Unit 9 (Chapter 10)

Which of the following is NOT a motion detection method? • Magnetism • Infrared • Moisture • Radio frequency

How does heuristic detection detect a virus? • A virtualized environment is created and the code is executed in it. • A string of bytes from the virus is compared against the suspected file. • The virus signature file is placed in a suspended chamber before streaming to the CPU. • The bytes of a virus are placed in different "piles" and then used to create a profile.

Which of these is a list of approved email senders? • Bluelist • Yellowlist • Whitelist • Blacklist

Which of the following is a cumulative package of all patches? • Hotfix • Service pack • Patch • Rollup

Which of the following is NOT designed to prevent individuals from entering sensitive areas but instead is intended to direct traffic flow? • Type V controls • Barricade • Fencing • Roller barrier

Which of the following is NOT a typical OS security configuration? • Disabling default accounts/passwords • Restricting patch management • Disabling unnecessary ports and services • Employing least functionality

What allows for a single configuration to be set and then deployed to many or all users? • Active Directory • Command Configuration • Snap-In Replication (SIR) • Group Policy

Which stage is a "quality assurance" test that verifies the code functions as intended? • Production stage • Staging stage • Development stage • Testing stage

Which type of operating system runs on a firewall, router, or switch? • Resource OS • Network OS • Device OS • Server OS

Which of the following is NOT a memory vulnerability? • Variable overflow • Pointer deference • Buffer overflow • DLL injection

Which of the following can be used to secure a laptop or mobile device? • Cable lock • Mobile connector • Security tab • Mobile chain

A lock that extends a solid metal bar into the door frame for extra security is the _____. • full bar lock • deadbolt lock • deadman's lock • triple bar lock

Which of the following is NOT a reason why supply chain infections are considered especially dangerous? • Supply chains take advantage of the trusted "chain of trust" concept. • Users are receiving infected devices at the point of purchase and are completely unaware that a brand new device may be infected. • It is virtually impossible to closely monitor every step in the supply chain. • If the malware is planted in the ROM firmware of the device this can make it 5 or sometimes even impossible to clean an infected device.

Which model uses a sequential design process? • Agile model • Secure model • Waterfall model • Rigid model

Which of the following types of testing uses unexpected or invalid inputs? • Dynamic analysis • Runtime testing • Static analysis • Stress testing

Which of the following is NOT a characteristic of an alarmed carrier PDS? • Carrier can be hidden above the ceiling • Uses continuous monitoring • Requires periodic visual inspections • Eliminates the need to seal connections

Which statement about a mantrap is true? • It requires the use of a cipher lock. • It is a special keyed lock. • It is illegal in the United States. • It monitors and controls two interlocking doors to a room.

How can an SDIO card be made secure? • Using the security mechanisms on a standard Wi-Fi network. • Turning on patch updates to the SDIO card. • SDIO cards are natively secure and no security settings are needed. • Requiring a username before accessing the SDIO card.

Which type of residential lock is most often used for keeping out intruders? • Privacy lock • Encrypted key lock • Keyed entry lock • Passage lock

Which of the following is NOT an advantage to an automated patch update service? • Administrators can approve or decline updates for client systems, force updates to install by a specific date, and obtain reports on what updates each computer needs. • Downloading patches from a local server instead of using the vendor's online update service can save bandwidth and time because each computer does not have to connect to an external server. • Specific types of updates that the organization does not test, such as hotfixes, can be automatically installed whenever they become available. • Users can disable or circumvent updates just as they can if their computer is configured to use the vendor's online update service.