Chapter 4 NSS

1.

1 point

_________ which of the following is NOT a Microsoft Windows setting that can be configured through a security template?

Keyboard Mapping

Account Policies

System Services

User Rights

2.

1 point

_______allows for a single configuration to be set and then deployed to many or all users.

Snap-In Replication (SIR)

Group Policy

Active Directory

Command Configuration

3.

1 point

Which of the following is NOT an activity phase control?

resource control

detective control

deterrent control

compensating control

4.

1 point

A _______ can be used to secure a mobile device.

cable lock

mobile chain

security tab

mobile connector

5.

1 point

Which of the following is NOT an advantage to an automated patch update service?

Specific types of updates that the organization does not test, such as hotfixes, can be automatically installed whenever they become available.

Users can disable or circumvent updates just as they can if their computer is configured to use the vendor’s online update service.

Downloading patches from a local server instead of using the vendor’s online update service can save bandwidth and time because each computer does not have to connect to an external server.

Administrators can approve or decline updates for client systems, force updates to install by a specific date, and obtain reports on what updates each computer needs.

6.

1 point

Which statement about a mantrap is true?

It is illegal in the U.S.

It is a special keyed lock.

It requires the use of a cipher lock.

It monitors and controls two interlocking doors to a room.

7.

1 point

Which statement about data loss prevention (DLP) is NOT true?

It can only protect data while it is on the user’s personal computer.

It can read inside compressed files.

It can scan data on a DVD.

A policy violation can generate a report or block the data.

8.

1 point

The residential lock most often used for keeping out intruders is the ___________.

encrypted key lock

passage lock

privacy lock

keyed entry lock

9.

1 point

Which of the following cannot be used along with fencing as a security perimeter?

roller barrier

vapor barrier

rotating spikes

anticlimb paint

10.

1 point

A lock that extends a solid metal bar into the door frame for extra security is the ______ .

triple bar lock

deadbolt lock

full bar lock

deadman’s lock

11.

1 point

Which of the following is NOT a characteristic of an alarmed carrier PDS?

continuous monitoring

periodic visual inspections

eliminates the need to seal connections

carrier can be hidden below a floor

12.

1 point

Which of the following is NOT a motion detection method?

radio frequency

infrared

moisture

magnetism

13.

1 point

Which of the following is NOT designed to prevent individuals from entering sensitive areas but instead is intended to direct traffic flow?

type V controls

barricade

fencing

roller barrier

14.

1 point

A typical configuration baseline would include each of the following
EXCEPT ___________.

enabling operating system security features

performing a security risk assessment

changing any default settings that are insecure

eliminating any unnecessary software

15.

1 point

How does heuristic detection detect a virus?

The bytes of a virus are placed in different “piles” and then used to create a profile.

The virus signature file is placed in a suspended chamber before streaming to the CPU.

A virtualized environment is created and the code is executed in it.

A string of bytes from the virus is compared against the suspected file.

16.

1 point

What type of controls are the processes for developing and ensuring that policies and procedures are carried out?

administrative controls

active controls

technical controls

policy controls

17.

1 point

A _______ addresses a specific customer situation and often may not be distributed outside that customer’s organization.

hotfix

service pack

rollup

patch

18.

1 point

Which of these is NOT a state of data that DLP examines?

data in-transit

data in-use

data at-rest

data in-process

19.

1 point

Which of these is a list of approved email senders?

whitelist

blacklist

greenlist

greylist

20.

1 point

Which is the first step in securing an operating system?

Perform host software baselining.

Develop the security policy.

Configure operating system security and settings.

Implement patch management.