Question 1

A host based intrusion prevention system IPS) monitors activity on the server and reports intrusions to the IPS management console.

Accepted Answer

A) True 
 B)False

Question 2

The three basic network access points into most organizational networks are from the Internet, from LANs inside of the organization and ________________.

Accepted Answer

A) WLANs 
B) intranet 
C) extranet 
D) WAN 
E) none of the above 
A) WLANs 
B) intranet 
C) extranet 
D) WAN 
E) none of the above

Question 3

________ controls discover unwanted events.

Accepted Answer

A) preventive 
B) corrective 
C) detective 
D) mitigating 
E) backup 
A) preventive 
B) corrective 
C) detective 
D) mitigating 
E) backup

Question 4

A n) ______ is a special type of virus that spreads itself without human intervention.

Accepted Answer

A) snake 
B) worm 
C) Trojan horse 
D) boot sector virus 
E) stealth virus 
A) snake 
B) worm 
C) Trojan horse 
D) boot sector virus 
E) stealth virus

Question 5

A brute force attack against an encryption system:

Accepted Answer

A) is called RC4 
B) tries to gain access by trying every possible key 
C) is also known as 3DES 
D) always uses the Rijndael algorithm 
E) is part of the Advanced Encyrption Standard 
A) is called RC4 
B) tries to gain access by trying every possible key 
C) is also known as 3DES 
D) always uses the Rijndael algorithm 
E) is part of the Advanced Encyrption Standard

Question 6

What is a packet level firewall as compared to a NAT firewall and as compared to an applications layer firewall?

Accepted Answer

A packet level firewall is a type of fir

Question 7

DES:

Accepted Answer

A) is maintained by ISO 
B) refers to Date Electronic Security 
C) is a commonly used symmetric encryption algorithm that was developed in the mid-1970s 
D) was developed by a joint effort that included Microsoft 
E) is an asymmetric algorithm 
A) is maintained by ISO 
B) refers to Date Electronic Security 
C) is a commonly used symmetric encryption algorithm that was developed in the mid-1970s 
D) was developed by a joint effort that included Microsoft 
E) is an asymmetric algorithm

Question 8

When using a digital signature for the process of authentication, the sender encrypts the message with their private key and the recipient decrypts the message with the sender's public key.

Accepted Answer

A) True 
 B)False

Question 9

A threat to the data communications network is any potential adverse occurrence that can do harm, interrupt the systems using the network, or cause a monetary loss to the organization.

Accepted Answer

A) True 
 B)False

Question 10

Which of the following is not a method for deterring intrusion?

Accepted Answer

A) training end users not to divulge passwords 
B) using a smart card in conjunction with a password to gain access to a computer system 
C) using biometric devices to gain access to a computer system 
D) using a security software package that logs out users if that user is 'idle' for a certain amount of time 
E) performing social engineering 
A) training end users not to divulge passwords 
B) using a smart card in conjunction with a password to gain access to a computer system 
C) using biometric devices to gain access to a computer system 
D) using a security software package that logs out users if that user is 'idle' for a certain amount of time 
E) performing social engineering

Question 11

An example of _____ of data would be if a computer virus eliminated files on that computer.

Accepted Answer

A) disruption 
B) controlled chaos 
C) intrusion 
D) destruction 
E) disaster 
A) disruption 
B) controlled chaos 
C) intrusion 
D) destruction 
E) disaster

Question 12

A hacker gaining access to organizational data files and resources is an example of an) ____________ threat.

Accepted Answer

A) disruptive. 
B) controlled chaos 
C) disruptive 
D) intrusion 
E) disaster 
A) disruptive. 
B) controlled chaos 
C) disruptive 
D) intrusion 
E) disaster

Question 13

Using a chart format, describe 8 possible threats to a data network such as hardware, software, files, circuits, internal personnel, physical security, external people, and users). Describe 8 possible solutions to these conceivable threats.

Accepted Answer

Threats to Data Network | Solutions

1.

Question 14

An) ____________ can use stateful inspection to monitor and record the status of each connection and can use this information in making decisions about what packets to discard as security threats.

Accepted Answer

A) application level firewall 
B) bullion server 
C) ANI system 
D) IP spoofing systems 
E) packet level firewall 
A) application level firewall 
B) bullion server 
C) ANI system 
D) IP spoofing systems 
E) packet level firewall

Question 15

Describe the four risk control strategies and when you might use each one.

Accepted Answer

The four risk control strategies are avo

Question 16

Describe how symmetric encryption works, draw a chart of this approach. How does DES differ from 3DES? From RC4? From AES?

