Deck 8: Desktop and Server Os Vulnerabilities

Question 1

What critical component of any OS,that can be can be vulnerable to attacks,is used to store and manage information?

A) SQL database
B) file system
C) WSUS
D) NetBIOS

Answer 1

B

Question 2

Windows Software Update Services (WSUS)is designed to manage patching and updating system software from the network.

Answer 2

True

Question 3

Which standardized remote file system protocol replaced SMB in Windows 2000 Server and later?

A) Common Internet File System
B) Microsoft Knowledge System
C) Windows Help File
D) Windows On-line File System

Answer 3

A

Question 4

SMB is used to share files and usually runs on top of NetBIOS,NetBEUI,or which of the following?

A) Winsock
B) CIFS
C) TCP/IP
D) IPX/SPX

Question 5

Which of the following Window's utilities includes a suite of tools to help administrators deploy and manage servers and even allows for administrators to control mobile devices running Android,iOS,and Windows Mobile OS?

A) AUS
B) WSUS
C) SCCM
D) SMS

Question 6

Microsoft Baseline Security Analyzer has its origins in which of the following command line scanners?

A) MDAC
B) HFNetChk
C) MSXML
D) Mbsacli

Question 7

Red Hat and Fedora Linux use what command to update and manage their RPM packages?

A) yum
B) get
C) dir
D) apt-get

Question 8

Rootkits containing Trojan binary programs that are ready to install are more dangerous than typical Trojan programs.

Question 9

To determine whether a system could be vulnerable to an RPC-related issue,which of the following tools can be used?

A) Nessus
B) WSUS
C) MBSA
D) Unicornscan

Question 10

Which of the following is an interprocess communication mechanism that allows a program running on one host to run code on a remote host?

A) RPC
B) NetBIOS
C) Winsock
D) NetBEUI

Question 11

Windows 10,Windows 8,Windows Server 2016,and Windows Server 2012 have most services and features enabled by default.

Question 12

Which of the following is a Window's client/server technology designed to manage patching and updating systems software from the network?

A) AUS
B) WSUS
C) Automatic Update
D) Patch Management Server

Question 13

The MSBA tool can quickly identify missing patches and misconfigurations.

Question 14

Which of the following is an open-source implementation of CIFS?

A) Samba
B) GNUCIF
C) GCIF
D) OpenCIFS

Question 15

NetBios is not available in Windows Vista,Server 2008,and later versions of Windows.However,NetBios should be understood by a security professional because it is used for which of the following?

A) backward compatibility
B) Windows upgrades
C) virus scanning
D) RPC

Question 16

What specific type of Windows Servers are used to authenticate user accounts and contain most of the information that attackers want to access?

A) SMB controllers
B) domain controllers
C) CIFS servers
D) file servers

Question 17

Early Windows OSs used which of the following programs loaded into memory to interact with a network resource or device?

A) Microsoft RPC
B) IPX/SPX
C) Winsock
D) NetBIOS

Question 18

NetBIOS over TCP/IP is called which of the following in Windows Server 2003?

A) NBT
B) NetBEUI
C) NetBT
D) NetTCP/IP

Question 19

Samba is a proprietary implementation of CIFS.

Question 20

Which of the following protocols does NetBios use to access a network resource?

A) TCP/IP
B) NBT
C) NetBT
D) NetBEUI

Question 21

Which of the following is a common Linux rootkit?

A) Back Orifice
B) Kill Trojans
C) Packet Storm Security
D) Linux Rootkit 5

Question 22

In Windows Server 2003 and 2008,how does a domain controller locate resources in a domain?

Question 23

What is Server Message Block (SMB)used for in Windows and can a hacker still damage a network using SMB?

Question 24

Which of the following is considered to be the most critical SQL vulnerability?

A) null SA hash
B) null SA password
C) SQL password
D) SQL scanning

Question 25

What is the Common Internet File System (CIFS)protocol?

Question 26

What should a password policy include?

Question 27

What is the current file system that Windows utilizes that has strong security features?

A) FAT
B) ADS
C) FAT32
D) NTFS

Question 28

What is the most serious shortcoming of Microsoft's original File Allocation Table (FAT)file system?

A) no ACL support
B) no SUS support
C) no SMTP support
D) no Linux support

Question 29

What programming languages are vulnerable to buffer overflow attacks?

A) C and Python
B) C and C++
C) Assembly and C++
D) Perl and Python

Question 30

Ubuntu and Debian Linux use what command to update and manage their RPM packages?

A) yum
B) get
C) dir
D) apt-get

Question 31

Why should a systems administrator disable unused services and filtering ports?

Question 32

When using the Common Internet File System (CIFS),which security model will require network users to have a user name and password to access a specific resource?

A) NT level security
B) Share-level security
C) User-level security
D) CIF level security

Question 33

For a Windows computer to be able to access a *nix resource,which of the following must be enabled on both systems?

A) NetBIOS
B) SMB
C) CIFS
D) NetBEUI

Question 34

What functions do most Trojan programs perform?

Question 35

What is Samba used for?

Question 36

What is the purpose of a file system?

Question 37

Why should you review logs regularly,and how should you manage this task?

Question 38

Why is NetBIOS still used in Windows Operating Systems?

Question 39

Which of the following is an SELinux OS security mechanism that enforces access rules based on privileges for interactions between processes,files,and users?

A) Mandatory Access Control
B) SE Access Control
C) Access Control
D) Mandatory Control

Question 40

When using the Common Internet File System (CIFS),which security model does not require a password to be set for the file share?

A) NT level security
B) Share-level security
C) User-level security
D) CIF level security

Question 41

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
A standardized protocol that replaced SMB in Windows 2000 Server and later

Question 42

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
In 2007 became Windows new standard to deploy and manage servers alongside updated patch-management functionality

Question 43

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
Microsoft's standard for managing Windows security patches on multiple computers in a network between 1994 and 2005

Question 44

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
An open-source implementation of CIFS

Question 45

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
An interprocess communication mechanism that allows a program running on one host to run code on a remote host

Question 46

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
A Windows client/server technology introduced in 2005 used to manage patching and updating system software from the network

Question 47

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
Used to share files and usually runs on top of NetBIOS,NetBEUI,or TCP/IP

Question 48

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
An OS security mechanism that enforces access rules based on privileges for interactions between processes,files,and users

Question 49

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
Amount of code a computer system exposes to unauthenticated outsiders

Question 50

Match each item with a statement below.a.attack surface
b.Windows Software Update Services
c.Systems Management Server
d.Server Message Block
e.NetBEUI
f.Mandatory Access Control
g.Common Internet File System
h.System Center Configuration Manager
i.Remote Procedure Call
j.Samba
A fast and efficient protocol that requires little configuration and allows transmitting NetBIOS packets over TCP/IP