No Sweat Security Stuff
Someone who claims to be from the IT Office calls a user to ask them to verify their password.
This is an example of what?
Social Engineering
Homer called into the help desk and says he forgot his password. Which of the following choices is the BEST choice for what the help-desk professional should do?
a. Verify the user's account exists.
b. Look up the user's password and tell the user what it is.
c. Disable the user's account
d. Reset the password ad configure the password to expire after the first use.
D. In this scenario, it's best to create a temporary password that expires after the first use, which forces the user to create a new password.
This type of Operating System is used for specialized devices that don't perform general computing tasks, ranging from consumer devices like TVs and game consoles to network devices like printers and routers.
Embedded
What is a client/server network centrally managed from one or more Windows servers?
Domain
A user's computer is displaying a black screen. The technician restarts the computer, but the OS still does not load. The technician discovers the OS was patched the previous evening. Which of the following should the technician attempt NEXT?
Reboot into safe mode and roll back the updates
A self-replicating malware that has the ability to spread to other computers without user knowledge, can also use up network bandwidth.
Worm
Which type of authentication is a retina scan?
Biometric
Which term indicates that information is to be read only by those people for whom it is intended?
Confidentiality
What is a network sharing feature that was introduced in Windows 7 allowing home users to have a similar setup to a domain?
Homegroup
A company brings in contractors several times a year to perform inventory, and the contractors use company-supplied laptops. The company's security policy states that once the inventory is completed, the contractors should not be able to log in to the laptops until the next inventory. Which of the following BEST enforces this policy?
Disable the accounts
Type of security attack that uses social engineering to obtain a users personal information
Phishing
Users are required to log on to their computer with a smart card and a PIN. What term best describes this method?
Two Factor authentication
A collection of applets (also called tools, utilities, or apps) that you can use to manage and configure a Windows computer.
Control Panel
What is a command-line tool used to display network settings, as well as, fix some problems with DHCP and DNS settings.
ipconfig
A user believes there is a virus on a laptop. The user installs additional real-time protection antivirus software but is now experiencing extremely slow performance on the laptop. Which of the following should a technician do to resolve the issue and avoid recurrence?
Remove the user-installed antivirus software
Often take the form of pop-ups that direct users to another site that may have malicious code or to purchase a "shady" product
Adware
Your organization has implemented a system that stores user credentials in a central database. Users log on once with their credentials. They can then access other systems in the organizations without logging on again. What does this describe?
Single Sign On. SSO
A utility that you can use to configure and troubleshoot devices that are connected to your computer.
Device Manager
What is a command-line tool that checks connectivity to a given host in terms of packet loss percentage, along with latency and number of hops.
ping
A technician receives an invalid certificate error when visiting a website with port 443 enabled. Other computers on the same LAN do not exhibit this symptom. Which of the following needs to be adjusted on the workstation to fix the issue?
Date and time
Type of security attack that uses social engineering to obtain a user's personal information by calling or texting them.
Vishing
An organization wants to provide protection against malware attacks. Administrators have installed antivirus software on all computers. Additionally, they implemented a firewall and an IDS on the network. What concept best describes this example?
Defense in Depth
You are trying to establish communications between a client computer and server. The server is not responding. You confirm that both the client and the server have network connectivity.
Which should you check next?
Windows Firewall
What is a host-based firewall application that blocks all incoming connections not needed for important network functions, while allowing outgoing connections used by installed client applications. Hint: It is Stateful
Windows Firewall
A technician is running updates on a Windows PC. Some of the updates install properly, while others appear as failed. While troubleshooting, the technician restarts the PC and attempts to install the failed updates again. The updates continue to fail. Which of the following is the FIRST option to check?
Look up the error number associated with the failed update