SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Os Hardening
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A DNS server is fed altered or spoofed records that are retained and then duplicated elsewhere
DNS poisoning
161
Terminal Access Controller Access-Control System
80
2. MAC stands for ____________ access control
discretionary
500
139
mandatory
3. NAS stands for...
500
23
network attached storage
lightweight directory access protocol
4. Label-based - hard coded access controls - at multiple levels - applied to all objects
500
MAC
patches
49
5. A remote authentication protocol used to communicate with an authentication server commonly used in UNIX networks.
119
endpoint based
TACACS
open mail relay
6. Microsoft software packages that contain one or more patches and can be applied without rebooting
organizational unit
hotfix
security template
local - site - domain - OU
7. LDAP port
anonymous authentication
hardening
389
simple mail transport protocol
8. DAC stands for ____________ access control
FAT
389
discretionary
baselining
9. Bind MAC addresses of network devices to IP address - monitor logs - apply security patches - use IDS and strong authentication to detect rogue servers
DHCP hardening
service pack
system hardening
domain name service
10. Disable default accounts and passwords - regular backups - enable auditing features - monitor user privileges - implement authentication for users and applications
database hardening
DMZ
119
network attached storage
11. Recommended LDAP authentication
database hardening
simple authentication with security layer LDAPv3
25
dynamic host configuration protocol
12. Is a UDP-based network protocol - used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention
110
MAC
SNMP
anonymous authentication
13. Standard setup used when configuring machines - provide a starting point and consistent setup
infrastructure based
database hardening
DAC
configuration baselines
14. NNTP stands for
NNTP
119
network attached storage
network news transfer protocol
15. DNS port
53
NNTP
database hardening
least privileged principle
16. Isolate directories - place server in DMZ - disallow anonymous access - audit logs - and review contents for unauthorized material
FTP hardening
service pack
DAC
configuration baselines
17. Locking down the system
53
DMZ
hardware based
system hardening
18. Reduce the possibility of a breach by locking down the file system - controlling software installation and use - limiting access - disabling unnecessary services and applying patches -
OS hardening
network access control
patches
NAC
19. Access control method used by organizations that have a high turn over
RBAC
NNTP
FAT
FTP hardening
20. SSH port
22
hardening
DAC
local - site - domain - OU
21. SNMP port
FTP hardening
dynamic host configuration protocol
161
DAC
22. Defining the software and hardware components that can be used in an organization
MAC
configuration management policy
DAC
lightweight directory access protocol
23. Transferable access controls applied and controlled by the object owner
SNMP
88
FTP hardening
DAC
24. Access control defined by roles or job functions
DNS poisoning
lightweight directory access protocol
RBAC
500
25. LDAP stands for...
infrastructure based
lightweight directory access protocol
security template
domain name service
26. LDAP authentication method that uses clear text
simple authentication
local - site - domain - OU
dynamic host configuration protocol
encrypted file system
27. OU stands for...
organizational unit
simple mail transport protocol
anonymous authentication
DMZ
28. Start with the most secure environment - the loosen the controls as needed
configuration management policy
simple authentication
rule of least privilege
SNMP
29. HTTP SSL port
network news transfer protocol
role-based
DAC
443
30. NetBIOS port
RBAC
mandatory
139
dynamic host configuration protocol
31. Users granted least amount of access possible that enables them to complete their required work
least privileged principle
system hardening
TACACS
endpoint based
32. EFS stands for...
organizational unit
encrypted file system
RBAC
configuration management policy
33. RBAC stands for ____________ access control
role-based
SNMP
configuration management policy
139
34. Enable and monitor logs - perform regular backups - use file encryption - enable account lockout and strong user name and password
RBAC
DHCP
file and print sharing hardening
simple authentication
35. SMTP stands for...
network news transfer protocol
endpoint based
simple mail transport protocol
security template
36. HTTP port
80
RBAC
RBAC
119
37. SNMP stand for...
simple network management protocol
FTP hardening
DMZ
endpoint based
38. Protocol for assigning dynamic IP addresses to devices on a network
DHCP
hotfix
anonymous authentication
configuration baselines
39. Help to make sure devices meet security standards before they are allowed to connect to the network
role-based
lightweight directory access protocol
file and print sharing hardening
NAC
40. File system that offers limited security and was primarily designed for desktop use
network attached storage
20 and 21
OS hardening
FAT
41. FTP ports
system hardening
20 and 21
DMZ
RBAC
42. TACACS port
configuration baselines
storage area network
RBAC
49
43. IPSec port
organizational unit
DMZ
500
simple mail transport protocol
44. POP3 port
80
network news transfer protocol
group policies
110
45. Highly configurable - discretionary - job based access control - more flexible that MAC - more precise that groups
DAC
RBAC
open mail relay
baselining
46. NNTP port
simple mail transport protocol
119
DNS hardening
FTP hardening
47. NAC stands for
DNS hardening
network access control
DMZ
security template
48. Define security settings and user's desktop environment on group of computers
organizational unit
25
group policies
simple network management protocol
49. NAC method requiring installation of a network appliance to monitor network devices and limit connectivity should non compliant activity be detected
patches
hardware based
OS hardening
MAC
50. The process of establishing a standard for security
hotfix
RBAC
baselining
DMZ