Secure Devices
Which of the following provides security for wireless networks?
A. WPA2
B. WAP
C. 802.11a
D. 802.3u
E. CSMA/CD
What is (A) WPA2?
Which kinds of online attack involves pretending to be a legitimate company to get sensitive information?
A. Virus
B. Spyware
C. Phishing
D. Impersonating
What is (C) Phishing?
Phishing attacks create real-looking webpages and forms to trick users into giving away their personal information.
What is the best countermeasure against social engineering?
A. Strong Passwords
B. User awareness training
C. Access auditing
D. Acceptable use policy
What is (B) User awareness training?
A school has a sign posted in the computer lab that says, “Sharing passwords with others is prohibited.” This is an example of:
A. social networking.
B. a security policy.
C. file sharing.
D. instant messaging.
Sets expectations for user privacy when using company resources
What is Password Policy?
A technician walks into the office with a UPS. What sort of threat will this device prepare a system for?
A. Wiretapping
B. Denial-of-service
C. Power outage
D. Data redundancy
What is (C) Power Outage?
UPS is an uninterruptible power supply, it provides temporary power source during an outage
You are a security consultant and an organization has hired you to review their security measures. They are chiefly concerned that they could become the victom of a social engineering attack. Which of the following would you MOST likely recommend they do to mitigate the risk?
A. Establish a written security policy.
B. Teach users how to recognize and respond to social engineering attacks.
C. Train managers to monitor user activity.
D. Implement a border firewall to filter inbound network traffic.
What is (B) Teach users how to recognize and respond to social engineering attacks ?
Your compnay has surveillance cameras in your office, uses strong authentication protocols, and requires biometric factos for access control. These are examples of what principle?
A. Authentication
B. Integrity
C. Authorization
D. Non-repudiation
What is (D) Non-repudiation?
Which application makes sure your computer has the most recent versions of its system software?
A. Backup and Restore
B. Disk Cleaner
C. Windows Update
D. Windows Defender
What is (C) Windows Update?
You are configuring the local security policy of a Windows system. You want to require users to create passwords that are at least 10 characters long. You also want to prevent log on after three unsuccessful logon attempts.
Which of the following policies are BEST to configure? (Select two)
A. Password complexity
B. Account lockout threshold
C. Enforce password history
D. Account lockout duration
E. Maximum password age
F. Minimum password length
What is (B) Account lockout threshold and (F) Minimum password length?
Which software is MIcrosoft's anti-malware product that is preinstalled on most new computers?
A. Norton Antivirus
B. McAfee VirusScan
C. ESET NOD32
D. Windows Defender
What is (D) Windows Defender?
This attack leverages human nature. Internal employees are often the target of trickery, and false trust can quickly lead to a serious breach of information security.
What is Social Engineering?
Which of the following is NOT a good response to cyberbulling?
A. Post the bully's physical address on social media
B. Do not like, share, or comment on bully posts
C. Respond to the bully in a calm, clear, and constructive manner
D. Reach out to the person who was targeted
What is (A) Post the bull's physical address on social media?
Which of the following protocols is used for secure web browsing?
A. SFTP
B, HTTPS
C. L2TP
D. IMAP
What is (B) HTTPS?
This setting determines how long a user can keep the same password before it expires and they're forced to change it. A typically value for this setting is 90 days.
What is Password Age?
Which of the following are the BEST steps you can take to avoid having your mobile device exploited by a hacker or infected by a virus? (Select Two)
A. Keep an up-to-date remote backup
B. Avoid anti-virus apps
C. Keep your device always in your possession
D. Lock the screen with some form of authentication
E. Keep the operating system up to date
F. Turn off location services
What is (D) Lock the screen with some form of authentication and (E) Keep the operating system up to date?
_____________ involves searching through trash looking for discarded documents containing sensitive or confidential information.
What is Dumpster diving?
You have purchased a new computer and will be disposing of your old computers. Instead of recycling the computers, you decide to resell them by placing an ad on the Internet. These computers were previously used for storing sensitive information. To properly protect the accidental discovery of company's sensitive information, which of the following steps MUST be completed prior to getting rid of the computers?
A. Use data wipe software to clear the hard drives
B. Delete user data and applications from the hard drives
C. Include the original operating system discs and product keys with the computers
D. Reformat the hard drives
What is (A) Use the data wiping software to clear the hard drives?
Which of the following would best prevent an unauthorized person from remotely accessing your computer?
A. Firewall
B. Anti-malware software
C. Lockdown device
D. Anti-spam software
What is (A) Firewalls prevents unauthorized parties from accessing information on your computer?
The password policy:
Passwords must include at least one capital letter.
Passwords must include a mix of letters and numbers.
Passwords must be different from the past eight passwords.
Passwords must contain a least one non-alphanumeric character.
Which of the following password best practices are being used? (select two)
A. Password history
B. Password lockout
C. Password length
D. Password complexity
E. Password age
F. Password expiration
What is (A) Password history and (D) Password complexity?
Which of the following will improve the security of sensitive information on your device if it is lost or stolen? Select all that apply).
A. Anti-malware software
B. Keeping up to date on OS updates and patches
C. Locator applications
D. Remote backup
E. A screen lock
F. Remote wipe
What is (C) Locator Applications, (E) A screen lock, and (F) Remote wipe
You recently charged $70 to one of your bank accounts, but the amount now appears as $700. Which of the following may have occurred?
A. Brute force password attack
B. Denial-of-service attack
C. Man-in-the-middle attack
D. Impersonate
What is (C) Man-in-the-middle attack
Is a real-time attack on a live network connection, the hacker intercepts the communication stream between the client and a server. The hacker tricks the client into thinking it's the server and modifies the data in transit?
The process of proving to the computer that you are who you say you are is called _____________.
A. Recognition
B. Authentication
C. Shared Secret
D. Identification
What is (B) Authentication ?
You work for a large company as the IT admin. WIth the many external attacks being perpetrated in the form of security breaches being found in applications, you are concerned that your Windows 10 computers may be vulnerable. You also want to ensure that Windows is using the latest features.
What of the following would BEST protect your computers?
A. Scheduled backups
B. Windows Updates
C. Antivirus Updates
D. Scheduled disk maintenance
What is (B) Windows Updates?
Your friend Julie has confirmed someone has been using her password to log onto her social media account. She also believes that two bank accounts may also have been compromised. Which of the following password best practices has Julie MOST likely violated?
A. Password history
B. Password age
C. Password length
D. Password reuse
What is Password Reuse ?