| shanalee 2001-08-22, 10:04 am |
| Hi UncleSID,
I loved you security guide posted on the on the examnote website they are really acurate and cose to the exam. I failed the real test and planing to take the test again could please answer some of this question as they did appear in the test.
I will also love some explanation because i could not find them in the courseware to cross check.
1 Which of the following choices best define Window NT Security Account Manager a, its a portion of the GIN that control security b its the database containing the identity of user c it the name of the machine responsible for managin security d its the interface that is resiposible for logging on user id.
2 which of the following best describe the problem with share permission and share point in nt a, share point must be the same value as the directory that serve the share point b, share point contain permision and any file under the share point must possess the same permission c, share permission are exclusive to root directories and the file they do not share point which define user permission
3 Which level of security as define by the NCSC is attained by many out of the box implementation a, level B2 b, Level D level D through B2,
4,what are the security issues that arise in the use of NFS
a, the lack of logging in one place or a machine and the multiple logs this then require.
5, which one of this resources dmand high security on the network a purchase b, sales, accounting
6,which tool will learn the entire address range used by an organisation
a, traceroute, b, Nslookup c,portscanner d, ping scanner
8most hacker run two services to first learn information about a computer in the internet which are choices
a, ping and trace route b, Nslookup and whois c,whois ans ping, d, nslookup and traceroute
7,obtaining the lastest stable version of server services prevent which attack a trojan b llicit server c buffer overflow
8
what host level info. would use to explot default and patches a servers, b routerand swithes c firwall types
9 which system provie relay services b/w two device
VPN, b gateway c proxyserver
10 what is the primary risk of SNMP a Login names and password are not encrypted b data is transferred in clear text
which can control unathrized access to eamil
prohibit relaying b, scan all email messaegs at the firewall or smtp server
which type of port useed by http for control
a ephemeral
b well known
which does NNTP has that SMTP doesn't
is it usability in conjunction to ssl??
which is the most common network attack
a, dos
b, insider attack,
c brute force
which tol use to find open paths tothe system on internet
traceroute, b , portscanner, nslook up
what standard method for securign email message that do not use the email server
a, invoke encryption atthe email server
invoke encry on each client
filter firewall port 42 on the filrewall
which tool utilize a database of known security problem to test a network
SNMP b, Network sccanner c, os add on
how are servers ale to conduct a simple authetication check using DNS
a, reverse dns lookup b, nslook c, rarp
what is the best way to secure CGI scrip
a,disable anoymous http logins when using cgi
b,ensure code check all user input
please help my exam is tomorrow
some of my answer can be seen on the forums
under ciw security professional |