Deck 13: Information Security

Question 1

A risk assessment is a thorough analysis of an organization's vulnerability to security breaches and an identification of its potential losses.

Answer 1

True

Question 2

Social engineering involves manipulating social relationships to gain access to restricted resources.

Answer 2

True

Question 3

Digital certificate refers to the way in which two nodes agree on common parameters for the keys they will use.

Answer 3

False

Question 4

In bio-recognition, a device scans an individual's unique physical characteristics to verify identity.

Question 5

Computer programs that dial multiple telephone numbers in rapid succession, attempting to access and receive a handshake response from a modem, are known as war dialers.

Question 6

In public key encryption, data is encrypted using a single key that only the sender and the receiver know.

Question 7

In private key encryption, data is encrypted using two keys.

Question 8

A public-key server is a publicly accessible host that freely provides a list of users' public keys.

Question 9

The combination of the public key and private key is known as a asymmetric encryption.

Question 10

PGP is a cross-platform authentication protocol that uses key encryption to verify the identity of clients and to securely exchange information after a client logs on to a system.

Question 11

The combination of the public key and private key is known as a(n) key pair. _________________________

Question 12

A(n) digital certificate is a password-protected and encrypted file that holds an individual's identification information, including a public key. _________________________

Question 13

PGP is a cross-platform authentication protocol that uses key encryption to verify the identity of clients and to securely exchange information after a client logs on to a system. _________________________

Question 14

Eavesdropping is the use of a transmission or recording device to capture conversations without the consent of the speakers. _________________________

Question 15

Bugging is the interception of a telephone conversation by accessing the telephone signal. _________________________

Question 16

A(n) authorization code is a sequence of numbers that allows an employee to gain access to a certain line through the PBX. _________________________

Question 17

A(n) telecommunications firewall is a type of firewall that monitors incoming and outgoing voice traffic and selectively blocks telephone calls between different areas of a voice network. _________________________

Question 18

A(n) packet-filtering firewall is a software application on a network host that acts as an intermediary between the external and internal networks, screening all incoming and outgoing traffic. _________________________

Question 19

The process of encapsulating one protocol to make it appear as another type of protocol is known as wiretapping. _________________________

Question 20

War driving is searching for unprotected wireless networks by driving around with a laptop configured to receive and capture wireless data transmissions. _________________________

Question 21

Which of he following represents a thorough analysis of an organizations's vulnerability to security breaches and an identification of its potential losses?

A) Server_hello
B) Risk assessment
C) SSL session
D) TLS

Question 22

Which of the following is a computer that, once connected to a network, can capture data packets traveling over the channel to which it is attached?

A) Sniffer
B) SSL session
C) Kerberos
D) Digital certificate

Question 23

The manipulation of social relationships to obtain information that could grant an intruder access to restricted resources, is referred to as:

A) SSL
B) Social engineering
C) Symmetric encryption
D) IP spoofing

Question 24

Which of the following is a method of encrypting TCP/IP transmissions en route between the client and server using public key encryption technology?

A) SSL session
B) TLS
C) SSL
D) WEP

Question 25

Which of the following describes an association between the client and the server that is defined by an agreement on a specific set of encryption techniques?

A) SSL session
B) Tunneling
C) HTTPS
D) Kerberos

Question 26

Which of the following is also referred to as private key encryption?

A) TLS
B) Symmetric encryption
C) Kerberos
D) Digital certificate

Question 27

A type of firewall that monitors incoming and outgoing voice traffic and selectively blocks telephone calls between different areas of a voice network, is referred to as:

A) Packet-filtering
B) Kerberos
C) PGP
D) Telecommunications

Question 28

The unauthorized use of a telephone line to complete long distance calls at another's expense is referred to as:

A) Tunneling
B) Toll fraud
C) War dialer
D) Sniffer

Question 29

The process of encapsulating one protocol to make it appear as another is referred to as:

A) IP spoofing
B) Bugging
C) Wiretapping
D) Tunneling

Question 30

A computer program that dials multiple telephone numbers in rapid succession, attempting to access and receive a handshake response from a modem, is referred to as:

A) War dialer
B) War driver
C) Sniffer
D) None of the above

Question 31

The interception of a telephone conversation by accessing the telephone signal is referred to as:

A) Wiretapping
B) War dialing
C) Toll fraud
D) Sniffing

Question 32

Which of the following describes the use of a microphone with a small RF transmitter placed near an audio source an a nearby receiver to eavesdrop?

