Network Security - Practice Test #1

Which controls are looked at as technical controls? (Choose two)

• IDS

• Training manual

• Firewall

• AUP

Which type of injection attack uses keywords such as SELECT and UPDATE to manipulate data through a web form?

• LDAP injection

• SQL injection

• XML injection

• HTML injection

An end user calls the help desk complaining about a web page not loading the most current data for the page unless the user refreshes the page. What should the help desk agent have the user do first?

• Restart the browser

• Clear out the cookies

• Clear out the history

• Clear out the cache

When one suspects a device has been affected by malware, what is the first step that should be taken to remediate the device?

• Disconnect the device from the network

• Run a system scan on the device

• Update the antimalware app to use for remediation

• Update the signature files on the antimalware app to use for remediation

A good Audit Plan may collect both successful and failed events. (T/F)

• True

• False

Audit events take up computer resources and personnel time, so you should be selective about the events to audit. (T/F)

• True

• False

You should always audit log-on successes. (T/F)

• True

• False

Review the underlined text. If the statement is correct, select "No change is needed." If the statement is incorrect, select the answer that best fits in the statement: Spoofing redirects internet traffic from one website to an identical-looking website in order to trick you into entering your username and password into their database.

• No change is needed

• Spamming

• Pharming

• Phishing

What must take place for someone trying to enter a physical area of a building before access control takes place?

• Authentication

• Authorization

• Accounting

• Auditing

MAC Filtering is best suited for large wireless networks. (T/F)

• True

• False