Font size
S
M
L
XL
WorksheetsMCyber_Chap9
Total questions: 15
Worksheet time: 15mins
Name
Class
Date
1.
Which antimalware software approach can recognize various characteristics of known malware files to detect a threat?
a)
Routing-based
b)
Behavior-based
c)
Signature-based
d)
Heuristics-based
2.
Which device in a LAN infrastructure is susceptible to MAC address-table overflow and spoofing attacks?
a)
Firewall
b)
Workstation
c)
Server
d)
Switch
3.
In most host-based security suites, which function provides robust logging of security-related events and sends logs to a central location?
a)
Intrusion detection and prevention
b)
Anti-phishing
c)
Telemetry
d)
Safe browsing
4.
Which technology might increase the security challenge to the implementation of IoT in an enterprise environment?
a)
CPU processing speed
b)
Data storage
c)
Cloud computing
d)
Network bandwidth
5.
Which statement describes agentless antivirus protection?
a)
Host-based antivirus systems provide agentless antivirus protection.
b)
The antivirus protection is provided by the router that is connected to a cloud service.
c)
The antivirus protection is provided by the ISP.
d)
Antivirus scans are performed on hosts from a centralized system.
6.
Which HIDS is an open source product?
a)
Tripwire
b)
OSSEC
c)
Cisco AMP
d)
AlienVault USM
7.
In Windows Firewall, when is the Domain profile applied?
a)
When the host accesses the Internet
b)
When the host checks emails from an enterprise email server
c)
When the host is connected to a trusted network such as an internal business network
d)
When the host is connected to an isolated network from the Internet by another security device
8.
What is a host-based intrusion detection system (HIDS)?
a)
It detects and stops potential direct attacks but does not scan for malware.
b)
It is an agentless system that scans files on a host for potential malware.
c)
It identifies potential attacks and sends alerts but does not stop the traffic.
d)
It combines the functionalities of antimalware applications with firewall protection.
9.
As described by the SANS Institute, which attack surface includes the exploitation of vulnerabilities in wired and wireless protocols used by IoT devices?
a)
Human Attack Surface
b)
Internet Attack Surface
c)
Network Attack Surface
d)
Software Attack Surface
10.
Which statement describes the term attack surface?
a)
It is the total sum of vulnerabilities in a system that is accessible to an attacker.
b)
It is the group of hosts that experiences the same attack.
c)
It is the network interface where attacks originate.
d)
It is the total number of attacks toward an organization within a day.
11.
As described by the SANS Institute, which attack surface includes the use of social engineering?
a)
Internet Attack Surface
b)
Software Attack Surface
c)
Human Attack Surface
d)
Network Attack Surface
12.
Which security endpoint setting would be used by a security analyst to determine if a computer has been configured to prevent a particular application from running?
a)
Services
b)
Blacklisting
c)
Baselining
d)
Whitelisting
13.
What can you do to ensure that network operating software remains secure? (Choose three correct answers)
a)
Install patches and updates regularly
b)
Implement data classification standards
c)
Conduct software testing prior to launch
d)
Develop a policy to address application software and operating system updates
14.
Which type of technology can prevent malicious software from displaying unwanted popup ads on a device?
a)
Spyware protection
b)
Antivirus protection
c)
Adware protection
15.
What type of lock is recommended to secure an office door?
a)
Cipher lock
b)
Keyed entry lock
c)
Security cage
d)
Cable lock
Reset
