Cybersecurity Essentials 1.1 Chapter 7 Quiz Online

Hint

A centralized patch management system can speed up deployment of patches and automate the process. Other good reasons to using an automated patch update service include the following:

• Administrators control the update process.
• Reports are generated.
• Updates are provided from a local server.
• Users cannot circumvent the update process.

Hint

When troubleshooting a user problem, look for some common issues that would prevent a user from performing a function.

Hint

Operation centers support different areas of the operation including the network and security. Each one focuses on particular parts of the IT structure. The center that supports security would be the SOC.

Hint

A good way to remember wireless security standards is to consider how they evolved from WEP to WPA, then to WPA2. Each evolution increased security measures.

Hint

There are two types of errors that biometrics can have: false acceptance and false rejection. False acceptance is a Type II error. The two types can intersect at a point called the crossover error rate.

Hint

Because hackers sniffing traffic can read clear text passwords, any connection needs to be encrypted. Additionally, a solution should not be operating system-dependent.

Hint

DNS resolves a website address to the actual IP address of that destination.

Hint

Email could be used to deliver malware, but email by itself is not malware. Apt is used to install or remove software within a Linux operating system. Attachments could contain malware, but not always.

Hint

Windows provides a method to encrypt files, folders, or entire hard drives depending on need. However, certain BIOS settings and configurations are necessary to implement encryption on an entire hard disk.

Hint

A patch management service can provide greater control over the update process by an administrator. It eliminates the need for user intervention.

Hint

Disk cloning can be an efficient way to maintain a baseline for workstations and servers. It is not a cost cutting method.

Hint

A baseline allows a user to perform a comparison of how a system is performing. The user can then compare the result to baseline expectations. This process allows the user to identify potential vulnerabilities.

Hint

In order to monitor local activity an HIDS should be implemented. Network activity monitors are concerned with traffic and not operating system activity.

Hint

Power issues include increases, decreases, or sudden changes in power and include the following:

• Spike
• Surge
• Fault
• Blackout
• Sag/dip
• Brownout
• Inrush Current

Hint

When hardening an operating system, patching and antivirus are part of the process. Many extra components are added by the manufacturer that are not necessarily needed.

Hint

When a VPN is used, a user can be at any remote location such as home or a hotel. The VPN solution is flexible in that public lines can be used to securely connect to a company.

Hint

Despite improvements, WEP is still vulnerable to various security issues including the ability to be cracked.

Hint

Man-in-the-middle attacks are a threat that results in lost credentials and data. These type of attacks can occur for different reasons including traffic sniffing.

Hint

Local policies are not group policies and only work on the local machine. Local policies can, however, be overridden if the machine is part of a Windows domain.

Hint

Audit logs can track user authentication attempts on workstations and can reveal if any attempts at break-in were made.

Hint

Best practices entail giving the user only what is needed to do the job. Any additional privileges should be tracked and audited.