Question

36. What kind of virus runs in place of the computer's normal system files? A. Worms B. Macro viruses C. File-infector viruses D. Boot sector viruses 37. What of the following features does not distinguish an NGFW from traditional firewalls? A. Application Control B. IDS and/or IPS C. User awareness D. UTM (Unified Threat Management) 38. The act of taking advantage of vulnerability is known as which of the following? a. hacker b. poisoning c. snooping d. exploit 39. What service in Windows Server 2012 R2 authenticates remote users and computers to domain and its corporate network resources? A. Active Directory B. Group Policy C. Direct Access D. RAS (Remote Access Service) 40. Which categories of twisted-pair cable can support Gigabit Ethernet? A. Cat 5 and lower B. Cat 5 and higher C. Cat Se and higher D. Cat 6 and lower 41. What of the following features does not distinguish an NGFW from traditional firewalls? Application Control А. В. IDS and/or IPS С. User awareness D. UTM (Unified Threat Management) 42. Which of the following provides faster and more secure encryption than TKIP for wireless transm A. AES B. WEP C. NOS D. PAP 43. What kind of firewall blocks traffic based on application data contained within the pack A. Host-based firewall B. Content-filtering firewall C. Packet-filtering firewall D. Stateless firewall

Answer 1

Answers to the MCQs are according to the given Sequence:

36. C

A worm is the type of virus that is usually present in a standalone machine and has the property of replication. It affects the applications running in the system.

Macro Viruses are linked to applications that contain macros. It is executed once the program is executed.

File infector virus affects the file system of the Operating System. When files are opened these viruses are exected and they affect the programs.

Boot Sector Viruses are executed when a floppy disk is used. They affect the booting system of a computer.

37. C   

Next-Generation Firewalls (NGFW) are the advanced versions of traditional firewalls. They provide many additional features than traditional firewalls such as DPI, IPS, UTM Application Control, website filtering, etc. except User awareness.

38. D

Exploit is a software that takes advantage of the vulnerability to attack an asset. The asset can be any valuable information.

Hacker breaks into the security system by using programming skills. It is not necessary that the system that is vulnerable can only be hacked. Any programmer with high programming skills can break into anyone's security system.

Poisoning is a term that is used is used synonymously to Spoofing. This is a specific term that can be used for exploit because it takes advantage of the Domain Name Server to divert traffic.

Snooping is the illegal way of accessing someone's personal data or an unauthorized access to get into anyone's system by the intention of theft.

39. A

Active Directory Accounts allow accessing network resources in windows Server 2012 R12.

Group Policy is a method or a tool that is used to control the persons using the active Directory accounts through a hierarchal structure.

Direct access is a mechanism that is used to connect intranet users with the internet. It is similar to the Virtual Private network in Microsoft.

Remote Access Service allows any machine to connect from outside the network.

41. C

Same explanation as that of Q37

42. A

The host-based application firewall is one of the 2 categories of application firewall another being network-based application firewall. It examines the applications and the input/output in the application if the application is communication on the same host.

Content Filtering firewall blocks the content on the website and emails.

Packet Filtering access the incoming and outgoing of the packets based on their source and destination addresses.

The stateless firewall doesn't keep the track of the network traffic unless the stateful firewall. It filters the packets based on static values