Question 1

Compare and contrast symmetric and asymmetric encryption.

Accepted Answer

Symmetric and asymmetric encryption are

Question 2

Corrective controls reveal or discover unwanted events.

Accepted Answer

A) True 
 B)False

Question 3

_______________ describes how an asset can be compromised by one specific threat.

Accepted Answer

A) Threat scenarios 
B) Threat plans 
C) Threat hacks 
D) Threat contingencies 
E) Threat attacks 
A) Threat scenarios 
B) Threat plans 
C) Threat hacks 
D) Threat contingencies 
E) Threat attacks

Question 4

According to Symantec, more than 50% of all targeted companies had fewer than 2,500 employees because they

Accepted Answer

A) often have weaker security. 
B) have more assets. 
C) are more likely to have credit card numbers available. 
D) are likely off-shore. 
E) have lower bandwidth 
A) often have weaker security. 
B) have more assets. 
C) are more likely to have credit card numbers available. 
D) are likely off-shore. 
E) have lower bandwidth

Question 5

Asymmetric encryption uses the same key to encrypt and decrypt a message.

Accepted Answer

A) True 
 B)False

Question 6

How does PGP differ from SSL? How does SSL differ from IPsec? Compare and contrast IPSec tunnel mode and IPSec transfer mode.

Accepted Answer

PGP (Pretty Good Privacy) and SSL (Secur

Question 7

Describe five biometric technologies. How can a biometric enhance security in a network? What are some of the advantages and disadvantages of biometrics?

Accepted Answer

Biometric technologies are used to ident

Question 8

Which of the following is not a method for deterring outside intruders from gaining access to the organization's office or network equipment facilities?

Accepted Answer

A) locked doors on all communication closets 
B) passwords that disable the screen and keyboard of a computer 
C) secured network cabling behind walls and above ceilings 
D) use of armored cable 
E) unlocked wiring closet for network devices 
A) locked doors on all communication closets 
B) passwords that disable the screen and keyboard of a computer 
C) secured network cabling behind walls and above ceilings 
D) use of armored cable 
E) unlocked wiring closet for network devices

Question 9

Which of the following is not one of the major categories or sub-categories) into which network security threats can be placed?

Accepted Answer

A) disruption 
B) destruction 
C) controlled chaos 
D) intrusion 
E) disaster 
A) disruption 
B) destruction 
C) controlled chaos 
D) intrusion 
E) disaster

Question 10

Symmetric encryption systems have two parts: the key and the ____________.

Accepted Answer

A) algorithm 
B) spamming method 
C) IP spoofer 
D) clearance code 
E) smart card bits 
A) algorithm 
B) spamming method 
C) IP spoofer 
D) clearance code 
E) smart card bits

Question 11

A NAT firewall uses an address table to translate private IP addresses used inside the organization into proxy IP addresses used on the Internet.

Accepted Answer

A) True 
 B)False

Question 12

Often, incidents of unauthorized access known as___________, involve employees of the organization, surprisingly enough.

Accepted Answer

A) intrusion 
B) disruption 
C) controlled chaos 
D) destruction 
E) disaster 
A) intrusion 
B) disruption 
C) controlled chaos 
D) destruction 
E) disaster

Question 13

What is PKI and why is it important?

Accepted Answer

PKI, or Public Key Infrastructure, is a

Question 14

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

Accepted Answer

A) risk assessment 
B) backplane 
C) mitigating control factor analysis 
D) control verification worksheet 
E) control test plan 
A) risk assessment 
B) backplane 
C) mitigating control factor analysis 
D) control verification worksheet 
E) control test plan

Question 15

A security hole is a bug or vulnerability that permits intrusion to a computer.

Accepted Answer

A) True 
 B)False

Question 16

Which of the following is not true about one-time passwords?

Accepted Answer

A) Users' pagers or smart phones via text messaging) can receive them. 
B) They can be used in conjunction with a token system. 
C) The user must enter the one-time password to gain access or the connection is terminated. 
D) This is a good security solution for users who travel frequently and who must have secure dial-in access. 
E) They create a packet level firewall on the system. 
A) Users' pagers or smart phones via text messaging) can receive them. 
B) They can be used in conjunction with a token system. 
C) The user must enter the one-time password to gain access or the connection is terminated. 
D) This is a good security solution for users who travel frequently and who must have secure dial-in access. 
E) They create a packet level firewall on the system.

Question 17

How does IPS anomaly detection differ from misuse detection?

