cisco Chapter-7 quiz (answer in Bold)

A user makes a request to implement a patch management service for a company. As part of the requisition the user needs to provide justification for the request. What three reasons can the user use to justify the request? (Choose three.)

Select one or more:

the ability of users to select updates

no opportunities for users to circumvent updates

the ability to control when updates occur

the need for systems be directly connected to the Internet

the likelihood of storage savings

the ability to obtain reports on systems

Feedback

Refer to curriculum topic: 7.1.1
A patch management service can provide greater control over the update process by an administrator. It eliminates the need for user intervention.

The correct answers are: the ability to obtain reports on systems, the ability to control when updates occur, no opportunities for users to circumvent updates

Question 2

Correct

Mark 2.00 out of 2.00

Flag question

Question text

What are three types of power issues that a technician should be concerned about? (Choose three.)

Select one or more:

blackout

fuzzing

spike

spark

flicker

brownout

Feedback

Refer to curriculum topic: 7.2.3
Power issues include increases, decreases, or sudden changes in power and include the following:

• Spike
• Surge
• Fault
• Blackout
• Sag/dip
• Brownout
• Inrush Current

The correct answers are: spike, brownout, blackout

Question 3

Correct

Mark 2.00 out of 2.00

Flag question

Question text

The manager of a department suspects someone is trying to break into computers at night. You are asked to find out if this is the case. What logging would you enable?

Select one:

Windows

operating system

audit

syslog

Feedback

Refer to curriculum topic: 7.2.2
Audit logs can track user authentication attempts on workstations and can reveal if any attempts at break-in were made.

The correct answer is: audit

Question 4

Correct

Mark 2.00 out of 2.00

Flag question

Question text

The CIO wants to secure data on company laptops by implementing file encryption. The technician determines the best method is to encrypt each hard drive using Windows BitLocker. Which two things are needed to implement this solution? (Choose two.)

Select one or more:

backup

password management

EFS

USB stick

at least two volumes

TPM

Feedback

Refer to curriculum topic: 7.1.3
Windows provides a method to encrypt files, folders, or entire hard drives depending on need. However, certain BIOS settings and configurations are necessary to implement encryption on an entire hard disk.

The correct answers are: at least two volumes, TPM

Question 5

Correct

Mark 2.00 out of 2.00

Flag question

Question text

Why should WEP not be used in wireless networks today?

Select one:

its lack of encryption

its lack of support

easily crackable

its age

its use of clear text passwords

Feedback

Refer to curriculum topic: 7.1.2
Despite improvements, WEP is still vulnerable to various security issues including the ability to be cracked.

The correct answer is: easily crackable

Question 6

Correct

Mark 2.00 out of 2.00

Flag question

Question text

The company has many users who telecommute. A solution needs to be found so a secure communication channel can be established between the remote location of users and the company. What is a good solution for this situation?

Select one:

VPN

T1

fiber

PPP

modem

Feedback

Refer to curriculum topic: 7.1.1
When a VPN is used, a user can be at any remote location such as home or a hotel. The VPN solution is flexible in that public lines can be used to securely connect to a company.

The correct answer is: VPN

Question 7

Correct

Mark 2.00 out of 2.00

Flag question

Question text

What is the difference between an HIDS and a firewall?

Select one:

An HIDS blocks intrusions, whereas a firewall filters them.

An HIDS monitors operating systems on host computers and processes file system activity. Firewalls allow or deny traffic between the computer and other systems.

A firewall performs packet filtering and therefore is limited in effectiveness, whereas an HIDS blocks intrusions.

A firewall allows and denies traffic based on rules and an HIDS monitors network traffic.

An HIDS works like an IPS, whereas a firewall just monitors traffic.

Feedback

Refer to curriculum topic: 7.1.1
In order to monitor local activity an HIDS should be implemented. Network activity monitors are concerned with traffic and not operating system activity.

The correct answer is: An HIDS monitors operating systems on host computers and processes file system activity. Firewalls allow or deny traffic between the computer and other systems.

Question 8

Correct

Mark 2.00 out of 2.00

Flag question

Question text

Why is WPA2 better than WPA?

Select one:

reduced keyspace

reduced processing time

supports TKIP

mandatory use of AES algorithms

Feedback

Refer to curriculum topic: 7.1.2
A good way to remember wireless security standards is to consider how they evolved from WEP to WPA, then to WPA2. Each evolution increased security measures.

The correct answer is: mandatory use of AES algorithms

Question 9

Correct

Mark 2.00 out of 2.00

Flag question

Question text

Companies may have different operation centers that handle different issues with the IT operations. If an issue is related to network infrastructure, what operation center would be responsible?

Select one:

NOC

HR

HVAC

SOC

Feedback

Refer to curriculum topic: 7.3.1
Operation centers support different areas of the operation including the network and security. Each one focuses on particular parts of the IT structure. The center that supports security would be the SOC.

The correct answer is: NOC

Question 10

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A company wants to implement biometric access to its data center. The company is concerned with people being able to circumvent the system by being falsely accepted as legitimate users. What type of error is false acceptance?

Select one:

CER

Type I

false rejection

Type II

Feedback

Refer to curriculum topic: 7.4.1
There are two types of errors that biometrics can have: false acceptance and false rejection. False acceptance is a Type II error. The two types can intersect at a point called the crossover error rate.

The correct answer is: Type II

Question 11

Correct

Mark 2.00 out of 2.00

Flag question

Question text

An intern has started working in the support group. One duty is to set local policy for passwords on the workstations. What tool would be best to use?

