Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

MTA > Security > Flashcards

Security Flashcards

(104 cards)

Start Studying
1
Q

Which term is used in reference to the process of identifying an individual?

A

Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which term is used in reference to the process in which a user is identified via a username and password?

A

Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which term is used in reference to the process of giving individual access to a system or resource?

A

Authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which term is used in reference to the process of keeping track of a users activity?

A

Accounting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which term is used in reference to the process that prevents someone from denying that she accessed a resource?

A

Nonrepudiation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which of the following is a secret numeric password used for authentication?

A

Pin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Why type of electronic document contains a public key?

A

Digital certificate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which item is roughly the size of a credit card and allows access to a network and its resources?

A

Smart card

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which type of authentication method identifies and recognizes people based on physical traits such as fingerprints ?

A

Biometrics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which authentication type is the default for active directory ?

A

Kerberos

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which directory service is used with windows domains?

A

Active directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which type of server runs active directory ?

A

Domain controller

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

When you access permissions to a folder, you should first grant permissions to _____ rather than users.

A

Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

When you create a local user on a computer running in Windows 7, where is the user account stored?

A

SAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which type of group can be granted rights and permissions?

A

Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which of the following authorizes a user to perform certain actions in Windows, such as logging on or performing a backup?

A

Right

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

When you grant access to print to a printer, which of the following are you granting?

A

Permission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

In which of the following locations are users and permissions stored for an NFTS folder?

A

Registry

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which type of permissions are assigned directly to a file or folder?

A

Explicit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which of the following is the process of converting data into a format that cannot be read by another user?

A

Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which authentication method sends the username and password in plain text?

A

PAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

In Windows, which of the following is used to enable auditing?

A

NTCS permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

By default, the _____ group has full access to all resources within a domain.

