Deck 11: Network Security

Question 1

When someone external to your organization blocks access to your network and/or its resources, this is known as a denial-of-service attack.

Answer 1

True

Question 2

An uninterruptible power supply utilizes a second redundant disk for every disk on the server.

Answer 2

False

Question 3

The CERT was established at Carnegie Mellon University.

Answer 3

True

Question 4

Macro viruses can spread when an infected file is opened.

Question 5

Preventive controls mitigate or stop a person from acting or an event from occurring.

Question 6

The ideal solution for planning for disaster recovery is to have a fully redundant backup network placed in a different location that would not be threatened by the same natural or man-made disaster that would destroy the original network.

Question 7

Maintaining data integrity is not a primary goal of security.

Question 8

DoS attackers generally use fake source IP addresses, making it harder to identify the DoS messages.

Question 9

Business continuity planning refers primarily to ensuring availability, with some aspects of data integrity.

Question 10

Security on a network not only means being able to prevent a hacker from breaking into your computer but also includes being able to recover from temporary service problems or from natural disasters.

Question 11

Disk mirroring writes duplicate copies of all data on at least two different disks.

Question 12

The denial-of-service attack disrupts the network by flooding the network with messages so that regular messages cannot be processed.

Question 13

Corrective controls reveal or discover unwanted events.

Question 14

Companies have learned that threats from hacking from its own employees occur about as often as by outsiders.

Question 15

Confidentiality refers to the protection of the organizational data from unauthorized disclosure of customer and proprietary data.

Question 16

Intrusion primarily refers to the loss of confidentiality of organizational data.

Question 17

Controls are mechanisms that reduce or eliminate threats to network security.

Question 18

A threat to the data communications network is any potential adverse occurrence that can do harm, interrupt the systems using the network, or cause a monetary loss to the organization.

Question 19

The rise of the Internet has increased significantly the potential vulnerability of an organization's assets.

Question 20

Researchers estimate that only one or two new viruses are developed every week.

Question 21

A Trojan horse may allow an unauthorized user to access a computer from a remote location.

Question 22

DES is a commonly used symmetric encryption algorithm, developed in the mid-1990s by the American government in conjunction with IBM, and is the recommended encryption algorithm for highly sensitive data.

Question 23

Fault-intolerant servers contain many redundant components to prevent failure.

Question 24

The most common access point used by attackers to gain access to an organization's network is the Internet connection.

Question 25

A brute-force attack is a method of trying to guess the correct password by trying every possible key.

Question 26

Microsoft's Windows operating system meets the US government's A1 level security.

Question 27

Physical security of an organization's IT resources is not an important element in preventing intrusion to an internal LAN.

Question 28

When using a digital signature for the process of authentication, the sender encrypts the message with their private key and the recipient decrypts the message with the sender's public key.

Question 29

A software solution to correct a security hole is often referred to as a patch or update.

Question 30

Decryption is the process of converting plaintext into ciphertext.

Question 31

Crackers are casual hackers with a limited knowledge of computer security.

Question 32

A packet-level firewall examines the source and destination address of every network packet that passes though the firewall.

Question 33

With application level firewalls, any access that has not been explicitly denied is automatically permitted.

Question 34

Network cables are the easiest target for eavesdropping.

Question 35

A security hole is a bug or vulnerability that permits intrusion to a computer.

Question 36

Triple DES uses a total of 512 bits as the key.

Question 37

An intruder uses TCP spoofing to send packets to a target computer requesting certain privileges be granted to some user.

Question 38

A NAT firewall uses an address table to translate private IP addresses used inside the organization into proxy IP addresses used on the Internet.

Question 39

A certificate authority is a trusted organization that can vouch for the authenticity of a person or organization.

Question 40

Asymmetric encryption uses the same key to encrypt and decrypt a message.

Question 41

________ controls fix a trespass into the network.

A)corrective
B)detective
C)preventive
D)mitigating
E)backup

Question 42

An) _________ is something of value and can be either hardware or software.

A)asset
B)service level agreement
C)threat
D)security plan
E)network design

Question 43

A host based intrusion prevention system IPS) monitors activity on the server and reports intrusions to the IPS management console.

Question 44

_________ controls stop a person from acting.

A)detective
B)corrective
C)mitigating
D)preventive
E)backup

Question 45

Social engineering refers to creating a team that solves virus problems.

Question 46

An) ____________, is an information system that is critical to the survival of an organization.

A)network plan
B)accounting system
C)IDS
D)mission critical application
E)firewall

Question 47

Biometric systems scan the user to ensure that the user is the sole individual authorized to access the network account.

Question 48

In transport mode, IPSec encrypts the entire IP packet.

Question 49

Which of the following is not one of the major categories or sub-categories) into which network security threats can be placed?

A)disruption
B)destruction
C)controlled chaos
D)intrusion
E)disaster

Question 50

An example of _____ of data would be if a computer virus eliminated files on that computer.

A)disruption
B)controlled chaos
C)intrusion
D)destruction
E)disaster

Question 51

A tornado that eliminates a network control center would be an example of a natural __________

A)disaster
B)disruption
C)controlled chaos
D)destruction
E)intrusion

Question 52

A network switch failure is an example of an) ________ threat.

A)internal
B)disruptive
C)causal
D)intrusion
E)disaster

Question 53

An asset can be compromised by more than one threat, so it is common to have more than one threat scenario for each asset.

Question 54

A hacker gaining access to organizational data files and resources is an example of an) ____________ threat.

