Free 220-1002 sample questions

Correct answers: Put the terminal server into the router’s DMZ; Block all unused ports on the LAN smart switch

To increase Windows terminal server security, placing the server in the router DMZ and blocking unused ports on the LAN switch are the most effective measures. DMZ placement isolates the terminal server from the internal network, limiting potential damage if compromised. Blocking unused switch ports prevents unauthorized physical network access and reduces attack surface. Changing the default port and enforcing password complexity are good practices but less critical than network isolation, while disabling logon restrictions and using local certificates actually decrease security.

To increase Windows terminal server security, placing the server in the router DMZ and blocking unused ports on the LAN switch are the most effective measures. DMZ placement isolates the terminal server from the internal network, limiting potential damage from breaches. Blocking unused ports prevents unauthorized network access and reduces attack surface. Changing the default port, enforcing password complexity, and disabling logon restrictions are good practices but less critical than network isolation and port security.

Correct answer: SSH

SSH (Secure Shell) is the correct protocol for secure remote access to network switches and routers. SSH provides encrypted authentication and data transmission, protecting credentials and configuration commands from interception. Telnet transmits data in plain text and is inherently insecure. RDP and VNC are designed for remote desktop access to Windows and graphical systems respectively, not for command-line network device management. SSH is the industry standard for secure network device administration.

Correct answers: Default login; WEP

The attack described indicates WPS (Wi-Fi Protected Setup) and WEP vulnerabilities were exploited. WPS uses an 8-digit PIN that can be brute-forced relatively easily, especially since the last digit is a checksum, leaving only 7 digits to crack. Once WPS is compromised, attackers gain full network access. WEP encryption is also notoriously weak and easily cracked. Default login credentials on the router allowed DNS modification after network access was gained. Guest networks, TKIP, and outdated firmware, while security concerns, were not the primary attack vectors described in this scenario.

The attack described indicates WPS (Wi-Fi Protected Setup) and WEP vulnerabilities were exploited. WPS uses an 8-digit PIN that can be brute-forced relatively easily, especially since the last digit is a checksum, leaving only 7 digits to crack. Once WPS is compromised, attackers gain full network access. WEP encryption is also notoriously weak and easily cracked. Default login credentials on the router allowed DNS modification after network access was gained. Guest networks, TKIP, and outdated firmware, while security concerns, were not the primary attack vectors described in this scenario.

Correct answer: Asset ID, MAC address

Asset ID and MAC address provide the most effective PC naming convention for tracking and identification. Asset IDs are unique organizational identifiers that link directly to inventory management systems for asset tracking, warranty management, and support records. MAC addresses are globally unique hardware identifiers that never change, making devices easily identifiable on networks. Domain names and locations can change, IP addresses are dynamic and reassignable, and RFID requires additional hardware infrastructure that may not be present in all environments.

Correct answers: Badge reader; Biometric lock

Badge readers and biometric locks provide the best security for server rooms by implementing multi-factor authentication and access control. Badge readers validate authorized personnel through ID cards linked to access control systems, providing audit trails of entry/exit times. Biometric locks use unique physical characteristics like fingerprints or retinal scans that cannot be duplicated or shared, ensuring only authorized individuals gain access. Bollards protect against vehicle intrusion but not relevant for server rooms, cable locks secure individual devices but not room access, USB tokens are authentication devices but not access control systems, and privacy window shades provide visual security but no access control.

Badge readers and biometric locks provide the best security for server rooms by implementing multi-factor authentication and access control. Badge readers validate authorized personnel through ID cards linked to access control systems, providing audit trails of entry/exit times. Biometric locks use unique physical characteristics like fingerprints or retinal scans that cannot be duplicated or shared, ensuring only authorized individuals gain access. Bollards protect against vehicle intrusion but not relevant for server rooms, cable locks secure individual devices but not room access, USB tokens are authentication devices but not access control systems, and privacy window shades provide visual security but no access control.

Correct answer: Spear phishing

Spear phishing uses personalized information to target specific individuals with customized attacks that appear legitimate. Unlike generic phishing, spear phishing incorporates personal details like names, job titles, company information, or recent activities to increase credibility and success rates. Whaling targets high-profile executives but is not necessarily personalized, impersonation involves pretending to be someone else but may not use personal information, and spoofing involves falsifying sender information but does not necessarily incorporate personalized content about the target.

Correct answer: Date and time

Invalid certificate errors on port 443 (HTTPS) affecting only one workstation typically indicate incorrect date and time settings. SSL/TLS certificates have validity periods defined by start and end dates, and browsers reject certificates if the local system time falls outside this range. Since other computers on the same LAN work properly, the issue is isolated to this specific workstation system configuration. UEFI boot mode affects hardware initialization not certificate validation, logon times control user access periods not certificate verification, and user access control manages permissions but does not affect certificate date validation.

Correct answer: Internet Options - Connections

Internet Options - Connections is the correct Control Panel utility for configuring proxy server settings in Windows workstations. The Connections tab contains the LAN Settings button which opens the Local Area Network (LAN) Settings dialog where proxy server configuration is managed, including server address, port, and bypass settings. The Advanced tab handles security protocols and encryption, Security tab manages zone settings and permissions, Content tab controls certificates and autocomplete, and Privacy tab manages cookies and pop-up blocking, none of which are used for proxy server configuration.

Correct answer: 4GB

32-bit versions of Windows are limited to 4GB of addressable memory due to the architectural constraints of 32-bit processing. A 32-bit system can address 2^32 memory locations, which equals 4,294,967,296 bytes or exactly 4GB. While some 32-bit versions of Windows can access slightly more than 4GB through Physical Address Extension (PAE), the practical user-accessible limit remains 4GB. 64-bit Windows versions can address significantly more memory, but 32-bit systems are fundamentally constrained by their bit architecture to 4GB maximum addressable space.