A

Domain admins

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

_______ allows you to log on once and access multiple related by different systems without having to log on again

A

Single sign on (SSO)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Which of the following is the most common form of authentication?
Password
26
Which of the following is true of using passwords ?
You should create a strong password
27
Which of the following best describes a password that is at least seven characters long and uses three of the following categories (uppercase, lowercase, numbers, and special characters)?
Complex password
28
Which of the following is used to define the length of a password in Windows ?
Group policies
29
Which of the following is not a complex password?
John!taylor
30
Which settings are used to keep track of incorrect login attempts and lock the account if too many attempts are detected within a certain set time?
Account lockout
31
Which setting is used to prevent users from reusing the same the same password over and over?
Password history
32
Which setting forces users to change their passwords?
Maximum password age
33
Which type of attack tries to guess passwords by trying common words?
Dictionary attack
34
Which type of attack tried to guess passwords by every combination of characters?
Brute-force attack
35
Which malicious software captures every keystone and sends it to a hacker?
Keylogger
36
Which type of software can you use to view usernames and passwords broadcasted over the network?
Sniffer
37
Which of the following is the generally accepted minimum password length?
8
38
Which of the following are the only passwords that should not expire?
Service accounts
39
Which of the following should users do not do when dealing with passwords?
Write down your password in a piece of paper and keep it near your computer Do not use names of children and pets Do not give your password to your co-workers
40
Describe what might happen if you require passwords to be too long
User will try to circumvent the password
41
What limits how fast a password for an encrypted file is cracked?
The speed of your computer, particularly your processor
42
What steps can you do to prevent someone from hacking your password?
Use strong passwords and change them frequently.
43
What is used to prevent someone from guessing a password multiple times?
Account lockout settings
44
Which type of device device isolated by filtering the packets that can enter it?
Firewall
45
Which seven layer model is often used to describe networking technologies and services?
OSI
46
On which OSI layer do routers function?
3 | Network layer
47
On which OSI layer do TCP and UDP function?
4 | transport layer
48
Which OSI layer is used by switches and bridges?
2 | Data link layer
49
Which port is used by smtp?
25
50
Which port is used by LDAP?
389
51
Which type of firewall filters packets based on IP address and ports?
Packet-filtering
52
Which type of firewall is also known as a proxy server?
Application-level
53
Which type of firewall looks at the previous conversations to determine if a packet should enter a network?
Stateful
54
Which type of DoS attack uses large ICMP packets to cause an overflow of the memory buffers allocated for packets ?
Ping of death
55
Which technology can be used to isolate a network of servers so that they cannot interact with other servers?
VLAN
56
Which type of device looks at a packet and forwards it based on its destination IP address?
Router
57
Which type of routing protocol sends the entire routing table to its neighbors?
Distance vector
58
Which type of system detects unauthorized intruders and then takes action to stop them from proceeding ?
IPS
59
Which type of server can be used to trap a hacker?
Honeypot
60
Which special area serves as a buffer area between the internet and the internal network and can be used to hold web servers that are accessed from the internet?
DMZ
61
How many firewalls should be used to create a sandwich DMZ?
2
62
You administer several internet web servers that need to communicate with a SQL server. Where should the SQL server be placed?
Internal network
63
Which of the following servers should not be placed on the DMZ?
Email mailbox servers
64
Which technology allows a user at home to connect to the corporate network?
VPN
65
Which IPSec protocol provides integrity protection for packet headers, data, and user authentication but does not encrypt the data load?
AH | Authentication header
66
Which type of malware can copy itself and infect a computer without the users consent or knowledge?
Virus
67
Which type of self-replicating program copies itself to other computers on a network without any user intervention and consumes bandwidth and computer resources?
Worm
68
Which type of malware looks like a useful or desired executable programs but is in reality program that is supposed to cause harm to your computer or steal information from your computer?
Trojan horse
69
Which type of malware collects your personal information or details about your browsing habits without your knowledge?
Spyware
70
Which type of malware provides administrator level control over a computer system?
Root kit
71
Which software component defends against spyware ?
Windows defender
72
Which term is used in reference to a message warning you to delete an essential windows file?
Virus hoax
73
Which server can be used to install windows updates for your organization?
WSUS | Windows server update service
74
Which term is used in reference to multiple windows updated that have been packaged together as one installation and are well tested ?
Service packs
75
Which windows feature notifies you when something tries make changes to your computer without your knowledge?
User account control UAC
76
Which host firewall is included with Windows 10?
Windows firewall
77
Which term is used in reference to unsolicited junk email?
Spam
78
Which email validation system is designed to stop spam that uses source address spoofing?
Sender policy framework
79
Which of the following are spammers and hackers looking for when they want to send email through your network?
Open smtp servers
80
Which tab internet explorer settings is used to delete history and cookies?
General
81
Which internet explorer zone is the least secure ?
Local intranet zone
82
Which technique is used to send you to a fake, but realistic-looking, website to verify your account information?
Phishing
83
____ is software that is designed to infiltrate or affect a computer system without the owners informed consent.
Malware
84
A _________ is program that provides a user with remote, unauthorized control or a system or unities an unauthorized task.
Backdoor
85
Which of the following terms indicates that information is to be read only by those people for whom it is intended?
Confidentiality
86
Which technology is not used to implement confidentiality?
Auditing
87
Which of the following ensures data is not changed when it not supposed to be?
Integrity
88
Which of the following is not a response when dealing with a risk?
Patching
89
Which the following terms is used in reference to the security discipline that requires that a user is given no more privilege than what is deemed necessary to perform his job?
Principle of least privilege
90
Which of the following terms is used in reference to a scope that hacker can use to break into a system ?
Attack surface
91
Which of the following method whereby a hacker relies on the trusting nature of the person being attacked?
Social engineering
92
Which of the following is considered the most effective way to protect against social engineering?
Employee awareness
93
Which of the following is necessary to highly secure a system ?
More money
94
Which of the following is the first line of defense when setting up a network ?
Physically secure the network
95
Which concept determines what resources users can access after they log on?
Access control
96
Which of the following is used to provide protection when one line of defense is breached?
Defense in depth
97
Which of the following is used to identify a person before giving access ?
Authentication
98
Which of the following is used to verify that an administrator is not accessing data that he should not be accessing?
Auditing
99
Which type of device can be easily lost or stolen or can be used for espionage ?
Removable devices
100
Which of the following is a physical or logical device used to capture keystrokes ?
Keylogger
101
In dealing with risks, which response is accomplished when you or your organization purchased insurance to protect your bottom line when such a disaster or threat is realized?
Risk transfer
102
A _____ is generally defined as the probability that an even will occur that can cause harm to a computer system, service or network.
Risk
103
Throughout the past couple of years small _________ have been one of the largest challenges facing security professionals.
Mobile devices
104
What do the initials CIA stand for in relation to security?
Confidentiality, integrity and availability

MTA (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions