Social Engineering and Environmental Concerns in Data Cabling Test Answers

 Question 1:  Correct Which of the following Intune portals is used by end users to manage their own account and enroll devices? Add Intune Users Admin portal Account portal Company portal EXPLANATION The Company portal is used by end users to manage their own account and enroll devices. The Admin portal is used to manage enrolled devices and policies. Add Intune Users is a configuration task that is completed in the Account portal. The Account portal is used to manage subscriptions, users, groups, and domains.  Question 2:  Correct It is important to follow correct procedures when running electrical cables next to data cables in order to protect against which environmental concern? Temperature Airflow Humidity Electromagnetic interference EXPLANATION Electromagnetic interference is when electrical devices or cabling puts out electromagnetic pulses that can cause issues with data cabling and other unshielded devices. Temperature, humidity, and airflow are all important parts of environmental control, but they do not interfere with data cabling.  Question 3:  Correct Ron, a hacker, wants to get access to a prestigious law firm he has been watching for a while. June, an administrative assistant at the law firm, is having lunch at the food court around the corner from her office. Ron notices that June has a picture of a dog on her phone. He casually walks by and starts a conversation about dogs. Which phase of the social engineering process is Ron in? Elicitation phase Development phase Exploitation phase Research phase EXPLANATION The development phase involves two parts. These are selecting individual targets within a company and forming a relationship with those individuals. The exploitation phase is when the attacker takes advantage of the relationship with the victim and uses the victim to extract information, obtain access, or accomplish the attacker's purposes in some way. The research phase is when the attacker starts gathering information about the target company or organization. Elicitation is a technique used to extract information from a target without arousing suspicion.  Question 4:  Correct Which of the following mobile device management (MDM) solutions is hardware-agnostic and supports many different brands of mobile devices? MDM MAM EMM UEM EXPLANATION Enterprise mobility management (EMM) is the combination of MDM and MAM solutions in one package. EMM solutions are able to manage multiple brands and types of mobile devices in a single package. Mobile application management (MAM) solutions focus on managing the applications on a mobile device, but do not manage the device itself. Mobile device management (MDM) solutions allow IT administrators to remotely manage a mobile device even if it's a personally owned device used for work-related purposes. Unified endpoint management (UEM) is the next step in device management. These solutions provide a single point for all types of devices.  Question 5:  Correct You have placed a File Transfer Protocol (FTP) server in your DMZ behind your firewall. The FTP server is to be used to distribute software updates and demonstration versions of your products. However, users report that they are unable to access the FTP server. What should you do to enable access? Move the FTP outside of the firewall. Open ports 20 and 21 for inbound and outbound connections. Define user accounts for all external visitors. Install a VPN. EXPLANATION To allow FTP traffic into your DMZ, you must open the correct ports on the firewall. For FTP, the correct ports are 20 and 21 for outbound connections. Installing a VPN is not necessary to grant access to external users. Defining user accounts may be required in some situations, but this scenario requires anonymous access. Moving the FTP server outside the firewall is not a secure action.  Question 6:  Correct Your organization recently purchased 18 iPad tablets for use by the organization's management team. These devices have iOS pre-installed on them. To increase the security of these devices, you want to apply a default set of security-related configuration settings. What is the BEST approach to take to accomplish this? (Select two. Each option is part of a complete solution.) Enroll the devices in a mobile device management (MDM) system. Configure and distribute security settings in a configuration profile. Configure security settings in a Group Policy Object. Require users to install the configuration profile. Join the tablets to a Windows domain. Configure and apply security policy settings in a mobile device management (MDM) system. EXPLANATION A mobile device management (MDM) solution can push policies directly to each tablet device over a network connection. This option enables policies to be remotely enforced and updated without any action by the end user. The tablet devices must be enrolled in the MDM system before the policy settings can be applied. One of the key problems associated with managing mobile devices is the fact that they can't be joined to a Windows domain. This means Group Policy can't be used to automatically push security settings to mobile devices. For devices running Apple's iOS operating system, security settings can be distributed in a configuration profile. The profile can be defined so that only an administrator can delete the profile, or you can lock the profile to the device so that it cannot be removed without completely erasing the device. However, this option relies on the end user to install the profile, which can be problematic. It's also not a dynamic strategy. Making even the smallest change to your mobile device security policies requires a great deal of effort.  Question 7:  Correct Which of the following is a policy that defines appropriate and inappropriate usage of company resources, assets, and communications? Business impact analysis (BIA) Disaster recovery plan (DRP) Acceptable use policy (AUP) Business continuity plan (BCP) EXPLANATION An acceptable use policy (AUP) is a policy that defines appropriate and inappropriate usage of company resources, assets, and communications. A business impact analysis (BIA) identifies critical processes and assets and the effect of their loss on the company. A disaster recovery plan (DRP) addresses how a corporation should respond to a disaster. A business continuity plan (BCP) addresses how a corporation responds to the disruption of critical systems.  Question 8:  Correct Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.) Security Configuration and Analysis Security Templates Group Policy WSUS EXPLANATION Windows Software Update Services (WSUS) is a patch management tool that allows clients on a network to download software updates from an internal WSUS server in their organization. The WSUS server receives a list of available updates from Microsoft. On the WSUS server, you identify allowed or required patches for your organization. Clients download only approved patches from an internal WSUS server or directly from Microsoft. You can also use Group Policy to distribute and automatically install patches. You must use Group Policy to install updates to non-Microsoft software that is not supported with WSUS. Use the Security Templates snap-in to create and edit templates that enforce system security settings. Use the Security Configuration and Analysis snap-in to compare the existing settings with the template or to apply a template to a single device. Use Group Policy to automatically apply security templates.  Question 9:  Correct Which of the following are solutions that address physical security? (Select two.) Scan all floppy disks before use Implement complex passwords Escort visitors at all times Disable guest accounts on computers Require identification and name badges for all employees EXPLANATION Physical security controls physical access to the network or its components. Physical security controls include: Requiring identification or key cards before entry is permitted Escorting visitors at all times Keeping doors and windows locked Keeping devices with sensitive information out of view of public users Keeping the server room locked (locking computers to racks or tables to prevent theft) Implementing complex password, disabling guest accounts on computers, and scanning all floppy disks before use are not considered physical security controls.  Question 10:  Correct Your company has five salesmen who work out of the office and frequently leave their laptops laying on their desks in their cubicles. You are concerned that someone might walk by and take one of these laptops. Which of the following is the BEST protection implementation to address your concerns? Require strong passwords in the Local Security Policy. Implement screen saver passwords. Use cable locks to chain the laptops to the desks. Encrypt all company data on hard drives. EXPLANATION In this case, your main concern is that someone might steal the laptops. The best protection against physical theft is to secure the laptops in place using a cable lock. Requiring strong passwords or using encryption might prevent unauthorized users from accessing data on the laptops, but these measures do not prevent physical theft.