CS205 Quiz 2 by Tanveer Online Academy

CS205 Quiz 2 File by Tanveer Online Academy

Which vulnerability comes under cat 2 as per DISA STIG?

The exploitation of which will directly and immediately result in loss of CIA Shells with __________ permissions give the ability to maliciously modify the shell to obtain unauthorized access.

world/group-write

DISA Stigs are more suitable for _________ organizations.

large size

In terms of security hardening, ______ is the highest level of

security stig.

CAT 1

In security hardening for Solaris, _________ command is used

to check any shells found on the system.

# find / -name "*sh" | xargs -n1 ls -lL In which categories vulnerability can fall as per DISA STIG?

Cat 1, cat 2, cat 3

What is a business continuity plan (BCP)?

A document that consists of critical information an organization needs to continue operating during an unplanned event

Which variants of Microsoft SQL server exist on CIS website?

2008, 2012, 2014 Which of the following is considered an IT asset?

All of the given Default value of oracle “remote_os_roles” parameter is

FALSE

What does CCI explain about rule in DISA STIG?

Describes the control For security hardening of Internet Explorer browser, users can

allow or deny add-ons through _____________.

Add-On Manager

A _________ attack is a denial-of-service attack.

SYN-flood Attack

“construction” function of software assurance maturity model?

Design review, code review, security testing

STIG sands for _________________.

Security Technical Implementation Guide

Which of the following protocols are used for remote

administration of a system?

SSH & Telnet

Checklist of applicable security controls step includes?

Both b and C

In Active Directory Domain, ___________ group is a highly

privileged group.

The Domain Admins · In security hardening for Solaris, CCI stands for · Control Correlation Identifier

What do you mean by minimum security baseline?

Threshold which is the minimum expectation from security program

“governance” function of software assurance maturity model?

Education & guidance, policy & compliance, strategy & metrics

What contents a DISA STIG covers?

General information, discussion, check content, fix test, cci (references) Policy & compliance practice of “governance” function of

software assurance maturity model is focused

on________________.