Security+ Questions that i need to work on

security-questions-that-i-need-to-work-on

ىخرج

سؤال 1 of 1

الوقت المتبقي

488475

120

block

You are concerned about protecting your network from network-based attacks from the internet. Specifically, you are concerned about attacks that have not yet been identified or that do not have prescribed protections. Which type of device should you use?

حدد الإجابات الصحيحة

(0/0)

تفسير

An anomaly-based intrusion detection system (IDS) can recognize and respond to some unknown attacks. Signature recognition, also referred to as pattern matching or dictionary recognition, looks for patterns in network traffic and compares them to known attack patterns called signatures. Signature-based recognition cannot detect unknown attacks--they can only detect attacks identified by published signature files. Antivirus software is a form of signature-based IDS. A network-based firewall filters packets for a network, while a host-based firewall filters packets for a host. Firewalls are typically configured using access control lists that identify specific traffic as allowed or denied.

488476

120

none

An active IDS system often performs which of the following actions? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

An active IDS performs behaviors that can be seen by anyone watching the network. Usually, these actions are necessary to block malicious activities or discover the identity of an intruder. Updating filters and performing reverse lookups are common behaviors of an active IDS. No form of IDS requires users to perform a second logon based on questionable activities. There are some authentication systems, such as CHAP, that periodically re-authenticate, but that is done at random time intervals and is not visible to the user. A solution that serves to trap and delay the intruder until the authorities arrive describes a man trap (a physical security mechanism). However, this definition could be stretched to include honey pots and padded cells (logical or technical security mechanisms often used in conjunction with an IDS).

488477

120

none

You want to implement an IDS system that uses rules or statistical analysis to detect attacks. Which type of IDS should you deploy?

حدد الإجابات الصحيحة

(0/0)

تفسير

Anomaly recognition, also referred to as behavior , heuristic , or statistical recognition, monitors traffic to define a standard activity pattern as normal. Clipping levels , or thresholds , are defined that identify deviations from the norm. When the threshold is reached, an alert is generated or action taken. Anomaly-based systems can recognize and respond to some unknown attacks (attacks that do not have a corresponding signature file). Signature recognition, also referred to as pattern matching, dictionary recognition, or misuse- detection (MD-IDS), looks for patterns in network traffic and compares it to known attack patterns called signatures . A network IDS (NIDS) runs on a network device and examines network traffic for attacks. A host-based IDS (HIDS) runs on a single system and protects that system from attacks.

488478

120

none

You have configured an NIDS to monitor network traffic. Which of the following describes an attack that is not detected by the NIDS device?

حدد الإجابات الصحيحة

(0/0)

تفسير

False negative traffic assessment means that harmful traffic was allowed to pass without any alerts being generated or any actions being taken to prevent or stop it. This is the worst possible action by an IDS. Positive traffic assessment means that the system detected an attack and the appropriate alarms and notifications were generated or the correct actions were performed to prevent or stop the attack. False positive traffic assessment means that the system identified harmless traffic as offensive and generated an alarm or stopped the traffic. Negative traffic assessment means that the system deemed the traffic harmless and let it pass.

488479

120

none

Which of the following is not true concerning a padded cell ?

حدد الإجابات الصحيحة

(0/0)

تفسير

Honeypots are often placed inside of padded cells. A padded cell transfers an attacker into a simulated, safe environment where there is no critical data stored. The attacker can then be monitored in an environment where harm cannot be caused.

488480

120

none

Network-based intrusion detection systems (IDSs) are able to detect which type of attacks? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

A network-based IDS can detect only network-based attacks. This includes port scanning and denial of service attacks. Traffic flooding-based denial of service attacks that exploit operating system or program vulnerability are unnoticed by a network-based IDS. A network-based IDS is unable to detect email spoofing, virus infection, and data entry error because all of these items occur either on a host or beyond the scope of IDS inspection.

