ITF+ Module 5 Security Concepts

What security concern is snooping most affected by?

• Confidentiality
• Integrity
• Availability
• Authentication

An attacker has used a rogue access point to intercept traffic passing between wireless clients and the wired network segment. What type of attack is this?

• A Denial of Service (DoS) attack
• A replay attack
• An impersonation attack
• A Man-in-the-Middle (MitM) attack

What type of access mechanism is MOST vulnerable to a replay attack?

• Use of multi-factor authentication
• Use of a complex password
• Use of a token generated by software
• Use of biometrics

Which specific attack uses a botnet to threaten availability?

• Replay
• Power outage
• Man-in-the-Middle (MitM)
• Distributed Denial of Service (DDoS)

In considering availability concerns, what use might a lockable faceplate on a server-class computer be?

• It may prevent a natural disaster from damaging the hardware and corrupting the data.
• It may prevent the computer or server from overheating and shutting down.
• It may prevent a hacker from obtaining remote unauthorized network access.
• It may prevent the user from switching the machine on/off or accessing removable drives and ports.

What impact is presented when users reveal their passwords to technical support staff?

• It exposes the passwords to brute-force attacks from malicious hackers.
• It provides technical support staff with access to the user's personal files stored on the network.
• It exposes users to social engineering attacks that try to gather login credentials for malicious use.
• It prevents the user from needing to change a password following the password history component of the policy.

Which of the following is NOT a method that a malicious person can use to masquerade as someone else when using email or Instant Messaging?

• Overwhelm the server with a Denial of Service (DoS)
• Stealing a user's login information
• Using an unattended computer that is still logged in
• Using malware such as a Trojan

What are the three main areas where redundancy should be provisioned?

• Circuits, power generators, Uninterruptible Power Supplies (UPSs)
• RAID 1, RAID 5, and RAID 10
• Data, network links, and power
• Authentication, authorization, and accounting

Why is prioritization a critical task for disaster recovery?

• Integrity of the data will need to be checked before access is re-enabled.
• Services may have dependencies that make restoring them in the wrong order futile.
• System demand will need to be monitored after rebuilding to verify stability.
• Network cabling should be designed to allow for multiple paths between the various servers.

Which of the following configuration changes does NOT reduce the attack surface?

• Removing unwanted and unnecessary software
• Closing unnecessary network ports
• Disabling unused OS features and services
• Configuring data back-ups in case ransomware encrypts the file system