A)disruptive
B)controlled chaos
C)disruptive
D)intrusion
E)disaster

Question 55

________ controls discover unwanted events.

A)preventive
B)corrective
C)detective
D)mitigating
E)backup

Question 56

The most commonly used central authentication protocol used today is Kerberos.

Question 57

In recent years, management's concern about the adequacy of current control and security mechanisms used in a data communications environment has:

A)decreased because the new sophisticated technology is far more secure than the old manual methods
B)remained the same because management was always deeply interest in control and security
C)decreased because of the change in moral and ethical codes in the U.S.to a kinder and gentler society
D)increased because this commitment to data communications has changed the potential vulnerability of the organization's assets
E)remained the same because there are very few threats to data communications

Question 58

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

A)risk assessment
B)backplane
C)mitigating control factor analysis
D)control verification worksheet
E)control test plan

Question 59

Secure Sockets Layer is an encryption standard designed for use on the Web.

Question 60

Often, incidents of unauthorized access known as___________, involve employees of the organization, surprisingly enough.

A)intrusion
B)disruption
C)controlled chaos
D)destruction
E)disaster

Question 61

A __________ is a router or special purpose computer that examines packets flowing into and out of a network and restricts access to the organization's network.

A)firewall
B)token system
C)ANI
D)call-back modem
E)firefighter

Question 62

A sniffer program is a:

A)type of macro-virus
B)small peep-hole in a door or wall to allow a security guard to sniff the area with his or her nose before entering a secure area or location
C)used in a call-back modem
D)a program that records all LAN messages received for later analysis
E)secure hub program

Question 63

An) _______ is a screened subnet devoted solely to public access servers such as Web servers and public DNS servers.

A)intranet
B)DMZ
C)zone of authority
D)VLAN
E)smart hub

Question 64

For Ethernet networks, a _______ switch can make eavesdropping more difficult.

A)secure
B)Trojan horse
C)proxy
D)spoofing
E)spamming

Question 65

An) ____________ can use stateful inspection to monitor and record the status of each connection and can use this information in making decisions about what packets to discard as security threats.

A)application level firewall
B)bullion server
C)ANI system
D)IP spoofing systems
E)packet level firewall

Question 66

__________ refers to the process of translating between one set of private IP addresses inside a network and a set of public addresses outside the network.

A)Translation
B)Conversion
C)Network Address Translation
D)Proxy translation
E)IP conversion.

Question 67

Which of the following is not a method for deterring intrusion?

A)training end users not to divulge passwords
B)using a smart card in conjunction with a password to gain access to a computer system
C)using biometric devices to gain access to a computer system
D)using a security software package that logs out users if that user is 'idle' for a certain amount of time
E)performing social engineering

Question 68

The key principle in preventing disruption, destruction and disaster is ___________.

A)redundancy
B)control spreadsheet
C)IDS
D)anti-virus software
E)prevention controls

Question 69

Which of the following is not a method for deterring outside intruders from gaining access to the organization's office or network equipment facilities?

A)locked doors on all communication closets
B)passwords that disable the screen and keyboard of a computer
C)secured network cabling behind walls and above ceilings
D)use of armored cable
E)unlocked wiring closet for network devices

Question 70

_______________ is an encryption standard that uses a total of 168 bits as the key.

A)Triple DES
B)Dial-back
C)WEP
D)EAP
E)Ciphering

Question 71

IP spoofing means to:

A)fool the target computer and any intervening firewall into believing that messages from the intruder's computer are actually coming from an authorized user inside the organization's network
B)clad or cover the internal processing IP) lines with insulating material to shield the IP lines from excess heat or radiation
C)illegally tape or listen in on telephone conversations
D)detect and prevent denial-of-service attacks
E)act as an intermediate host computer between the Internet and the rest of the organization's networks

Question 72

A ____________ is a situation in which a hacker attempts to disrupt the network by sending messages to the network that prevent normal users' messages from being processed.

A)denial-of-service attack
B)service level agreement
C)virus
D)spamming
E)scamming

Question 73

Which of the following is not a type of intruder who attempts to gain intrusion to computer networks?

A)Delphi team member
B)script kiddies
C)crackers
D)professional hackers
E)organization employees

Question 74

Which of the following are usually the first choice for eavesdropping?

A)unshielded twisted pair
B)shielded twisted pair
C)local cables owned by the organization
D)wireless LANs
E)fiber optics

Question 75

The three basic network access points into most organizational networks are from the Internet, from LANs inside of the organization and ________________.

A)WLANs
B)intranet
C)extranet
D)WAN
E)none of the above

Question 76

A n) ______ is a special type of virus that spreads itself without human intervention.

A)snake
B)worm
C)Trojan horse
D)boot sector virus
E)stealth virus

Question 77

Which of the following type of media is least susceptible to eavesdropping?

A)fiber optics
B)twisted pair
C)microwave
D)infrared
E)coaxial cable

Question 78

An) ____________ examines the source and destination address of every network packet that passes through it.

A)packet level firewall
B)mullion server
C)ANI system
D)IP spoofing system
E)network switch

Question 79

An) __________ is any potential adverse occurrence that can do harm, interrupt the system using the network to cause monetary loss to the organization.

A)asset
B)service level agreement
C)threat
D)security plan
E)network design

Question 80

An) ___________ is one of the most common examples of redundancy built into a network to help reduce the impact of disruption.

A)network cloaking device
B)backup punch card reader
C)uninterruptible power supply
D)service level agreement
E)help desk