Font size
Worksheets3rd Quarter Final Network Security Practice Exam 2
Total questions: 59
Worksheet time: 42mins
What is a benefit of the SmartScreen Filter built into Internet Explorer and Microsoft Edge?
Protection from sniffers
Firewall protection
Perimeter network protection
Phishing protection
Match the following
Acceptible Use Policy (AUP)
Disaster Recovery Plan (DRP)
Intrusion Prevention System (IPS)
Stateless Firewall
Which type of backup backs up all changed files since the last full backup?
incremental
differential
transitional
phased
When utilizing private browsing your history is not saved.
True
False
When utilizing private browsing in the workplace, the workplace can not tell which sites one visited.
True
False
An internet service provider will not know the sites one visited while private browsing.
True
False
Where on a Windows Server is a password reset for a domain user account?
Group Policy
Local Users and Groups
Local Security Policy
Active Directory Users and Computers
Security Compliance Manager is an example of a Stateful firewall.
Review the underlined text. If the statement is correct, select “No change is needed.” If the statement is incorrect, select the answer that best fits in the statement.
No change is needed
Tool to determine which devices are allowed on a network
Policy Maker
Tool for desktop, data center, and cloud configurations
Which Windows Registry hive stores file extensions for applications?
HKEY_CLASSES_ ROOT
HKEY_LOCAL_ MACHINE
HKEY_CURRENT_ USER
HKEY_CURRENT_ CONFIGURATION
A honeypot is a computer used to trap hackers and distract them from real targets when the hackers are trying to attack a network.
Review the underlined text. If the statement is correct, select “No change is needed.” If the statement is incorrect, select the answer that best fits in the statement.
No change needed
IDS
IPS
Honeynet
BitLocker will use software-based encryption in conjunction with a TPM on a device.
Review the underlined text. If the statement is correct, select “No change is needed.” If the statement is incorrect, select the answer that best fits in the statement.
No change is needed
in addition to
instead of
in the absence of
A digital signature included in an email is used to _____.
Validate the sender
Decrypt the message
Validate the recipient
Encrypt the message
Which type of malware gains administrator-level access of a system and targets items such as the BIOS, hypervisor, and kernel?
Worm
Rootkit
Virus
Bot
Logic Bomb
Asymmetric encryption uses a single key to perform encryption and decryption.
True
False
DES is an asymmetric encryption algorithm.
True
False
RSA is an asymmetric encryption algorithm.
True
False
Which tunneling protocol is used to carry packets from unroutable IP addresses across a routable IP network?
IPsec
PPP
GRE
PPTP
L2RP
Protocol spoofing monitors packet traffic on a network and reports the sender, destination, and type of packet.
Review the underlined text. If the statement is correct, select “No change is needed.” If the statement is incorrect, select the answer that best fits in the statement.
No change is needed
A network sniffer
The Microsoft Security Assessment Tool
SpeedTest
Which is a Windows 10 authentication system that uses a user's face, iris, or fingerprint to unlock devices?
Windows Reader
Virtual Smart Card
Windows Hello
Windows Biometric Framework
Which best describes the reason for encrypting offline files?
To be able to use TPM on files
To protect files in case a device is lost or stolen
To control shares on files
To control permissions on files
Match the following
DNSSEC helps prevent pharming and man-in-the-middle attacks.
DNSSEC is proprietary to Microsoft Domain Name Servers.
DNSSEC uses a digital signature to create a chain of authority.
Which Windows tool is used to encrypt removable drives?
BitLocker To Go
Trusted Platform Module (TPM)
Bitlocker
Encrypting File Service (EFS)
What does BitLocker To Go encrypt?
Folders
Device hard drives
Files
Removable hard drives
Once it has been determined what will be audited and where the audit files will be stored, what should be taken into consideration next?
How large the log files will be
When syslog will be used
Who has access to the logs
What ticketing system will be used for the logs
Which Internet technology poses the greatest risk to a user?
ActiveX Controls
Adobe Flash
Active Server Pages (ASP)
Java Applets
A department head wants to control the types of permissions and the recipient of permissions on a set of folders for the department. The department head is not in the Administrators group. What should the department head do in order to be able to control permissions?
Become an Administrator
Take ownership of the folder
Gain Full Control permissions on the folder
Gain Modify permissions on the folder
Which three of the following are group scopes defined by Active Directory? (Choose three)
Universal
Domain Security
Global
Domain Local
Local User
A router can divide a physical network into segments called VLANS.
Review the underlined text. If the statement is correct, select “No change is needed.” If the statement is incorrect, select the answer that best fits in the statement.
subnets
partitions
VPNs
No change is needed
Which area of Group Policy can be used to control apps that can be run on devices?
AppLocker
Windows Installer rules
Packaged app rules
Executable rules
An administrator configures a software restriction policy using the Local Security Policy editor. How can the administrator make this policy apply to an entire Active Directory domain?
Export the policy and then import it into Group Policy
Link to the local policy from Group Policy
Redefine the policy in Group Policy
Copy the policy and paste it into Group Policy
In which locations can system audit policies be set? (Choose two)
Syslog
Local Security Policy
Event Viewer
Group Policy
Which type of audit event should be set if one is trying to determine attempts to access non-Active Directory objects?
