Deck 11: Network Security

Question 1

The CERT was established at Carnegie Mellon University.

Answer 1

True

Question 2

Corrective controls reveal or discover unwanted events.

Answer 2

False

Question 3

The best solution for planning for disaster recovery is to have a fully redundant backup network placed in a different location that would not be threatened by the same natural or man-made disaster that would destroy the original network.

Answer 3

True

Question 4

Confidentiality is not a threat to business continuity.

Question 5

A recent study by CSO Magazine and the Computer Security Institute stated that the average loss suffered by businesses because of computer security breaches was approximately $350,000.

Question 6

Companies have learned that threats from hacking from its own employees occur about as often as by outsiders.

Question 7

Confidentiality refers to the protection of the organizational data from unauthorized disclosure of customer and proprietary data.

Question 8

A denial-of-service attack occurs when someone external blocks access to your network.

Question 9

Business continuity planning refers primarily to ensuring availability, with some aspects of data integrity.

Question 10

Intrusion refers to confidentiality and integrity of data

Question 11

Macro viruses can spread when an infected file is opened.

Question 12

Preventive controls mitigate or stop a person from acting or an event from occurring.

Question 13

Disk mirroring writes duplicate copies of all data on at least two different disks.

Question 14

The rise of the Internet has increased significantly the potential vulnerability of an organization's assets.

Question 15

Researchers estimate that only one or two new viruses are developed every week.

Question 16

Integrity is not a primary goal of security.

Question 17

Security on a network not only means being able to prevent a hacker from breaking into your computer but also includes being able to recover from temporary service problems or from natural disasters.

Question 18

A threat to the data communications network is any potential adverse occurrence that can do harm, interrupt the systems using the network, or cause a monetary loss to the organization.

Question 19

An uninterruptible power supply utilizes a second redundant disk for every disk on the server.

Question 20

Controls are mechanisms that reduce or eliminate threats to network security.

Question 21

DoS attackers generally use fake source IP addresses, making it harder to identify the DoS messages.

Question 22

Asymmetric encryption uses the same key to encrypt and decrypt an message..

Question 23

A packet-level firewall examines the source and destination address of every network packet that passes though the firewall

Question 24

Physical security of an organization's IT resources is not an important element in preventing intrusion to an internal LAN.

Question 25

With application level firewalls, any access that has not been disabled is permitted.

Question 26

Fault-intolerant servers contain many redundant components to prevent failure.

Question 27

The denial-of-service attack disrupts the network by flooding the network with messages so that regular messages cannot be processed.

Question 28

Network cables are the easiest target for eavesdropping.

Question 29

Decryption is the process of converting plaintext into ciphertext.

Question 30

An intruder uses TCP spoofing to send packets to a target computer requesting certain privileges be granted to some user.

Question 31

A brute-force attack is a method of trying to guess the correct password by trying every possible key.

Question 32

A Trojan horse allows a user to access a computer from a remote location.

Question 33

The most common access point used by attackers to gain access to an organization's network is the dial-up access via a modem.

Question 34

DES is a commonly used symmetric encryption algorithm developed in the mid-1990s by the American government in conjunction with IBM.

Question 35

A security hole is a bug that permits intrusion to a computer.

Question 36

A NAT firewall uses an address table to translate private IP addresses used inside the organization into proxy data link layer addressed used on the Internet.

Question 37

Triple DES uses a total of 512 bits as the key.

Question 38

Microsoft's Windows operating system meets A1 level security.

Question 39

Crackers are casual hackers with a limited knowledge of computer security.

Question 40

A patch is a software solution to correct a security hole

Question 41

A certificate authority is a trusted organization that can vouch for the authenticity of a person or organization.

Question 42

Secure Sockets Layer is an encryption standard designed for use on the Web.

Question 43

_________ controls stop a person from acting.

A)detective
B)corrective
C)mitigating
D)preventive
E)backup

Question 44

Biometric systems scan the user to ensure that the user is the sole individual authorized to access the network account.

Question 45

An asset can be compromised by more than one threat, so it is common to have more than one threat scenario for each asset.

Question 46

Often, incidents of ___________ involve employees of the organization, surprisingly enough.

A)intrusion
B)disruption
C)controlled chaos
D)destruction
E)disaster

Question 47

Developing _______ helps develop a secure network.

A)rules
B)controls
C)network maps
D)vendor documentation
E)service level agreements

Question 48

Social engineering refers to creating a team that solves virus problems.

Question 49

A tornado that eliminates a network control center would be an example of a natural __________

A)disaster
B)disruption
C)controlled chaos
D)destruction
E)intrusion

Question 50

An example of _____ of data would be if a computer virus eliminated files on that computer.

A)disruption
B)controlled chaos
C)intrusion
D)destruction
E)disaster

Question 51

Which of the following is not one of the major categories or sub-categories) into which network security threats can be placed?

A)disruption
B)destruction
C)controlled chaos
D)intrusion
E)disaster

Question 52

The most common authentication protocol used today is Kerberos.

