Question 1

MATCHING
Match each term with the correct statement below.
-to harden Microsoft systems, you should disable this account
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

The Guest account is a built-in account in Microsoft systems that is often disabled to enhance security, as it can be a potential entry point for unauthorized access.

Question 2

You can use _____________________________________________ information when testing Linux computers for known vulnerabilities.

Accepted Answer

The answer of You can use _____________________________________________ information when testing...

Question 3

Trusted Computer Solutions____ program is used to tighten Linux system security configuration by using templates.
A)OpenVAS
B)MBSA
C)SQL Server
D)Security Blanket

Accepted Answer

Trusted Computer Solutions' Security Blanket program is specifically designed to assist in hardening Linux systems by providing configuration templates that can be applied to ensure a secure setup. The other options, OpenVAS, MBSA, and SQL Server, are security tools but not tailored for Linux system security configuration.

Question 4

SELinux contains several features and modules that use ____, an OS security mechanism that enforces access rules based on privileges for interactions between processes, files, and users.
A)Mandatory Access Control (MAC)
B)Server Message Block (SMB)
C)Common Internet File System (CIFS)
D)Microsoft Baseline Security Analyzer (MBSA)

Accepted Answer

SELinux uses Mandatory Access Control (MAC) to enforce access rules based on privileges for interactions between processes, files, and users. The other options listed are not relevant to SELinux.

Question 5

MATCHING
Match each term with the correct statement below.
-HTTP is associated with this port
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

Port 80 is the port commonly used for HTTP traffic.

Answer: E
 Port 443 is the port used for HTTPS traffic, which is a secure version of HTTP.

Answer: D
 Port 53 is used for DNS (Domain Name System), which is used to translate domain names into IP addresses.

Answer: B
 Port 389 is commonly used for LDAP (Lightweight Directory Access Protocol), which is used for directory services.

Answer: A, G
 Antivirus software is not associated with a specific port, but it is an important tool for protecting against threats that may exploit unused or vulnerable services. Unused services are also potential targets for attackers and should be disabled to reduce the risk of compromise.

Answer: H
 The Administrator is a user account with elevated privileges that is necessary for managing certain functions of a computer or network.

Answer: C
 "Guest" is a user account with limited privileges that is intended for temporary or casual use.

Question 6

In Microsoft systems, an excellent resource for finding configuration errors, missing patches, and so on is the ________________________________________.

Accepted Answer

The answer of In Microsoft systems, an excellent resource for...

Question 7

MATCHING
Match each term with the correct statement below.
-almost useless if it isn't updated regularly
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

Antivirus software is almost useless if it isn't updated regularly because it needs the latest virus definitions to detect and protect against new threats.

Question 8

MATCHING
Match each term with the correct statement below.
-gives an intruder a potential point of entry into a network
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

Unused services can provide potential entry points for intruders if they are not properly secured or disabled.

Question 9

The Trojan program called Sheepshank makes HTTP GET requests over port ____.
A)25
B)80
C)129
D)139

Accepted Answer

HTTP requests are made over port 80.

Question 10

If the LRK5 rootkit is installed on a Linux computer, entering the Trojaned ____ command allows the attacker's processes to continue running, even though the Linux administrator thinks all processes were killed.
A)Killall
B)Get
C)target
D)Dir

Accepted Answer

The LRK5 rootkit hooks into the system call table to modify the way the killall command functions. With the rootkit installed, when the administrator enters the killall command to terminate a certain process or all running processes, the rootkit intercepts the command and allows the attacker's processes to continue running in the background instead of being terminated.

Question 11

MATCHING
Match each term with the correct statement below.
-DNS is associated with this port
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

DNS (Domain Name System) is associated with port number 53, which is used for translating domain names to IP addresses.

Answer: F
 Port 80 is used for HTTP (Hypertext Transfer Protocol) and is commonly used for accessing websites.

Answer: G
 Unused services refer to any service or application that is not actively used by the system, and can pose a security risk if left open and unattended.

Answer: H
 The Administrator is a user account that typically has full control over a computer or network, and is responsible for managing system settings and configurations.

Answer: I
 This question does not have a matching statement for this answer choice.

Question 12

MATCHING
Match each term with the correct statement below.
-HTTPS is associated with this port
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

HTTPS is associated with port 443.

Answer: F
 Port 80 is commonly used for HTTP web traffic.

Answer: D
 Port 53 is associated with DNS (Domain Name System).

Answer: G
 Unused services are services that are not required for the proper functioning of a system, and should be disabled or removed to reduce the attack surface of the system.

Answer: H
 An administrator is a user with elevated privileges who is responsible for managing a system.

Answer: A
 Antivirus software is a type of security software that is designed to detect, prevent, and remove malicious software (malware) from a computer system.

Answer: C
 A guest is a user who does not have administrative privileges and is typically restricted in their ability to perform certain actions or access certain resources on a system.

Answer: B
 Port 389 is associated with LDAP (Lightweight Directory Access Protocol), which is used for accessing and maintaining distributed directory information services.

