Question 1

Probing your network for security flaws should occur once a quarter,and a complete audit of your security should be completed ________ per year.
A)Once
B)Twice
C)Three times
D)None of the above

Accepted Answer

A complete audit of your security should be completed once per year to ensure comprehensive coverage and identification of potential vulnerabilities.

Question 2

You would set a ___________ to prevent users from immediately changing their password several times in one day to return to the current password.This is particularly important if your password policy has a history depth of five.
A)Minimum password age
B)Maximum password age
C)Minimum password length
D)Maximum password length

Accepted Answer

A Minimum password age policy prevents users from changing their password too frequently within a short period. This is important in scenarios where a password history policy is implemented (e.g., remembering the last five passwords) to prevent users from cycling through passwords quickly to reuse their current one.

Question 3

A good password has at least ______ characters.
A)6
B)8
C)10
D)15

Accepted Answer

Most security guidelines recommend that a good password should have at least 8 characters.

Question 4

The first rule of computer security is to check ___________.
A)Patches
B)Ports
C)Policies
D)None of the above

Accepted Answer

Patches are updates to software that fix security vulnerabilities, making it crucial to check and apply them regularly to maintain security.

Question 5

The process to make a system as secure as it can be without adding on specialized software or equipment is _______________
A)Securitizing
B)Hardening
C)Routing
D)None of the above

Accepted Answer

Hardening is the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in other words, a system's attack surface is the sum of the different points where an unauthorized user (the "attacker") can try to enter data to or extract data from an environment. Hardening involves the removal of unnecessary software, unnecessary usernames or logins, and the disabling or removal of unnecessary services.

Question 6

A password policy for a 90- or 180-day replacement schedule is called password ________.
A)History
B)Age
C)Uniqueness
D)None of the above

Accepted Answer

The answer of A password policy for a 90- or...

Question 7

Every open port on a router is a possible avenue of entry for a malware or intruder.

Accepted Answer

Open ports on a router can serve as potential entry points for malware or unauthorized users if they are not properly secured or monitored.

Question 8

Microsoft Baseline Security Analyzer (MBSA)checks one or more Windows machines to see if they have basic security in place.

Accepted Answer

MBSA is a tool developed by Microsoft that assesses the security state of Windows machines by checking for missing security updates and common security misconfigurations.

Question 9

A _________ involves setting up two firewalls: an outer and an inner firewall.
A)DMZ (demilitarized zone)
B)proxy server
C)DNS server
D)None of the above

Accepted Answer

A DMZ (demilitarized zone) involves setting up two firewalls to create a buffer zone between an internal network and the internet, enhancing security by isolating access to internal resources.

Question 10

CNE,MCITP,CISSP,and CCNA are examples of industry certifications.

Accepted Answer

CNE (Certified Novell Engineer), MCITP (Microsoft Certified IT Professional), CISSP (Certified Information Systems Security Professional), and CCNA (Cisco Certified Network Associate) are all examples of industry certifications that validate an individual's expertise in specific areas of IT and cybersecurity.

Question 11

For individual computers not running firewall software,you should directly close ports.

Accepted Answer

Closing ports directly on individual computers not running firewall software is not a practical approach. Instead, managing network security, including port management, should be done through a firewall or similar security software to protect the computer effectively.

Question 12

For an individual machine that is not running firewall software,you do not directly close ports.You shut down the _________ using that port.
A)Patch
B)Router
C)Probe
D)None of the above

Accepted Answer

Ports are associated with services or applications, not items listed in the options. Shutting down or configuring the service or application using the port effectively closes it.

Question 13

A good rule of thumb for a password history policy is a history depth of five.

Accepted Answer

A password history depth of five means the system remembers the last five passwords and prevents the user from reusing any of them. This helps in preventing the reuse of recent passwords, enhancing security.

Question 14

On a server,you should create your own accounts with ________ that do not reflect their level of permission.
A)Names
B)Numbers
C)Passwords
D)None of the above

Accepted Answer

Creating accounts with names that do not reflect their level of permission is a security measure to obscure the purpose or level of access of an account from potential attackers.

Question 15

There should be a firewall between your network and the outside world.

Accepted Answer

A firewall acts as a barrier to protect a network from unauthorized access, monitoring incoming and outgoing traffic and blocking malicious data packets.

Question 16

Any _________ you do not explicitly need should be shut down.
A)Patches
B)Ports
C)Policies
D)Probes

Accepted Answer

Ports that are not explicitly needed for current operations should be shut down to minimize security vulnerabilities and reduce potential attack surfaces.

Question 17

Windows has a built in firewall,but Linux does not.

Accepted Answer

Linux distributions typically come with a built-in firewall tool (such as iptables or nftables), but it may not have a graphical user interface by default like Windows Firewall.

Question 18

Experience is the most important factor when looking for a security professional.

Accepted Answer

Experience is highly valued in the security industry as it provides professionals with the knowledge and skills necessary to effectively protect organizations and individuals from threats.

Question 19

Nessus is the premiere network vulnerability scanner.

Accepted Answer

Nessus is widely recognized as one of the leading network vulnerability scanners, offering comprehensive vulnerability scanning and assessment capabilities.

Question 20

A good password should contain only letters and numbers.

Accepted Answer

A good password should also include special characters and a mix of uppercase and lowercase letters to increase its complexity and security.

Quiz 11: Network Scanning and Vulnerability Scanning

Probing your network for security flaws should occur once a quarter,and a complete audit of your security should be completed ________ per year.

You would set a ___________ to prevent users from immediately changing their password several times in one day to return to the current password.This is particularly important if your password policy has a history depth of five.

A good password has at least ______ characters.

The first rule of computer security is to check ___________.

The process to make a system as secure as it can be without adding on specialized software or equipment is _______________

A password policy for a 90- or 180-day replacement schedule is called password ________.