SEC+ Revision Questions System Security Threats

Question 1

Which type of threat is mitigated by shredding paper documents?
A. Rootkit
B. Spyware
C. Shoulder surfing
D. Physical

Answer 1

Physical

Question 2

Which of the following statements are true? (Choose two.)
A. Worms log all typed characters to a text file.
B. Worms propagate themselves to other systems.
C. Worms can carry viruses.
D. Worms infect the hard disk MBR.

Answer 2

B. Worms propagate themselves to other systems.
C. Worms can carry viruses.

Question 3

One of your users, Christine, reports that when she visits web sites, pop-up advertisements appear incessantly. After further investigation, you learn one of the web sites she had visited had infected Flash code. Christine asks what the problem was. What do you tell her caused the problem?
A. Cross-site scripting attack
B. Worm
C. Adware
D. Spyware

Answer 3

Adware

Question 4

Which description best defines a computer virus?
A. A computer program that replicates itself
B. A file with a .vbs file extension
C. A computer program that gathers user information
D. A computer program that runs malicious actions

Answer 4

A computer program that runs malicious actions

Question 5

An exploit connects to a specific TCP port and presents the invoker with an administrative command prompt. What type of attack is this?
A. Botnet
B. Trojan
C. Privilege escalation
D. Logic bomb

Answer 5

Privilege escalation

Question 6

Ahmid is a software developer for a high-tech company. He creates a program that connects to a chat room and waits to receive commands that will gather personal user information. Ahmid embeds this program into an AVI file for a current popular movie and shares this file on a P2P file-sharing network. Once Ahmid’s program is activated as people download and watch the movie, what will be created?

A. Botnet
B. DDoS
C. Logic bomb
D. Worm

Answer 6

Botnet

Question 7

A user reports USB keyboard problems. You check the back of the computer to ensure the keyboard is properly connected and notice a small connector between the keyboard and the computer USB port. After investigation you learn this piece of hardware captures everything a user types in. What type of hardware is this?

A. Smartcard
B. Trojan
C. Keylogger
D. PS/2 converter

Answer 7

Keylogger

Question 8

What is the difference between a rootkit and privilege escalation?

A. Rootkits propagate themselves.
B. Privilege escalation is the result of a rootkit.
C. Rootkits are the result of privilege escalation.
D. Each uses a different TCP port.

Answer 8

Privilege escalaton is the result of a rootkit

Question 9

Which of the following are true regarding backdoors? (Choose two.)
A. They are malicious code.
B. They allow remote users access to TCP port 25.
C. They are made accessible through rootkits.
D. They provide access to the Windows root account.

Answer 9

A. They are malicious code
C. Thay are made accessible through rootkits

Question 10

You are hosting an IT security meeting regarding physical server room security. A colleague, Syl, suggests adding CMOS hardening to existing server security policies. What kind of security threat is Syl referring to?

A. Changing the amount of installed RAM
B. Changing CPU throttling settings
C. Changing the boot order
D. Changing power management settings

Answer 10

Changing the boot order

Question 11

You are the IT security officer for a government department. You are amending the USB security policy. Which items apply to USB security? (Choose two.)
A. Disallow external USB drives larger than 1TB.
B. Disable USB ports.
C. Prevent corporate data from being copied to USB devices unless USB device encryption is enabled.
D. Prevent corporate data from being copied to USB devices unless USB port encryption is enabled.

Answer 11

C. Prevent corporate data from being copied to USB devices unless USB device encryption is enabled.

D. Prevent corporate data from being copied to USB devices unless USB port encryption is enabled.

Question 12

Which of the following are not considered serious cell phone threats? (Choose two.)
A. Hackers with the right equipment posing as cell towers
B. Having Bluetooth enabled
C. Changing the boot order
D. Spyware

Answer 12

B. Having Bluetooth enabled
C. Changing the boot order

Question 13

What is defined as the transmission of unwelcome bulk messages?
A. Worm
B. Ping of death
C. Spam
D. DOS

Answer 13

Spam

Question 14

Which technology separates storage from the server?
A. Router
B. Switch
C. NAS
D. Wireless router

Answer 14

NAS

Question 15

You are responsible for determining what technologies will be needed in a new office space. Employees will need a single network to share data, traditional voice calls, VoIP calls, voice mailboxes, and other services such as call waiting and call transfer. What type of service provides this functionality?

