Question 1

With Active-X controls, active scripting is enabled by default.

Accepted Answer

A) True 
 B)False

Question 2

VoIP security can easily be implemented even if the company's basic security is weak.

Accepted Answer

A) True 
 B)False

Question 3

To take advantage of user typing errors, attackers register site names that are similar to those of legitimate domain names.

Accepted Answer

A) True 
 B)False

Question 4

Baselines are used to go beyond default installation configurations for high-value targets.

Accepted Answer

A) True 
 B)False

Question 5

In a SQL injection attack, attackers may use lookup commands to obtain unauthorized information.

Accepted Answer

A) True 
 B)False

Question 6

Experts advise firms to turn on most or all applications and then harden them.

Accepted Answer

A) True 
 B)False

Question 7

SIP identity protocols are common on IP telephones.

Accepted Answer

A) True 
 B)False

Question 8

NAT adds latency to VoIP packets.

Accepted Answer

A) True 
 B)False

Question 9

Overall for firms, which is more time consuming to patch?

Accepted Answer

A)  Applications 
B)  Operating systems 
C)  Both are about equally time consuming to patch 
D)  None of the above 
A)  Applications 
B)  Operating systems 
C)  Both are about equally time consuming to patch 
D)  None of the above

Question 10

Signaling does not consist of communication to manage the network.

Accepted Answer

A) True 
 B)False

Question 11

Signaling is the carriage of voice between two parties.

Accepted Answer

A) True 
 B)False

Question 12

The first task in security is to understand the environment to be protected.

Accepted Answer

A) True 
 B)False

Question 13

Encryption is heavily used in commercial e-mail.

Accepted Answer

A) True 
 B)False

Question 14

Cookies can used to track users at a website.

Accepted Answer

A) True 
 B)False

Question 15

In VoIP, firewalls are a problem because they tend to ________.

Accepted Answer

A)  reduce throughput 
B)  increase jitter 
C)  increase latency 
D)  make traffic unreadable 
A)  reduce throughput 
B)  increase jitter 
C)  increase latency 
D)  make traffic unreadable

Question 16

In a stack overflow attack, to where does the return address point?

Accepted Answer

A)  To the beginning of the stack entry's data area 
B)  To the end of the stack entry's data area 
C)  To the next command in the program being hacked 
D)  To the return address entry in the stack entry 
A)  To the beginning of the stack entry's data area 
B)  To the end of the stack entry's data area 
C)  To the next command in the program being hacked 
D)  To the return address entry in the stack entry

Question 17

In VoIP, encryption may ________.

Accepted Answer

A)  reduce throughput 
B)  increase jitter 
C)  increase latency 
D)  make traffic unreadable 
A)  reduce throughput 
B)  increase jitter 
C)  increase latency 
D)  make traffic unreadable

Question 18

Skype's security protocols have been publicly studied and approved.

Accepted Answer

A) True 
 B)False

Question 19

DoS attacks against VoIP can be successful even if they increase latency only slightly.

Accepted Answer

A) True 
 B)False

Question 20

SIP Identity protocols ________.

Accepted Answer

A)  ensure that traffic is authenticated between two companies holding public/private keys 
B)  are uncommon on IP telephones 
C)  Both A and B 
D)  Neither A nor B 
A)  ensure that traffic is authenticated between two companies holding public/private keys 
B)  are uncommon on IP telephones 
C)  Both A and B 
D)  Neither A nor B

With Active-X controls, active scripting is enabled by default.

VoIP security can easily be implemented even if the company's basic security is weak.

To take advantage of user typing errors, attackers register site names that are similar to those of legitimate domain names.

Baselines are used to go beyond default installation configurations for high-value targets.

In a SQL injection attack, attackers may use lookup commands to obtain unauthorized information.

Experts advise firms to turn on most or all applications and then harden them.

SIP identity protocols are common on IP telephones.

NAT adds latency to VoIP packets.

Overall for firms, which is more time consuming to patch?

Signaling does not consist of communication to manage the network.

Signaling is the carriage of voice between two parties.

The first task in security is to understand the environment to be protected.

Encryption is heavily used in commercial e-mail.

Cookies can used to track users at a website.

In VoIP, firewalls are a problem because they tend to ________.

In a stack overflow attack, to where does the return address point?

In VoIP, encryption may ________.

Skype's security protocols have been publicly studied and approved.

DoS attacks against VoIP can be successful even if they increase latency only slightly.

SIP Identity protocols ________.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 8: Application Security

With Active-X controls, active scripting is enabled by default.

VoIP security can easily be implemented even if the company's basic security is weak.

To take advantage of user typing errors, attackers register site names that are similar to those of legitimate domain names.

Baselines are used to go beyond default installation configurations for high-value targets.

In a SQL injection attack, attackers may use lookup commands to obtain unauthorized information.

Experts advise firms to turn on most or all applications and then harden them.

SIP identity protocols are common on IP telephones.

NAT adds latency to VoIP packets.

Overall for firms, which is more time consuming to patch?

Signaling does not consist of communication to manage the network.

Signaling is the carriage of voice between two parties.

The first task in security is to understand the environment to be protected.

Encryption is heavily used in commercial e-mail.

Cookies can used to track users at a website.

In VoIP, firewalls are a problem because they tend to ________.

In a stack overflow attack, to where does the return address point?

In VoIP, encryption may ________.

Skype's security protocols have been publicly studied and approved.

DoS attacks against VoIP can be successful even if they increase latency only slightly.

SIP Identity protocols ________.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters