Deck 29: Securing Computers

Question 1

What is a piece of malicious software that gets passed from computer to computer by attaching itself to a program?

A) Spyware
B) Trojan
C) Virus
D) Worm

Answer 1

C

Question 2

What is a software program that looks like one thing (such as a utility or a game)but is actually doing something else (such as modifying CMOS settings)?

A) Spyware
B) Trojan
C) Virus
D) Worm

Answer 2

B

Question 3

What is it called when a user accesses resources in an unauthorized way?

A) Authorized access
B) Normal
C) Unauthorized access
D) Virus attack

Answer 3

C

Question 4

Antimalware programs can passively monitor your computer's activity.In this mode,what are they called?

A) Grayware
B) Spyware
C) Virus shields
D) Virus swords

Question 5

What could a computer use to determine a user's identity with the most authority?

A) Biometric device
B) Password
C) User name
D) Firewall

Question 6

How does a computer determine who can or should access it?

A) Access control
B) Authentication
C) Encryption
D) Secure servers

Question 7

What is it called when a hacker goes through the garbage looking for information?

A) Dumpster diving
B) Infiltration
C) Garbage scan
D) Wastebasket diving

Question 8

A user has a credit card-sized card used to prove her identity with a PIN.What is this card called?

A) Authorization card
B) Biometric card
C) Smart card
D) Task card

Question 9

What is a complete program that travels from machine to machine through computer networks and has the capability to cause malicious problems?

A) Spyware
B) Trojan
C) Virus
D) Worm

Question 10

To lock down security settings on a single computer in a workgroup,what would you use?

A) Group Policy
B) Local Security Settings
C) Account Lockout Policy
D) Password Policy

Question 11

What is the process of using or manipulating people inside the networking environment to gain access to that network from the outside?

A) Internal virus
B) Inside attack
C) Hacking
D) Social engineering

Question 12

What is Microsoft's encryption method of choice for providing transparent encryption between the server and the client?

A) IPSec
B) HTTPS
C) Digital certificate
D) PAP

Question 13

Which of the following is not considered grayware?

A) Pop-ups
B) Spyware
C) Adware
D) Phishing

Question 14

Most computer attacks are accomplished through what type of attack?

A) Port scanning
B) Social engineering
C) Buffer overflows
D) Password cracking

Question 15

Sally is a member of multiple groups.A file has been granted different permissions to the different groups.What is Sally's effective permission?

A) Combined permissions of all groups
B) Full Control
C) Most restrictive permissions of all groups
D) Impossible to say

Question 16

What is the act of trying to get people to give their user names,passwords,or other security information by pretending to be someone else electronically called?

A) Phishing
B) Dumpster diving
C) Phunting
D) Compliance

Question 17

To lock down security settings on a single computer in a domain,what would you use?

A) Group Policy
B) Local Security Settings
C) Account Lockout Policy
D) Password Policy

Question 18

Together,what are viruses,Trojans,and worms called?

A) Grayware
B) Helpful software
C) Malware
D) Spyware

Question 19

Physical security,authentication,the file system,users and groups,and security policies combine to make what?

A) Access control
B) Authentication
C) Encryption
D) Secure servers

Question 20

What word describes the process of cleaning up after a virus infection?

A) Remnants
B) Remediation
C) Quarantine
D) Declassification

Question 21

What type of program isn't destructive by itself,but leaches bandwidth in networks?

A) Adware
B) Grayware
C) Pop-ups
D) Spyware

Question 22

What is the correct humidity range for computer equipment?

A) 0-20 percent
B) 10-20 percent
C) 30-40 percent
D) 60-80 percent

Question 23

What is simply observing someone's screen or keyboard to get information,often passwords?

A) Shoulder surfing
B) Tailgating
C) Dumpster diving
D) Phishing

Question 24

The tool used to apply policy settings to multiple computers in an Active Directory domain is ____________________.

Question 25

Sally is a member of the Sales group and the Marketing group.The Marketing group has Full Control permission to a folder named NewProducts,and the Sales group has Read permission to the same folder.Sally's permission to the folder is ____________________.

Question 26

A program that looks useful,such as a game or a utility,but is actually maliciously doing something else to the system is known as a (n)____________________.

Question 27

Which current authentication method is typically used over a LAN?

A) CHAP
B) Kerberos
C) MS-CHAP
D) PAP

Question 28

To make sure antivirus programs are as useful as possible,what should be updated regularly?

