Exam

Question 1

Log issue:4902

Answer 1

Changes audit policies, can be used to turn off logging

Question 2

Log issue:4741

Answer 2

Computer account is created

Question 3

Log issue:4782

Answer 3

Password hash account was accessed

Question 4

Log issue:4728

Answer 4

A member was added to security group;could be attacker elevating privileges

Question 5

Get/Head

Answer 5

Request to read web page

Question 6

Put

Answer 6

Request to write web page

Question 7

Post

Answer 7

Request to append to page

Question 8

Delete

Answer 8

Remove web page

Question 9

Link

Answer 9

Connect two existing resources

Question 10

Unlink

Answer 10

Breaks connection between two resources

Question 11

Jamming

Answer 11

Attempting to jam Wi-Fi signal so users can’t access network

Question 12

De-authentication

Answer 12

Sending de-authentication or log off packet to the wireless access point

Question 13

WPS Attack

Answer 13

Wi-Fi protected setup uses pin to connect to WAP.WPS intercepts pin in transmission

Question 14

Ntdetect.com

Answer 14

Program that queries computer for device/config data

Question 15

Ntbootdd.sys

Answer 15

Storage controller device driver

Question 16

Ntoskml.exe

Answer 16

Core of the OS

Question 17

Hal.DLL

Answer 17

Interface for hardware

Question 18

SMSs.exe

Answer 18

Program that handles services on system

Question 19

Winlogon.exe

Answer 19

Program that logs on

Question 20

Lsass.exe

Answer 20

Program that handles security and logon policies

Question 21

Explorer.exe

Answer 21

Interface that user interacts with(Windows Explorer)

Question 22

Crss.exe

Answer 22

Program that handles tasks like creating threads,windows