Question 1

Network security is more often compromised "from the inside" than from external sources.

Accepted Answer

It is a common observation that network security breaches are typically caused by insiders, including employees or contractors, rather than external hackers or attackers. Insiders can easily bypass security measures, misuse their access privileges, steal confidential information, or introduce malware or other malicious code into a network. Therefore, it is crucial for organizations to implement a comprehensive security strategy that not only addresses external threats but also monitors and manages internal risks.

Question 2

The use of certificate authorities to associate public keys with certain users is known as ____.
A) PGP
B) PKI
C) IPSec
D) SSL

Accepted Answer

The use of certificate authorities to associate public keys with certain users is known as Public Key Infrastructure (PKI). PGP (Pretty Good Privacy) is a type of encryption software that uses a combination of symmetric-key and public-key cryptography. IPSec (Internet Protocol Security) is a set of protocols for secure communication over IP networks. SSL (Secure Sockets Layer) is a protocol used for secure communication over the internet. While all of these terms relate to cryptography and security, only PKI specifically refers to the use of certificate authorities to associate public keys with users.

Question 3

A ____ attack occurs when a system becomes unable to function because it has inundated with requests for services and can't respond to any of them.
A) flashing
B) denial-of-service
C) war driving
D) phishing

Accepted Answer

A denial-of-service (DoS) attack occurs when a system is flooded with traffic or requests that consume its resources, making it difficult or impossible to serve legitimate requests. This type of attack can disrupt business operations, cause financial losses, or be used as a smokescreen for other malicious activities. Flashing, war driving, and phishing are unrelated to this type of attack.

Question 4

Encryption is the last means of defense against data theft.

Accepted Answer

Encryption is a technique used to convert plain text into a secret code that can't be easily read by anyone without the decryption key. It's one of the strongest forms of data protection available today and is often used to secure sensitive information such as passwords, financial data, and other private data. While there are other ways to protect data, such as firewalls and antivirus software, encryption is often the last means of defense against data theft because it provides an additional layer of security that's difficult to break.

Question 5

____ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.
A) PGP
B) SSH
C) IPSec
D) SSL

Accepted Answer

PGP (Pretty Good Privacy) is a public key encryption system that authenticates the sender and encrypts the email data during transmission. It is widely used for secure communications and is compatible with various email clients. SSH (Secure Shell) is a protocol used for secure remote login to a server, IPSec (Internet Protocol Security) is a protocol suite for securing Internet Protocol (IP) communications, and SSL (Secure Sockets Layer) is a protocol used to create a secure connection between a web server and a web browser. However, none of these options specifically address email encryption and sender verification like PGP does.

Question 6

In a ____ attack, a person redirects or captures secure transmissions as they occur.
A) denial-of service
B) man-in-the-middle
C) war driving
D) phishing

Accepted Answer

This is the classic definition of a man-in-the-middle attack, where an attacker intercepts secure communications between two parties and has the ability to read, modify, or even inject new data into the transmission.

Question 7

A security policy should state exactly which hardware, software, architecture, or protocols will be used to ensure security.

Accepted Answer

A security policy should outline security goals and objectives, but it should not limit the tools and technologies used to achieve them. The policy should leave room for flexibility and adaptation as new threats and solutions emerge.

Question 8

A ____ firewall is a router (or a computer installed with software that enables it to act as a router) that examines the header of every packet of data it receives to determine whether that type of packet is authorized to continue to its destination.
A) packet-filtering
B) gateway
C) proxy
D) selective

Accepted Answer

A packet-filtering firewall examines the header of every packet of data it receives to determine whether that type of packet is authorized to continue to its destination. Gateways and proxies are types of firewalls, but they may not necessarily use packet filtering as their primary method of filtering traffic. "Selective" is not a commonly used term to describe firewalls.

Question 9

A(n) ____ is a password-protected and encrypted file that holds an individual's identification information, including a public key.
A) digital certificate
B) authentication file
C) access control list
D) authentication certificate

Accepted Answer

A digital certificate is a password-protected and encrypted file that holds an individual's identification information, including a public key. It is commonly used for authentication purposes in online transactions and communication to ensure the security and privacy of sensitive information.

Question 10

The combination of a public key and a private key is known as a ____.
A) key lock
B) key frame
C) key pair
D) key set

Accepted Answer

The combination of a public key and a private key is known as a key pair. A key pair is used in public-key cryptography to encrypt and decrypt messages. The public key is shared with others and used to encrypt messages, while the private key is kept secret and used to decrypt those messages. Therefore, option C is the correct choice. The other options, key lock, key frame, and key set are not related to public-key cryptography.

Question 11

A router that is not configured to drop packets that match certain or suspicious characteristics is an example of a risk associated with ____.
A) people
B) transmission and hardware
C) protocols and software
D) Internet access

Accepted Answer

A router not configured to drop suspicious packets is a risk associated with transmission and hardware, as it involves the physical and operational aspects of network devices.