Question 53

In recent years, management's concern about the adequacy of current control and security mechanisms used in a data communications environment has:

A)decreased because the new sophisticated technology is far more secure than the old manual methods
B)remained the same because management was always deeply interest in control and security
C)decreased because of the change in moral and ethical codes in the U.S.to a kinder and gentler society
D)increased because this commitment to data communications has changed the potential vulnerability of the organization's assets
E)remained the same because there are very few threats to data communications

Question 54

In transport mode, IPSec encrypts the entire IP packet.

Question 55

A network switch failure is an example of an) ________ threat.

A)internal
B)disruptive
C)causal
D)intrusion
E)disaster

Question 56

________ controls fix a trespass into the network.

A)corrective
B)detective
C)preventive
D)mitigating
E)backup

Question 57

When using a digital signature, the sender encrypts the message with their private key and the recipient decrypts the message with the sender's public key.

Question 58

A host based intrusion prevention system IPS) monitors activity on the server and reports intrusions to the IPS management console.

Question 59

A hacker gaining access to organizational data files and resources is an example of an) ____________ threat.

A)disruptive
B)controlled chaos
C)disruptive
D)intrusion
E)disaster

Question 60

________ controls discover unwanted events.

A)preventive
B)corrective
C)detective
D)mitigating
E)backup

Question 61

Which of the following are usually the first choice for eavesdropping?

A)unshielded twisted pair
B)shielded twisted pair
C)local cables owned by the organization
D)wireless LANs
E)fiber optics

Question 62

_______________ is an encryption standard that uses a total of 168 bits as the key.

A)Triple DES
B)Dial-back
C)WEP
D)EAP
E)Ciphering

Question 63

A ___________ assigns levels of risk to various threats to network security by comparing the nature of the threats to the controls designed to reduce them.

A)risk assessment
B)backplane
C)mitigating control factor analysis
D)control verification worksheet
E)control test plan

Question 64

An) _________ is something of value and can be either hardware or software.

A)asset
B)service level agreement
C)threat
D)security plan
E)network design

Question 65

A __________ is a router or special purpose computer that examines packets flowing into and out of a network and restricts access to the organization's network.

A)firewall
B)token system
C)ANI
D)call-back modem
E)firefighter

Question 66

Threat of intrusion comes from ____________.

A)the government
B)crackers
C)outside of the organization
D)both inside and outside of the organization
E)inside of the organization

Question 67

Which of the following is not a method for deterring intrusion?

A)training end users not to divulge passwords
B)using a smart card in conjunction with a password to gain access to a computer system
C)using biometric devices to gain access to a computer system
D)using a security software package that logs out users if that user is 'idle' for a certain amount of time
E)performing social engineering

Question 68

__________ refers to the process of translating between one set of private addresses inside a network and a set of public address outside the network.

A)Translation
B)Conversion
C)Network address translation
D)Proxy translation
E)IP conversion.

Question 69

An) ___________ is one of the most common examples of redundancy built into a network to help reduce the impact of disruption.

A)network cloaking device
B)backup punch card reader
C)uninterruptible power supply
D)service level agreement
E)help desk

Question 70

For Ethernet networks, a _______ switch can make eavesdropping more difficult.

A)secure
B)Trojan horse
C)proxy
D)spoofing
E)spamming

Question 71

The three basic network access points into most organizational networks are from the Internet, from LANs inside of the organization and ________________.

A)WLANs
B)intranet
C)extranet
D)WAN
E)none of the above

Question 72

Which of the following is not a type of intruder who attempts to gain intrusion to computer networks?

A)Delphi team member
B)script kiddies
C)crackers
D)professional hackers
E)organization employees

Question 73

A ____________ is a situation in which a hacker attempts to disrupt the network by sending messages to the network that prevent normal users' messages from being processed.

A)denial-of-service attack
B)service level agreement
C)virus
D)spamming
E)scamming

Question 74

An) __________ is any potential adverse occurrence that can do harm, interrupt the system using the network to cause monetary loss to the organization.

A)asset
B)service level agreement
C)threat
D)security plan
E)network design

Question 75

Which of the following is not a method for deterring outside intruders from gaining access to the organization's office or network equipment facilities?

A)locks on network circuits after working hours
B)passwords that disable the screen and keyboard of a computer
C)secured network cabling behind walls and above ceilings
D)use of armored cable
E)unlocked wiring closet for network devices

Question 76

A n) ______ is a special type of virus that spreads itself without human intervention.

A)snake
B)worm
C)Trojan horse
D)boot sector virus
E)stealth virus

Question 77

An) ____________, is an information system that is critical to the survival of an organization.

A)network plan
B)accounting system
C)IDS
D)mission critical application
E)firewall

Question 78

The key principle in preventing disruption, destruction and disaster is ___________.

A)redundancy
B)control spreadsheet
C)IDS
D)anti-virus software
E)prevention controls

Question 79

A sniffer program is a:

A)type of macro-virus
B)small peep-hole in a door or wall to allow a security guard to sniff the area with his or her nose before entering a secure area or location
C)used in a call-back modem
D)a program that records all LAN messages received for later unauthorized) analysis
E)secure hub program

Question 80

Which of the following type of media is least susceptible to eavesdropping?

A)fiber optics
B)twisted pair
C)microwave
D)infrared
E)coaxial cable