Module 1 Unit 3 Part I

Front 1

As an experienced network administrator, you are responsible for infrastructure design and global configuration changes in an international company. You are asked to implement an HVAC system for Infotec. What security concern should be taken into consideration?

Back 1

That any technicians have proper clearance, or are supervised

Front 2

The first step in creating a security baseline would be:

Back 2

creating a security policy

Front 3

As an experienced network administrator, you are responsible for infrastructure design and global configuration changes. You are asked to install new servers into Infotec’s infrastructure. You have to make sure that all these servers fulfill security requirements for uptime. Where will the availability requirements be identified?

Back 3

Service level agreement

Front 4

You work as a network administrator for your company. Your company has just detected a malware incident. Which will be your first response?

Back 4

Containment.

Front 5

As an experienced technician, you notice that there is a design flaw in a new application. However, the management makes a decision to go on manufacturing the product with the flaw other than recall the software. Refer to the following risk management strategies. Which one does the management adopt?

Back 5

Risk acceptance

Front 6

A computer system containing personal identification information is being implemented by a company’s sales department. The sales department has requested that the system become operational before a security review can be completed. Which of the following can be used to explain the reasons why a security review must be completed?

Back 6

Corporate security policy

Front 7

A computer system containing personal identification information is being implemented by a company’s sales department. The sales department has requested that the system become operational before a security review can be completed. Which of the following can be used to explain the reasons why a security review must be completed?

Back 7

Corporate security policy

Front 8

In order to allow for more oversight of past transactions, a company decides to exchange positions of the purchasing agent and the accounts receivable agent. Which is an example of this?

Back 8

Job rotation

Front 9

A newly hired security specialist is asked to evaluate a company’s network security. The security specialist discovers that users have installed personal software; the network OS has default settings and no patches have been installed and passwords are not required to be changed regularly. Which of the following would be the FIRST step to take?

Back 9

Enforce the security policy

Front 10

As an experienced network administrator, you are responsible for infrastructure design and global configuration changes at Infotec. You are the only administrator who is assigned several tasks that are critical to continuity of operations after a risk assessment. You recommend that other administrators should also be trained to perform these tasks. Which of the following risks will be mitigated with the cross training?

Back 10

Single point of failure

Front 11

A system administrator reports that an unauthorized user has accessed the network. Which of the following would be the FIRST action to take?

Back 11

Contain the problem

Front 12

As an experienced technician, you are asked to secure a Infotec network. Refer to the following mechanisms. Which one will establish procedures to accomplish that?

Back 12

Security policy

Front 13

So as to facilitate communications in the office of a small call center business, an email system is going to be installed. As part of the upgrade, the vendor- offered to supply anti-malware software of $5,000 per year. However, if it is not adequately protected, there was a 90% chance each year that workstations would be compromised. Under that circumstance, it will take 30 staff three hours to restore services and the staff members in the call center are paid $90 per hour. What is the expected net savings if we purchase the anti-malware software?

Back 13

$2290

Front 14

Evidence can be used in court to convict persons of crimes. Which of the following phrase is the best description about the process for preserving the integrity of forensic evidence?

Back 14

Chain of custody

Front 15

Refer to the following descriptions. Which one is the most appropriate concerning risk analysis?

Back 15

Evaluation and assessment

Front 16

As an administrator, you happen to notice that the accounts of former temporary employee are still active on a domain. Refer to the following implementations, which one is applicable so as to increase security and prevent this from happening again?

Back 16

Implement an account expiration date for temporary employees

Front 17

The implicit deny will block anything you didn’t specifically allow but you may have allowed stuff that you don’t need. A technician is reviewing the system logs for a firewall and is told that there is an implicit deny within the ACL. Which is an example of an implicit deny?

Back 17

Items which are not specifically given access are denied by default.

Front 18

Refer to the following options. What is a common approach in forensic investigation?

Back 18

Performing a binary copy of the systems storage media

Front 19

An end-to-end traffic performance guarantee made by a service provider to a customer is a:

Back 19

SLA

Front 20

The staff must be cross-trained in different functional areas in order to detect fraud. Which of the following is an example of this?

Back 20

Job rotation