Question

Question 21

1. In order to prevent ports that are serving network hosts from being considered as best paths, what should be enabled to block BPDUs?

   	a.	root guard
   	b.	BPDU filter
   	c.	BPDU drop
   	d.	BPDU guard

1.25 points

Question 22

1. In regards to the use of local authentication, what statement is accurate?

   	a.	Local authentication is scalable for large networks.
   	b.	Local authentication is network and server failure tolerant.
   	c.	Local authentication does not allow for strong enough passwords.
   	d.	Local authentication provides the most security.

1.25 points

Question 23

1. In the typical social engineering attack cycle, what occurs at Phase 3?

   	a.	The attacker executes an exit strategy in such a way that does not leave evidence or raise suspicion.
   	b.	The attacker researches the desired target for clues as to vulnerabilities.
   	c.	The attacker builds trust with the target and attempts to gain more information.
   	d.	The attacker exploits an action undertaken by the victim in order to gain access.

1.25 points

Question 24

1. It is ideal to use the same password for multiple different applications, provided the password is complex enough.

   True

   False

1.25 points

Question 25

1. Of the three methods of access control (RBAC, DAC, and MAC), RBAC is the least secure of the options.

   True

   False

1.25 points

Question 26

1. On a Linux based system, what command can you use to create a hash of a file using SHA-256?

   	a.	sha256sum
   	b.	sha1sum
   	c.	shasum -a 256
   	d.	md5sum

1.25 points

Question 27

1. On a Linux system, which command allows you to modify settings used by the built-in packet filtering firewall?

   	a.	iptables
   	b.	ipf
   	c.	netwall
   	d.	modfire

1.25 points

Question 28

1. Over a long-distance connection, using SSH keys is more secure than using passwords.

   True

   False

1.25 points

Question 29

1. Proxy servers and ACLs on network devices are examples of non-security devices with security features, while firewalls and IDS/IPS systems are the network's specialized security devices.

   True

   False

1.25 points

Question 30

1. Sudden unexplained increases in file sizes and unusual error messages with no apparent cause are both potential symptoms of a viral infection.

   True

   False

1.25 points

Question 31

1. The Group Policy utility can be opened by typing what name into a Run box?

   	a.	secpol.msc
   	b.	grouppol.msc
   	c.	grppol.msc
   	d.	gpedit.msc

1.25 points

Question 32

1. The PEAP standard creates an encrypted TLS tunnel between the supplicant and the server before proceeding with the usual EAP process.

   True

   False

1.25 points

Question 33

1. The Spanning Tree Protocol operates at the Network layer of the OSI model.

   True

   False

1.25 points

Question 34

1. The Wired Equivalent Privacy standard had what significant disadvantage?

   	a.	It only encrypted the initial connection authentication, but did not encrypt subsequent traffic.
   	b.	It provided no encryption for traffic sent over the air.
   	c.	It did not allow the use of a password for access to the network.
   	d.	It used a shared encryption key for all clients, and the key might never change.

1.25 points

Question 35

1. The concept of giving employees and contractors only enough access and privileges to do their jobs is known by what term?

   	a.	minimal access/minimal exposure
   	b.	least-risk privilege profile
   	c.	principle of least privilege
   	d.	limited liability access

1.25 points

Question 36

1. The day after Patch Tuesday is informally dubbed Exploit Wednesday.

   True

   False

1.25 points

Question 37

1. The original version of the Secure Hash Algorithm was developed by MIT.

   True

   False

1.25 points

Question 38

1. The storm-control command is a type of flood guard that is available on most major network switch vendor platforms.

   True

   False

1.25 points

Question 39

1. The supplicant is an EAP entity responsible for requesting authentication, such as a smartphone or laptop.

   True

   False

1.25 points

Question 40

1. The term malware is derived from a combination of the words malicious and software.

   True

   False

Answer 1

21) D) BPDU guard

22) B) Local authentication is network and server failure tolerant.

23) D) The attacker exploits an action undertaken by the victim in order to gain access.

24) False

25) False

26) A) sha256sum

27) A) Iptables

28) True

29) True

30) True

31) D) gpedit.msc

32) True

33) False

34) D) It used a shared encryption key for all clients, and the key might never change.

35) C) principle of least privilege

36) True

37) False

38) True

39) True

40) True