CS205 Quiz 3 by Tanveer Online Academy

CS205 Quiz 3 File by Tanveer Online Academy

As per cis which authentication protocols should be used by wireless

networks?

Which require digital certificates for authentication Which screen is displayed immediately after login screen in

NESSUS scanner?

Dashboard

Which of the following tools are offered free by QUALYS?

local market?

Quarterly scan and remediate

Against which frameworks NESSUS scanner gives configuration

auditing feature?

What should a system do whenever an administrator account is

added or removed?

Issue a log entry and alert

management process?

team

Which cloud storage should be allowed to use in organization as per

cis?

Authorized cloud storage

What feature set QUALYS scanner offers?

service

The dedicated machine used by administrators for administrative

tasks should have following features.

Which of the following tools can be used to enforce access controls

to data?

Host-based data loss prevention (DLP)

Which of the following can be used to block malicious traffic on

organization’s network boundaries?

Network-based intrusion prevention (IPS) system

What type of machine should network administrators use for

administrative tasks?

Which of the following cis critical control is discussed in this

module?

Secure configuration for network devices

Which of the following statement is correct?

of CVE

As per boundary defense control of cis what should be done with

network traffic at proxy?

Decrypt all encrypted network traffic prior to analyzing the content

Which policy is recommended by data protection control of cis for

mobile devices usage in an organization?

Hard drive of mobile devices should be encrypted

Which of the following function is performed by IT operation team

in vulnerability management process?

Run vulnerability scanner

In which mode should vulnerability scanning be performed?

Authenticated mode

management process?

team

why security engineering is placed at layer 3 of transformation

model?

Consists of complicated security activities which take more time and effort Which of the following are considered cumulative and product

specific?

Security patches, Service packs

What feature set QUALYS scanner offers?

service

Which of the following tools are offered free by QUALYS?

Which best practices are to be followed for applying security

patches?

A good change control procedure and working backup

How many TCP and UDP ports are scanned in a default scan?

65, 535 TCP ports Which activities are carried out at stage 1 of transformation model?

All of the given Continuous monitoring feature of QULAYS is very useful for?

management of assets

In an enterprise which software should be allowed to install and

execute?

Softwares included in whitelist.

What is the first step in running a policy compliance scan through

qualys?

Build a policy

local market?

Monthly scan and remediate

How many individuals were affected in anthem insurance breach

2014?

78.8 million

Automated configuration monitoring tools should compliant with

which protocol to streamline reporting?

Scap

Which of the following scan is deeper and gives more detailed

scanning results?

Credentialed

scanning Anthem insurance breach 2014 was initiated through?

Phishing email Which best practices are to be followed for applying security

patches?

A good change control procedure and working backup

Which of the following statement is correct?

of CVE

What should standard secure configuration images represent?

Hardened versions of underlying OS and application installed on system.