DION Practice Test 1

What is the BEST way to regularly prevent different security threats from occurring within your network?

User training and awareness.

While penetration test might show weaknesses in Security, it does not prevent them from occurring.

Always try to not __________________ FIRST; try to use the easiest solution and one which has minimal consequences.

Mess with the uninstalling and installing

App cache stores temporary files like images, videos, and data to speed up loading times, but when cache becomes corrupted or excessively large, it can cause _________________________.

Solution:

apps to malfunction, crash on startup, or behave erratically.

Solution: Clearing cache removes these temporary files without affecting user login credentials or personal settings initially.

Clearing data performs a more thorough reset that removes all app information including login sessions. This basically returns the app to ____________.

first-install state.

What is PCI-DSS?

Payment Card Industry Data Security Standard: Applies to companies of any size that accept credit card payments. If your company intends to accept card payment and store, process, and transmit cardholder data, you need to securely host your data and follow PCI compliance requirements.

What is GDPR?

General Data Protection Regulation: A regulation created in the European Union that creates provisions and requirements to protect the personal data of European Union (EU) citizens.

What is PHI?

Protected health information: Refers to medical and insurance records, plus associated hospital and laboratory test results.

An attacker is using a word list that contains 1 million possible passwords as they attempt to crack your Windows password. What type of password attack is this?

Dictionary

Brute-force is the attack itself, not the list.

Recycling electronic equipment through certified disposal services aligns with ______________ by ensuring equipment is handled safely and responsibly.

regulatory and environmental guidelines

A user receives 'Windows Update service is not running' error. After the technician fixes the DLL registration, what should be done NEXT?

Reboot the computer

To fix any of the .DLL files involved with Windows Update that are not correctly registered:

1.)

2.)

3.)

4.)

1.) Open services.msc and stop the Windows Update service.

2.) Open a Command Prompt as the administrator and use regsvr32 for each of the 6 Windows Update DLL files (wuapi.dll, wuaueng.dll, wups.dll, wups2.dll, wuwebv.dll, and wucltux.dll)

3.) Open services.msc and restart the Windows Update service.

4.) Restart your computer for these changes to take effect.

Q.24 You have just finished installing a new workstation for a user in your office. They need to be able to see the other workstations on the company's workgroup. Which of the following settings should you ensure is enabled?

This questions mentions nothing about file and folder sharing. READ CAREFULLY!!

A surge protector connected to a UPS is _________________.

Not a thing.

What is a line conditioner?

A device that adjusts voltages in under-voltage and overvoltage conditions to maintain a 120 V output.

What is a voltage sag?

A short-duration reduction in the voltage of an electric power distribution system.

What type of installation would require an answer file to install the operating system?

Unattended

What is an Unattended Installation?

A traditional method of deploying a Windows operating system in a large enterprise environment.

Unattended installations use an answer file that contains user input to various GUI dialog boxes that would otherwise appear during the installation process.

Unattended installation is the most practical way to install Windows when the client computers have _______________________________.

different hardware components, and an image file cannot be used.

What is Auto-Run?

Autorun settings in Windows let you control which programs or media actions run automatically when you sign in or insert external devices.

Q.35 A cybersecurity analyst is auditing your company's network logs and identifies that a USB mass storage device was previously inserted into many of the company's servers. The logs also showed dozens of failed login attempts before a successful login occurred on the servers. Which TWO of the following actions are recommended to eliminate the vulnerabilities identified by the cybersecurity analyst?

Lockout the account after 3 failed login attempts

Modify the AutoRun settings

Since the USB mass storage device was used to connect to the servers, it is recommended to modify the AutoRun settings. To prevent the password guessing attacks used, the servers should be configured to lock out any account after 3 failed login attempts. The other options are all considered good security practices, but they do not directly address the issues presented in this scenario.

Q.37 A user with an older laptop running Windows 7 that has only 2 GB of RAM, 32 GB of SSD, and a 1.7 GHz 64-bit processor. The user would like to upgrade to a newer OS since Windows 7 is now considered end-of-life. What operating systems should the technician recommend to ensure the BEST performance on this computer?

Windows 10

Windows 10 minimum requirements for a 32-bit operating system are a _____ processor, _____ of RAM, and at least _____ of hard drive space.

