Deck 12: Network Security

Question 1

Controlling access to a computer network involves deciding and then limiting who can use the system and when the system can be used.

Answer 1

True

Question 2

Both SSL and IPsec may eventually give way to S-HTTP,the newer security standard created by the Internet Engineering Task Force.

Answer 2

False

Question 3

Because of security concerns,modern network operating systems do not allow network administrators to create workgroups.

Answer 3

False

Question 4

One of the most common ways to control access to a system is to require user IDs and passwords.

Question 5

Internet systems are the only systems that experience security problems.

Question 6

Expensive computer systems should always be placed in the basements of buildings.

Question 7

Some computer systems generate random passwords that are very difficult to guess,but are also hard to remember.

Question 8

The physical protection of a computer system or a computer network consists of protecting the equipment from physical damage.

Question 9

A worm is a form of computer virus.

Question 10

Auditing a computer system is often a good way to deter crime.

Question 11

Many employees feel surveillance is an intrusion into their privacy.

Question 12

Rarely,passwords become known,or "misplaced," and fall into the wrong hands.

Question 13

Pings are used most commonly by Unix-based systems.

Question 14

The two leading attack methods for the last few years have exploited known vulnerabilities in operating systems and in application software.

Question 15

Top-level executives often have access to a narrow range of information within a company.

Question 16

All system attacks need a user to open an e-mail or Web page.

Question 17

One of the inherent problems with protecting a single key is that it means that only one key is used to both encode and decode the message.

Question 18

Early cryptography algorithms used the same key for both encryption and decryption.

Question 19

One popular application of IPsec is in the support of virtual private networks.

Question 20

A popular attack method is to abuse or take advantage of valid user accounts and the permissions associated with those accounts.

Question 21

A proxy server sits inside a company's corporate network.

Question 22

To authenticate electronic documents as yours,you need to create a digital signature.

Question 23

A ____ is a common Internet tool used to verify if a particular IP address of a host exists and to see if the particular host is currently available.

A) ping
B) firewall
C) router
D) DNS

Question 24

A ____ virus mutates with every infection,thus making them difficult to locate.

A) polymorphic
B) macro
C) boot sector
D) file infector

Question 25

The DES algorithm works with 128-bit blocks of data.

Question 26

A packet filter firewall is a computer running proxy server software,whose function is much like that of a librarian who controls access to books in a library's rare books room.

Question 27

Some common types of denial of service include e-mail bombing,____,and ping storm.

A) firewalling
B) filtering
C) smurfing
D) routing

Question 28

A ____ virus is a virus that infects a piece of executable code such as an .exe or .com file.

A) polymorphic
B) macro
C) boot sector
D) file infector

Question 29

One very common technique to attack a system is to deliver an e-mail or Web page that contains a malicious piece of code called a ____.

A) NOS
B) firewall
C) proxy
D) mobile malicious code

Question 30

All certificates are issued by a certificate authority.

Question 31

A ____ virus is a common type of virus that is programmed into an attached macro file.

A) boot sector
B) macro
C) polymorphic
D) file infector

Question 32

A ____ virus is usually stored on some form of removable media.When the removable media (such as a flash drive)is connected to a new machine and is used to boot the machine,the virus moves from the media into the host system.

A) polymorphic
B) macro
C) boot sector
D) file infector

Question 33

____ is the name of a particularly nasty automated program that attacks a network by exploiting Internet Protocol (IP)broadcast addressing and other aspects of Internet operation.

A) E-mail bombing
B) Spoofing
C) Smurfing
D) Firewalling

Question 34

If e-mail messages have a return address of someone other than the person actually sending the e-mail,then the sender is ____.

A) e-mail bombing
B) spoofing
C) smurfing
D) firewalling

Question 35

If you exclusive-OR a 0 and a 0,as is done with certain spread spectrum techniques,the result is 1.

Question 36

WAP has been replaced by a new standard,Wired Equivalency Protocol (WEP).

Question 37

The National Institute of Standards and Technology selected the algorithm Lucifer in October 2000 as the basis for AES.

Question 38

A firewall cannot limit users on the Internet from accessing certain portions of a corporate network.

Question 39

Many people consider the Trojan horse to be a form of computer ____.

A) virus
B) firewall
C) router
D) switch

Question 40

One of the primary functions of Kerberos is to authenticate users.

Question 41

____ is data before any encryption has been performed.

A) Plaintext
B) Ciphertext
C) Encriptext
D) Cryptotext

Question 42

____ involves electronically monitoring data flow and system requests into and out of their systems.

A) Worms
B) Intrusion detection
C) Firewalls
D) Routers

Question 43

____ cable represented a major improvement in the ability of transmission media to secure sensitive data.

A) Coaxial
B) Twisted
C) Fiber-optic
D) Copper

Question 44

A ____ is a security procedure that uses public key cryptography to assign to a document a code for which you alone have the key.

A) certificate
B) certificate authority
C) PKI
D) digital signature

Question 45

A ____ cipher is different from a substitution-based cipher in that the order of the plaintext is not preserved.

A) transposition-based
B) monoalphabetic
C) polyalphabetic
D) multialphabetic

Question 46

A(n)____ is the computer program that converts plaintext into an enciphered form.

A) worm
B) Trojan horse
C) firewall
D) encryption algorithm

Question 47

____ is a set of protocols created to support the secure transfer of data at the IP layer.

A) Transport Layer Security (TLS)
B) IPsec (IP security)
C) Date Encryption Standard (DES)
D) Advanced Encryption Standard (AES)

Question 48

The concept of two keys,public and private,is called ____ cryptography.

