Question 1

Security is one of the most important issues an organization must discuss. Mitch wants security that is built into an application. Why would this be a problem?
A)Mitch isn't the head of security.
B)Security is usually within security products and perimeter devices.
C)The security application is far too expensive.
D)All of the above

Accepted Answer

Security is usually within security products and perimeter devices and not built into applications. The security products can cover a wide range of applications, can be controlled by a centralized management console, and are further away from application control. However, this approach does not always provide the necessary level of granularity and does not approach compromises that can take place because of problematic coding and programming routines.

Question 2

David is a security administrator at his organization. He is trying to prevent unauthorized access to the corporate wireless network by people loafing around the office. What kind of wireless network threat is he trying to curb?
A)Man-in-the-middle
B)War driving
C)Dictionary attack
D)DNS spoofing

Accepted Answer

David is trying to curb a war driving attack.
Key Takeaway: War driving refers to driving around town with a laptop looking for WAPs that can be communicated with. The network card on the laptop is set to promiscuous mode and it looks for signals coming from anywhere. After intruders gain access, they may steal Internet access or start damaging your data.

Question 3

You have entered information in the database. It has been changed and is reflected in the database. What has been done?
A)Integrity Check
B)Commit
C)Rollback
D)Savepoint

Accepted Answer

When information has been changed and the change is reflected, it has been committed. The commit operation completes a transaction and executes all changes just made by the user. These changes can be made to data or schema information. Because these changes are committed, they are then available to all other applications and users. If a user attempts to commit a change and it cannot complete correctly, a rollback is performed. This ensures that partial changes do not take place and that data are not corrupted.

Question 4

Database models define the relationship between different data elements, dictate how data can be accessed and define acceptable operations, the type of integrity offered, and how the data is organized. What type of database uses attributes and tuples to contain and organize information?
A)Hierarchical Data Model
B)Relational Database Model
C)Network Database Model
D)Object-oriented Database

Accepted Answer

The relational database model uses attributes and tuples to contain and organize information. The relational database model is the most widely used model. It presents information in the form of tables. A relational database is composed of a two-dimensional table and each table contains unique rows, columns, and cells. Each cell contains only one data value that represents a specific attribute value within a given tuple. These data entities are linked by a relationship that forms the base for organization of data.

Question 5

Which of the following organizations regularly issues ethics-related statements concerning the use of the Internet?
A)Ethics Board International
B)The International Internet Associations
C)The Internet Architecture Board
D)Corporate Ethics and Internet Organization

Accepted Answer

The Internet Architecture Board (IAB) issues ethics-related statements concerning the use of the Internet. It considers the Internet to be a resource that depends upon availability and accessibility to be useful to a wide range of people. It is mainly concerned with irresponsible acts on the Internet that could threaten its existence or negatively affect others. It sees the Internet as a great gift and works hard to protect it for all who depend upon it.

Question 6

What is a single link that is pre-established for the purposes of WAN communications between two destinations?
A)Sonnet Links
B)Dedicated Links
C)Telecommunication Links
D)None of the Above

Accepted Answer

Dedicated links are single links that are pre-established for the purposes of WAN communication between two destinations. It is dedicated, meaning only the destination points can communicate with each other. This link is not shared by any other entities at any time. This was the main way companies communicated in the past because not as many choices were available as there are today. Establishing a dedicated link is a good idea for two locations that will communicate often and require fast transmission and a specific bandwidth, but it is expensive compared to the possible technologies that enable several companies to share the same bandwidth and also share the cost.

Question 7

Which of the following statements regarding the MD5 algorithm is NOT true?
A)It uses a two-way hash.
B)It offers better security than its predecessors.
C)It uses a one-way hash.
D)It uses a 32-bit hash for encryption.

Accepted Answer

MD5 creates a hash value and uses a one-way hash. The hash value is used to help maintain integrity. It uses a 32-bit hash for encryption and offers better security than its predecessors.

Question 8

What is the type of software that is installed on someone's computer without their knowledge?
A)Adware
B)Spyware
C)Both A and B
D)Neither A nor B

Accepted Answer

Adware and spyware is software installed on someone's computer without their knowledge. Adware is usually the term used when companies want to track a user's buying and browsing habits through the use of cookies, so a merchant know how to effectively market to this user. Some adware is software installed on your system that causes pop-up ads to appear continuously as you are surfing the Web. The software could be apart of another software package you installed or a stealth installation could have taken place. Spyware is usually considered more dangerous than adware because it may be written to capture keystrokes, capture system information, or install a backdoor on a system. Through the use of keyloggers, spyware can capture passwords, credit card information, or other sensitive data.

