14. Organisational Documents and Policies

Question 1

1. The way to properly install or remove software on the servers is an example of which of the following?
   a. Plan
   b. Policy
   c. Procedure
   d. Code

Answer 1

c. For every policy on your network, there should be a credible related procedure that clearly dictates the steps to take in order to fulfil it.

Question 2

2. Which of the following is a plan for reversing changes and recovering from any adverse effects from the changes?
   a. Backup
   b. Secondary
   c. Rollback
   d. Failover

Answer 2

c Those making the changes should be completely briefed in these rollback procedures, and they should exhibit a clear understanding of them prior to implementing the changes.

Question 3

3. Which of the following is the amount of time a system will be down or unavailable during the implementation of changes?
   a. Downtime
   b. Maintenance window
   c. MTBF
   d. Work factor

Answer 3

b. A maintenance window is the amount of time a system will be down or unavailable during the implementation of changes.

Question 4

4. Which of the following is not a device hardening technique?
   a. Remove unnecessary applications
   b. Deploy an access control vestibule
   c. Block unrequired ports
   d. Disable unnecessary services

Answer 4

b. An access control vestibule is an access control solution, not a device hardening technique.

Question 5

5. Which policy automatically logs a user out after a specified period without activity?
   a. Password complexity
   b. Password history
   c. Password length
   d. Authentication period

Answer 5

d. Authentication period controls how long a user can remain logged in. If a user remains logged in for the specified period without activity, the user will automatically be logged out.

Question 6

6. BYOD policies apply to what type of device?
   a. Mobile
   b. Desktop
   c. Server
   d. Firewall

Answer 6

a. Bring your own device (BYOD) initiatives can be successful if implemented correctly. The key is to implement control over these personal mobile devices that leave the safety of your network and return later after potentially being exposed to environments that are out of your control.

Question 7

7. Which tool can prevent the emailing of a document to anyone other than Sales group members?
   a. SSS
   b. STP
   c. DLP
   d. VBA

Answer 7

c. Data loss prevention (DLP) software attempts to prevent data leakage. It does this by maintaining awareness of actions than can and cannot be taken with respect to a document.

Question 8

8. Which of the following connects equipment (inside plant) to cables and subscriber carrier equipment (outside plant)?
   a. IDF
   b. MDF
   c. Plant rack
   d. Access control vestibule

Answer 8

b. The main distribution frame (MDF) connects equipment (inside plant) to cables and subscriber carrier equipment (outside plant). It also terminates cables that run to intermediate distribution frames (IDFs) distributed throughout the facility.

Question 9

9. Which of the following is not part of the Information Gathering step of a site survey?
   a. Determine the scope of the network with respect to applications in use
   b. Verify optimal distances between prospective AP locations
   c. Identify areas that must be covered.
   d. Assess types of wireless devices that will need to be supported.

Answer 9

b. Verifying optimal distances between prospective AP locations is part of the Pre-deployment Site Survey step.

Question 10

10. Device baselines include information about all but which of the following components?
    a. CPU
    b. Memory
    c. Hard disk
    d. Display

Answer 10

d. For networks and networked devices, baselines include information about four key components: processor, memory, hard-disk (or other storage) subsystem, and wired/wireless utilisation.