Pearson Practice Test INF-102: Information Technology Specialist Network Security

The INF-102 practice test contains 105 questions and covers the following objectives: 

Defense in Depth – 32 questions 

Identify core security principles 

• Confidentiality, integrity, availability, non-repudiation, threat, risk, vulnerability, principle of least privilege, attack surfaces including IoT 

Define and enforce physical security 

• Site security, computer security, removable devices and drives, mantraps 

Identify security policy types 

• Administrative controls, technical controls 

Identify attack types 

• Buffer overflow, viruses, polymorphic viruses, worms, Trojan horses, spyware, ransomware, adware, rootkits, backdoors, zero day attacks/ vulnerabilities, denial-of-service (DoS) attacks, common attack methods, types of vulnerability, cross-site scripting (XSS), SQL injection, brute force attack, man-in-the-middle (MITM) and man-in-the-browser (MITB), social engineering, keyloggers (software and hardware), logic bombs 

Identify backup and restore types 

• Full, incremental, differential 

Operating System Security – 25 questions 

Identify client and server protection 

• Separation of services, hardening, patch management, reducing the attack surface, group policy (gpupdate and gpresult), secure dynamic Domain Name System (DNS) updates, User Account Control (UAC), keeping client operating system and software updated, encrypting offline folders, software restriction policies 

Configure user authentication 

• Multifactor authentication, enforcing password policies, remote access, using secondary sign-on to perform administrative tasks (Run As, sudo), domain and local user and group creation, Kerberos 

Manage permissions in Windows and Linux 

• File and folder permissions, share permissions, inheritance, moving or copying files within the same disk or on another disk, multiple groups with different permissions, take ownership, delegation 

Facilitate non-repudiation using audit policies and log files 

• Types of auditing, what can be audited, enabling auditing, what to audit for specific purposes, where to save audit information, reviewing log files 

Demonstrate knowledge of encryption 

File and folder encryption, how encryption impacts moving/copying files and folders, drive encryption, TPM, secure communication processes (email, texting, chat, social media), virtual private network (VPN) encryption methods, public key/private key, certificate properties and services, Bitlocker 

Network Device Security – 27 questions 

Implement wireless security 

• Wireless security types (strength of encryption), service set identifiers (SSIDs), MAC filtering, default configuration (OOBE) 

Identify the role of network protection devices 

• Purpose of firewalls, hardware vs. software firewalls, network vs. host firewalls, stateful vs. stateless firewall inspection, security baselines, intrusion detection system (IDS), intrusion prevention system (IPS), security information and event manager (SIEM), content filtering, blacklisting/ whitelisting 

Identify network isolation methods 

• Routing, honeynet, perimeter networks (DMZ), NAT/PAT, VPN, IPsec, air gap network, DirectAccess, virtual LAN (VLAN) 

Identify protocol security concepts 

• Tunneling, DNSSEC, network sniffing, well-known ports (FTP, HTTP, HTTPS, DNS, RDP, Telnet, SSH, LDAP, LDAPS, SNMP, SMTP, IMAP, SFTP) 

Secure Computing – 11 questions 

Implement email protection 

• Antispam, spoofing, phishing, and pharming, client protection, user training 

Manage browser security 

• Browser settings, cache management, private browsing 

Install and configure anti-malware and antivirus software 

• Installing, uninstalling, reinstalling, and updating; remediation, scheduling scans, investigating alerts