488481

120

none

You have recently experienced a security incident with one of your servers. After some research, you determine that the hotfix #568994 that has recently been released would have protected the server. Which of the following recommendations should you follow when applying the hotfix?

حدد الإجابات الصحيحة

(0/0)

تفسير

In this scenario, you should test the hotfix, and apply it to all other servers only if the test is successful. Applying it only to the server that was compromised will not protect other servers with the same vulnerability. A common testing strategy is to: 1. Apply and test patches in a lab environment 2. Deploy patches to a set of systems, such as a single department 3. Deploy patches system-wide

488482

120

none

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

Windows Software Update Services (WSUS) is a patch management tool that allows clients on a network to download software updates from an internal WSUS server in their organization. • The WSUS server receives a list of available updates from Microsoft. • On the WSUS server, you identify allowed or required patches for your organization. • Clients download only approved patches from an internal WSUS server or directly from Microsoft. You can also use Group Policy to distribute and automatically install patches. You must use Group Policy to install updates to non-Microsoft software that is not supported with WSUS. Use the Security Templates snap-in to create and edit templates that enforce system security settings. Use the Security Configuration and Analysis snap-in to compare the existing settings with the template or to apply a template to a single device. Use Group Policy to automatically apply security templates.

488483

120

none

Which command should you use to scan for open TCP ports on your Linux system? (Tip: Enter the command as if at the command prompt.)

إملأ الفراغات

(0/0)

تفسير

Use nmap -sT to scan for open TCP ports. Open ports can provide information about which operating system a computer uses and might provide entry points or information about ways to formulate an attack. Use nmap -sU to scan for open UDP ports.

488484

120

none

You want to make sure no unneeded software packages are running on your Linux server. Select the command from the drop-down list that you can use to see all installed RPM packages.

إملأ الفراغات

(0/0)

تفسير

Unneeded software takes disk space and could introduce security flaws. To see all the RPM packages installed on your Linux server, run the following command: yum list installed After running this command, do the following: • Research the function of any unrecognized RPM packages to determine whether it is necessary. • Use yum or rpm to uninstall unneeded packages.

488485

120

none

Which of the following functions are performed by proxies? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

A proxy, or proxy server, stands between client computers and Internet Web servers. You can use a proxy server to prevent access to specific web sites, or to cache (save) frequently-used web pages. When a proxy receives a request from the client, it checks to verify that the client is allowed access to the web site. If allowed, it then checks its cache to see if the requested page is in the cache. If the page is already cached, then the proxy server fulfills the request by displaying the requested page from the cache rather than retrieving it from the Internet. Receiving a web page from a local proxy server is much faster than downloading the page from the Internet.

488486

120

none

You need to implement a wireless network link between two buildings on a college campus. A wired network has already been implemented within each building. The buildings are 100 meters apart. What type of wireless antennae should you use on each side of the link? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

You should use high-gain parabolic antennae on each side of the link. A high-gain antenna usually has a gain rating of 12 dBi or higher. A parabolic antenna uses a parabolic-shaped reflector dish. It is highly directional, concentrating the radio waves transmitted from the sender into a very narrow beam. When the receiver uses a parabolic antenna, it can only receive a signal from one specific direction. It supports very high-gain radio signals that can be transmitted over long distances, but it requires a clear line of sight (LOS) between the sender and the receiver. A normal-gain antenna usually has a gain rating between 2 and 9 dBi. An omnidirectional antenna radiates and absorbs signals equally in every direction around the antenna. Because it spreads its gain in a 360-degree pattern, the overall range of an omnidirectional antenna is typically much less than that of a directional antenna. A directional antenna focuses its radiation and absorption of signals in a specific direction. However, they typically have a much shorter range than a parabolic antenna.

488487

120

none

You have a large number of sales people who use wireless access to the network from your single access point. You are concerned about network use by non-authorized users with wireless LAN cards. Which of the following can you enable on the access point (AP) to increase security?

