Question 1

What technology is a portion of the 802.15 standard and has a transfer rate of 1-to-3 Mbps within a ten meter range?

Accepted Answer

Bluetooth wireless technology is a portion of the 802.15 standard and has a transfer rate of 1-to-3 Mbps within a ten meter range. Real security risks exist when transferring unprotected data via Bluetooth in a public area because any device within a certain range can capture this type of transfer. An additional risk is called "Bluejacking." Bluejackers look for a receiving device and then send a message to it. Often, the Bluejacker is trying to send someone else their business card, which will be added to the victim's contact list in their address book. To determine where the Bluejacker is, just look around you since the range is only ten meters. The countermeasure is to put the Bluetooth-enabled device into non-discoverable mode so others cannot identify this device in the first place.

Question 2

If wireless connectivity between different locations are to take place via satellite links, they must be within the satellite's_________?

Accepted Answer

If wireless connectivity between different locations is to take place via satellite links, they must be within the satellite's line of sight and footprint. The sender of information modulates the data onto a radio signal that is transmitted to the satellite. The transponder on the satellite receivers this signal, amplifies it, and relays it to the receiver. Satellites provide broadband transmission by antenna and the available bandwidth depends upon the antenna and terminal type and the service provided by the service provider. Time-sensitive applications can suffer from the delays experienced as the data go to and from the satellite.

Question 3

Baseband uses an entire communication channel for its transmissions. What divides the communication channel into individual and independent channels?

Accepted Answer

Broadband divides the communication channel into individual and independent channels. Broadband encompasses many different types of technologies, but one general rule is that it provides data transmissions higher than 56 Kbps, which is what a stander modem dial-up connection line provides. Broadband communications provide channels for data transmission and can be used by many users.

Question 4

Ethernet is as a LAN-sharing technology that enables several devices to communicate on the same networks. How fast does Fast Ethernet go?

Accepted Answer

Fast Ethernet goes 100Mbps. Fast Ethernet is regular Ethernet, except that it runs at 100MBPS over twisted-par wiring. It uses the traditional CSMA/CD and the original frame format of Ethernet. One environment can run 10- and 1000-Mbps network segments that can communicate via 10/100 hubs or switches. With only cabling and transmission distances being different, there are four types of Fast Ethernets in existence.

Question 5

There are two main types of coaxial cable used within LAN environments, 50-ohm cable and 75-ohm cable. What is the core of these cables?

Accepted Answer

The core of coaxial cable is copper. Coaxial cable has a copper core that is surrounded by a shielding layer and grounding wire. This is all encased within a protective outer jacket. Coaxial cables use copper wires as their data transmission media. Compared to twisted-pair cable, coaxial cable is more resistant to electromagnetic interference, provides a higher bandwidth, and supports the uses of longer cable lengths. However, twisted-pair cable is cheaper and easier to work with and the move to switched environments that provide hierarchical wiring schemes has overcome the cable-length issues.

Question 6

What has the capability that allows a protocol to distinguish between different classes of messages and assign priority levels?

Accepted Answer

Quality of Service (QoS) has the capability that allows a protocol to distinguish between different classes of messages and assign priority levels. A technology that provides QoS allows an administrator to assign a priority level to time-sensitive traffic. The protocol then ensures this type of traffic has a specific or minimum rate of delivery. QoS allows a service provider to guarantee a level of service to its customers. QoS began with ATM and then was integrated into other technologies and protocols responsible for moving data from one place to another.

Question 7

Which of the following protocols operates on 2.4GHz and has a bandwidth of 1Mbps or 2Mbps?

Accepted Answer

802.11 operates at 2.4GHz and allows for bandwidths of 1Mbps or 2Mbps.
802.11 is the original version of the standard IEEE 802.11. Released in 1997, it specified two net bit rates of 1 or 2 Mbit/s, in addition to a forward error correction code. It specified three alternative physical layer technologies: diffuse infrared operating at 1 Mbit/s, frequency-hopping spread spectrum operating at 1 Mbit/s or 2 Mbit/s, and direct-sequence spread spectrum operating at 1 Mbit/s or 2 Mbit/s. It is almost obsolete now.

Question 8

Rebecca wishes to control how data can flow into and out of her network. She spoke to her boss about problems the office is experiencing with data flow. He took it upon himself to purchase a program, but the program cannot prevent attacks that employ application-specific vulnerabilities. What did the boss purchase?

Accepted Answer

A security method of controlling what data can flow into and out of a network, but fails to prevent attacks that employ application-specific vulnerabilities, is a packet-filtering firewall. Packet filtering takes place by using ACLs, which are developed and applied to devices. The filtering is based on network layer information, which means the device cannot look too far into the packet itself. It can make decisions based on header information only. Packet-filtering firewalls do not keep track of the state of a connection like stateful-inspection firewalls. The problems with packet-filtering firewalls include the fact that logging functionality present in packet-filtering firewalls is limited, most do not support advanced user authentication schemes, and many cannot detect a net packet in with the OSI layer 3 addressing information has been altered. However, these weaknesses are mainly due to this being a first generation firewall.

Question 9

Rebecca returned the Packet-filtering Firewall that she bought to control the data that can flow into and out of a network. Instead, Rebecca went and bought the fifth-generation firewall that creates dynamic, customized TCP/IP stacks when a packet needs to be evaluated. What firewall did Rebecca purchase?

