Shared Flashcard Set

Details

426-450
-
25
Computer Science
Professional
01/31/2015

Additional Computer Science Flashcards

 


 

Cards

Term
After a company has standardized to a single operating system, not all servers are immune to a well-known OS vulnerability. Which of the following solutions would mitigate this issue?
Definition
Patch management system
Term
A company is preparing to decommission an offline, non-networked root certificate server. Before sending the server's drives to be destroyed by a contracted company, the Chief Security Officer (CSO) wants to be certain that the data will not be accessed. Which of the following, if implemented, would BEST reassure the CSO?
Definition
Full disk encryption
Disk wiping procedures
Term
During the analysis of a PCAP file, a security analyst noticed several communications with a remote server on port 53. which of the following protocol types is observed in this traffic?
Definition
DNS
Term
A compromised workstation utilized in a Distributed Denial of Service (DDoS) attack has been removed from the network and an image of the hard drive has been created. However, the system administrator stated that the system was left unattended for several hours before the image was created. In the event of a court case, which of the following is likely to be an issue with this incident?
Definition
Chain of Custody
Term
During which of the following phases of the Incident Response process should a security administrator define and implement general defense against malware?
Definition
Preparation
Term
Due to hardware limitation, a technician must implement a wireless encryption algorithm that uses the RC4 protocol. which of the following is a wireless encryption solution that the technician should implement while ensuring the STRONGEST level of security?
Definition
WPA-TKIP
Term
Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use to verify the validity's of Joe's certificate?
Definition
The CA's public key
Joe's public key
Term
A Technician wants to implement a dual factor authentication system that will enable the organization to authorize access to sensitive systems on a need-to-know basis. Which of the following should be implemented during the authorization stage?
Definition
Biometrics
Term
A security researcher wants to reverse engineer an executable file to determine if it is malicious. The file was found on an underused server and appears to contain a zero-day exploit. Which of the following can the researcher do to determine if the file is malicious in nature?
Definition
OS Baseline comparison
Term
A recent spike in virus detections has been attributed to end-users visiting www.compnay.com. The business has an established relationship with an organization using the URL of www.company.com but not with the site that has been causing the infections. Which of the following would BEST describe this type of attack?
Definition
Typo squatting
Term
A company has proprietary mission critical devices connected to their network which are configured remotely by both employees and approved customers. The administrator wants to monitor device security without changing their baseline configuration. Which of the following should be implemented to secure the devices without risking availability?
Definition
IDS
Term
An administrator has a network subnet dedicated to a group of users. Due to concerns regarding data and network security, the administrator desires to provide network access for this group only. Which of the following would BEST address this desire?
Definition
Configure the switch to allow only traffic from computers based upon their physical address.
Term
Which of the following is a security concern regarding users bringing personally-owned devices that they connect to the corporate network?
Definition
Lack of controls in place to ensure that the devices have the latest system patches and signature files.
Term
Due to issues with building keys being duplicated and distributed, a security administrator wishes to change to a different security control regarding a restricted area. The goal is to provide access based upon facial recognition. Which of the following will address this requirement?
Definition
Place a guard at the entrance to approve access.
Term
A security administrator has concerns regarding employees saving data on company provided mobile devices. Which of the following would best address the administrator's concerns?
Definition
Configure the devices so that removable media use is disabled.
Term
Identifying residual risk is MOST important to which of the following concepts?
Definition
Risk acceptance
Term
The information security technician wants to ensure security controls are deployed and functioning as intended to be able to maintain an appropriate security posture. Which of the following security techniques is MOST appropriate to do this?
Definition
Continuous security monitoring
Term
A small company can only afford to buy all-in-one wireless router/switch. The company has 3 wireless BYOD users and 2 web servers without wireless access. Which of the following should the company configure to protect the servers from the user devices.
Definition
Create a server VLAN
Create an ACL to access the server
Term
Users can authenticate to a company's web applications using their credentials from a popular social media site. Which of the following poses the greatest risk with this integration?
Definition
Password breaches to the social media site affect the company application as well
Term
When considering a vendor-specific vulnerability in a critical industrial control systems which of the following techniques supports availability?
Definition
Incorporating diversity into redundant design
Term
A security administrator discovers an image file that has several plain text documents hidden in the file. Which of the following security goals is met by camouflaging data inside of other files?
Definition
Confidentiality
Term
A company determines a need for additional protection from rogue devices plugging into physical ports around the building. Which of the following provides the highest degree of protection from unauthorized wired network access?
Definition
802.1x
Term
Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use to verify that the email came from Joe and decrypt it?
Definition
Ann's private key
Joe's public key
Term
A security team has established a security awareness program. Which of the following would BEST prove the success of the program?
Definition
Metrics
Term
A company needs to receive data that contains personally identifiable information. The company requires both the transmission and data at rest to be encrypted. Which of the following achieves this goal?
Definition
SSH
PGP/GPG
Supporting users have an ad free experience!