A. Ethernet switch
B. PBX
C. NAS
D. Router

Answer 15

PBX

Question 16

Botnets can be used to set what type of coordinated attack in motion?

A. DDoS
B. Cross-site scripting
C. Privilege escalation
D. Rootkit

Answer 16

DDoS

Question 17

As a Windows administrator, you configure a Windows networking service to run with a specially created account with limited rights. Why would you do this?

A. To prevent computer worms from entering the network.
B. To prevent a hacker from receiving elevated privileges because of a compromised network service.
C. Windows networking services will not run with administrative rights.
D. Windows networking services must run with limited access.

Answer 17

To prevent a hacker from receiving elevated privileges because of a compromised network service.

Question 18

Discovered in 1991, the Michelangelo virus was said to be triggered to overwrite the first 100 hard disk sectors with null data each year on March 6, the date of the Italian artist’s birthday. What type of virus is Michelangelo?

A. Zero day
B. Worm
C. Trojan
D. Logic bomb

Answer 18

Logic bomb

Question 19

The Stuxnet attack was discovered in June 2010. Its primary function is to hide its presence while reprogramming industrial computer systems. The attack is believed to be spread through USB flash drives, where it transmits copies of itself to other hosts. To which of the following does Stuxnet apply? (Choose two.)

A. Rootkit
B. Spam
C. Worm
D. Adware

Answer 19

Rootkit & Worm

Question 20

A piece of malicious code uses dictionary attacks against computers to gain access to administrative accounts. The code then links compromised computers together for the purpose of receiving remote commands. What term best applies to this malicious code?

A. Exploit
B. Botnet
C. Logic bomb
D. Backdoor

Answer 20

Botnet

Question 21

Windows 8 User Account Control (UAC) allows users to change Windows settings but displays prompts when applications attempt to configure the operating system. Which of the following is addressed by UAC?

A. Privilege escalation
B. Adware
C. Spyware
D. Worms

Answer 21

Privilege escalation

Question 22

Which of the following items are affected by spyware? (Choose two.)

A. Memory
B. IP address
C. Computer name
D. Network bandwidth

Answer 22

Memory & Network bandwidth

Question 23

Juanita uses the Firefox web browser on her Linux workstation. She reports that her browser home page keeps changing to web sites offering savings on consumer electronic products. Her virus scanner is running and is up to date. What is causing this problem?

A. Firefox on Linux automatically changes the home page every two days.
B. Juanita is experiencing a denial-of-service attack.
C. Juanita’s user account has been compromised.
D. Juanita’s browser configuration is being changed by adware.

Answer 23

Juanita’s browser configuration is being changed by adware.

Question 24

Which of the following is true regarding Trojan software?
A. It secretly gathers user information.
B. It is self-replicating.
C. It can be propagated through peer-to-peer file sharing networks.
D. It automatically spreads through Windows file and print sharing networks.

Answer 24

It can be propagated through peer-to-peer file sharing networks.

Question 25

While attempting to access documents in a folder on your computer, you notice all of your files have been replaced with what appear to be random filenames. In addition, you notice a single text document containing payment instructions that will result in the decryption of your files. What type of malicious software is described in this scenario?

A. Cryptoware
B. Malware
C. Criminalware
D. Ransomware

Answer 25

Ransomware

Question 26

What type of malware dynamically alters itself to avoid detection?
A. Chameleon malware
B. Polymorphic malware
C. Changeling malware
D. Armored virus

Answer 26

Polymorphic malware

Question 27

Which of the following actions would not reduce the likelihood of malware infection? (Choose all that apply.)

A. Keeping virus definitions up to date
B. Scanning removable media
C. Encrypting hard disk contents
D. Using NAT-capable routers

Answer 27

C. Encrypting hard disk contents
D. Using NAT-capable routers