DION Practice Test 2

Q.4 Your company recently downloaded and installed the latest audio card driver for all of its workstations. Now, several users have had their usernames and passwords for several websites compromised. You believe the two issues are related. If they are, what was MOST likely contained in the audio card driver file that was installed?

Keylogger

not a worm!!

Booting into Safe Mode and performing a system restore is ________________________.

more invasive and should be attempted only if simpler solutions fail.

What is a Rogue anti-virus?

A particularly popular way to disguise a Trojan. In the early versions of this attack, a website would display a pop-up disguised as a normal Windows dialog box with a fake security alert, warning the user that viruses have been detected.

If the user receives an "access denied" error message, it indicates that the __________________.

file permissions have been changed.

If the system files were renamed or the files disappeared, an error of "______________" would be seen instead.

file not found

What is a Branch?

Used to control the flow within a computer program or script, usually based on some logic condition.

Often, these are implemented with IF THEN ELSE statements.

What is a Variable?

A placeholder in a script containing a number, character, or string of characters.

Variables in scripts do not have to be declared (unlike in programming languages) but can be assigned a value.

What is a Loop?

A loop deviates from the initial program path to some sort of logic condition. In a loop, the computer repeats the task until a condition is met.

Often implemented with For or While statements.

What is a Constant?

A constant is a specific identifier that contains a value that cannot be changed within the program.

For example, the value to convert a number from F to C is always 5/9 because the formula is C = (F -32) * 5/9.

What MacOS feature is the equivalent the File Explorer in Windows?

Finder

What does the command "shutdown /h" do on a Windows workstation?

Enter sleep mode

What does the command "shutdown /r" do on a Windows workstation?

Reboot the computer

What does the command "shutdown /s" do on a Windows workstation?

Shut down the computer

What does the command "shutdown /l" do on a Windows workstation?

Log off the current user

What command would be used to display the network address and subnet mask for the wired network connection on a Linux system?

ip

What does the nslookup command do?

Used to display and troubleshoot DNS records

What does the tracert command do?

The tracert command is used on Windows devices to show details about the path that a packet takes from a host to a target and displays information about each hop in the path.

What does the netstat command do?

A command-line network utility tool that displays network connections for the Transmission Control Protocol (incoming and outgoing), routing tables, and several network interface and network protocol statistics.

___________ is useful when determining if a workstation is attempting outbound connections due to malware (beaconing activity) or has ports open and listening for inbound connections.

netstat

What does the arp command do?

Used to view and modify the local address resolution protocol (ARP) cache of a device, which contains recently resolved MAC addresses of IP hosts on the network.

What does the route command do?

Used to create, view, or modify manual entries in the network routing tables of a computer or server.

Degaussing vs Drilling

Degaussing wins

What type of screen locks uses a secret pattern drawn on the screen to prevent access to a mobile device?

Swipe

Q. 49 You have been asked to install a computer in a public workspace. Only an authorized user should use the computer. What security requirement should you implement to prevent unauthorized users from accessing the network with this computer?

Require authentication on wake-up

What type of remote access technologies should NOT be used in a network due to its lack of security?

Telnet

You can open a ___________ in Safe Mode which bypasses add-ins and corrupt settings, allowing the user to access and possibly repair the problematic file.

document

A small doctor's office has asked you to configure their network to use the highest levels of wireless security and desktop authentication. The office only uses cloud-based SaaS applications to store their patient's sensitive data.

RADIUS would _____________________________.

not be used here since it is a centralized authentication MANAGER.

WPA2 and Multifactor Authentication is what would be used.

What Windows tools should a technician use to import and install data in the x.509 format?

Certificate manager

What is the x.509 format?

The x.509 format is used to define a public key certificate used by TLS/SSL and other internet protocols.

What is RDS?

Remote desktop services (RDS) is used to connect to a remote desktop session host servers or other remote computers, edit an existing remote desktop connection (.rdp) configuration file, and migrate legacy connection files that were created with the client connection manager to the newer .rdp connection file type.

What is the command for Certificate Manager on Windows?

certmgr.msc

What is the command for Device Manager on Windows?

devmgmt.msc

Avoiding entering sensitive details until ___________________ protects the user from potential security threats.

the website's certificate issue is resolved

An employee can receive but not send messages in a workplace chat app. Other network services work fine. What is the most likely cause?

The employee lacks permission to send messages.

What is used to communicate data and preferences to child processes within a script or batch file?