Select one:

password policy

secpol.msc

system administration

grpol.msc

account policy

Feedback

Refer to curriculum topic: 7.2.2
Local policies are not group policies and only work on the local machine. Local policies can, however, be overridden if the machine is part of a Windows domain.

The correct answer is: secpol.msc

Question 12

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user is asked to analyze the current state of a computer operating system. What should the user compare the current operating system against to identify potential vulnerabilities?

Select one:

a vulnerability scan

a baseline

a whitelist

a blacklist

a pentest

Feedback

Refer to curriculum topic: 7.1.1
A baseline allows a user to perform a comparison of how a system is performing. The user can then compare the result to baseline expectations. This process allows the user to identify potential vulnerabilities.

The correct answer is: a baseline

Question 13

Correct

Mark 2.00 out of 2.00

Flag question

Question text

An administrator of a small data center wants a flexible, secure method of remotely connecting to servers.Which protocol would be best to use?

Select one:

Remote Desktop

Secure Copy

Telnet

Secure Shell

Feedback

Refer to curriculum topic: 7.2.1
Because hackers sniffing traffic can read clear text passwords,  any connection needs to be encrypted. Additionally, a solution should not be operating system-dependent.

The correct answer is: Secure Shell

Question 14

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user calls the help desk complaining that an application was installed on the computer and the application cannot connect to the Internet. There are no antivirus warnings and the user can browse the Internet. What is the most likely cause of the problem?

Select one:

computer firewall

permissions

need for a system reboot

corrupt application

Feedback

Refer to curriculum topic: 7.1.1
When troubleshooting a user problem, look for some common issues that would prevent a user from performing a function.

The correct answer is: computer firewall

Question 15

Correct

Mark 2.00 out of 2.00

Flag question

Question text

The manager of desktop support wants to minimize downtime for workstations that crash or have other software-related issues. What are three advantages of using disk cloning? (Choose three.)

Select one or more:

ensures system compatibility

easier to deploy new computers within the organization

ensures a clean imaged machine

can provide a full system backup

creates greater diversity

cuts down on number of staff needed

Feedback

Refer to curriculum topic: 7.1.4
Disk cloning can be an efficient way to maintain a baseline for workstations and servers. It is not a cost cutting method.

The correct answers are: easier to deploy new computers within the organization, can provide a full system backup, ensures a clean imaged machine

Question 16

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user is proposing the purchase of a patch management solution for a company. The user wants to give reasons why the company should spend money on a solution. What benefits does patch management provide? (Choose three.)

Select one or more:

Updates cannot be circumvented.

Updates can be forced on systems immediately.

Patches can be chosen by the user.

Administrators can approve or deny patches.

Patches can be written quickly.

Computers require a connection to the Internet to receive patches.

Feedback

Refer to curriculum topic: 7.1.1
A centralized patch management system can speed up deployment of patches and automate the process. Other good reasons to using an automated patch update service include the following:

• Administrators control the update process.
• Reports are generated.
• Updates are provided from a local server.
• Users cannot circumvent the update process.

The correct answers are: Administrators can approve or deny patches., Updates can be forced on systems immediately., Updates cannot be circumvented.

Question 17

Correct

Mark 2.00 out of 2.00

Flag question

Question text

Which three items are malware? (Choose three.)

Select one or more:

attachments

virus

Trojan horse

keylogger

email

Apt

Feedback

Refer to curriculum topic: 7.1.1
Email could be used to deliver malware, but email by itself is not malware. Apt is used to install or remove software within a Linux operating system. Attachments could contain malware, but not always.

The correct answers are: Trojan horse, virus, keylogger

Question 18

Correct

Mark 2.00 out of 2.00

Flag question

Question text

Which service will resolve a specific web address into an IP address of the destination web server?

Select one:

DNS

ICMP

DHCP

NTP

Feedback

Refer to curriculum topic: 7.3.1
DNS resolves a website address to the actual IP address of that destination.

The correct answer is: DNS

Question 19

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A user calls the help desk complaining that the password to access the wireless network has changed without warning. The user is allowed to change the password, but an hour later, the same thing occurs. What might be happening in this situation?

Select one:

password policy

user error

user laptop

rogue access point

weak password

Feedback

Refer to curriculum topic: 7.1.2
Man-in-the-middle attacks are a threat that results in lost credentials and data. These type of attacks can occur for different reasons including traffic sniffing.

The correct answer is: rogue access point

Question 20

Correct

Mark 2.00 out of 2.00

Flag question

Question text

A new PC is taken out of the box, started up and connected to the Internet. Patches were downloaded and installed. Antivirus was updated. In order to further harden the operating system what can be done?

Select one:

Disconnect the computer from the network.

Remove the administrator account.

Remove unnecessary programs and services.

Install a hardware firewall.

Turn off the firewall.

Give the computer a nonroutable address.

Feedback

Refer to curriculum topic: 7.1.1
When hardening an operating system, patching and antivirus are part of the process. Many extra components are added by the manufacturer that are not necessarily needed.

The correct answer is: Remove unnecessary programs and services.

Question 21

Correct

Mark 2.00 out of 2.00

Flag question

Question text

After a security audit for an organization, multiple accounts were found to have privileged access to systems and devices. Which three best practices for securing privileged accounts should be included in the audit report? (Choose three.)

Select one or more:

Enforce the principle of least privilege.

Only managers should have privileged access.

Reduce the number of privileged accounts.

Secure password storage.

Only the CIO should have privileged access.

No one should have privileged access.

Feedback