Set 2

Front 1

You have been hired as a security consultant for a small company. Management is concerned about the security of their company web server due to some recent DoS attacks. They have asked you to provide them with specific procedures to follow to get the web server back online as quickly as possible if another attack occurs. Which will assist in task

Back 1

Create an incident management document

Front 2

Relies on out of band key exchanges to transport keys

Back 2

Symmetric algorithms

Front 3

Your network has a strict security and firewall policy, and all network endpoints use NAT. You need to implement a solution that allows remote workers access to the internal network. The solution should limit configuration changes. What can be done to achieve these goals.

Back 3

Create ab SSL/TLS VPN and have the remote access client use the web browser to connect to internal resources

Front 4

Permits or blocks network traffic based on rules

Back 4

Firewalls

Front 5

Targets wireless networks encrypted with WEP

Back 5

IV attacks

Front 6

Regulation prevents financial institutions from sharing customer information for marketing purposes

Back 6

Gramm Leach Bililey Act

Front 7

Implementation of recommended settings for apps

Back 7

Baselining

Front 8

Examples of risk mitigation strategies

Back 8

Permissions review

Routine audits

Front 9

Formula to calculate ALE

Back 9

SLE*ARO

Front 10

In a server room what can be used to control both the humidity and the temperature

Back 10

HVAC

Front 11

Type of password attack that can make use of mutations

Back 11

Hybrid attacks

Front 12

Used to secure packets on a VPN

Back 12

IPSec

Front 13

What can be used to service several network connections over an unsecure network

Back 13

VPN concentrator

Front 14

Example of active attack

Back 14

Configure Ethercap to redirect packets to another host

Front 15

You are working on segmenting a small network to adhere to the VLAN management secure network administration principle. You would like to create four VLANs, one for each company department. If all departments need to communicate with one another, which devices would you use

Back 15

One router

One layer 2 switch

Front 16

Your company has recently implemented a PKI. Which of the following are used within a PKI to encrypt or decrypt a message sent by one user to another?

Back 16

Private key

Public key

Front 17

Which secure administration principle is applied to a switch and involves providing network access based on a client computers MAC address

Back 17

Port security

Front 18

Which option describes the average time a device or system is expected to last before it fails

Back 18

MTTF

Front 19

You need to provide a username, PIN, and a generated passcode to successfully log in to a computer. The passcode is obtained from the display of a small handheld device. Which of the following options is this an example of

Back 19

Hardware token

Front 20

Encryption Types:

RC4

Back 20

WEP

Front 21

Encryption Types:

64 Bit

Back 21

WEP

Front 22

Encryption Types:

CCMP

Back 22

WPA2

Front 23

Encryption Types:

TKIP

Back 23

WPA

Front 24

Encryption Types:

256 bit

Back 24

WPA2

Front 25

Which tool can be used to assist IT teams with administering BYOD devices in a company

Back 25

MDM software

Front 26

Which attack exploits application vulnerabilities between the time the vulnerability is first discovered and when a fix is provided by the application developers

Back 26

Zero day

Front 27

Which type of attack refers to a malicious users ability to execute any command of their choosing on a computer by exploiting a program vulnerability

Back 27

Arbitrary code execution

Front 28

As a network technician within your company one of your main tasks is to gather and analyze system and network security reports. Using these reports, you are required to collaborate with your IT team to identify system and network issues and their root cause. You must also identify areas of weakness within your network that may require additional resources to avoid future issues. What action meets these requirements

Back 28

Review system and network security reports for trends

Front 29

Which of the following technologies is used to prevent external users from identifying the IP addressing scheme of internal clients on a network

Back 29

NAT

Front 30

The incident response team has responded to a security threat where an employees computer has been infected with a virus. Following incident response procedures, during the recovery phase what should be done

Back 30

Computer should be rebuilt

Front 31

As a network tech within your company you have been tasked with applying changes to your corporate account management policy. You are required to ensure that users must use 20 unique passwords before an old account password can be reused. You must also ensure that their user account passwords are forced to be updated every 30 days. Which account policies should you use to meet these requirements.

