OSE Chapter 13 Exam Revision Questions

Which two items are used in asymmetric encryption? (Choose two.)

• a token

• a DES key

• a private key

• a public key

• a TPM

Answer explanation

A token is something that is used to provide two-factor authentication. DES is using an identical key to encrypt and decrypt. Asymmetric encryption uses a private key associated with a public key.

Which two algorithms are used for hash encoding to guarantee the integrity of data? (Choose two.)

• MD5

• chap checksum

• SHA

• • VPN

• SSL

A high technology company has an issue with unauthorized people gaining access into the company by following an authorized employee through the secure entrance. Which two measures could help with this security breach? (Choose two.)

• • biometrics

• • employee smart ID

• • mantrap

• multifactor

• • security guard that checks IDs

Answer explanation

A guard checking IDs or a mantrap can help prevent someone following a legitimate employee into a restricted area. With biometrics, employee smart IDs, or multifactor authentication being used, once the door is accessed by someone having the correct credentials, unauthorized people could still trail the legitimate person into the building or area.

A user receives a phone call from a person who claims to represent IT services and then asks that user for confirmation of username and password for auditing purposes. Which security threat does this phone call represent?

• • DDoS

• spam

• social engineering

• anonymous keylogging

Answer explanation

Social engineering attempts to gain the confidence of an employee and convince that person to divulge confidential and sensitive information, such as usernames and passwords. DDoS attacks, spam, and keylogging are all examples of software based security threats, not social engineering.

The IT department is reporting that a company web server is receiving an abnormally high number of web page requests from different locations simultaneously. Which type of security attack is occurring?

• adware

• DDoS

• phishing

• social engineering

Answer explanation

Phishing, spyware, and social engineering are security attacks that collect network and user information. Adware consists, typically, of annoying popup windows. Unlike a DDoS attack, none of these attacks generate large amounts of data traffic that can restrict access to network services.

After confirming the removal of a virus from a computer, how should the technician ensure and verify the full functionality of the system?

• Check for the latest OS patches and updates.

• • Document the problem and the procedures performed to solve it.

• Talk with the user to determine the cause of the problem.

• • Gather information from a number of sources to clearly identify the problem.

Answer explanation

After resolving a computer problem, the next step is to verify full functionality by ensuring that the OS is up to date and by testing the operation of the computer and the network that it is connected to. Documenting the issue and solution is the final step, whereas gathering information from the user and other sources are earlier steps in the troubleshooting process.

A system administrator has been asked to protect the sensitive data on the Windows 7 computers of all management employees. Which Windows feature can be used to selectively encrypt individual files within the user accounts of each manager?​

• • BitLocker

• • EFS

• TPM

• Windows Update

Answer explanation

Encrypting File System (EFS) is a Windows feature that can be used to encrypt files and folders linked to a specific user account. BitLocker is a Windows feature that can be used to encrypt the entire hard drive volume. TPM is a specialized chip on the motherboard that stores information specific to the computer system such as encryption keys, digital certificates, and passwords. Windows Update is used to update the operating system, not to encrypt data.

When would a PC repair person want to deploy the idle timeout feature?

• when users are inserting media and running applications not sanctioned by the company

• when users are leaving their desk but remaining logged on

• when users are playing music CDs and leaving them playing even after the users have left for the day

• when users are surfing the Internet and not doing their job

Answer explanation

The idle timeout and screen lock feature is a great security measure that protects the computer and data accessible through it if the user steps away from the desk for a specified period of time and forgets to lock the computer or log off.

Which type of firewall serves as a relay between users and servers on the Internet, inspects all traffic, and allows or denies traffic based on a set of rules?

• packet filtering firewall

• stateful packet firewall

• proxy firewall

• operating system firewall

Answer explanation

There are several types of firewall configurations:

• Packet filter – Packets cannot pass through the firewall, unless they match the established rule set configured in the firewall. Traffic can be filtered based on different attributes, such as source IP address, source port or destination IP address or port.

• Stateful packet inspection (SPI) – This is a firewall that keeps track of the state of network connections traveling through the firewall. Packets that are not part of a known connection are dropped.

• Application layer – All packets traveling to or from an application are intercepted. All unwanted outside traffic is prevented from reaching protected devices.

• Proxy – This is a firewall installed on a proxy server that inspects all traffic and allows or denies packets based on configured rules. A proxy server is a server that is a relay between a client and a destination server on the Internet.

What would cause a Microsoft Windows update to fail?

• The wired or wireless NIC was disabled.

• The computer has a virus.

• The computer has had its security breached.

• • A required prior update was not installed.

Answer explanation

Two things commonly cause a Windows update to fail: 1. A required older update was not installed. 2. There was a problem with the downloaded update.