A) private key
B) public key
C) secret key
D) symmetric

Question 49

Perhaps the most common form of protection from unauthorized use of a computer system is the ____.

A) password
B) certificate
C) PKI
D) digital signature

Question 50

____ usually involves having a software program that monitors every transaction within a system.

A) Firewalling
B) Routing
C) Access rights
D) Computer auditing

Question 51

SSL's successor is ____,which is based upon SSL version 3 and contains a few technical improvements over SSL.

A) Transport Layer Security (TLS)
B) IPsec
C) Date Encryption Standard (DES)
D) Advanced Encryption Standard (AES)

Question 52

____ may be considered a form of physical protection.

A) Router
B) Worms
C) Trojan horses
D) Surveillance

Question 53

Possibly the earliest example of a polyalphabetic cipher is the ____ cipher.

A) Caesars
B) Roman
C) Enigma
D) Vigenére

Question 54

The opposite of asymmetric encryption is ____ encryption,in which one key is used to encrypt and decrypt.

A) available key
B) asymmetric key
C) symmetric
D) public key

Question 55

____ is an authentication protocol designed to work on client/server networks that use secret or symmetric cryptography.

A) Kerberos
B) DES
C) 3DES
D) AES

Question 56

A ____ substitution-based cipher replaces a character or group of characters with a different character or group of characters.

A) transposition
B) monoalphabetic
C) monotransposition
D) polytransposition

Question 57

A(n)____ is the unique piece of information that is used to create ciphertext and then decrypt the ciphertext back into plaintext.

A) encryption algorithm
B) firewall
C) key
D) IP address

Question 58

The ____ is a commonly employed encryption method used by businesses to send and receive secure transactions.

A) firewall
B) Trojan horse
C) Data Encryption Standard (DES)
D) TCP

Question 59

____ is high-quality encryption software that has become quite popular for creating secure e-mail messages and encrypting other types of data files for average users.

A) DES
B) PGP
C) 3DES
D) AES

Question 60

In ____,a Web user seeking to visit a particular company's Web site is unknowingly redirected to a bogus Web site that looks exactly like that company's official Web site.

A) smurfing
B) pharming
C) worming
D) e-mail bombing

Question 61

A(n)____________________ is a condition in which the Internet ping program is used to send a flood of packets to a server to make the server inoperable.

Question 62

____ technology essentially takes the data to be transmitted and rather than transmitting it in a fixed bandwidth spreads it over a wider bandwidth.

A) Spread spectrum
B) 3DES
C) AES
D) PKI

Question 63

____________________ techniques that observe and record some aspect of the user,such as voiceprints,fingerprints,eyeprints,and faceprints,appear to be the wave of the future to replace passwords.

Question 64

A mobile malicious code is also known as ____________________ because it is hiding inside a harmless-looking piece of code.

Question 65

The first security protocol for wireless LANs was ____.

A) Wi-Fi Protected Access (WPA)
B) Wired Equivalency Protocol (WEP)
C) IPsec
D) IEEE 802.11i

Question 66

_________________________ bombard a computer site with so many messages that the site is incapable of performing its normal duties.

Question 67

In ____________________,a perpetrator sends an excessive amount of unwanted e-mail messages to someone.

Question 68

Many certificates conform to the ____ standard.

A) X.309
B) X.409
C) X.509
D) X.609

Question 69

A ____ is a list of certificates that have been revoked before their originally scheduled expiration date.

A) PKI
B) public key cryptography
C) digital certificate
D) certificate revocation list (CRL)

Question 70

A computer ____________________ is a small program that alters the way a computer operates without the knowledge of the computer's users and often does various types of damage.

Question 71

When hackers will even go so far as to create an application that appears to be legitimate and prompts users for an ID and password,the type of attack is termed ____________________.

Question 72

The ____ firewall is essentially a router that has been programmed to filter out certain IP addresses or TCP port numbers.

A) proxy server
B) switch
C) packet filter
D) hub

Question 73

IEEE ____ addresses both weaknesses of WEP by allowing the keys,encryption algorithms,and negotiation to be dynamically assigned,and by adopting the AES encryption based on the Rijndael algorithm with 128-,192-,or 256-bit keys.

A) 802.11a
B) 802.11b
C) 802.11g
D) 802.11i

Question 74

In computer terminology,a(n)____________________ is a trap that is set by network personnel in order to detect unauthorized use of a network resource.

Question 75

____ is the combination of encryption techniques,software,and services that involves all the necessary pieces to support digital certificates,certificate authorities,and public key generation,storage,and management.

A) 3DES
B) Advanced Encryption Standard (AES)
C) Data Encryption Standard (DES)
D) Public key infrastructure (PKI)

Question 76

____ spread spectrum spreads the transmission of a signal over a wide range of frequencies using mathematical values.

A) Frequency hopping
B) Direct sequence
C) Time hopping
D) Amplitude sequence

Question 77

____ scanning works by recognizing the unique pattern of a virus.

A) Time-based
B) Amplitude-based
C) Signature-based
D) Frequency-based

Question 78

____________________ define the network resources that a user or set of users can access.

Question 79

A computer ____________________ is a program that copies itself from one system to another over a network,without the assistance of a human being.

Question 80

An antivirus technique that is used in conjunction with signature-based scanning and terminate-and-stay-resident monitoring is ____.

A) integrity checking
B) time division
C) direct sequence
D) frequency hopping