A) Kerberos
B) Key pair
C) Bugging
D) Wire tapping

Question 33

The unique data block that results when an original piece of data is encrypted, is referred to as:

A) Digital certificate
B) Cipher text
C) SSL session
D) None of the above

Question 34

Which of the following is a password-protected and encrypted file that holds an individual's identification information, including a private and a public key?

A) Key pair
B) Cipher text
C) Digital certificate
D) IPSec

Question 35

The use of a transmission or recording device to capture conversations without the consent of the speakers, is known as:

A) Bugging
B) Wiretapping
C) Social engineering
D) Eavesdropping

Question 36

Which of the following allows the client and server to authenticate and establish how they will securely exchange data during an SSL session?

A) IPSec
B) Handshake protocol
C) PGP
D) EAP

Question 37

Which of the following is the URL prefix that indicates that a Web page requires its data to be exchanged between client and server using SSL encryption?

A) HTPS
B) HTTP
C) HTTPS
D) HHTPS

Question 38

Which of the following is first phase of IPSec authentication which accomplishes key management?

A) IPSec
B) Internet Key Exchange
C) PPTP
D) PGP

Question 39

Which of the following is a Layer 3 protocol that defines encryption, authentication, and key management for TCP/IP transmissions?

A) IKE
B) IPSec
C) L2F
D) PPTP

Question 40

Which of the following is a security attack in which an outsider obtains internal IP addresses?

A) IP spoofing
B) Tunneling
C) Wiretapping
D) War driving

Question 41

Which of the following is a series of characters that is combined with a block of data during that data's encryption?

A) Key management
B) Key pair
C) Key
D) None of the above

Question 42

The method whereby two nodes using key encryption agree on common parameters for the keys they will use to encrypt data, is referred to as:

A) Key management
B) Key pair
C) Kerberos
D) Key encryption

Question 43

Which of the following represents the combination of a public and a private key?

A) L2F
B) Key pair
C) IKE
D) L2TP

Question 44

Which of the following provides tunneling for other protocols and can work with the authentication methods used by PPP?

A) L2F
B) L2TF
C) L2TPP
D) L2FT

Question 45

Which of the following is a router that operates at the Data Link and Transport layers of the OSI model, examining the header of every packet of data that it receives to determine whether that type of packet is authorized to continue to its destination?

A) Firewall
B) Packet-filtering firewall
C) Kerberos
D) None of the above

Question 46

Which of the following supports the encryption, authentication, and LAN access services provided by RAS?

A) PGP
B) L2TP
C) PPTP
D) WEP

Question 47

Which of the following is a key-based encryption system for e-mail that uses a two-step verification process?

A) PGP
B) L2TP
C) EAP
D) Kerberos

Question 48

Which of the following is a setting that allows NIC to indiscriminately accept all packets traversing the network channel to which it is attached?

A) Server_hello
B) Promiscuous mode
C) Proxy mode
D) None of the above

Question 49

Which of the following allows data to be encrypted with two keys?

A) Kerberos
B) Private key encryption
C) Public key encryption
D) Digital certificate

Question 50

A publicly available host that provides free access to a list of user's public keys, is referred to as:

A) Proxy server
B) DNS server
C) Public-key server
D) None of the above

Question 51

Which of the following is a sequence of numbers that allows an employee to gain access to a certain line or feature?

A) Key pair
B) DES
C) Authorization code
D) Key

Question 52

Which of the following is a person who masters the inner workings of operating systems and utilities in an effort to better understand them?

A) Hacker
B) Sniffer
C) Cracker
D) War dialer

Question 53

Which of the following is a method for granting access to restricted rooms in which a device scans an individual's unique physical characteristics?

A) Bio-recognition access
B) Social engineering
C) DISA
D) Tunneling

Question 54

Which of the following is a person who uses his or her knowledge of operating systems and utilities to intentionally damage or destroy data or systems?

