Final

Question 1

Name 5 types of problems when your Windows software is being attacked

Answer 1

Leaks of sensitive info
Password cracks
Systems taken down DDOS
Remote control being obtained
Databases copied or deleted

Question 2

What types of attacks are there?

Answer 2

Password 
DDOS
Port Penetration
SQL Injection
Session Hijacking
Man-in-the-middle

Question 3

What commands are built into Windows?

Answer 3

Nbtstat
Netstat
Net

Question 4

How do you hide a shared folder?

Answer 4

Append the $ character at the end

Question 5

IPC$

Answer 5

Anonymous connection - A well known vulnerability in Windows (null session)

net use \host name or IP address\ipc$ “” “/user

Question 6

How can you scan your Windows network shares folder?

Answer 6

Softperfect network scanner

Question 7

Missing patches are the easiest way to find a vulnerability. Some tools to discover what’s available for exploitation include?

Answer 7

Nexpose

Nessus

Question 8

What can Win10 enhance that Win7 and Win8 don’t have?

Answer 8

Enterprise patch management
Scheduled restarts for Windows patches
Bitlocker
Better malware protection w/built in Windows defender 
User Authentication

Question 9

When you employ physical security what are you protecting against?

Answer 9

Internal malicious user

Question 10

Which Windows vulnerabilities also translate to Linux?

Answer 10

Leaks of sensitive info
Cracked passwords
Corrupted or deleted databases
Systems taken offline

Question 11

How can you prevent people from scanning your ports?

Answer 11

Firewall

Don’t let them gain access via wall jack or Wi-Fi

Question 12

How do you prevent people from scanning your network?

Answer 12

Secure WiFi with strong password
Firewalls
Intrusion prevention systems 
Disable unneeded services
Software updates are installed

Question 13

Common security weaknesses include?

Answer 13

Anonymous FTP
Telnet and FTP
Old versions of send mail
Rservices such as rlogin, rdist, rexecd, rsh and rcp

Question 14

How can you prevent people from booting into safemode?

Answer 14

bcdedit/deletevalue {current} safe boot

Question 15

What is FTP and what is Telnet?

Answer 15

FTP is one of the most widely used file transfer protocols. Harden it by enabling password compliance policies, require strong encryption ciphers, enforce IP access rules and implement multi-factor authentication

Question 16

Name two email attack types and what kind of damage they cause.

Answer 16

Email bombs create denial of service conditions and take up large amounts of bandwidth.
Attachments create an attachment overload which sends hundreds of emails to one or more recipients on your network