Environmental variables

They can also be used to store temporary values for reference later in a shell script.

An attacker is using a precomputed table of values to attempt to crack your Windows password. What type of password attack is this?

Rainbow table

What is a Rainbow Table?

A rainbow table is a tool for speeding up attacks against Windows passwords by precomputing possible hashes.

A rainbow table is used to authenticate users by comparing the hash value of the entered password against the one stored in the rainbow table. Using a rainbow table makes password cracking a lot faster and easier for an attacker.

What type of encryption uses a 128-bit encryption key but is considered weak due to its use of a 24-bit initialization vector?

WEP

What is Tower of Hanoi?

A backup rotation scheme that rotates backup media sets throughout the backup process to minimize wear and failure of tape backup media.

For example, when using this method with four backup tapes labeled A, B, C, and D, a total of 16 days of backups can be maintained with just 4 tapes. Tape A is used every odd-numbered day for 16 days. Tape B is used on days 2, 6, 10, and 14. Tape C is used on days 4 and 12. Tape D is used on days 8 and 16. This allows Tape A to be overwritten every other day, while Tapes B is overwritten every four days and Tapes C and D are overwritten every 8 days.

What is FIFO?

The First In First Out (FIFO) backup scheme uses a set number of tapes and overwrites the oldest tape with the newest information.

For example, if there are 7 tapes in use, every evening a new backup is conducted over the previous week’s daily backup. To have a longer amount of days of backups, a technician simply needs to increase the number of tapes from 7 to 14 or 21.

What is Whaling?

An email-based or web-based form of phishing that targets senior executives or wealthy individuals.

What is Spear Phishing?

The fraudulent practice of sending emails from a seemingly known or trusted sender to induce targeted individuals to reveal confidential information.

A spear phishing attack is focused on a targeted set of people, not just an indiscriminate large group of random people.

What is Vishing?

A social-engineering attack where the attacker extracts information while speaking over the phone or leveraging IP-based voice messaging services (VoIP).

What is Phishing?

An email-based social engineering attack in which the attacker sends an email from a supposedly reputable source, such as a bank, to try to elicit private information from the victim.

What tools should a technician NOT use with a solid-state device on a workstation?

Disk defragmenter

What is Application Spoofing?

Occurs when attackers create fake applications that impersonate legitimate ones, using similar names, copied logos, and interfaces designed to look authentic.

These malicious apps are distributed through unofficial app stores or compromised websites, tricking users into downloading and installing them.

What is Blue-Jacking?

The sending of unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs, or laptop computers, sending a vCard which typically contains a message in the name field to another Bluetooth-enabled device via the OBEX protocol.

What is a Macro Virus?

A virus that is written in a macro language: a programming language which is embedded inside a software application (e.g., word processors and spreadsheet applications).

Macros are run automatically when the document is opened, and this provides a distinct mechanism by which malicious computer instructions can spread.

Low Humidity —>

Static Discharge

What Windows tool can a technician use to gather information about a workstation and create a comprehensive list of hardware, system components, and the software environment used by that workstation?

msinfo32.exe

What does dxdiag.exe do?

The DirectX diagnostic (dxdiag.exe) utility is used to collect info about devices to help troubleshoot problems with DirectX sound and video.

It is a diagnostics tool used to test DirectX functionality and troubleshoot video-related or sound-related hardware problems. DirectX diagnostic can save text files with the scan results.

What does resmon.exe do?

Resource monitor (resmon.exe) is a utility used to display information about the use of hardware (CPU, memory, disk, and network) and software (file handles and modules) resources in real-time.

The resource monitor helps check the performance counters of specific resources and decide a course of action to improve the performance.

What command-line tool is used on a Windows system to move upward in a directory within the system's directory structure?

cd ..

What feature allows a Linux server to provide file-sharing services to a company's Windows 10 workstations?

Samba

What is Samba?

Samba is used by Linux computers to enable the sharing and access of resources with Windows-based networks.

Samba can also be used by Linux servers to provide file-sharing services to Windows clients.

What does the Pingpath command do?

The pingpath command is a Windows command-line tool that is used to locate spots that have network latency and network loss between a client and a destination.

What does the dd command do?

A Linux utility that is used to copy and convert raw data from one source to another such as a hard disk to an image file.

What does the cp command do?

The cp command is a command-line utility for copying files and directories. It supports moving one or more files or folders with options for taking backups and preserving attributes. Copies of files are independent of the original file, unlike the mv command.