A) Browser
B) Security updates
C) Signatures
D) Windows updates

Question 29

Malicious software is also known as ____________________.

Question 30

Following someone through the door is an example of ____________________.

Question 31

A (n)____________________ is signed by a trusted authority that guarantees that the public key you are about to get is actually from the Web server and not from some evil person trying to pretend to be the Web server.

Question 32

The tool used to set local policies on an individual system is ____________________.

Question 33

A device that can prove who you are based on your fingerprint is known as a(n)____________________ device.

Question 34

What can be used to create entries in the Security log whenever a user logs on?

A) Event auditing
B) Object access auditing
C) Event tracking
D) Success logging

Question 35

All of the following are characteristics of employee ID badges EXCEPT:

A) Even relatively small organizations use them.
B) They control building access.
C) They store authentication information.
D) They are used to store encryption keys.

Question 36

A common ____________________ attack is where an attacker uses the telephone and convinces a user to give up secure information.

Question 37

What type of virus attempts to change its signature to prevent detection by antivirus programs?

A) Grayware
B) Spyware
C) Polymorph
D) Stealth

Question 38

Not all __________ access is malicious,but it should still be prevented;for example,a user may poke around a network share and see sensitive information.

Question 39

What type of program runs in the background on your PC,sending information about your browsing habits to the company that installed it on your system?

A) Adware
B) Grayware
C) Pop-ups
D) Spyware

Question 40

All of the following are considered environmental controls EXCEPT:

A) Air conditioning
B) Temperature controls
C) Humidity controls
D) Closed circuit cameras

Question 41

A (n)____________________ is a device or software (or combination of both)used to protect an internal network from unauthorized access from the Internet.

Question 42

A complete program that travels from machine to machine through computer networks and can cause so much activity that it can overload a network is a (n)____________________.

Question 43

Unsolicited e-mail is more commonly known as ____________________.

Question 44

Windows XP and later come with an excellent software firewall,called the ____________________.

Question 45

To detect executable viruses,an antivirus program uses a library of ____________________.

Question 46

You are tasked with ensuring that any time a file or folder is accessed,details of the access are logged.This is an example of ____________________.

Question 47

A (n)__________ is something the user has,like an ID card or security token.

Question 48

A (n)__________ (also called a biometric)is something that is part of the user,like a fingerprint or retinal pattern.

Question 49

The authentication encryption used in Windows network operating systems is ____________________.

Question 50

The security protocol that works with HTTP to create secure Web sites is ____________________.

Question 51

The list of viruses your antivirus program can recognize is called the ____________________ file.

Question 52

Boot sector viruses that use various methods to hide from antivirus software are known as ____________________ viruses.

Question 53

Microsoft's encryption method of choice over private connections such as ISDN or T1 is ____________________.

Question 54

When the screen lock feature is enabled,a user won't be able to return to the desktop until they've entered the ___________.

Question 55

Access control is the process of implementing methods to ensure unauthorized users can't access your system.Two primary methods are physical security and ____________________.

Question 56

__________ reduce the viewing angle,making it impossible for anyone to read the screen except those directly in front of it.

Question 57

The scrambling code used to attempt to modify a (n)____________________ virus to prevent detection is actually used as the signature to detect the virus.

Question 58

Surprise browser windows that appear automatically when you visit a Web site are ____________________.

Question 59

When configured to do so,Windows will create an entry in the Security Log when someone tries to access a certain file or folder-this is called __________ auditing

Question 60

A __________ is something the user knows,like a password or personal identification number (PIN).

Question 61

What is a stealth virus?

Question 62

What tool is used to set security policies on an individual system?

Question 63

What is a common LAN authentication protocol used today?

Question 64

Where can you find Event Viewer?

Question 65

What command line utility can you use to go from FAT32 to NTFS?

Question 66

You identify a server that is using FAT32 as the file system.You decide to change it to an NTFS drive.What command would you enter at the command line?

Question 67

Describe a smart card.

Question 68

What is the difference between a virus and a worm?

Question 69

Define social engineering.

Question 70

Define malware.

Question 71

What is a polymorph virus?

Question 72

What is a Trojan horse?

Question 73

What can be used to set security policies for users or computers in a domain?

Question 74

List five ways to increase security protection for a wireless network.

Question 75

What are the benefits of incidence reporting?

Question 76

List the four interlinked topics that should be considered when implementing access control.

Question 77

Define effective permissions.

Question 78

Define antivirus signature.

Question 79

What is spyware?

Question 80

What are two important things to do to protect systems from a worm?