Test 1 review

Question 1

best secure network protocol:
accepts customer purchases from your primary website

Answer 1

HTTPS

Question 2

best secure network protocol
synchronize the time across all of your devices

Answer 2

NTPsec (network time protocol secure)

Question 3

secure network protocol
Access your switch using a CLI terminal screen

Answer 3

SSH

Question 4

secure network protocol
talk with customers on scheduled conference calls

Answer 4

SRTP (secure real-time transport protocol/ Secure RTP)
uses AES (adv. encryption standard)
uses HMAC-SHA1: hash based message authentication

Question 5

secure network protocol
gather metrics from routers at remote sites

Answer 5

SNMPv3
for routing and switching. encrypts data, no tampering of data, verifies the source

Question 6

what protocol and port should use for LDAP?

Answer 6

TCP/389

Question 7

what protocol and port should you use for HTTPS?

Answer 7

TCP/443

Question 8

what protocol and port should you use for a secure terminal?

Answer 8

SSH: TCP/22

Question 9

learning from open sources: websites, social media and business organizations, social engineering, dumpster diving

Answer 9

passive footprinting

Question 10

2 protocols that use TLS to provide secure communication

Answer 10

HTTPS and FTPS

Question 11

which threat actor would likely attack system for direct financial gain?

Answer 11

organized crime

Question 12

what addresses file storage volatility?

Answer 12

partition data and temporary file systems (both part of a file storage subsystem)

Question 13

what describes an all in one printer

Answer 13

MFD (multifunction device)

Question 14

which standard provides info on privacy and managing PII?

Answer 14

ISO 27701

Question 15

what should you create to prevent external storage devices used to extract data?

Answer 15

OS security policy to prevent removable media

Question 16

what tool would decrease response time when addressing security incidents?

Answer 16

SOAR (security orchestration, automation and response–automates processes) cheaper option than hiring additional engineers

Question 17

you receive an error cert invalid message on a third party website. what does it mean?

Answer 17

On path attack: associated with the 3rd party intercepts network traffic. they cannot use a valid SSL/TLS cert. so it creates an error

Question 18

what should you use to provide a website login using existing credentials from a 3rd party site?

Answer 18

federation: allows members of 2 organization to authenticate using creds of another organization