and malware protection strategies developed by Microsoft is:

Review the underlined text. If the statement is correct, select "No change is needed." If the statement is incorrect, select the answer that best fits in the statement: One of the ways you can protect your computer from hackers and malicious software is to use Windows Firewall.

What is considered the minimum length of a good password?

Static Routing allows multiple computers on an internal network to share one public IP address. Review the underlined text. If the statement is correct, select "No change is needed." If the statement is incorrect, select the answer that best fits in the statement.

Which type of VPN will often have a user connect through a web browser?

Which type of VPN connection usually connects two business entities?

What email filtering technique uses a list of verified DNS domains to verify that an email is coming from a trusted IP address?

Application-level firewalls can provide content filtering and virus protection. (T/F)

Application-level firewalls support caching. (T/F)

Application-level firewalls tend to be less resource intensive than that of a traditional firewall. (T/F)

Which of the following are NTFS permissions? (Choose three)

Which protocols are considered unsecure and should be avoided in a server environment? (Choose two)

Which type of DNS record contains an IP address that is then used to look up an associated host or domain name?

IPSec encrypts data packets using AH. (T/F)

IPSec is a set of protocols that protects data transmission between hosts by providing authentication and privacy. (T/F)

IPSec is used to create a secure tunnel between two computing devices. (T/F)

IPSec uses digital signatures to create a chain of authority. (T/F)

Which of the following would be considered to be the strongest password?

Your IT department is getting a barrage of calls from users saying their pop-up blockers are not blocking ads for huge discounts on software. Upon further research you discover that you current malware signature files are not sufficiently removing this nuisance from your systems. Which type of attack is taking place?

Your IT department is getting a barrage of calls from users saying their pop-up blockers are not blocking ads for huge discounts on software. Upon further research you discover that you current malware signature files are not sufficiently removing this nuisance from your systems. Which characteristic of the attack indicates that it is not being eradicated by antimalware programs?

A certificate authority provides keys used in digital certificates for authentication. (T/F)

In a Public Key Infrastructure, the public key encrypts data, and a corresponding public key decrypts it. (T/F)

In Digital Signatures, the sender uses a secret key to create a unique electronic number that can be read by anyone possessing the corresponding public key, which verifies that the message is from the sender. (T/F)

Forging a fake sender address within an email message is an example of malware. Review the underlined text. If the statement is correct, select "No change is needed." If the statement is incorrect, select the answer that best fits in the statement.

Where do most computers obtain a Media Access Control (MAC) address?

The tool used to view audit logs is Event Viewer. (T/F)

You can audit logon failures to warn of hacking attacks. (T/F)

You cannot limit the size of audit logs. (T/F)

Ensuring the Sales department can access a document is an example of:

Encrypting a document as it travels across network is an example of:

Verifying the sender of a document is an example of:

Which backup does this describe? Backs up all files and resets the archive bit

Which backup does this describe? Backs up all changed files since the last full backup

Which backup does this describe? Backs up all changed files since the last full or Incremental backup

Which protocol should be allowed only on email servers used to send email and should be blocked on all other servers and client machines?

How can a wireless network best be set up to allow only specific devices onto the network?

A Network Sniffer can easily obtain:

Which Windows app is used to help protect a device against malware?

Which of the following are advanced permissions in NTFS? (Choose two)

BitLocker, when possible, stores the encryption key on a computer's EFS. Review the underlined text. If the statement is correct, select "No change is needed." If the statement is incorrect, select the answer that best fits in the statement.

RADIUS is an authentication method that identifies individuals based on physical characteristics such as fingerprints, facial recognition, retina scans, or voice patterns. Review the underlined text. If the statement is correct, select "No change is needed." If the statement is incorrect, select the answer that best fits in the statement.

A junior administrator asks you what it means to harden a server. Which two statements fit the description of hardening a server?

To best protect servers, which of the following options is considered a best practice on how services are used on servers?

Malware that steals and encrypts data and demands money for the return of the data is known as what type of malware?

Which three characteristics describe worms? (Choose three)

Which Password policy prohibits reusing the same password?

Which protocols are used to encrypt emails? (Choose two)

The process of eliminating a risk by choosing not to participate in an action or activity describes which of the following?

A junior administrator notices, when looking at a folder's permissions, gray checkboxes in the Allow column for a group's permissions. What do the gray checkboxes represent?

Where are password policies established for an Active Directory domain?