Question 12

A ____ attack occurs when a hacker uses programs that try a combination of a user ID and every word in a dictionary to gain access to the network.
A) flashing
B) denial-of-service
C) dictionary
D) brute force

Accepted Answer

A dictionary attack specifically refers to the method where a hacker uses a list of potential passwords (often compiled into a "dictionary") to attempt to gain unauthorized access to a user's account. This contrasts with a brute force attack, which tries every possible combination of characters.

Question 13

A NOS that contains a "back door"is an example of a risk associated with ____.
A) people
B) transmission and hardware
C) protocols and software
D) Internet access

Accepted Answer

A backdoor in a network operating system can be created through loopholes in the software and protocols, making it a risk associated with protocols and software. It is not directly related to people, hardware, or internet access.

Question 14

By default, the 802.11 standard offers substantial security.

Accepted Answer

By default, the 802.11 standard does not offer substantial security. It only provides basic security mechanisms such as Wired Equivalent Privacy (WEP), which are easily hackable. It is recommended to implement additional security measures such as Wi-Fi Protected Access (WPA) or WPA2 to enhance security.

Question 15

____ is a social engineering practice in which a person attempts to glean access or authentication information by posing as someone who needs that information.
A) Cracking
B) Hacking
C) War driving
D) Phishing

Accepted Answer

This describes phishing, where an attacker impersonates a trusted entity to deceive a victim into providing sensitive information such as login credentials, credit card numbers, or other personal information.

Question 16

Human errors, ignorance, and omissions cause more than half of all security breaches sustained by networks.

Accepted Answer

According to various studies and reports, human errors, ignorance, and omissions are responsible for more than 50% of all security breaches experienced by networks. This includes actions such as clicking on malicious links, password sharing, failure to implement security updates, and improper configurations, among others. While technical vulnerabilities and external threats also factor into cybersecurity risks, it is critical to recognize and address the role of human behavior in preventing and mitigating network breaches.

Question 17

A ____ attack occurs when an Internet chat user sends commands to a victim's machine that causes the screen to fill with garbage characters and requires the victim to terminate their chat sessions.
A) flashing
B) denial-of-service
C) war driving
D) phishing

Accepted Answer

A flashing attack involves sending disruptive commands to a victim's machine during an Internet chat, causing the screen to fill with garbage characters and forcing the victim to end the chat session.

Question 18

A ____ attack occurs when a hacker tries numerous possible character combinations to find the key that will decrypt encrypted data.
A) flashing
B) denial-of-service
C) dictionary
D) brute force

Accepted Answer

Brute force attack refers to trying all possible character combinations to decrypt encrypted data.

Question 19

____ software searches a node for open ports.
A) Phishing
B) Sniffing
C) Authentication
D) Port scanner

Accepted Answer

Port scanner software searches for open ports on a node, allowing an attacker to potentially exploit vulnerabilities or access sensitive information. Phishing and authentication are unrelated terms, while sniffing refers to capturing network traffic.

Question 20

A ____ main function is to examine packets and determine where to direct them based on their Network layer addressing information.
A) switch's
B) gateway's
C) router's
D) proxy server's

Accepted Answer

Routers are designed to examine packets and determine where to direct them based on their Network layer addressing information. Switches are designed to manage network traffic by directing data to its destination based on the Media Access Control (MAC) address. Gateway is a networking device that connects different networks using different protocols together. Proxy servers are used to intercept and redirect network traffic.

Quiz 11: Network Security

Network security is more often compromised "from the inside" than from external sources.

The use of certificate authorities to associate public keys with certain users is known as ____.

A ____ attack occurs when a system becomes unable to function because it has inundated with requests for services and can't respond to any of them.

Encryption is the last means of defense against data theft.

____ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.

In a ____ attack, a person redirects or captures secure transmissions as they occur.

A security policy should state exactly which hardware, software, architecture, or protocols will be used to ensure security.

A ____ firewall is a router (or a computer installed with software that enables it to act as a router) that examines the header of every packet of data it receives to determine whether that type of packet is authorized to continue to its destination.

A(n) ____ is a password-protected and encrypted file that holds an individual's identification information, including a public key.

The combination of a public key and a private key is known as a ____.

A router that is not configured to drop packets that match certain or suspicious characteristics is an example of a risk associated with ____.

A ____ attack occurs when a hacker uses programs that try a combination of a user ID and every word in a dictionary to gain access to the network.

A NOS that contains a "back door"is an example of a risk associated with ____.

By default, the 802.11 standard offers substantial security.

____ is a social engineering practice in which a person attempts to glean access or authentication information by posing as someone who needs that information.

Human errors, ignorance, and omissions cause more than half of all security breaches sustained by networks.

A ____ attack occurs when an Internet chat user sends commands to a victim's machine that causes the screen to fill with garbage characters and requires the victim to terminate their chat sessions.

A ____ attack occurs when a hacker tries numerous possible character combinations to find the key that will decrypt encrypted data.

____ software searches a node for open ports.

A ____ main function is to examine packets and determine where to direct them based on their Network layer addressing information.