Deck 18: Security Strategies

Question 1

 Using Group Policy, you can set security policies to help secure a workstation.

Answer 1

True

Question 2

 What does the presence of the Cydia app on an iOS device indicate?

A) A rootkit has been installed on the device
B) The device is infected with a worm
C) The device has been jailbroken
D) There is spyware software installed on the device

Answer 2

C

Question 3

 Anti-malware software relies on what sort of update in order to define or detect malware as it gets into the wild?

A) rootkits
B) malware signatures
C) static updates
D) Windows updates

Answer 3

B

Question 4

 On a peer-to-peer network, authentication is the responsibility of the domain.

Question 5

 What type of malware can hijack internal Windows components and often goes undetected because it is already loaded when the antivirus software loads?

A) Trojan horse
B) rootkit
C) adware
D) worm

Question 6

 What technology can be used to locate a device such as a laptop after it has been stolen?

A) Management software
B) LoJack
C) Trojan
D) Multifactor Trace software

Question 7

 What statement regarding passwords on Windows is accurate?

A) it's best to write your password down so you don't get locked out of your computer
B) passwords cannot be longer than 14 characters
C) by default, accounts with a blank password cannot logon remotely
D) letters and numbers are allowed, but no symbols such as '@' or '!'

Question 8

 One way to authenticate users on a computer is to use a small device that contains authentication information. What is this device called?

A) retinal scanner
B) LoJack token
C) smart card
D) TPM

Question 9

) What command can be used to take full access of a file?

A) takeown
B) attrib
C) perms
D) icacls

Question 10

 What keystroke should you press to get a logon window if you don't use the welcome screen?

A) Alt+F1
B) Ctrl+Ins+Home
C) Alt+F5+End
D) Ctrl+Alt+Delete

Question 11

) If you want your computer to be protected by BitLocker Encryption using computer authentication, what feature must your computer have?

A) a USB port
B) an authentication key on the hard drive
C) a TPM chip on the motherboard
D) a PIN on the BIOS

Question 12

 A root certificate is the original certificate issued by the CA.

Question 13

 When using the Windows Encrypted File System, what statement is accurate?

A) files can be marked for encryption, but not folders
B) an encrypted file moved to an unencrypted folder remains encrypted
C) EFS only works on NTFS and FAT32
D) you need to download special software to use EFS

Question 14

 What statement is true regarding the Guest account in Windows 7?

A) it is disabled by default
B) it automatically has a complex password
C) you cannot rename it
D) it has administrative access

Question 15

 When an attacker presents a program or himself as someone else to obtain private information and pretends to be a legitimate website, network, FTP site, or person in a chat session, what type of attack is occurring?

A) rootkit
B) zombie
C) brute-force
D) man-in-the-middle

Question 16

 If you don't want to use BitLocker to protect your computer, you can still configure a power-on password using which of the following?

A) Windows POP technology
B) the BIOS
C) a feature available on some DVD drives
D) your USB keyboard

Question 17

 What device provides a strong magnetic field used to completely erase data on a hard drive or tape drive?

A) ATA Secure Erase
B) low-level format
C) degausser
D) magnetic data filter

Question 18

 You should beware of a person attempting to use your computer after you step away from it, a term referred to as which of the following?

A) shoulder surfing
B) tailgating
C) social engineering
D) session hijacking

Question 19

 After initially installing Windows 7, you need to disable the Guest account so nobody can use it.

Question 20

 Requiring users to press Ctrl+Alt+Delete to get a logon window is more secure than the welcome screen.

Question 21

 What are some of the ways you can use BitLocker Encryption? (Choose all that apply.)

A) computer authentication using TPM
B) user authentication using a certificate
C) user authentication using a USB flash drive
D) computer and user authentication using a PIN and TPM

Question 22

 A person that secretly peaks at your monitor screen while you work may be doing what?

A) tailgating
B) screen capping
C) shoulder surfing
D) social engineering

Question 23

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 a computer that has been hacked, and the hacker is using the computer to run repetitive software in the background without the user's knowledge

Question 24

 What software program is an example of password management software? (Choose all that apply.)

A) KeePass
B) LastPass
C) Dashlane
D) PassLock

Question 25

 What inputs would be considered to be part of a biometric device? (Choose all that apply.)

A) keystrokes
B) retina
C) fingerprint
D) voice

Question 26

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 a code used to identify and authenticate a person or organization sending data over a network

Question 27

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 type of spyware that tracks your keystrokes, including passwords

Question 28

) When creating a strong password, what are some valid criteria the password should meet? (Choose all that apply.)

A) The password should be at least eight characters long.
B) You should not use adjacent keys on the keyboard, such as asdf.
C) You should combine uppercase and lower case letters, numbers, and symbols.
D) You can use words from a foreign language to make the password more secure.

Question 29

 What methods exist to lock down a workstation running Windows, such as when stepping away from the screen? (Choose all that apply.)

A) press Ctrl+End and click Logon Screen
B) press Windows key + L
C) press Ctrl+Alt+Delete and click Lock this Computer
D) Press F1 and click Sleep

Question 30

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 the practice of tricking people into giving out private information or allowing unsafe programs into the network or computer

Question 31

 Documentation for evidence which includes exactly what, when, and from whom evidence was collected, the condition of this evidence, and how the evidence was secured while it was in your possession, is know by what term?

A) evidence security roster
B) chain of custody
C) item inventory
D) evidence tracking list

Question 32

 What is intended to legally protect the intellectual property rights of organizations or individuals to creative works, which include books, images, and software?

A) copyright
B) license
C) user agreement
D) cease and desist order

Question 33

 CryptoLocker is an example of what type of malware?

A) zero-day attack
B) worm
C) ransomware
D) man-in-the-middle

Question 34

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 software installed on a computer that produces pop-up ads using your browser

Question 35

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 A program that is potentially harmful or potentially unwanted

Question 36

 Using a PIN or password in addition to TPM is an example of what type of authentication?

A) multifactor
B) biometric
C) asymmetric
D) symmetric

Question 37

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
. an infestation designed to copy itself repeatedly to memory, on drive space, or on a network

Question 38

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 A type of malware that tricks you into opening it by substituting itself for a legitimate program

Question 39

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 when someone who is unauthorized follows the employee through a secured entrance to a room or building

Question 40

Matching
Match each item with a statement below.
a. adware
b. digital certificate
c. grayware
d. keylogger
e. dictionary attack
f. social engineering
g. tailgating
h. Trojan
i. zombie
j. Worm
 an attack that can be used to crack a long password by trying words and word combinations

Question 41

 What are the risks in using BitLocker to secure your system and how can you mitigate these risks?

Question 42

. If you wish to monitor logon failures, what should you do?

Question 43

 Describe Windows Firewall.

Question 44

 What is a rootkit and why is it so difficult to detect?

Question 45

 What is a Trojan, and how is it installed?

Question 46

 Describe how you can control how a user logs on to a Windows system and how doing so can make a system more secure.

Question 47

 List five of the different criteria that make up a secure password?

Question 48

 Describe file and folder encryption in Windows (not how you encrypt a file).

Question 49

 With respect to the default users and password settings, how can you use Group Policy to make your system more secure?

Question 50

 Under what circumstances can a blank password be more secure than a non-blank password?