Back 31

Max password age

Enforce password history

Front 32

Your friend configured a wireless network in his house and configured wireless encryption to secure the network. A few days later his neighbor told him he was able to access the wireless network. Which encryption type did your friend most likely configure

Back 32

WEP

Front 33

You have just replaced a computer in the office with a new computer. Which actions would best improve security on this computer

Back 33

Install updates

Remove services not used

Front 34

Can be used for protection against buffer overflow attacks

Back 34

Input validation

Front 35

Which type of attack refers to a malicious user impersonating another user to gain unauthorized access to computer services

Back 35

Session hijacking

Front 36

Which of the following disaster recovery methods is the most cost effective solution to implement

Back 36

Cold site

Front 37

When a user authenticates to a server multiple authentication services are used to complete the process. Which authentication service is responsible for logging user activity

Back 37

Accounting

Front 38

Which influence tactic creates a feeling of urgency

Back 38

Scarcity

Front 39

Examine the following URL:

https://www.brocadero.com

Describe URL

Back 39

By default communication with the web site will use TCP port 443

TLS/SSL will be used to secure web traffic

Front 40

Fire types and respective class:

Wood

Back 40

Class A

Front 41

Fire types and respective class:

Sodium

Back 41

Class D

Front 42

Fire types and respective class:

Gas

Back 42

Class B

Front 43

Fire types and respective class:

Electrical

Back 43

Class C

Front 44

As the systems administrator for your org you have been tasked with implementing a new database server. The requirements for this database server are that it must be available 24X7 with an uptime of 99% annually. Data must not be at risk of being viewed by unauthorized individuals.

What security design goals will ensure requirements are met

Back 44

Confidentiality

Availability

Front 45

#access-list 101 deny tcp 172.16.2.0 0.0.0.255 any eq 23

#access-list 101 permit ip any any

#interface ethernet 0

#ip access-group 101 out

What network device can be used for these configurations

Back 45

Router

Front 46

Which protocol provides the framework for authentication and key exchange within IPSec

Back 46

ISAKMP

Front 47

Which block cipher would be considered most secure

Back 47

AES

Front 48

You are configuring a network router to accept remote commands from admins. The communication should be secure what should be configured

Back 48

SSH

Front 49

PKI trust model:

Provides extreme flexibility when designing a trust structure

Back 49

Hybrid

Front 50

PKI trust model:

A peer to peer relationship is established between root CAs

Back 50

Bridge

Front 51

PKI trust model:

It provides several paths to multiple root CAs and is often referenced as a web model

Back 51

Mesh

Front 52

PKI trust model:

It contains a single root CA and is often referenced as a free model

Back 52

Hierarchical

Front 53

Which hash algorithm is used with the NTLM Microsoft security protocol

Back 53

MD4

Front 54

Virus Types:

They mask themselves to avoid detection

Back 54

Stealth

Front 55

Virus Types:

They are designed to be difficult to analyze

Back 55

Armored

Front 56

Virus Types:

They change themselves to avoid detection

Back 56

Polymorphic

Front 57

Virus Types:

They attack a system using multiple methods

Back 57

Multipartite

Front 58

Virus Types:

They modify other programs

Back 58

Phage

Front 59

Virus Types:

They attach themselves to a legitimate program

Back 59

Companion

Front 60

Which key is often used to securely distribute symmetric algorithm keys

Back 60

Session key

Front 61

Which concept is based on determining how much data an organization can afford to lose

Back 61

RPO

Front 62

You are educating company employees of security awareness. Which type of social engineering attack attempts to obtain personal info from an individual

Back 62

Phishing

Vishing

Front 63

You are a security admin for a company. A server was recently hacked in the company's DMZ. You want to collect the data linked to the attack as evidence. Management has informed you that you must use a method to ensure data has not been tampered with after it has been collected. Which of the following procedures can be used

Back 63

Taking hashes

Front 64

Which type of attack can be used to intercept and alter data that is sent between hosts

Back 64

Man in the middle