Question 1

How does IPS anomaly detection differ from misuse detection?

Accepted Answer

Intrusion Prevention Systems (IPS) can e

Question 2

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

Accepted Answer

A)  risk assessment 
B)  backplane 
C)  mitigating control factor analysis 
D)  control verification worksheet 
E)  control test plan 
A)  risk assessment 
B)  backplane 
C)  mitigating control factor analysis 
D)  control verification worksheet 
E)  control test plan

Question 3

Triple DES uses a total of 512 bits as the key.

Accepted Answer

A) True 
 B)False

Question 4

A hacker gaining access to organizational data files and resources is an example of a(n)____________ threat.

Accepted Answer

A)  disruptive 
B)  controlled chaos 
C)  disruptive. 
D)  intrusion 
E)  disaster 
A)  disruptive 
B)  controlled chaos 
C)  disruptive. 
D)  intrusion 
E)  disaster

Question 5

A certificate authority is a trusted organization that can vouch for the authenticity of a person or organization.

Accepted Answer

A) True 
 B)False

Question 6

Using a chart format,describe 8 possible threats to a data network (such as hardware,software,files,circuits,internal personnel,physical security,external people,and users).Describe 8 possible solutions to these conceivable threats.

Accepted Answer

The answer of Using a chart format,describe 8 possible threats...

Question 7

Encryption is the process of:

Accepted Answer

A)  transmission of information over secure lines in analog form to prevent illegal access 
B)  detecting errors in messages by means of mathematical rules 
C)  correcting errors in message by means of mathematical rules 
D)  disguising information by the use of mathematical rules, known as algorithms 
E)  preventing errors in messages by means of logical rules 
A)  transmission of information over secure lines in analog form to prevent illegal access 
B)  detecting errors in messages by means of mathematical rules 
C)  correcting errors in message by means of mathematical rules 
D)  disguising information by the use of mathematical rules, known as algorithms 
E)  preventing errors in messages by means of logical rules

Question 8

Which of the following is not a method for deterring intrusion?

Accepted Answer

A)  training end users not to divulge passwords 
B)  using a smart card in conjunction with a password to gain access to a computer system 
C)  using biometric devices to gain access to a computer system 
D)  using a security software package that logs out users if that user is 'idle' for a certain amount of time 
E)  performing social engineering 
A)  training end users not to divulge passwords 
B)  using a smart card in conjunction with a password to gain access to a computer system 
C)  using biometric devices to gain access to a computer system 
D)  using a security software package that logs out users if that user is 'idle' for a certain amount of time 
E)  performing social engineering

Question 9

A sniffer program is a:

Accepted Answer

A)  type of macro-virus 
B)  small peep-hole in a door or wall to allow a security guard to sniff the area with his or her nose before entering a secure area or location 
C)  used in a call-back modem 
D)  a program that records all LAN messages received for later (unauthorized) analysis 
E)  secure hub program 
A)  type of macro-virus 
B)  small peep-hole in a door or wall to allow a security guard to sniff the area with his or her nose before entering a secure area or location 
C)  used in a call-back modem 
D)  a program that records all LAN messages received for later (unauthorized) analysis 
E)  secure hub program

Question 10

With application level firewalls,any access that has not been disabled is permitted.

Accepted Answer

A) True 
 B)False

Question 11

The key principle in preventing disruption,destruction and disaster is ___________.

Accepted Answer

A)  redundancy 
B)  control spreadsheet 
C)  IDS 
D)  anti-virus software 
E)  prevention controls 
A)  redundancy 
B)  control spreadsheet 
C)  IDS 
D)  anti-virus software 
E)  prevention controls

Question 12

A security hole is a bug that permits intrusion to a computer.

Accepted Answer

A) True 
 B)False

Question 13

Compare and contrast symmetric and asymmetric encryption.

Accepted Answer

Symmetric and asymmetric encryption are

Question 14

How does PGP differ from SSL?How does SSL differ from IPsec?Compare and contrast IPSec tunnel mode and IPSec transfer mode.

Accepted Answer

PGP (Pretty Good Privacy) and SSL (Secur

Question 15

A(n)__________ is any potential adverse occurrence that can do harm,interrupt the system using the network to cause monetary loss to the organization.