حدد الإجابات الصحيحة

(0/0)

تفسير

WEP (Wired Equivalent Privacy) is used to add a layer of security to the transmission by encrypting the data. The other technologies listed are all useful for other forms of encryption, but do not work between a wireless access point and network card.

488488

120

none

You have a small home wireless network that uses WEP. The access point is configured as the DHCP server and a NAT router that connects to the internet. You do not have a RADIUS server. Which authentication method should you choose?

حدد الإجابات الصحيحة

(0/0)

تفسير

When using WEP without a RADIUS server, use open authentication. Shared secret authentication with WEP uses the WEP key as the shared secret. Because of the weakness of WEP, this exposes the WEP key to attack. 802.1x authentication requires a RADIUS server and a directory server. Temporal key integrity protocol (TKIP) is the protocol used by Wi-Fi Protected Access (WPA) for dynamic key rotation.

488489

120

none

You want to set up a service to allow multiple users to dial in to the office server from modems on their home computers. What service should you implement?

حدد الإجابات الصحيحة

(0/0)

تفسير

RAS stands for Remote Access Service, which enables users to dial in to a server from remote locations. ISDN is a digital communications network that uses existing phone lines. PPP is a remote access protocol. You will likely configure your RAS server to accept PPP connections. RIP stands for Routing Information Protocol and allows routers to share information.

Security+ Questions that i need to work on

سؤال 1 of 1

الوقت المتبقي

You are concerned about protecting your network from network-based attacks from the internet. Specifically, you are concerned about attacks that have not yet been identified or that do not have prescribed protections. Which type of device should you use?

حدد الإجابات الصحيحة

(0/0)

تفسير

An active IDS system often performs which of the following actions? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

You want to implement an IDS system that uses rules or statistical analysis to detect attacks. Which type of IDS should you deploy?

حدد الإجابات الصحيحة

(0/0)

تفسير

You have configured an NIDS to monitor network traffic. Which of the following describes an attack that is not detected by the NIDS device?

حدد الإجابات الصحيحة

(0/0)

تفسير

Which of the following is not true concerning a padded cell ?

حدد الإجابات الصحيحة

(0/0)

تفسير

Network-based intrusion detection systems (IDSs) are able to detect which type of attacks? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

You have recently experienced a security incident with one of your servers. After some research, you determine that the hotfix #568994 that has recently been released would have protected the server. Which of the following recommendations should you follow when applying the hotfix?

حدد الإجابات الصحيحة

(0/0)

تفسير

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

Which command should you use to scan for open TCP ports on your Linux system? (Tip: Enter the command as if at the command prompt.)

إملأ الفراغات

(0/0)

تفسير

You want to make sure no unneeded software packages are running on your Linux server. Select the command from the drop-down list that you can use to see all installed RPM packages.

إملأ الفراغات

(0/0)

تفسير

Which of the following functions are performed by proxies? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

You need to implement a wireless network link between two buildings on a college campus. A wired network has already been implemented within each building. The buildings are 100 meters apart. What type of wireless antennae should you use on each side of the link? (Select two.)

حدد الإجابات الصحيحة

(0/0)

تفسير

You have a large number of sales people who use wireless access to the network from your single access point. You are concerned about network use by non-authorized users with wireless LAN cards. Which of the following can you enable on the access point (AP) to increase security?

حدد الإجابات الصحيحة

(0/0)

تفسير

You have a small home wireless network that uses WEP. The access point is configured as the DHCP server and a NAT router that connects to the internet. You do not have a RADIUS server. Which authentication method should you choose?

حدد الإجابات الصحيحة

(0/0)

تفسير

You want to set up a service to allow multiple users to dial in to the office server from modems on their home computers. What service should you implement?

حدد الإجابات الصحيحة

(0/0)

تفسير

النتائج

صيح

0

غير صحيح

0

تخطي

0

النسبة الإجمالية

0%

معدل Quiz