1.) 1 GHz

2.) 1 GB

3.) 32 GB

Windows 10 minimum requirements for a 64-bit operating system are a _____ processor, _____ of RAM, and at least _____ of hard drive space.

1.) 1 GHz

2.) 2 GB

3.) 32 GB

Windows 11 requires a _____ processor, _____ of RAM, and _____ of hard drive space.

1.) 1 GHz

2.) 4 GB

3.) 64 GB

What does the passwd command do?

Used to change a user's account password on a Linux system.

A normal user can run passwd to change their password, and a system administrator (the superuser) can use passwd to change another user's password or define how that account's password can be used or changed.

What does the pwd command do?

Displays the present working directory (current directory) path to the terminal or display.

If you are working on a Linux system and are unsure of where you are in the directory structure, type "pwd" and hit enter to display the path to the screen.

VNC vs RDP

Open-source vs Windows

What is VNC?

Virtual Network Computing: A remote access tool and protocol. It is used for screen sharing on Linux and macOS.

Q.50 A team is working on a shared document, but some users say their edits are disappearing. What is the most likely cause?

Multiple users are overwriting changes at the same time.

If edits are disappearing, users may be overwriting each other’s changes, especially if they are working in the same section of the document.

Degaussing allows for _________________.

bulk destruction of drives.

Other methods can do it too but degaussing is the most efficient, especially if you have 500 drives to get rid of.

What is Phishing?

An email-based social engineering attack in which the attacker sends an email from a supposedly reputable source, such as a bank, to try to elicit private information from the victim.

What is Hijacked email?

Occurs when someone takes over your email account and sends out messages on your behalf.

Hijacked email can occur after a system is taken over by an attacker. The victim usually finds out about it when someone asks about an email the victim sent them, or the victim sees an automated out-of-office reply from one of the recipients of the victim's emails.

What is Spear phishing?

The fraudulent practice of sending emails from a seemingly known or trusted sender to induce targeted individuals to reveal confidential information.

Whenever you reboot your domain controller, you notice it takes a very long time to boot up. As the server is booting, you hear noises that sound like a steady series of clicks coming from the hard drive. What is the BEST action to help speed up the boot time of the server?

Defragging is a simple process when file fragments are put together to speed up file access.

File fragments are put together, and quality defragmentation utilities also assemble the free space into a single block to prevent future fragmentation. By defragmenting the hard drive, the server doesn't have to spend as much time accessing the information, and it can boot up faster. Based on the clicking noises, it sounds like the system has to access many parts of the drive to load the files.

Defragging vs Disk Cleanup

Reorganize data on HDDs for better performance

VS

Free up storage space by deleting unnecessary files

What does WPS stand for?

Wi-Fi Protected Setup

WPS relies on an 8-digit PIN, but it is easily defeated using a _____________ due to a poor design.

brute force attack

What is a Host-Based Intrusion Detection System (HIDS)?

Helps organizations to identify threats inside the network perimeter by monitoring host devices for malicious activity that, if left undetected, could lead to serious breaches.

A HIDS may detect the effects of a virus infection, such as a client becoming a zombie in a botnet, but it will not prevent these outbreaks from occurring.

What does the yum command do?

A package manager used with RPM-based Linux distributions to install new software packages, remove existing software packages, upgrade existing software packages, and even upgrade the entire operating system.

What does the cat command do?

One of the most frequently used commands in Linux/Unix. The cat command allows the creation of single or multiple files, view file contents, concatenate files, and redirect output in the terminal to a file.

What best describes the difference between a dedicated graphics card and an integrated graphics solution?

A dedicated graphics card has its own memory, while an integrated graphics solution shares system RAM with other processes.

Dedicated is what’s used in gaming and more graphically demanding applications.

What is an Entry Control Roster?

An administrative control used to log each person who enters or leaves a secure room.

What is a Server Lock?

A physical locking mechanism installed on a server cabinet to prevent unauthorized from accessing the servers.

The server lock could be a cipher lock, biometric lock, or a simple keyed lock depending on the level of security needed.

What is a screened subnet?

A perimeter network that protects an organization's internal local area network (LAN) from untrusted traffic. A screened subnet is placed between the public internet and private networks.

Public servers, such as the FTP server, should be installed in a screened subnet so that additional security mitigations like a web application firewall or application-aware firewall can be used to protect them.