Accepted Answer

A)  asset 
B)  service level agreement 
C)  threat 
D)  security plan 
E)  network design 
A)  asset 
B)  service level agreement 
C)  threat 
D)  security plan 
E)  network design

Question 16

In transport mode,IPSec encrypts the entire IP packet.

Accepted Answer

A) True 
 B)False

Question 17

Controls are mechanisms that reduce or eliminate threats to network security.

Accepted Answer

A) True 
 B)False

Question 18

Often,incidents of ___________ involve employees of the organization,surprisingly enough.

Accepted Answer

A)  intrusion 
B)  disruption 
C)  controlled chaos 
D)  destruction 
E)  disaster 
A)  intrusion 
B)  disruption 
C)  controlled chaos 
D)  destruction 
E)  disaster

Question 19

The most common authentication protocol used today is Kerberos.

Accepted Answer

A) True 
 B)False

Question 20

Which of the following is not a type of intrusion prevention system?

Accepted Answer

A)  network-based 
B)  data link-based 
C)  application-based 
D)  host-based 
E)  none of the above is an appropriate answer 
A)  network-based 
B)  data link-based 
C)  application-based 
D)  host-based 
E)  none of the above is an appropriate answer

How does IPS anomaly detection differ from misuse detection?

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

Triple DES uses a total of 512 bits as the key.

A hacker gaining access to organizational data files and resources is an example of a(n)____________ threat.

A certificate authority is a trusted organization that can vouch for the authenticity of a person or organization.

Using a chart format,describe 8 possible threats to a data network (such as hardware,software,files,circuits,internal personnel,physical security,external people,and users).Describe 8 possible solutions to these conceivable threats.

Encryption is the process of:

Which of the following is not a method for deterring intrusion?

A sniffer program is a:

With application level firewalls,any access that has not been disabled is permitted.

The key principle in preventing disruption,destruction and disaster is ___________.

A security hole is a bug that permits intrusion to a computer.

Compare and contrast symmetric and asymmetric encryption.

How does PGP differ from SSL?How does SSL differ from IPsec?Compare and contrast IPSec tunnel mode and IPSec transfer mode.

A(n)__________ is any potential adverse occurrence that can do harm,interrupt the system using the network to cause monetary loss to the organization.

In transport mode,IPSec encrypts the entire IP packet.

Controls are mechanisms that reduce or eliminate threats to network security.

Often,incidents of ___________ involve employees of the organization,surprisingly enough.

The most common authentication protocol used today is Kerberos.

Which of the following is not a type of intrusion prevention system?

Introduction to Data Communications

Application Layer

Physical Layer

Data Link Layer

Network and Transport Layers

Wired and Wireless LANs

Backbone Networks

Wide Area Networks

The Internet

Network Design

Network Management

Filters

Exam 10: Network Security

How does IPS anomaly detection differ from misuse detection?

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

Triple DES uses a total of 512 bits as the key.

A hacker gaining access to organizational data files and resources is an example of a(n)____________ threat.

A certificate authority is a trusted organization that can vouch for the authenticity of a person or organization.

Using a chart format,describe 8 possible threats to a data network (such as hardware,software,files,circuits,internal personnel,physical security,external people,and users).Describe 8 possible solutions to these conceivable threats.

Encryption is the process of:

Which of the following is not a method for deterring intrusion?

A sniffer program is a:

With application level firewalls,any access that has not been disabled is permitted.

The key principle in preventing disruption,destruction and disaster is ___________.

A security hole is a bug that permits intrusion to a computer.

Compare and contrast symmetric and asymmetric encryption.

How does PGP differ from SSL?How does SSL differ from IPsec?Compare and contrast IPSec tunnel mode and IPSec transfer mode.

A(n)__________ is any potential adverse occurrence that can do harm,interrupt the system using the network to cause monetary loss to the organization.

In transport mode,IPSec encrypts the entire IP packet.

Controls are mechanisms that reduce or eliminate threats to network security.

Often,incidents of ___________ involve employees of the organization,surprisingly enough.

The most common authentication protocol used today is Kerberos.

Which of the following is not a type of intrusion prevention system?

Introduction to Data Communications

Application Layer

Physical Layer

Data Link Layer

Network and Transport Layers

Wired and Wireless LANs

Backbone Networks

Wide Area Networks

The Internet

Network Design

Network Management

Filters