Title: Quiz 3 (Lessons 7, 8, and 9)
Course: CTS 2306 Windows Professional > Section: Module 3 - Local Hardware and Virtualization

Q: What type of Software Restriction Policy rule identifies applications based on a digital fingerprint of the executable file?
- Hash rules
- Certificate rules
- Path rules
- Network zone rules
A: Hash rules

Q: When configuring AppLocker rules, you can opt to either allow or block access to specific resources based on three criteria. Which of the following is not one of those criteria?
- Publisher
- Path
- Source
- File hash
A: Source

Q: What is the largest danger that high-capacity removable storage devices pose to an enterprise network?
- Data can be brought into the network that is not authorized.
- Data can be taken out of the network without authorization.
- Data can be brought into the network that is unsafe.
- Data is being insufficiently backed up more often than not when placed on removable storage.
A: Data can be taken out of the network without authorization.

Q: When using the Allow/Prevent installation of devices that match any of these device IDs setting in the Device Installation Restrictions folder of a GPO, what other setting must you ensure you also configure to provide the intended results?
- Allow/Prevent installation of devices using drivers that match these device setup classes.
- Prevent installation of devices not described by other policy settings.
- Allow administrators to override Device Installation Restriction policies.
- Prevent installation of devices with unsigned drivers.
A: Prevent installation of devices not described by other policy settings.

Q: To exclude just MP3 players and digital cameras from being installed on your organization's computers, which Removable Storage Access setting should you configure to deny?
- Custom Classes
- All Removable Storage
- WPD Devices
- All Removable Storage classes
A: WPD Devices

Q: In order to use the Custom Classes: Deny read/write access setting of the Removable Storage Access policy settings, what will you need to know about each device to which you wish to allow read or write access?
- The manufacturer part number
- The device GUID
- The device bus ID
- The drive name
A: The device GUID

Q: When none of your configured Software Restriction Policies are matched, what happens?
- No action is taken.
- The software is blocked.
- The settings in the default rule are used.
- The settings in the first rule are used.
A: The settings in the default rule are used.

Q: What disadvantage is encountered when using Software Restriction Policies?
- They will not work with Windows 8.
- They will only work with Windows 8.
- They must be configured manually.
- They can only be used in domain Group Policy.
A: They must be configured manually.

Q: Software restriction policies can work in three ways, based on the settings you choose for each of the rules. Which of the following is not one of the settings to choose from?
- Allowed
- Basic user
- Disallowed
- Unrestricted
A: Allowed

Q: There are four types of rules in AppLocker. Which of the following is not one these rule types?
- Executable rules
- Downloaded App rules
- Packaged App rules
- Script Rules
A: Downloaded App rules

Q: Which of the following operating systems are capable of utilizing AppLocker rules? (Choose all that apply.)
- Windows 7
- Windows Server 2008
- Windows Server 2012
- Windows 8
A: Windows 7; Windows Server 2012; Windows 8

Q: When creating AppLocker rules manually, you will need to supply several pieces of information to fully configure the rule. Which of the following are pieces of information that you will need to supply? (Choose all that apply.)
- Exceptions
- Action
- User or group
- Conditions
A: Exceptions; Action; User or group; Conditions

Q: What type of Software Restriction Policy rule identifies an application by specifying a file or folder name?
- Hash rules
- Certificate rules
- Path rules
- Network zone rules
A: Path rules

Q: What type of Software Restriction Policy rule identifies applications based on a certificate signed by the software publisher?
- Hash rules
- Certificate rules
- Path rules
- Network zone rules
A: Certificate rules

Q: What type of Software Restriction Policy rule identifies applications based on where the Windows Installer package came from?
- Hash rules
- Certificate rules
- Path rules
- Network zone rules
A: Network zone rules

Q: Which of the following is not one of the methods that the SmartScreen Filter uses to identify potential phishing web sites?
- Online lookup of download sites
- Online lookup of phishing sites
- Group Policy
- Onsite analysis
A: Group Policy

Q: IE 10 supports multiple types of add-ons that can be used to extend the functionality of IE 10. Which of the following is not a supported add-on type?
- Accelerators
- Toolbars and Extensions
- Search Providers
- Shell Extensions
A: Shell Extensions

Q: IE 10 includes some default accelerators that allow you to do some common tasks. Which of the listed accelerators are included by default in IE 10? (Choose all that apply.)
- Track shipments.
- Find on a map.
- Translate to another language.
- Create a shortcut.
A: Find on a map.; Translate to another language.

Q: What code placed into a web page will automatically cause IE 10 to render it in compatibility view using IE 7 standards?
- <meta http-equiv="X-UA-Downgrade" content="IE=7" />
- <meta http-equiv="X-UA-Compatible" content="IE=7" />
- <meta http-equiv="X-UA-CompatView" content="IE=7" />
- <meta http-equiv="X-UA-Legacy" content="IE=7" />
A: <meta http-equiv="X-UA-Compatible" content="IE=7" />

Q: What is the name of the mode that IE 10 operates in by default that is designed to prevent attackers that penetrate the computer's defenses from accessing vital system components?
- Sandbox mode
- Isolation mode
- Internet mode
- Protected mode
A: Protected mode

Q: When you click the down arrow next to the Print button on the IE 10 toolbar, you can choose from all of the following options except which one?
- Print
- Save to file
- Print preview
- Page setup
A: Save to file

Q: By default, IE 10 is granted access to which area of the computer?
- The Temporary Internet Files\Low folder and the HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer/LowRegistry registry key.
- The user's Documents folder and the HKEY_CURRENT_USER registry key.
- The Program Files folder and the HKEY_LOCAL_MACHINE registry key.
- All locations.
A: The Temporary Internet Files\Low folder and the HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer/LowRegistry registry key.

Q: What new standard defines a protocol that allows clients and servers to exchange data immediately as it becomes available without the overhead created by HTTP and TCP?
- Three-way handshake
- WebSockets
- Web 2.0
- HTML5
A: WebSockets

Q: What is the name of the security feature in Windows 8 that assigns various integrity access levels to processes running on the computer?
- Discretionary access control
- Mandatory access control
- Mandatory integrity control
- Adaptive integrity control
A: Mandatory integrity control

Q: Which IE security zone contains web sites that are normally automatically detected by IE and then placed into this zone?
- Local intranet
- Restricted sites
- Internet
- Trusted sites
A: Local intranet

Q: Your users use Windows 8 workstations that are joined to an Active Directory domain. You have been asked several times recently why users cannot configure Compatibility View options in IE 10. What is the most likely reason for this issue?
- The Turn off Compatibility View button option has been enabled.
- The Turn off Compatibility View option has been disabled.
- The Turn off Compatibility View button option has been disabled.
- The Turn off Compatibility View option has been enabled.
A: The Turn off Compatibility View option has been enabled.

Q: What is the term given to the attempt to penetrate the security of a computer system by convincing people to disclose secret information?
- Phishing
- Malware
- Industrial engineering
- Social engineering
A: Social engineering

Q: Which IE security zone has the most reduced set of privileges and runs in protected mode?
- Local intranet
- Restricted sites
- Internet
- Trusted sites
A: Restricted sites

Q: Which IE security zone contains the web sites that you would not expect to damage the computer?
- Local intranet
- Restricted sites
- Internet
- Trusted sites
A: Trusted sites

Q: Which IE security zone is the default catchall for web sites not listed in any other zone?
- Local intranet
- Restricted sites
- Internet
- Trusted sites
A: Internet