Chapter 6 - Mitigating Security Threats

Question 1

Which of the following actions is performed during system hardening?

A. MAC filtering
B. Disabling unnecessary services
C. Enabling port security
D. Configuring 802.1X authentication

Answer 1

B. Disabling unnecessary services

Question 2

Your manager has read about the need to uninstall unnecessary software and disable unnecessary services from a system. What is the purpose of performing these hardening techniques?

Answer 2

Reduce the attack surface

Question 3

A software vendor has found out about a critical vulnerability within their software product that causes a severe security risk to the system. The software vendor will ship which type of remedy that should be applied to systems immediately?

Answer 3

Hot-fix

Question 4

You are planning a security assessment strategy for all systems and mobile devices used within the organization. When assessing mobile devices such as phones, what should you look for?

Answer 4

Ensure the phone is password protected
Updated
Remote wipe enabled

Question 5

Which of the following security technologies involves controlling access to a wired or wireless network using a central authentication server such as RADIUS?

A. Port security
B. 802.1X
C. MAC filtering
D. Firewall

Answer 5

B. 802.1X

Question 6

What feature of a network switch allows you to control which system can be physically connected to a specific network port by its MAC address?

Answer 6

MAC filtering

Question 7

A new network administrator in the office has been reading about the company requirement that all systems have the initial security baseline applied. She is looking at a listing of 50 different policy settings that need to be applied and are wondering if there is an easy way to deploy the settings. What should she do?

Answer 7

Use a security template

Question 8

What type of reporting mechanism should a system or application use to notify the administrator of an event that requires immediate attention?

Answer 8

Alarm

Question 9

The software testing team is responsible for testing the applications by inputting invalid data into the fields of the applications. What is this called?

Answer 9

Fuzzing

Question 10

Your manager is worried about the security of the applications created by the in-house developers. From a security point of view, what recommendation would you make to the manager as the No. 1 rule for developers to follow?

Answer 10

Validate all data inputted

Question 11

How should developers of programming languages such as .NET and Java deal with runtime errors occurring in an application?

Answer 11

Use exception handling

Question 12

What type of application attack involves the hacker inputting into a web site data that contains script code that will execute when the page is viewed by another visitor?

Answer 12

Cross-site scripting

XXS

Question 13

Your company has a primary DNS server at its head office and a secondary DNS server at two other offices around the word. What should you do to secure the DNS data?

Answer 13

Limit zone transfers to the IP addresses of the secondary servers.

Question 14

Which of the following identifies a security concern with SMTP servers?

A. Relaying of messages
B. Zone transfers
C. E-mail spoofing
D. Invalid address assignment

Answer 14

A. Relaying of messages

Question 15

Your manager would like to implement additional security measures on the DHCP server. What actions would you recommend?

Answer 15

Modify the scope to include only one address for each host on the network.

Configure an address reservation for each of the addresses in the DHCP scope.

Question 16

Your company is implementing a new web application that is designed to help track inventory of company assets. When reviewing the configuration of the application, you note that it requires users to log in to access the inventory site. What else should you look for?

Answer 16

Ensure the login credentials are encrypted

Question 17

You are reviewing the security configuration of a wireless access point. Which of the following settings should be configured on the access point to help keep wireless secure?

A. Change the admin password. 
B. Configure WEP. 
C. Configure WPA2. 
D. Disable MAC filtering. 
E. Configure DLP.

Answer 17

A. Change the admin password.

C. Configure WPA2.