Chapter 13 Study Guide

Which two items are used in asymmetric encryption?

1) A private key 2) A public key

Which two algorithms are used for hash encoding to guarantee the integrity of data?

1) MD5 2) SHA

A high technology company has an issue with unauthorized people gaining access into the company by following an authorized employee through the secure entrance. Which two measures could help with this security breach?

1) Mantrap 2) Security guard that checks IDs

Which two statements characterize wireless network security?

1) With SSID broadcast disabled, an attacker must know the SSID to connect. 2) Using the default IP address on an access point makes hacking easier.

What would cause a Microsoft Windows update to fail?

A required prior update was not installed.

A newly created company has fifteen Windows 10 computers that need to be installed before the company can open for business. What is a best practice that the technician should implement when configuring the Windows Firewall?

After implementing third party security software for the company, the technician should verify that the Windows Firewall is disabled.

Refer to the exhibit. Which type of workstation password is being used?

BIOS

After confirming the removal of a virus from a computer, how should the technician ensure and verify the full functionality of the system?

Check for the latest OS patches and updates.

The IT department is reporting that a company web server is receiving an abnormally high number of web page requests from different locations simultaneously. Which type of security attack is occurring?

DDoS

A manager approaches a PC repair person with the issue that users are coming in to the company in the middle of the night to play games on their computers. What might the PC repair person do to help in this situation?

Limit the login times.

How can users working on a shared computer keep their personal browsing history hidden from other workers that may use this computer?

Operate the web browser in private browser mode.

A customer uses Internet Explorer and Microsoft Edge as browsers on the computer. The customer asks the technician how to configure the computer to detect and filter phishing websites, to analyze websites for suspicious items, and to check downloads against a list of known malicious files and sites. Which web security feature should the technician demonstrate?

SmartScreen Filter

A technician is preparing to encrypt a corporate drive by using Microsoft BitLocker. Which BIOS option will the technician need to enable?

TPM

A user calls the help desk reporting that a laptop is not performing as expected. Upon checking the laptop, a technician notices that some system files have been renamed and file permissions have changed. What could cause these problems?

The laptop is infected by a virus.

A user notices that files created and saved locally last week are missing and asks the technician to investigate. The technician suspects there has been a security breach. Which type of malware could be responsible?

Trojan

An IT technician wants to create a rule on two Windows 10 computers to prevent an installed application from accessing the public Internet. Which tool would the technician use to accomplish this task?

Windows Defender Firewall with Advanced Security

A college student logs onto a college computer for the first time. Which security policy category should be presented to the student?

acceptable use policies

A technician has been asked by a manager to recommend a security solution for protecting a computer against Trojans. Which security technique should the technician recommend?

antimalware

A technician has been asked by a manager to recommend a security solution for protecting a computer against adware programs. Which security technique should the technician recommend?

antimalware

A technician has been asked by a manager to recommend a security solution for protecting a computer against keyloggers. Which security technique should the technician recommend?

antimalware

A technician has been asked by a manager to recommend a security solution for protecting a computer against ransomware. Which security technique should the technician recommend?

antimalware

A technician has been asked by a manager to recommend a security solution for protecting a computer against rootkits. Which security technique should the technician recommend?

antimalware

A technician has been asked by a manager to recommend a security solution for protecting a computer against spyware. Which security technique should the technician recommend?

antimalware

A technician has been asked by a manager to recommend a security solution for protecting a computer against worms. Which security technique should the technician recommend?

antimalware

A retail store wants to secure laptops that are on display. The store manager also wants a record of which employees enter the backroom where inventory is kept. Which security option would work best for this situation?

cable locks and a token-based lock on the backroom

Which security technique or device wipes the data from a hard drive by being placed near the drive platter for at least 2 minutes?

degaussing wand

A SOHO company has hired a technician to come in and configure and secure the computers. The technician has decided to configure a local security policy for the machines. Which setting would the technician use to ensure that the user did not make their password the same as their own user account name?

meet complexity requirements

What are signatures as they relate to security threats?

one or more code patterns within a specific type of malware

Which type of firewall serves as a relay between users and servers on the Internet, inspects all traffic, and allows or denies traffic based on a set of rules?

proxy firewall

Refer to the exhibit. The security policy of an organization allows employees to connect to the office intranet from their homes. Which type of security policy is this?

remote access

A user receives a phone call from a person who claims to represent IT services and then asks that user for confirmation of username and password for auditing purposes. Which security threat does this phone call represent?

social engineering

When would a PC repair person want to deploy the idle timeout feature?

when users are leaving their desk but remaining logged on