Privilege Use
Object Tracking
Permit Files
Object Access
Your email program is blocking emails from a certain sender. What is the best option?
Reconfigure the Gateway
Add the sender to a whitelist
Add contacts to a list
Create a rule in the email client
What should be done to a mobile device used for business purposes if it is lost or stolen?
Remote wipe
Remote encryption
Use the find the device app on the device to locate it
Remote shutdown
Which is the most common format used for digital certificates?
PKCS #12
PKCS #7
X.509
PKCS #3
You are an intern for a small company. Recently, you started receiving complaints that employees are having difficulty connecting to one of the servers and that the server is responding slowly or not at all. When you monitor the packet traffic, you notice a very high volume of packets being sent from three computers in the HR Department as shown in the attached image: The scenario demonstrated is a __________ attack.
Brute Force
Denial of Service
Man-in-the-Middle
Phishing
You are an intern for a small company. Recently, you started receiving complaints that employees are having difficulty connecting to one of the servers and that the server is responding slowly or not at all. When you monitor the packet traffic, you notice a very high volume of packets being sent from three computers in the HR Department as shown in the attached image. What should you do to avoid this type of attack?
Run antivirus software on all computers
Change all administrative passwords
Configure your server to deny connections from the HR department
Nothing. The IPS will notice the uptick in traffic and provide more bandwidth.
An attack on your company server is being made using the attached image. To detect this type of attack, you should enable the policy to audit __________
Successful logon attempts
Failed logon attempts
Sniffing network packets
biometric scans
An attack on your company server is being made using the attached image. What type of attack seems to be taking place?
Brute Force attack
Dictionary attack
Rainbow Table attack
Man-in-the-Middle attack
Denial of Service attack
An attack on your company server is being made using the attached image. To prevent this type of attack from being successful, you should enable .....
Force users to change their password every 30 days
Account lockout after five failed logon attempts
Disable all accounts that have been inactive for more than seven days
Disable logon attempts from all devices inside the network
You recently purchased a new home router and a new laptop computer. You want to connect to your personal Home Router using the strongest security available. On your computer, you open the wireless window to manually configure a profile as shown in the attached image. What security type should you choose?
WEP
WPA
WPA2
WPA3
WPA4
WPA2 uses which encryption type?
Shared Key
TKIP
AES
GCMP
IPsec
This feature in Windows informs the user when a program makes a change that requires administrator-level permission. The feature is called what?
PPP
IPsec
IKE
UAC
What does the Minimum Password Age policy do?
Enforces a length of at least 8 characters
Forces users to wait a certain amount of time before changing their password
Forces a user to change passwords every 90 days
Ensures users doesn't use the same password for at least 7 days
In which ways can security templates be deployed? (Choose two)
GPOs
Security Configuration and Analysis Snap-In
Security Compliance Manager
Microsoft Security Baseline Analyzer
Which types of lists can be used as part of an antispam solution? (Choose two)
DNSBL
DNSWL
RWL
RBL
NFLPA
By default, which websites are assigned to the Trusted Sites Zone in browser settings?
None
All .edu websites
All websites
Google, Yahoo, and Bing
All .biz websites
A polymorphic virus changes its code so that it cannot be detected easily.
True
False
A stealth virus hides itself in the master boot record.
True
False
A virus does not need a carrier in order to propagate itself.
True
False
Besides using Windows Update, what can be used to keep servers updated and patched properly? (Choose two)
MBSA
MDT
SCCM
WSUS
EventViewer
Categorize each of the following statements regarding RADIUS as either True or False
RADIUS is Cisco-proprietary.
Radius provides auditing services
Radius performs centralized authentication
A buffer overflow is an attempt to fit an amount of data into a memory space that is too small to handle that data.
Review the underlined text. If the statement is correct, select “No change is needed.” If the statement is incorrect, select the answer that best fits in the statement.
NO change is needed
Worm
Memory Leak
SQL injection
Match the following cybersecurity principles to the correct definition
The prevention of unauthorized withholding of data
Availability
The prevention of unauthorized access to sensitive data
Confidentiality
The prevention of erroneous modification of data
Integrity
Verifying the identity of a user before granting access to a resource
Authentication
Tracking and recording user activities and resource usage on a network
Accounting
Match each type of protection with its description.
Protects from destructive bits of code loaded onto a computer without the user's knowledge
Anti-Virus
Protects from software that gathers information
Anti-Spyware
Protects from everything including spyware to viruses
Anti-Malware
Using the attached screen image, indicate where one would click to enable or disable inheritance on this folder.
A
B
C
D
Which answer choice shows all 7 of the layers of the OSI model in the right order (from bottom to top)?
Application, Presentation, Session, Transport, Network,
Data Link, Physical
Presentation, Transport, Session, Application, Network,
Data Link, Physical
Physical,
Data Link, Session, Transport, Network, Presentation, Application
Application, Network, Physical,
Data Link, Application, Presentation, Session
Match the protocol to the correct function
Assigns IP addresses automatically to devicespop
DHCP
Matches IP addresses to MAC addresses
ARP
Translates website names into IP addresses
DNS
Used to send emails
SMTP
Used to send "ping" command
ICMP
Match the protocol to the appropriate port #
HTTP
80
SSH
22
HTTPS
443
SMTP
25
Telnet
23
