B Class Competency 5.1 MCQ

What is the purpose of Defense-in-Depth?

• To limit access to an organization's assets to a single user.

• To use multiple layers of security to protect an organization's assets.

• To focus on a single layer of security for protecting an organization's assets.

• To restrict an organization's assets from being accessed outside of the organization.

Which one of the following is a best practice for server hardening?

• Using easy-to-guess passwords.

• Allowing unrestricted access to the server.

• Regularly updating software and operating systems.

• Sharing the administrator password with multiple users.

Which one of the following analyses a server's security state, detects vulnerabilities and offers remediation guidance?

• Firewall

• AppLocker

• Secure Desktop

• Microsoft Baseline Security Analyzer

What is the main purpose of User Account Control (UAC)?

• To allow users to install any applications they want.

• To restrict access to system resources for non-administrative users.

• To improve system performance by disabling unnecessary processes.

• To prevent unauthorized changes to the system applications and processes.

Which one of the following is a benefit of using Secure Desktop?

• It reduces the risk of keyloggers and malware capturing sensitive data.

• It allows users to bypass login credentials to access sensitive information.

• It increases system performance by allocating more resources to running processes.

• It enables users to run applications and access data that would otherwise be restricted.

What is the main purpose of AppLocker?

• To enforce security policies for applications.

• To allow users to install any applications they want.

• To limit the number of applications that can be installed.

• To restrict access to system resources for non-administrative users.

Which type of attack involves an application that probes systems for unguarded ports?

• Trojan horse.

• Social engineering.

• Denial of service.

• Network scanner.

What is the purpose of a Trojan horse?

• To bombard a system with traffic.

• To obtain passwords by illicit means.

• To open a connection to the Internet.

• To probe systems for unguarded ports.

What is the purpose of a denial-of-service attack?

• To bombard a system with traffic.

• To obtain passwords by illicit means.

• To open a connection to the Internet.

• To probe systems for unguarded ports.

Which type of motivation involves an individual who hacks valuable info for resale or obtains ransom to stop an attack?

• Profit

• Espionage

• Personal satisfaction

• Revenge

• Publicity