Question 1

An attacker must break through two firewalls to get to a host.This illustrates the principle called ________.(Select the most specific answer.)

Accepted Answer

A) comprehensive security 
B) risk assurance 
C) having a DMZ 
D) defense in depth 
A) comprehensive security 
B) risk assurance 
C) having a DMZ 
D) defense in depth

Question 2

Fingerprint scanning may be an acceptable access control method for ordinary laptops.

Accepted Answer

A) True 
 B)False

Question 3

Trojan horses can get onto computers by ________.

Accepted Answer

A) self-propagation 
B) hackers 
C) both A and B 
D) neither A nor B 
A) self-propagation 
B) hackers 
C) both A and B 
D) neither A nor B

Question 4

Computer security incident response teams (CSIRTs)are used in ________.

Accepted Answer

A) false alarms 
B) normal incidents 
C) major incidents 
D) disasters 
A) false alarms 
B) normal incidents 
C) major incidents 
D) disasters

Question 5

Passwords are widely used because ________.

Accepted Answer

A) they can be used at little or no additional cost 
B) they offer very strong authentication 
C) both A and B 
D) neither A nor B 
A) they can be used at little or no additional cost 
B) they offer very strong authentication 
C) both A and B 
D) neither A nor B

Question 6

A ________ is a flaw in a program that permits a specific attack or set of attacks against this problem.

Accepted Answer

A) malware 
B) security error 
C) vulnerability 
D) security fault 
A) malware 
B) security error 
C) vulnerability 
D) security fault

Question 7

Which of the following tends to be more damaging to the victim?

Accepted Answer

A) credit card theft 
B) identity theft 
C) Both are about equally damaging to the victim. 
A) credit card theft 
B) identity theft 
C) Both are about equally damaging to the victim.

Question 8

Egress filtering examines packets ________.

Accepted Answer

A) arriving from the outside 
B) leaving to the outside 
C) both A and B 
D) neither A nor B 
A) arriving from the outside 
B) leaving to the outside 
C) both A and B 
D) neither A nor B

Question 9

In authentication,the ________ is the party trying to prove his or her identity.

Accepted Answer

A) supplicant 
B) verifier 
C) true party 
D) all of the above 
A) supplicant 
B) verifier 
C) true party 
D) all of the above

Question 10

Biometrics is the use of body measurements to authenticate you.

Accepted Answer

A) True 
 B)False

Question 11

Most hackers today are driven by curiosity,a sense of power,and,sometimes,a desire to increase their reputation among peers.

Accepted Answer

A) True 
 B)False

Question 12

When a packet that is not part of an ongoing connection and that does not attempt to open a connection arrives at a stateful inspection firewall,the firewall ________.(Read this question carefully.)

Accepted Answer

A) drops the packet 
B) passes the packet 
C) opens a new connection 
D) does not approve the connection 
A) drops the packet 
B) passes the packet 
C) opens a new connection 
D) does not approve the connection

Question 13

Viruses most commonly spread from one computer to another ________.

Accepted Answer

A) via e-mail 
B) by propagating directly by themselves 
C) through obfuscation 
D) all of the above 
A) via e-mail 
B) by propagating directly by themselves 
C) through obfuscation 
D) all of the above

Question 14

________ is the reestablishment of information technology operations after a disaster.

Accepted Answer

A) Business continuity recovery 
B) Disaster recovery 
A) Business continuity recovery 
B) Disaster recovery

Question 15

Which phase of the plan-protect-respond cycle takes the largest amount of work?

Accepted Answer

A) plan 
B) protect 
C) respond 
D) Each phase requires about equal effort. 
A) plan 
B) protect 
C) respond 
D) Each phase requires about equal effort.

Question 16

In digital certificate authentication,the verifier uses ________.

Accepted Answer

A) the supplicant's public key 
B) the true party's public key 
C) both A and B 
D) neither A nor B 
A) the supplicant's public key 
B) the true party's public key 
C) both A and B 
D) neither A nor B

Question 17

CSIRTs should include ________.