Answer: I
 This statement is incomplete and does not provide enough information to determine a correct answer.

Question 13

MATCHING
Match each term with the correct statement below.
-LDAP is associated with this port
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

LDAP (Lightweight Directory Access Protocol) is commonly associated with port 389.

Answer: E 
 Port 443 is typically associated with HTTPS (HTTP Secure) protocol.

Answer: F 
 Port 80 is typically associated with HTTP (Hypertext Transfer Protocol).

Answer: G 
 Unused services refer to services that are installed on a computer or network but are not currently being used.

Answer: H 
 The Administrator is typically the person who has access to the administrative functions of a computer or network.

Answer: A 
 Antivirus software is designed to detect and remove malicious software (malware) from a computer or network.

Answer: C 
 "Guest" is a common username or account name used to grant temporary or limited access to a system or network.

Answer: D 
 Port 53 is typically associated with DNS (Domain Name System) protocol, which maps domain names to IP addresses.

Answer: I 
 This choice is blank because there is no statement provided to match with.

Question 14

SMB stands for _________________________.

Accepted Answer

The answer of SMB stands for _________________________....

Question 15

A common Linux rootkit is ____.
A)Back Orfice
B)Kill Trojans
C)Packet Storm Security
D)Linux Rootkit 5

Accepted Answer

The Linux Rootkit 5 is a commonly known rootkit used for compromising Linux systems. The other options listed are not Linux-specific rootkits.

Question 16

MATCHING
Match each term with the correct statement below.
-to harden Microsoft systems, you should rename this account
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

Renaming the Administrator account makes it difficult for attackers to guess the account name and helps to protect the system against unauthorized access.

Answer: A
 Antivirus software is important to harden Microsoft systems by detecting and removing potentially harmful software, including viruses, spyware, and adware.

Answer: G
 Unused services should be disabled to reduce the attack surface of the system and minimize the risk of exploitation.

Note: The other choices (B, C, D, E, and F) are specific ports that may need to be configured or secured depending on the system's requirements and configuration. However, they do not address the general hardening of Microsoft systems.

Question 17

MATCHING
Match each term with the correct statement below.
-no account should have this type of password
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank

Accepted Answer

No account should have a blank password.

Answer: H
 The administrator account should have a strong, complex password.

Answer: C
 The guest account should be disabled or have limited privileges, not a specific password type.

Answer: A
 Antivirus software is not related to password requirements.

Answer: G
 Unused services like Telnet or FTP should be disabled, but this is not related to password requirements.

Answer: B, D, E, F
 These are all port numbers and not related to password requirements.

Question 18

For a Windows computer to be able to access a *nix resource, ____ must be enabled on both systems.
A)NetBIOS
B)SMB
C)CIFS
D)NetBEUI

Accepted Answer

CIFS (Common Internet File System) is the protocol that allows Windows computers to access *nix resources. NetBIOS, SMB, and NetBEUI are all protocols that are specific to Windows and not necessary for accessing *nix resources.

Question 19

RPC stands for ________________________.

Accepted Answer

The answer of RPC stands for ________________________....

Question 20

To perform MBSA-style scans you can run the tool from the command line by using ____________________.exe.

Accepted Answer

The answer of To perform MBSA-style scans you can run...

Quiz 8: Desktop and Server Os Vulnerabilities

MATCHING Match each term with the correct statement below. -to harden Microsoft systems, you should disable this account

You can use _____________________________________________ information when testing Linux computers for known vulnerabilities.

Trusted Computer Solutions____ program is used to tighten Linux system security configuration by using templates.

SELinux contains several features and modules that use ____, an OS security mechanism that enforces access rules based on privileges for interactions between processes, files, and users.

MATCHING Match each term with the correct statement below. -HTTP is associated with this port

In Microsoft systems, an excellent resource for finding configuration errors, missing patches, and so on is the ________________________________________.

MATCHING Match each term with the correct statement below. -almost useless if it isn't updated regularly

MATCHING Match each term with the correct statement below. -gives an intruder a potential point of entry into a network

The Trojan program called Sheepshank makes HTTP GET requests over port ____.

If the LRK5 rootkit is installed on a Linux computer, entering the Trojaned ____ command allows the attacker's processes to continue running, even though the Linux administrator thinks all processes were killed.

MATCHING Match each term with the correct statement below. -DNS is associated with this port

MATCHING Match each term with the correct statement below. -HTTPS is associated with this port

MATCHING Match each term with the correct statement below. -LDAP is associated with this port

SMB stands for _________________________.

A common Linux rootkit is ____.

MATCHING Match each term with the correct statement below. -to harden Microsoft systems, you should rename this account

MATCHING Match each term with the correct statement below. -no account should have this type of password

For a Windows computer to be able to access a *nix resource, ____ must be enabled on both systems.

RPC stands for ________________________.

To perform MBSA-style scans you can run the tool from the command line by using ____________________.exe.