DECK 4

Question 1

WPA2 PSK has passphrase tween 8-63 characters. Groups of uses share it (group authentication)

WPA3 SAE replaces PSK. Can be personalized (means no snooping even if both have same passphrase)

Question 2

EAP-TLS is strong. Both server/supplicant have key pair and cert. First factor password, second factor handshake.

EAP involves AAA. EAP is defined by…

Difference between RADIUS and TACACS+

Answer 2

-802.1x

both use AAA, but RADIUS more for VPN/wireless. TACACS+ more for admin access to routers, switches, APs

Question 3

Kerberos issues tickets and is for domain authentication. Also facilitates SSO

Port forwarding/mapping directs external traffic coming to a public facing port to an internal port

Question 4

UPnP allows services to request apropos settings from firewall to do its thing. Vulnerable.

Screened subnets have firewalls placed where?

Answer 4

between itself and internet and between itself and the LAN

Question 5

….alarms trigger when a case is opened

Edge and Chrome have same codebase (Chronium)

Walled Garden means trusted sources

Answer 5

-circuit

Question 6

Ios data protection encryption happens upon creating a passcode

With android, there is NO full disk encryption but…

Answer 6

There is file level encryption upon creating screen lock

Question 7

Android backs up data by default to google sync but can do third party as well. Same with IOS. IOS can backup to OneDrive via…

Answer 7

Intune

Question 8

Difference between enterprise wipe and device wipe?

“Data Protection” protects emails through a second round encryption, not…

Answer 8

The first wipes only corporate data, second all

-sms

Question 9

mstsc.exe AKA… Only ONE user can be signed in on local desktop at a time else connection ends

Mac has the screen sharing feature based on….protocol

Answer 9

-RDP

-VNC

Question 10

NLA protects RDP against DDOS

can be used to run RDP in linux..

RDPRA and Remote Credential Guard both protect RDP

Answer 10

-XRDP

Question 11

MSRA (Remote Assistance/Access) is protected by PIN and has chat. Alternative to this is…. Neither allows task that require UAC consent

Answer 11

-Quick Assist

Question 12

Windows uses archive attribute. Linux doesn’t

assembled from other back jobs and has lower data transfer req’s

GFS (grandfather, father , son)= 5 father (full backup) tapes, 5 sons (incremental backups), and how many grandfathers?

Answer 12

-synthetic backup

12, for the months of the year.

Question 13

Explain 3-2-1 rule?

Degaussing does not work with SSDs aka OPTICAL media

PCI DSS protects PINs

Answer 13

3 copies of data, 2 media types, 1 offline, other offsite

Question 14

easiest Python enviro to setup for Windows?

File history can be used for finding deleted files

Ensures remote devices can be turned on…

Answer 14

Cpython

Wake on LAN

Question 15

Type of script executed by default with wscript.exe

Screensaver lock is found in Personalization

Answer 15

-vbs

Question 16

Which is faster? Unattended install of Windows or in-place upgrade?

net use is used to remove network drives

Answer 16

-Unattended (it’s a config file with everything setup)

Question 17

What is a SMART error?

IoS activation lock is tied to Apple IDs

……is default GUI/file manager in Apple

Answer 17

-happens when there’s issues with a drive

-Finder

Question 18

Battery backup is UPS…fuckers

Disk cleanup CLEANS the disk, Disk defragment and Disk management do NOT

if your system doesn’t support virtualization, you should…

Answer 18

-update processor