Accepted Answer

The fifth-generation that creates dynamic, customized TCP/IP stacks when a packet need to be evaluated is the Kernel proxy firewall. When a packet arrives at a kernel proxy firewall, a new virtual network sack is created, which is made up of only the protocol proxies necessary to examine this specific packet properly. The kernel proxy firewalls are faster than application-layer proxy firewalls because all of the inspection and processing takes place in the kernel and does not need to be passed up to a higher software layer in the operating system. It is still a proxy-based system, so the connection between the internal and external entity is broken by the proxy acting as a middleman and it can perform NAT by changing the source address, as do the preceding proxy-based firewalls.

Question 10

What is the main gate between users and corporate web-based resources?

Accepted Answer

Web Access Management (WAM) is the main gate between users and corporate web-based resources. WAM software controls what users can access when using a web browser to interact with web-based enterprise assets. This type of technology is continually becoming more robust and experiencing increased deployment. This is because of the increased use of e-commerce, online banking, contend providing, and web services.

Question 11

What is the first line of defense for a network's security and is another name for a locked-down system?

Accepted Answer

Bastion Host is the first line of defense for a network's security and is another name for a locked-down system. A bastion host is usually a highly-exposed device because it is the first line in a network's security and its existence is known on the Internet. This means the device must be extremely secure. A bastion host is not tied to firewall software and activities. It is just a system that is properly locked down.
Any system that resides within the DMZ should be installed on a bastion host since it is closer to the Internet and most likely closer to those who would like to do it harm If firewall software is not installed on a locked-down operating system.

Question 12

Which of the following specifies why Shared Key authentication is considered a security risk?

Accepted Answer

Shared Key authentication is considered a security risk because an access point transmits unencrypted challenge text and receives the same challenge text encrypted with the WEP key.
Because the plaintext challenge and the encrypted plaintext challenge are transmitted in the clear in sequence, a hacker could easily obtain both with a protocol analyzer. These challenges can be used to yield the WEP key, which could then be used for real-time decryption of data packets on the network.

Question 13

Why is SSID filtering not considered a secure form of access control?

Accepted Answer

SSID filtering is not considered a secure form of access control because a network SSID can be easily found out using a protocol analyzer.
SSID is sent as part of each beacon frame and probe response frame. A protocol analyzer is computer software or hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams flow across the network, the sniffer captures each packet, and if needed, decodes and analyzes its content according to the appropriate RFC or other specifications.

Question 14

Why should access points be connected to switches instead of hubs?

Accepted Answer

Access points should be connected to switches instead of hubs because hubs are broadcast devices and pose an unnecessary security risk.
Hubs are broadcast devices that pass all information to all of their ports. If access points are connected to hub ports, all packets on the wire will also be broadcasted across the wireless segment, giving hackers more information about the network than is absolutely necessary.

Question 15

Which of the following wireless LAN user authentication methods provides maximum security?

Accepted Answer

You should use device independent user names and passwords to provide maximum security during wireless LAN user authentication.
You should never indicate the hardware resources when authenticating wireless LAN users. This makes it easy for a hacker to hack the logon credentials based on the hardware resource you are using. Instead, user authentication should be done based on username and passwords that are independent of devices.

Question 16

What type of protocol is used by remote users to authenticate over PPP lines and is the least secure authentication method?

Accepted Answer

Password Authentication Protocol is used by remote users to authenticate over PPP lines and is the least secure authentication method. PAP provides identification and authentication of the user who is attempting to access a network form a remote system. This protocol requires a user to enter a password before being authenticated. The password and the username credentials are sent over the network to the authentication server after a connection has been established via PPP. The authentication server has a database of user credentials that are compared to the supplied credentials to authenticate users. Because the credentials are sent in cleartext, which renders them easy to capture by network sniffers, PAP is one of the least secure authentication methods.

Question 17

Applications need to be able to interact with information stored in databases for data to be useful. What application programming interface language allows an application to communicate with a database either locally or remotely?

Accepted Answer

Open Database Connectivity (ODBC) is an application programming (API) interface language that allows an application to communicate with a database either locally or remotely. The application sends requests to the ODBC API. ODBC tracks down the necessary database-specific driver for the database to carry out the translation, which in turn translates the request to the database commands that a specific database will understand.

Question 18

Which of the following security options are included in most wireless residential gateways?

Accepted Answer

Most wireless residential gateways include a VPN client.
The VPN client's pass-through functionality allows SOHO users to connect to a corporate VPN server over the Internet using a secure tunnel. Virtual servers must be manually configured by the administrator to direct packets to a particular server. This control allows the administrator to keep the internal servers secure.

Question 19

Which of the following is the best solution to mitigate a jamming attack?

Accepted Answer

The best solution for a jamming attack is to use a spectrum analyzer to locate the RF source and then remove it.
Jamming is one of many exploits used to compromise the wireless environment. It denies service to authorized users as legitimate traffic is jammed by the overwhelming frequencies of illegitimate traffic. You should find and remove the jamming signal. If you are not able to remove the signal, use the wireless LAN in another frequency spectrum to avoid the interference.

Quiz 3: Communication