A) Hacker
B) Sniffer
C) War dialer
D) Cracker

Question 55

Which of the following is a message issued from the client to the server that contains information about what level of security the client's browser is capable of accepting?

A) Cipher text
B) Client_hello
C) Digital certificate
D) HTTPS

Question 56

Does a risk assessment normally lead to recommendations for improving information security?

Question 57

Does public key encryption involve the use of a single key that only the sender and the receiver know?

Question 58

In private key encryption, is data encrypted with two keys?

Question 59

Does the term key pair refer to the combination of the public key and private key?

Question 60

Does the term digital certificate refer to the way in which two nodes agree on common parameters for the keys they will use?

Question 61

Does the term key management refer to a password-protected and encrypted file that holds an individual's identification information, including a public key?

Question 62

Is Kerberos a cross-platform authentication protocol that uses key encryption to verify the identity of clients?

Question 63

Can you use PGP to verify the authenticity of an e-mail sender?

Question 64

Does the handshake protocol authenticate the client and server, and establish terms for how they will securely exchange data?

Question 65

A(n) ____________________ should lead to recommendations for improving information security and must precede any of the protective measures described in this chapter.

Question 66

Computer programs that dial multiple telephone numbers in rapid succession, attempting to access and receive a handshake response from a modem, are known as ____________________.

Question 67

In ____________________, data is encrypted using a single key that only the sender and the receiver know.

Question 68

In ____________________ encryption, data is encrypted using two keys.

Question 69

The combination of the public key and private key is known as a(n) ____________________.

Question 70

A(n) ____________________ is a password-protected and encrypted file that holds an individual's identification information, including a public key.

Question 71

____________________ is a cross-platform authentication protocol that uses key encryption to verify the identity of clients and to securely exchange information after a client logs on to a system.

Question 72

____________________ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.

Question 73

The ____________________ protocol authenticates (or introduces) the client and server to each other and establishes terms for how they will securely exchange data.

Question 74

____________________ is the use of a transmission or recording device to capture conversations without the consent of the speakers.

Question 75

Match each statement below with the correct item

-A security attack in which an outsider obtains internal IP addresses, then uses them to pretend that he or she has authority to access a private network from the Internet.

A)HTTPS
B)Cipher text
C)IP spoofing
D)Bio-recognition access
E)Key
F)Bugging
G)Denial of service attack
H)Key management
I)Key pair
J)Eavesdropping

Question 76

Match each statement below with the correct item

-The combination of a public and private key used to decipher data that has been encrypted using public key encryption.

A)HTTPS
B)Cipher text
C)IP spoofing
D)Bio-recognition access
E)Key
F)Bugging
G)Denial of service attack
H)Key management
I)Key pair
J)Eavesdropping

Question 77

Match each statement below with the correct item

-The URL prefix that indicates that a Web page requires its data to be exchanged between client and server using SSL encryption.

A)HTTPS
B)Cipher text
C)IP spoofing
D)Bio-recognition access
E)Key
F)Bugging
G)Denial of service attack
H)Key management
I)Key pair
J)Eavesdropping

Question 78

Match each statement below with the correct item

-A series of characters that is combined with a block of data during that data's encryption.

A)HTTPS
B)Cipher text
C)IP spoofing
D)Bio-recognition access
E)Key
F)Bugging
G)Denial of service attack
H)Key management
I)Key pair
J)Eavesdropping

Question 79

Match each statement below with the correct item

-The use of a microphone with a small RF transmitter placed near an audio source and a nearby receiver to eavesdrop.

A)HTTPS
B)Cipher text
C)IP spoofing
D)Bio-recognition access
E)Key
F)Bugging
G)Denial of service attack
H)Key management
I)Key pair
J)Eavesdropping

Question 80

Match each statement below with the correct item

-The unique data block that results when an original piece of data is encrypted.

A)HTTPS
B)Cipher text
C)IP spoofing
D)Bio-recognition access
E)Key
F)Bugging
G)Denial of service attack
H)Key management
I)Key pair
J)Eavesdropping