Accepted Answer

A) IT personnel 
B) senior line managers 
C) both A and B 
D) neither A nor B 
A) IT personnel 
B) senior line managers 
C) both A and B 
D) neither A nor B

Question 18

Oversight activities include ________.

Accepted Answer

A) vulnerability testing 
B) creating guidelines 
C) both A and B 
D) neither A nor B 
A) vulnerability testing 
B) creating guidelines 
C) both A and B 
D) neither A nor B

Question 19

It is still hacking if a person unintentionally accesses unauthorized computer information.

Accepted Answer

A) True 
 B)False

Question 20

Which of the following can be upgraded after it is installed on a victim computer? (Choose the most specific answer.)

Accepted Answer

A) Trojan horses 
B) bots 
C) viruses 
D) worms 
A) Trojan horses 
B) bots 
C) viruses 
D) worms

An attacker must break through two firewalls to get to a host.This illustrates the principle called ________.(Select the most specific answer.)

Fingerprint scanning may be an acceptable access control method for ordinary laptops.

Trojan horses can get onto computers by ________.

Computer security incident response teams (CSIRTs)are used in ________.

Passwords are widely used because ________.

A ________ is a flaw in a program that permits a specific attack or set of attacks against this problem.

Which of the following tends to be more damaging to the victim?

Egress filtering examines packets ________.

In authentication,the ________ is the party trying to prove his or her identity.

Biometrics is the use of body measurements to authenticate you.

Most hackers today are driven by curiosity,a sense of power,and,sometimes,a desire to increase their reputation among peers.

When a packet that is not part of an ongoing connection and that does not attempt to open a connection arrives at a stateful inspection firewall,the firewall ________.(Read this question carefully.)

Viruses most commonly spread from one computer to another ________.

________ is the reestablishment of information technology operations after a disaster.

Which phase of the plan-protect-respond cycle takes the largest amount of work?

In digital certificate authentication,the verifier uses ________.

CSIRTs should include ________.

Oversight activities include ________.

It is still hacking if a person unintentionally accesses unauthorized computer information.

Which of the following can be upgraded after it is installed on a victim computer? (Choose the most specific answer.)

Welcome to the Cloud

Network Standards

Network Management

Wired Ethernet Lans

Wireless Lans I

Wireless Lans 2

Tcpip Internetworking I

Tcpip Internetworking 2

Wide Area Networks

Networked Applications

Module a More on Tcp

Module B More on Modulation

Module C More on Telecommunications

Module D Directory Servers

Filters

Exam 3: Network Security

An attacker must break through two firewalls to get to a host.This illustrates the principle called ________.(Select the most specific answer.)

Fingerprint scanning may be an acceptable access control method for ordinary laptops.

Trojan horses can get onto computers by ________.

Computer security incident response teams (CSIRTs)are used in ________.

Passwords are widely used because ________.

A ________ is a flaw in a program that permits a specific attack or set of attacks against this problem.

Which of the following tends to be more damaging to the victim?

Egress filtering examines packets ________.

In authentication,the ________ is the party trying to prove his or her identity.

Biometrics is the use of body measurements to authenticate you.

Most hackers today are driven by curiosity,a sense of power,and,sometimes,a desire to increase their reputation among peers.

When a packet that is not part of an ongoing connection and that does not attempt to open a connection arrives at a stateful inspection firewall,the firewall ________.(Read this question carefully.)

Viruses most commonly spread from one computer to another ________.

________ is the reestablishment of information technology operations after a disaster.

Which phase of the plan-protect-respond cycle takes the largest amount of work?

In digital certificate authentication,the verifier uses ________.

CSIRTs should include ________.

Oversight activities include ________.

It is still hacking if a person unintentionally accesses unauthorized computer information.

Which of the following can be upgraded after it is installed on a victim computer? (Choose the most specific answer.)

Welcome to the Cloud

Network Standards

Network Management

Wired Ethernet Lans

Wireless Lans I

Wireless Lans 2

Tcpip Internetworking I

Tcpip Internetworking 2

Wide Area Networks

Networked Applications

Module a More on Tcp

Module B More on Modulation

Module C More on Telecommunications

Module D Directory Servers

Filters