Deck 12: Network Security

Question 1

Human errors,ignorance,and omissions cause more than half of all security breaches sustained by networks.

Answer 1

True

Question 2

A ____ attack occurs when a hacker uses programs that try a combination of a user ID and every word in a dictionary to gain access to the network.

A) flashing
B) denial-of-service
C) dictionary
D) brute force

Answer 2

C

Question 3

A(n)____ is a password-protected and encrypted file that holds an individual's identification information,including a public key.

A) digital certificate
B) authentication file
C) access control list
D) authentication certificate

Answer 3

A

Question 4

A ____ attack occurs when an Internet chat user sends commands to a victim's machine that cause the screen to fill with garbage characters and requires the victim to terminate their chat sessions.

A) flashing
B) denial-of-service
C) war driving
D) phishing

Question 5

____ software searches a node for open ports.

A) Phishing
B) Sniffing
C) Authentication
D) Port scanner

Question 6

A router that is not configured to drop packets that match certain suspicious characteristics is an example of a risk associated with ____.

A) people
B) transmission and hardware
C) protocols and software
D) Internet access

Question 7

____ is a social engineering practice in which a person attempts to glean access or authentication information by posing as someone who needs that information.

A) Cracking
B) Hacking
C) War driving
D) Phishing

Question 8

By default,the 802.11 standard offers substantial security.

Question 9

Encryption is the last means of defense against data theft.

Question 10

A ____ main function is to examine packets and determine where to direct them based on their Network layer addressing information.

A) switch's
B) gateway's
C) router's
D) proxy server's

Question 11

The combination of a public key and a private key is known as a ____.

A) key lock
B) key frame
C) key pair
D) key set

Question 12

In a ____ attack,a person redirects or captures secure transmissions as they occur.

A) denial-of service
B) man-in-the-middle
C) war driving
D) phishing

Question 13

A ____ attack occurs when a system becomes unable to function because it has been deluged with data transmissions or otherwise disrupted.

A) flashing
B) denial-of-service
C) war driving
D) phishing

Question 14

A ____ attack occurs when a hacker tries numerous possible character combinations to find the key that will decrypt encrypted data.

A) flashing
B) denial-of-service
C) dictionary
D) brute force

Question 15

Network security is more often compromised "from the inside" than from external sources.

Question 16

A ____ firewall is a router (or a computer installed with software that enables it to act as a router)that examines the header of every packet of data it receives to determine whether that type of packet is authorized to continue to its destination.

A) packet-filtering
B) gateway
C) proxy
D) selective

Question 17

An NOS that contains a "back door"is an example of a risk associated with ____.

A) people
B) transmission and hardware
C) protocols and software
D) Internet access

Question 18

____ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.

A) PGP
B) SSH
C) IPSec
D) SSL

Question 19

The use of certificate authorities to associate public keys with certain users is known as ____.

A) PGP
B) PKI
C) IPSec
D) SSL

Question 20

A security policy should state exactly which hardware,software,architecture,or protocols will be used to ensure security.

Question 21

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
Software that can react to suspicious activity.

Question 22

In general,information is ____________________ if it could be used by other parties to impair an organization's functioning,decrease customers' confidence,cause a financial loss,damage an organization's status,or give a significant advantage to a competitor.

Question 23

A(n)____________________ identifies an organization's security risks,levels of authority,designated security coordinator and team members,responsibilities for each team member,and responsibilities for each employee.

Question 24

A VPN ____ authenticates VPN clients and establishes tunnels for VPN connections.

A) router
B) service
C) concentrator
D) certificate authority

Question 25

A(n)____________________ is a software application on a network host that acts as an intermediary between the external and internal networks,screening all incoming and outgoing traffic.

Question 26

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
Software that can only detect and log suspicious activity.

Question 27

____ is a method of encrypting TCP/IP transmissions.

A) PGP
B) IPSec
C) PAP
D) SSL

Question 28

RADIUS and TACACS belong to a category of protocols known as AAA (____).

A) access, authorization, and accounting
B) authentication, authorization, and accounting
C) authentication, authorization, and authority
D) authentication, authorization, and access

Question 29

____________________ is the use of an algorithm to scramble data into a format that can be read only by reversing the algorithm.

Question 30

A(n)____________________ is a thorough examination of each aspect of the network to determine how it might be compromised.

Question 31

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
Data is encrypted using a single key.

Question 32

In ____,both computers verify the credentials of the other.

A) mutual authorization
B) mutual access
C) mutual authentication
D) mutual verification

Question 33

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
A firewall that can view a data stream.

Question 34

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
A firewall that can block designated types of traffic based on application data contained within packets.

Question 35

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
A firewall that protects only the computer on which it is installed.

Question 36

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
Data is encrypted using two keys.

Question 37

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
A software application on a network host that acts as an intermediary between the external and internal networks,screening all incoming and outgoing traffic.

Question 38

MATCHING
Match each item with a statement below:
a.IPS
f.proxy server
b.IDS
g.proxy service
c.content filtering
h.public key encryption
d.host-based
i.private key encryption
e.stateful
The host that runs the proxy service.

Question 39

In ____ ,a hacker forges name server records to falsify his host's identity.

A) IP spoofing
B) DNS spoofing
C) ID spoofing
D) DHCP spoofing

Question 40

____ protocols are the rules that computers follow to accomplish authentication.

A) Access
B) Availability
C) Authority
D) Authentication

Question 41

Describe the three-way handshake used in CHAP.

Question 42

Define and describe PAP.

Question 43

Describe one potential flaw in CHAP and MS-CHAP authentication and explain how it is resolved.

Question 44

Describe the two phases IPSec use to accomplish authentication.

Question 45

Describe who should conduct a security audit and advantages,if any.

Question 46

Describe what distinguishes 802.1x from other authentication standards.

Question 47

Describe the SCP (Secure CoPy)utility.

Question 48

Define SSH (secure shell)and explain threats it guards against.Include an explanation of the encryption algorithms that may be used with it.

Question 49

Describe an advantage of using EAP.

Question 50

Explain how to block traffic attempting to exit a LAN and discuss why an administrator would want to do this.