Question 1

Which of the following statements are true about ActiveX controls?

Accepted Answer

A) ActiveX downloads on the computer cannot be stopped. 
B) ActiveX runs on the server. 
C) Web browsers can be configured so that they require confirmation to accept an ActiveX control. 
D) ActiveX uses Authenticode for encryption. 
A) ActiveX downloads on the computer cannot be stopped. 
B) ActiveX runs on the server. 
C) Web browsers can be configured so that they require confirmation to accept an ActiveX control. 
D) ActiveX uses Authenticode for encryption. C

Question 2

John wants to implement a firewall which monitors only TCP ports and allows all traffic to be passed once a connection is established. Which type of firewall should he use?

Accepted Answer

A) Stateful Inspection Firewalls 
B) Application filtering 
C) Packet Filtering Firewall 
D) Circuit-Level Firewall 
A) Stateful Inspection Firewalls 
B) Application filtering 
C) Packet Filtering Firewall 
D) Circuit-Level Firewall D

Question 3

What is Application Patch Management?

Accepted Answer

A) A strategy that involves what patches can be applied to various systems at differing times. 
B) Applying only one patch every day. 
C) Patching a Server only. 
D) A way to track attacks on systems network wide. 
A) A strategy that involves what patches can be applied to various systems at differing times. 
B) Applying only one patch every day. 
C) Patching a Server only. 
D) A way to track attacks on systems network wide. A

Question 4

John is using IE version 6.0 as his browser. He wants to enable ActiveX controls and he also wants a high level of security set for the Internet zone. How can he accomplish this?

Accepted Answer

A) Re-install the browser. 
B) Upgrade to IE 7.0. 
C) He cannot accomplish this. 
D) If the security level for Internet is high, the ActiveX controls are automatically disabled. Modify the ActiveX controls in Custom Level tab. 
A) Re-install the browser. 
B) Upgrade to IE 7.0. 
C) He cannot accomplish this. 
D) If the security level for Internet is high, the ActiveX controls are automatically disabled. Modify the ActiveX controls in Custom Level tab.

Question 5

John is working as a security advisor. Of late, he is going nuts with the number of virus infected computers reported to the IT department every day. A common cause of this seems to be virus infection while using web browsers. Which of the following should John advise the IT department to do to resolve the problem?

Accepted Answer

A) Disable unauthorized ActiveX controls 
B) Implement a VPN 
C) Install a firewall 
D) Re-install the OS 
A) Disable unauthorized ActiveX controls 
B) Implement a VPN 
C) Install a firewall 
D) Re-install the OS

Question 6

Which of the following is not a best practice for securing a mobile device?

Accepted Answer

A) Screen lock 
B) Device encryption 
C) Social networking 
D) Remote wipe 
A) Screen lock 
B) Device encryption 
C) Social networking 
D) Remote wipe

Question 7

What is the process of applying manual changes to a program called?

Accepted Answer

A) Hot fixing 
B) Patching 
C) Service packing 
D) Updating 
A) Hot fixing 
B) Patching 
C) Service packing 
D) Updating

Question 8

John is getting frequent complaints from users about receiving unsolicited e-mails from an e-mail address. What should he do to prevent this from occurring?

Accepted Answer

A) Configure Outlook to block these e-mails. 
B) Configure a rule in each user's router and restart the router. 
C) Configure the firewall to block e-mails. 
D) Install an anti-spam filter for the domain mail servers and filter out the offending e-mail address. 
A) Configure Outlook to block these e-mails. 
B) Configure a rule in each user's router and restart the router. 
C) Configure the firewall to block e-mails. 
D) Install an anti-spam filter for the domain mail servers and filter out the offending e-mail address.

Question 9

You are a security administrator at your organization. Which of the following should you do when a new patch is released for a server?

Accepted Answer

A) Ignore the patch. 
B) Immediately install the patch on the production server. 
C) Review discussion forums for the usefulness of this patch. 
D) Test the patch on a test server and then install the patch on the production server. 
A) Ignore the patch. 
B) Immediately install the patch on the production server. 
C) Review discussion forums for the usefulness of this patch. 
D) Test the patch on a test server and then install the patch on the production server.

Question 10

A business implements a system in which, in case of a disaster, they have a site that is already online and ready to take over operation with little to no down time. What has this business implemented?

Accepted Answer

A) Hot Site 
B) Warm Site 
C) Lukewarm Site 
D) Cold Site 
A) Hot Site 
B) Warm Site 
C) Lukewarm Site 
D) Cold Site

Question 11

An operating system that has enough multilevel security that it meets government requirements is called:

Accepted Answer

A) Windows 
B) MAC OS 
C) Trusted Operating System 
D) Secure Operating System 
A) Windows 
B) MAC OS 
C) Trusted Operating System 
D) Secure Operating System

Question 12

Which of the following is an application layer protocol used to alter directory information over a network?

Accepted Answer

A) LDAP 
B) TFPT 
C) SSH 
D) HTTP 
A) LDAP 
B) TFPT 
C) SSH 
D) HTTP

Question 13

What would be the advantage of cloud computing in regards to security?

Accepted Answer

A) More servers to resist attacks 
B) An invisible place to hide from attackers 
C) Files are accessible from anywhere. 
D) Data is centralized and thus easier to protect and manage 
A) More servers to resist attacks 
B) An invisible place to hide from attackers 
C) Files are accessible from anywhere. 
D) Data is centralized and thus easier to protect and manage

Question 14

Anti-malware is software that can protect against all of the following except:

Accepted Answer

A) Viruses 
B) Spam 
C) Phishing 
D) Spyware 
A) Viruses 
B) Spam 
C) Phishing 
D) Spyware

Question 15

What is a testing technique that involves finding bugs in software by using malformed data injection called?

Accepted Answer

A) SQL injection 
B) Fuzzing test 
C) Penetration test 
D) Social engineering 
A) SQL injection 
B) Fuzzing test 
C) Penetration test 
D) Social engineering

Exam 12: Apps - Data - Host

Which of the following statements are true about ActiveX controls?

John wants to implement a firewall which monitors only TCP ports and allows all traffic to be passed once a connection is established. Which type of firewall should he use?

What is Application Patch Management?

John is using IE version 6.0 as his browser. He wants to enable ActiveX controls and he also wants a high level of security set for the Internet zone. How can he accomplish this?

Which of the following is not a best practice for securing a mobile device?

What is the process of applying manual changes to a program called?

John is getting frequent complaints from users about receiving unsolicited e-mails from an e-mail address. What should he do to prevent this from occurring?

You are a security administrator at your organization. Which of the following should you do when a new patch is released for a server?

A business implements a system in which, in case of a disaster, they have a site that is already online and ready to take over operation with little to no down time. What has this business implemented?

An operating system that has enough multilevel security that it meets government requirements is called:

Which of the following is an application layer protocol used to alter directory information over a network?

What would be the advantage of cloud computing in regards to security?

Anti-malware is software that can protect against all of the following except:

What is a testing technique that involves finding bugs in software by using malformed data injection called?

Hardware

Laptops

Networking

Printers

Procedures

Other Operating Systems and Technologies

Mobile-Devices

Operating-Systems

Security

Troubleshooting

Access-Identity

Compliance-Op

Comptia Asp

Concepts

Cryptography

Dhti

Enrolled-Agent

Essentials

Install Configure

Linux

Management

Media Topologies

Network

Other-Operating-Systems-And-Technologies

Server

Software-Troubleshooting

Threats

Filters