SFTP uses SSH to prevent an attacker from eavesdropping on the communications between the SFTP server and a client, but it will not prevent an attacker from _________________.

exploiting the SFTP server itself.

What is NIST?

National Institute of Standards and Technology: An organization which has developed frameworks for cybersecurity.

Q.83 You're configuring a printer for a small office with 4 computers connected to a 4-port switch/router/modem with no open ports. The network has no servers or domain controller. What method would BEST allow all computers to access the printer?

Configure it as a shared printer connected to one of the four workstations.

Since this is a small office, they do not have a dedicated server to configure for use as a print server.

A public network will _________________________.

hide your computer from other devices on the network and prevent file and printer sharing.

A private network is considered _________, allows the computer to _______________________.

1.) trusted

2.) be discoverable to other devices on the network, and supports the use of file and printer sharing.

What does “bootrec /rebuildcd” do?

To add a missing Windows installation to the Boot Configuration Database (BCD), you should use the command "bootrec /rebuildbcd" and reboot the computer.

What does “bootrec /fixboot” do?

Used to attempt a repair of the boot sector of a drive.

What does “bootrec /fixmbr” do?

Used to attempt a repair of the master boot record of a drive.

What does “diskpart list” do?

A command-line disk-partitioning utility available for Windows that is used to view, create, delete, and modify a computer's disk partitions.

What is a Proxy Server?

A proxy server is a web server that acts as a gateway between a client application.

A malicious actor could reconfigure a user's web browser to use a particular proxy server in a foreign country to conduct a __________________.

man-in-the-middle attack.

An anti-malware scanner would not detect this since the use of a proxy server could also be for legitimate purposes.

What does SOW stand for?

A statement of work (SOW), or a scope of work, is a document that outlines all the work that is to be performed, as well as the agreed-upon deliverables and timelines.

What are Gestures?

Gestures are a finger movements on a trackpad or mouse that enable a user to scroll, zoom, and navigate the desktop, documents, and application content in macOS.

What command is used to edit a text file on a Linux server?

nano

What is GPO?

Microsoft's Group Policy Object (GPO) is a collection of Group Policy settings that defines what a system will look like and how it will behave for a defined group of users.

What is an Evil Twin?

An evil twin is meant to mimic a legitimate hotspot provided by a nearby business, such as a coffee shop that provides free Wi-Fi access to its patrons.

An evil twin is a type of rogue wireless access point that masquerades as a legitimate Wi-Fi access point so that an attacker can gather personal or corporate information without the user's knowledge.

What is a WEP attack?

A WEP attack is a brute force password attack conducted against a wireless network that relies on WEP for its encryption and security.

What is CHAP?

Challenge-Handshake Authentication Protocol (CHAP) is used to authenticate a user or network host to an authenticating entity.

What is NAT?

Network Address Translation (NAT) allows multiple devices in a private network to access the internet using a single public IP address.

It helps conserve IPv4 addresses and hides internal systems for added security.

Sudden loss of connectivity combined with a high network traffic warning suggests possible __________________.

malware affecting network functionality.

What is Cross-site scripting?

Cross-Site Scripting (XSS) attacks are a type of injection in which malicious scripts are injected into otherwise benign and trusted websites.

XSS attacks occur when an attacker uses a web application to send malicious code, generally in a browser side script, to a different end-user.

What is ARP poisoning?

ARP Poisoning, also known as ARP Spoofing, is a type of cyber attack carried out over a Local Area Network (LAN) that involves sending malicious ARP packets to a default gateway on a LAN to change the pairings in its IP to MAC address table.

What is ARP poisoning?

A code injection technique used to attack data-driven applications.

Malicious SQL statements are inserted into an entry field for execution, such as dumping the database contents to the attacker.

AI inaccuracies vs AI hallucination

Contains incorrect or outdated information, making them unreliable

VS

Fabricating entirely false details

What is MOU?

A memorandum of understanding (MOU) is a preliminary or exploratory agreement to express an intent to work together that is not legally binding and does not involve monetary exchange.

What is SLA?

A service level agreement (SLA) is a contract that outlines the detailed terms under which a service is provided, including reasons the contract may be terminated.

What file type is commonly used to create applications that can be run on Linux, macOS, and Windows?

.py

What is CUI?

Controlled Unclassified Information (CUI) is federal non-classified information that must be safeguarded by implementing a uniform set of requirements and information security controls to secure sensitive government information.