Q1. Which of the following protocols transmits user credentials as plaintext?

A. CHAP

B. MS-CHAP v2

C. PAP

D. MS-CHAP

View Answer

Q2. All your domain controllers are configured for DHCP. Each time the system is booted, it gets a new IP address from the DHCP server. You had also configured the Active Directory on the domain controllers. You want to configure your DNS settings so that it will dynamically update DNS data whenever the IP address of a domain controller changes. How will you configure for dynamic updates? 

A. Configure the DNS server for dynamic updates. 

B. Configure the DHCP server for DNS dynamic updates. 

C. Configure each domain controller for Dynamic update. 

D. Configure the Active directory for dynamic updates. 

View Answer

Q3. You work as a Network Administrator for TechMart Inc. The company has a Windows-based network. After completing a security audit of the company's Microsoft Windows Server 2008 R2 file servers, you have determined that folder and share security requires a revision on the basis of corporate reorganization. You have noticed that some shares on the file system are not secured. Which of the following will you use to prevent unauthorized changes to computers on the domain? 

A. TCP/IP protocol 

B. Kerberos 

C. User Account Control (UAC) 

D. Lightweight Directory Access Protocol 

View Answer

Q4. You work as a security manager for Company Inc. An individual is connecting to your corporate internal network over the Internet. You have to ensure that he is not an intruder masquerading as an authorized user. Which of the following technologies will you use to accomplish the task? 

A. Two-factor authentication 

B. IP address packet filtering 

C. Intrusion detection system (IDS) 

D. Embedded digital signature 

View Answer

Q5. You work as a Network Administrator for NetTech Inc. You want to prevent users from accessing the graphical user interface (GUI) on the computers in the network. What will you do to accomplish this task? 

A. Implement a remote access policy 

B. Implement a group policy 

C. Apply NTFS permission 

D. Implement an account policy 

View Answer

Q6. Mark work as a System Administrator for TechMart Inc. The company has a Windows-based network. Mark wants to allow the remote travel agents to be able to access the corporate network so that they are free to check email and post appointments that are booked for the particular day.

Mark has decided to permit the travel agents to use their home computers but he is required to be assured that the information is not compromised by anyone because the security of client information is on the top priority for him. Which of the following is a potential risk if the travel agents will use their home computers for VPN access?

A. VPN handles everything and encrypts the data.

B. VPN does not allow the travel agents to use their home computers.

C. VPN cannot prevent buffer overflow on the home computer from infecting the network.

D. VPN cannot prevent potential viruses and malware on the home computer from infecting the network.

View Answer

Q7. The workstations on your network utilize Windows XP (service pack 2 or later). Many users take their laptops on the road. You are very concerned about the security and want to have a robust firewall solution for mobile users. You have decided that all your firewalls to use the Stateful Packet Inspection (SPI) method. What must you do to provide SPI to your mobile users? 

A. You must purchase a third party firewall solution for your mobile users. 

B. Do nothing. Windows XP service pack 2 has a firewall turned on by default. 

C. Configure the Windows XP firewall to use SPI. 

D. Download the SPI template from Microsoft. 

View Answer

Q8. Mark works as a Network Administrator for NetTech Inc. The company has a Windows Server 2008 domain-based network. The network has a Windows Server 2008 member server that works as a Routing and Remote Access Server (RRAS). Mark implements Network Access Protection (NAP) for the network. Mark wants to configure Point-to-Point Protocol (PPP) authentication on the RRAS server. Which of the following authentication methods should Mark use to accomplish this task? 

A. EAP 

B. CHAP 

C. SPAP 

D. PAP 

View Answer

Q9. Which of the following states that a user should never be given more privileges than are required to

carry out a task?

A. Security through obscurity

B. Segregation of duties

C. Principle of least privilege

D. Role-based security

View Answer

Q10. Which of the following is the most common method for an attacker to spoof email?

A. Back door

B. Replay attack

C. Man-in-the-middle attack

D. Open relay

View Answer