SEC+ Mod 6 Part 4

What is privilege escalation?

• Gaining control of the target system with the privileges of the compromised process.

• Increasing the memory capacity of a system.

• Enhancing the speed of a network.

• Upgrading the operating system to a newer version.

Answer explanation

Privilege escalation is gaining control of the target system with the privileges of the compromised process.

Which programming languages offer memory safety features to help prevent buffer overflows?

• Python, Java, and C#

• HTML, CSS, and JavaScript

• PHP, Ruby, and Perl

• SQL, NoSQL, and MongoDB

Answer explanation

Python, Java, and C# offer memory safety features to help prevent buffer overflows, making them the correct choices.

Which of the following is NOT a security practice to mitigate buffer overflow vulnerabilities?

• Input validation

• Boundary checks

• Using unsafe functions like strcpy in C/C++

• Avoiding the use of unsafe functions

Answer explanation

Using unsafe functions like strcpy in C/C++ is NOT a security practice to mitigate buffer overflow vulnerabilities.

What is the purpose of Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR)?

• To enhance the difficulty for attackers attempting to exploit buffer overflows.

• To increase the speed of data processing.

• To improve the graphical user interface of the operating system.

• To reduce the power consumption of the system.

Answer explanation

To enhance the difficulty for attackers attempting to exploit buffer overflows.

Which of the following is NOT an endpoint hardening technique?

• Changing default passwords

• Host-based firewalls

• Host-based IPSs

• Increasing the screen resolution

Answer explanation

Increasing the screen resolution is NOT an endpoint hardening technique as it does not directly contribute to enhancing the security of the endpoint.

What do host-based enterprise hardening techniques focus on?

• Securing individual endpoints or hosts within an organization's network.

• Enhancing the visual appearance of the user interface.

• Increasing the storage capacity of servers.

• Reducing the number of software applications installed.

Answer explanation

Securing individual endpoints or hosts within an organization's network is the main focus of host-based enterprise hardening techniques.

Which of the following is a fundamental security measure to prevent unauthorized access by changing default settings?

• Removing unnecessary software

• Disabling unused ports and protocols

• Changing default passwords

• Implementing host-based firewalls

Answer explanation

Changing default passwords is a fundamental security measure to prevent unauthorized access by ensuring that the initial passwords are not easily guessable.

What is the primary benefit of removing unnecessary software from a system?

• It increases the attack surface

• It minimizes potential security risks

• It enhances device-level security

• It allows for better network traffic management

Answer explanation

Removing unnecessary software minimizes potential security risks by reducing the attack surface and vulnerabilities that could be exploited.

Which of the following practices helps in reducing the potential for unauthorized access by disabling unused ports and protocols?

• Implementing host-based firewalls

• Changing default passwords

• Removing unnecessary software

• Disabling unused ports and protocols

Answer explanation

Disabling unused ports and protocols helps reduce potential unauthorized access by limiting entry points for attackers.

What is the role of a host-based firewall in a security system?

• To monitor and protect individual hosts from various forms of malicious activity

• To manage inbound and outbound network traffic and enforce access policies

• To disable unused ports and protocols

• To change default passwords

Answer explanation

To manage inbound and outbound network traffic and enforce access policies