Accepted Answer

Intrusion Prevention Systems (IPS) can e

Question 18

DES is a commonly used symmetric encryption algorithm, developed in the mid-1990s by the American government in conjunction with IBM, and is the recommended encryption algorithm for highly sensitive data.

Accepted Answer

A) True 
 B)False

Question 19

We can calculate the relative ___________, by multiplying the impact score by the likelihood.

Accepted Answer

A) rootkit 
B) authentication 
C) risk score 
D) risk assessment 
E) risk event 
A) rootkit 
B) authentication 
C) risk score 
D) risk assessment 
E) risk event

Question 20

Which of the following type of media is least susceptible to eavesdropping?

Accepted Answer

A) fiber optics 
B) twisted pair 
C) microwave 
D) infrared 
E) coaxial cable 
A) fiber optics 
B) twisted pair 
C) microwave 
D) infrared 
E) coaxial cable

Compare and contrast symmetric and asymmetric encryption.

Corrective controls reveal or discover unwanted events.

_______________ describes how an asset can be compromised by one specific threat.

According to Symantec, more than 50% of all targeted companies had fewer than 2,500 employees because they

Asymmetric encryption uses the same key to encrypt and decrypt a message.

How does PGP differ from SSL? How does SSL differ from IPsec? Compare and contrast IPSec tunnel mode and IPSec transfer mode.

Describe five biometric technologies. How can a biometric enhance security in a network? What are some of the advantages and disadvantages of biometrics?

Which of the following is not a method for deterring outside intruders from gaining access to the organization's office or network equipment facilities?

Which of the following is not one of the major categories or sub-categories) into which network security threats can be placed?

Symmetric encryption systems have two parts: the key and the ____________.

A NAT firewall uses an address table to translate private IP addresses used inside the organization into proxy IP addresses used on the Internet.

Often, incidents of unauthorized access known as___________, involve employees of the organization, surprisingly enough.

What is PKI and why is it important?

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

A security hole is a bug or vulnerability that permits intrusion to a computer.

Which of the following is not true about one-time passwords?

How does IPS anomaly detection differ from misuse detection?

DES is a commonly used symmetric encryption algorithm, developed in the mid-1990s by the American government in conjunction with IBM, and is the recommended encryption algorithm for highly sensitive data.

We can calculate the relative ___________, by multiplying the impact score by the likelihood.

Which of the following type of media is least susceptible to eavesdropping?

Introduction to Data Communications

Application Layer

Physical Layer

Data Link Layer

Network and Transport Layers

Network Design

Wired and Wireless Local Area Networks

Backbone Networks

Wide Area Networks

The Internet

Network Management

Filters

Exam 11: Network Security

Compare and contrast symmetric and asymmetric encryption.

Corrective controls reveal or discover unwanted events.

_______________ describes how an asset can be compromised by one specific threat.

According to Symantec, more than 50% of all targeted companies had fewer than 2,500 employees because they

Asymmetric encryption uses the same key to encrypt and decrypt a message.

How does PGP differ from SSL? How does SSL differ from IPsec? Compare and contrast IPSec tunnel mode and IPSec transfer mode.

Describe five biometric technologies. How can a biometric enhance security in a network? What are some of the advantages and disadvantages of biometrics?

Which of the following is not a method for deterring outside intruders from gaining access to the organization's office or network equipment facilities?

Which of the following is not one of the major categories or sub-categories) into which network security threats can be placed?

Symmetric encryption systems have two parts: the key and the ____________.

A NAT firewall uses an address table to translate private IP addresses used inside the organization into proxy IP addresses used on the Internet.

Often, incidents of unauthorized access known as___________, involve employees of the organization, surprisingly enough.

What is PKI and why is it important?

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

A security hole is a bug or vulnerability that permits intrusion to a computer.

Which of the following is not true about one-time passwords?

How does IPS anomaly detection differ from misuse detection?

DES is a commonly used symmetric encryption algorithm, developed in the mid-1990s by the American government in conjunction with IBM, and is the recommended encryption algorithm for highly sensitive data.

We can calculate the relative ___________, by multiplying the impact score by the likelihood.

Which of the following type of media is least susceptible to eavesdropping?

Introduction to Data Communications

Application Layer

Physical Layer

Data Link Layer

Network and Transport Layers

Network Design

Wired and Wireless Local Area Networks

Backbone Networks

Wide Area Networks

The Internet

Network Management

Filters