Question 1

NetBIOS is not a protocol; it usually works with ____, a fast, efficient protocol that requires little configuration.

Accepted Answer

NetBEUI (NetBIOS Extended User Interface) is a fast, efficient protocol that requires little configuration and is often used with NetBIOS.

Question 2

Windows Server 2003 and 2008 ____ are used to authenticate user accounts, so they contain much of the information that attackers want to access.

Accepted Answer

Domain controllers are used to authenticate user accounts and store information about them. This information is valuable to attackers, who may attempt to compromise the domain controller to gain access to sensitive data or resources on the network. SMB controllers, CIFS servers, and file servers may provide access to network resources, but they do not handle authentication in the same way that domain controllers do.

Question 3

SMB usually runs on top of NetBIOS, NetBEUI, or ____.

Accepted Answer

TCP/IP is the most commonly used protocol for SMB communication in modern networks. NetBIOS and NetBEUI are outdated and not widely used anymore, while IPX/SPX is mostly used in legacy Novell NetWare networks. CIFS (Common Internet File System) is a newer version of SMB, but it also typically runs on top of TCP/IP. Therefore, the best choice for SMB protocol is TCP/IP.

Question 4

NetBIOS over TCP/IP is called ____ in Windows 2000 Server.

Accepted Answer

The answer of NetBIOS over TCP/IP is called ____ in...

Question 5

Complete instructions for MBSA are available from the MBSA Help interface or the ____ site.

Accepted Answer

The Microsoft Security Tools Web site is the best choice as it provides comprehensive documentation and resources on MBSA, including complete instructions on how to use the tool. The Microsoft Knowledge Base may provide some information on MBSA, but it is not focused specifically on the tool and may not provide the most up-to-date information. Windows Help and Windows Online Help do not provide information on MBSA specifically.

Question 6

____ is a client/server technology designed to manage patching and updating systems software from the network.

Accepted Answer

Software Update Services (SUS) is specifically designed to manage patching and updating systems software from the network.

Question 7

The Conficker worm took advantage of a vulnerability in ____ to run arbitrary code on susceptible hosts.

Accepted Answer

The Conficker worm was able to exploit a vulnerability in the Remote Procedure Call (RPC) service in Windows operating systems, which allowed it to run arbitrary code on vulnerable devices.

Question 8

The MBSA can check for missing security updates.

Accepted Answer

The Microsoft Baseline Security Analyzer (MBSA) can scan a computer system for missing security updates and patches.

Question 9

The best way to protect a network from SMB attacks is to make sure routers filter out ports 137 to 139 and ____.

Accepted Answer

The best way to protect a network from SMB attacks is to make sure routers filter out ports 137 to 139 and 445. Port 445 is specifically used by SMB2 and SMB3 protocols, which are commonly targeted by attackers. By blocking this port, you can prevent attackers from exploiting vulnerable SMB services on your network. Therefore, option C (445) is the correct choice.

Question 10

Rootkits containing Trojan binary programs ready to be installed are more dangerous than typical Trojan programs.

Accepted Answer

Rootkits contain Trojan programs that are designed to hide their presence and activity from the user and security software, making them a more potent threat compared to typical Trojan programs. Once installed, rootkits allow attackers to gain persistent, covert access to a compromised system and carry out various malicious activities, including stealing sensitive data, planting backdoors, and controlling the system remotely.

Question 11

____ is an open-source implementation of CIFS.

Accepted Answer

Samba is an open-source implementation of the SMB/CIFS networking protocol. It allows Linux, Unix and other operating systems to access and share files, printers, and other resources with Windows-based systems. It is widely used and well-established in the industry, making it the best choice for an open-source CIFS implementation. B, C, and D are not valid options as GNUCIFS, GCIFS, and OpenCIFS are not recognized implementations of CIFS.

Question 12

NetBIOS over TCP/IP is called ____ in Windows Server 2003.

Accepted Answer

NetBIOS over TCP/IP is referred to as NetBT in Windows Server 2003. NetBT stands for NetBIOS over TCP/IP.

Question 13

To determine whether a system is vulnerable to an RPC-related issue, the best tool is ____.

Accepted Answer

The answer of To determine whether a system is vulnerable...

Question 14

Samba is as an closed-source implementation of CIFS.

Accepted Answer

Samba is an open-source implementation of CIFS/SMB protocol, which allows compatibility between Windows and Linux/Unix operating systems.

Question 15

Red Hat and Fedora Linux use the ____ command to update and manage RPM packages.

Accepted Answer

Red Hat and Fedora Linux use the "yum" command to update and manage RPM packages. Therefore, the correct choice is A. The remaining choices ("get", "dir", and "alert") are not commands used for managing RPM packages in Red Hat and Fedora Linux.

Question 16

____ is an interprocess communication mechanism that allows a program running on one host to run code on a remote host.

Accepted Answer

RPC (Remote Procedure Call) allows a program to request a service from another program located on a remote host. The calling program sends a message to the remote program to execute a specific procedure and waits for a response. RPC is a widely used interprocess communication mechanism in distributed systems. NetBIOS, Winsock, and NetBEUI are not designed specifically for remote procedure calls.

Question 17

The MBSA can check for user account passwords that have dictionary words in them.

Accepted Answer

The answer of The MBSA can check for user account...

Question 18

Early Windows OSs communicated with each other by using ____.

Accepted Answer

Early Windows OSs used NetBIOS (Network Basic Input/Output System) for communication between computers on a local area network. NetBIOS could be used over different transport protocols such as TCP/IP, NetBEUI, and IPX/SPX.

Question 19

Microsoft's Systems Management Server (SMS) can manage security patches for all computers on a network.

Accepted Answer

Microsoft's Systems Management Server (SMS) includes patch management capabilities that enable administrators to automate the distribution and installation of security updates for all computers on a network. This helps ensure that all systems are up-to-date and protected against known vulnerabilities.

Question 20

MBSA has its origins in the ____ scanner.

Accepted Answer

MBSA has its origins in the HFNetChk scanner, which was developed by Microsoft to check for security vulnerabilities in Windows operating systems and other Microsoft products.

Quiz 8: Desktop and Server Os Vulnerabilities