Security Taboos

Review Questions

You can find the solutions to these questions in Appendix A, "Answers to Review Questions."

1.	When are critical hot fixes and patches to the Cisco IP Telephony Operating System posted on Cisco.com for download? 24 hours after the announcement from Microsoft Monthly in a consolidated security release With the next operating system upgrade These should be downloaded from Microsoft as soon as they appear.
2.	Which feature should not be enabled when using antivirus protection software? Full-scan Heuristic scan E-mail scan Pagefile scan
3.	Which Cisco-provided software tool protects Cisco CallManager against malicious applications? CDR CER CSA CRM
4.	Which parameter has to be set on all service accounts? Complex password requirement Minimum password length of six characters Password never expires Enforce password history
5.	What Microsoft service is most commonly attacked? DNS service DHCP service IIS service Active Directory service
6.	Which setting on the Cisco IP Telephony Operating System is supported on the CallManager platform but not recommended by Cisco? Delete the IUSER_Guest account Delete SQL service accounts Install third-party utilities Disable Dr. Watson
7.	What automated method does Cisco support for security updates and hot fixes to the CallManager server? Receiving e-mail updates from the Cisco CallManager Notification Tool Downloading updates directly from Microsoft using the Windows Update Services Using the CSA standalone automatic update feature Downloading updates directly from Cisco using the automated Cisco Update Services
8.	Which of the following files represent an automated security script that will add additional Cisco approved security to the CallManager server? (Choose two.) CCM-OS-OptionalSecurity.cmd CSA_SecurityScript.cmd IPSec-W2KSQL.cmd SecurityTemplace_CCM4xx.cmd
9.	Which of the following antivirus platforms is NOT supported by Cisco for installation on a Cisco CallManager platform? McAfee VirusScan Enterprise Symantec AntiVirus Corporate Edition Trend Micro ServerProtect WebX SecureServer
10.	Which of the following does the headless CSA protect against? (Choose two.) Operating system file integrity Restriction of network-aware, locally installed applications to local resources Protection against virus infection Protects against preconfigured inbound network connections to the CallManager server