SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Os Hardening
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Is a UDP-based network protocol - used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention
500
80
SNMP
389
2. NAS stands for...
20 and 21
network attached storage
SSL
simple network management protocol
3. NAC stands for
TACACS
network access control
SNMP
network news transfer protocol
4. SMTP port
25
49
TACACS
23
5. Protocol for assigning dynamic IP addresses to devices on a network
DHCP
role-based
TACACS
hardening
6. Microsoft software packages that contain one or more patches and can be applied without rebooting
service pack
RBAC
hotfix
DAC
7. Issued by software vendors to fix bugs - address security issues or add functionality
23
25
Terminal Access Controller Access-Control System
patches
8. An accumulated set of software updates or hotfixes from Microsoft
service pack
SNMP
network attached storage
119
9. NAC method requiring installation of a network appliance to monitor network devices and limit connectivity should non compliant activity be detected
database hardening
DMZ
hardware based
TACACS
10. Reduce the possibility of a breach by locking down the file system - controlling software installation and use - limiting access - disabling unnecessary services and applying patches -
OS hardening
patches
389
infrastructure based
11. EFS stands for...
encrypted file system
DMZ
RBAC
DNS poisoning
12. A subnet on the network that separates the internal network from publicly exposed hosts
DMZ
23
database hardening
SNMP
13. POP3 port
DNS poisoning
hardening
110
389
14. Standard setup used when configuring machines - provide a starting point and consistent setup
storage area network
security template
hardware based
configuration baselines
15. SNMP stand for...
security template
RBAC
MAC
simple network management protocol
16. NNTP stands for
anonymous authentication
security template
group policies
network news transfer protocol
17. NNTP port
SSL
endpoint based
161
119
18. Define security settings and user's desktop environment on group of computers
OS hardening
RBAC
group policies
least privileged principle
19. Centrally managed NAC method requiring installation of software agents on each network client
RBAC
endpoint based
network access control
storage area network
20. OU stands for...
mandatory
file and print sharing hardening
organizational unit
FAT
21. Used to deliver news articles to users on the Internet - vulnerable to DoS attacks
110
53
NNTP
endpoint based
22. LDAP authentication method not recommended
encrypted file system
network news transfer protocol
110
anonymous authentication
23. SMTP stands for...
simple mail transport protocol
RBAC
DNS poisoning
dynamic host configuration protocol
24. kerberos port
hotfix
88
OS hardening
open mail relay
25. DHCP stands for...
25
role-based
110
dynamic host configuration protocol
26. LDAP authentication method that uses clear text
open mail relay
110
organizational unit
simple authentication
27. Highly configurable - discretionary - job based access control - more flexible that MAC - more precise that groups
RBAC
anonymous authentication
DAC
MAC
28. Contain possible security settings that can control one or multiple computers
SNMP
161
security template
MAC
29. Access control defined by roles or job functions
TACACS
88
DHCP
RBAC
30. IPSec port
500
119
open mail relay
simple authentication with security layer LDAPv3
31. File system that offers limited security and was primarily designed for desktop use
DHCP hardening
infrastructure based
FAT
DHCP
32. DNS stands for...
DMZ
hotfix
domain name service
RBAC
33. Bind MAC addresses of network devices to IP address - monitor logs - apply security patches - use IDS and strong authentication to detect rogue servers
DHCP hardening
organizational unit
FTP hardening
baselining
34. Transferable access controls applied and controlled by the object owner
endpoint based
RBAC
DAC
storage area network
35. Users granted least amount of access possible that enables them to complete their required work
Terminal Access Controller Access-Control System
SNMP
least privileged principle
baselining
36. Label-based - hard coded access controls - at multiple levels - applied to all objects
anonymous authentication
FAT
20 and 21
MAC
37. A DNS server is fed altered or spoofed records that are retained and then duplicated elsewhere
simple network management protocol
49
DNS poisoning
SSL
38. RBAC stands for ____________ access control
role-based
NAC
TACACS
least privileged principle
39. Allows a remote access server to communicate with an authentication server in order to determine if the user has access to the network
RBAC
DAC
TACACS
500
40. The process of establishing a standard for security
DAC
least privileged principle
80
baselining
41. Four ways to implement group policies
dynamic host configuration protocol
organizational unit
local - site - domain - OU
simple authentication with security layer LDAPv3
42. NetBIOS port
139
discretionary
hardware based
simple authentication with security layer LDAPv3
43. A cryptographic protocol that provides security for communications over networks such as the Internet
SSL
simple authentication with security layer LDAPv3
MAC
139
44. A remote authentication protocol used to communicate with an authentication server commonly used in UNIX networks.
open mail relay
infrastructure based
organizational unit
TACACS
45. SNMP port
network news transfer protocol
infrastructure based
161
hardening
46. Access control method that uses ACLs
encrypted file system
system hardening
patches
DAC
47. Isolate directories - place server in DMZ - disallow anonymous access - audit logs - and review contents for unauthorized material
local - site - domain - OU
endpoint based
FTP hardening
DAC
48. Enable and monitor logs - perform regular backups - use file encryption - enable account lockout and strong user name and password
simple authentication
139
file and print sharing hardening
Terminal Access Controller Access-Control System
49. FTP ports
25
20 and 21
NNTP
rule of least privilege
50. MAC stands for ____________ access control
139
mandatory
open mail relay
TACACS