Accepted Answer

Symmetric encryption works by using a si

Question 17

A __________ is a router or special purpose computer that examines packets flowing into and out of a network and restricts access to the organization's network.

Accepted Answer

A) firewall 
B) token system 
C) ANI 
D) call-back modem 
E) firefighter 
A) firewall 
B) token system 
C) ANI 
D) call-back modem 
E) firefighter

Question 18

Some people think that CERT's posting of security alerts causes more break ins than it prevents. What are the pros and cons of this argument? Do you think CERT should continue to post security holes?

Accepted Answer

The argument that CERT's posting of secu

Question 19

Maintaining data integrity is not a primary goal of security.

Accepted Answer

A) True 
 B)False

Question 20

List three risk assessment frameworks that are commonly used.

Accepted Answer

Risk assessment frameworks are structure

A host based intrusion prevention system IPS) monitors activity on the server and reports intrusions to the IPS management console.

The three basic network access points into most organizational networks are from the Internet, from LANs inside of the organization and ________________.

________ controls discover unwanted events.

A n) ______ is a special type of virus that spreads itself without human intervention.

A brute force attack against an encryption system:

What is a packet level firewall as compared to a NAT firewall and as compared to an applications layer firewall?

DES:

When using a digital signature for the process of authentication, the sender encrypts the message with their private key and the recipient decrypts the message with the sender's public key.

A threat to the data communications network is any potential adverse occurrence that can do harm, interrupt the systems using the network, or cause a monetary loss to the organization.

Which of the following is not a method for deterring intrusion?

An example of _____ of data would be if a computer virus eliminated files on that computer.

A hacker gaining access to organizational data files and resources is an example of an) ____________ threat.

Using a chart format, describe 8 possible threats to a data network such as hardware, software, files, circuits, internal personnel, physical security, external people, and users). Describe 8 possible solutions to these conceivable threats.

An) ____________ can use stateful inspection to monitor and record the status of each connection and can use this information in making decisions about what packets to discard as security threats.

Describe the four risk control strategies and when you might use each one.

Describe how symmetric encryption works, draw a chart of this approach. How does DES differ from 3DES? From RC4? From AES?

A __________ is a router or special purpose computer that examines packets flowing into and out of a network and restricts access to the organization's network.

Some people think that CERT's posting of security alerts causes more break ins than it prevents. What are the pros and cons of this argument? Do you think CERT should continue to post security holes?

Maintaining data integrity is not a primary goal of security.

List three risk assessment frameworks that are commonly used.

Introduction to Data Communications

Application Layer

Physical Layer

Data Link Layer

Network and Transport Layers

Network Design

Wired and Wireless Local Area Networks

Backbone Networks

Wide Area Networks

The Internet

Network Management

Filters

Exam 11: Network Security

A host based intrusion prevention system IPS) monitors activity on the server and reports intrusions to the IPS management console.

The three basic network access points into most organizational networks are from the Internet, from LANs inside of the organization and ________________.

________ controls discover unwanted events.

A n) ______ is a special type of virus that spreads itself without human intervention.

A brute force attack against an encryption system:

What is a packet level firewall as compared to a NAT firewall and as compared to an applications layer firewall?

DES:

When using a digital signature for the process of authentication, the sender encrypts the message with their private key and the recipient decrypts the message with the sender's public key.

A threat to the data communications network is any potential adverse occurrence that can do harm, interrupt the systems using the network, or cause a monetary loss to the organization.

Which of the following is not a method for deterring intrusion?

An example of _____ of data would be if a computer virus eliminated files on that computer.

A hacker gaining access to organizational data files and resources is an example of an) ____________ threat.

Using a chart format, describe 8 possible threats to a data network such as hardware, software, files, circuits, internal personnel, physical security, external people, and users). Describe 8 possible solutions to these conceivable threats.

An) ____________ can use stateful inspection to monitor and record the status of each connection and can use this information in making decisions about what packets to discard as security threats.

Describe the four risk control strategies and when you might use each one.

Describe how symmetric encryption works, draw a chart of this approach. How does DES differ from 3DES? From RC4? From AES?

A __________ is a router or special purpose computer that examines packets flowing into and out of a network and restricts access to the organization's network.

Some people think that CERT's posting of security alerts causes more break ins than it prevents. What are the pros and cons of this argument? Do you think CERT should continue to post security holes?

Maintaining data integrity is not a primary goal of security.

List three risk assessment frameworks that are commonly used.

Introduction to Data Communications

Application Layer

Physical Layer

Data Link Layer

Network and Transport Layers

Network Design

Wired and Wireless Local Area Networks

Backbone Networks

Wide Area Networks

The Internet

Network Management

Filters