Question 9

What item below is not associated with Session Initiation Protocol (SIP)?
A)User Agent Client
B)User Agent Server
C)User Agent Database
D)Signaling Protocol

Accepted Answer

User agent database is not associated with SIP. SIP is a signaling protocol widely used for VoIP communications sessions. It is used in applications such as video conferencing, multimedia, instant messaging, and online gaming. SIP consists of two major components: the User Agent Clients (UAC) and User Agent Server (UAS). The UAC is the application that creates the SIP requests for initiating a communication session. UACs are generally messaging tools and soft-phone applications that are used to place VoIP calls. The UAS is the SIP server, which is responsible for handling all routing and signaling involved in VoIP calls. The SIP architecture consists of three different types of servers. These servers are the proxy server, the registrar server, and the redirect server. The proxy server is used to relay packets within a network between the UACs and the UAS. The registrar server keeps a centralized record of the updated locations of all the users on the network. The use of redirect servers allows clients to remain within reach while they move through numerous network coverage zones.

Question 10

Which of the following is a feature of Asymmetric cryptography?
A)Both encryption and authentication can take place without sharing private keys.
B)This cryptography uses the best algorithm possible.
C)Encryption occurs only when both sides are authenticated.
D)Encryption is limited to shared keys.

Accepted Answer

Asymmetric cryptography ensures that both authentication and encryption can happen without sharing private keys.
Key Takeaway: Asymmetric cryptography, or public-key cryptography, is cryptography in which a pair of keys is used to encrypt and decrypt a message so that it arrives securely. These asymmetric keys are referred to as the public key and the private key. It uses one key per circuit. The public key is used to encrypt the message and the private key is used to decrypt it.

Question 11

What provides for fault tolerance and higher performance when databases are clustered?
A)Online Transaction Processing
B)Cell Suppression
C)Content-dependent Access Control
D)Polyinstantiation

Accepted Answer

Online transaction processing (OLTP) provides for fault tolerance and higher performance when databases are clustered. OLTP provides mechanisms that watch for problems and deal with them appropriately when they do occur. The main goal of OLTP is to ensure that transactions happen properly or they don't happen at all. Transaction processing usually means that individual operations are taking place independently. If the operations fails, the rest of the operations needs to be rolled back to ensure that only accurate data is entered into the database.

Question 12

Which of these malicious agents are capable of distributing themselves without the use of a host file?
A)Trojan
B)Stealth Virus
C)Logic Bomb
D)Worm

Accepted Answer

Worms replicate without the need for a host file. By their nature and origin, worms are supposed to propagate. They will use whatever services they're capable of to do that.
A computer worm is a self-replicating computer program. It uses a network to send copies of itself to other nodes, mostly without any user intervention. Unlike a virus, it does not need to attach itself to an existing program. Worms mostly consume bandwidth, whereas viruses almost always corrupt or devour files on a targeted computer.

Question 13

Networks have different types of topologies. Which topology is a single cable running the entire length of the network?
A)Ring Topology
B)Bus Topology
C)Mesh Topology
D)Network Topology

Accepted Answer

Bus topology is a single cable running the entire length of the network. Nodes are attached to the network through drop points on this cable. Data communications transmit the length of the medium and each packet transmitted has the capability of being "looked at" by all nodes. Each node decides to accept or ignore the packet, depending upon the packet's destination address. There are two types of bus topologies: linear and tree. The linear bus topology has a single cable with nodes attached. A tree topology has branches from the single cable and each branch can contain many nodes.

Question 14

Which of the following is a term used to define a collection of software robots-or bots-that run autonomously and automatically and may harm your computer?
A)Automizer
B)Botnet
C)Softbots
D)Rootkit

Accepted Answer

Botnet refers to a collection of Zombie computers running software-usually installed via drive-by downloads-exploiting Web browser vulnerabilities, worms, Trojan horses, or backdoors under a common command-and-control infrastructure. They can be harmful to your computer.
A botnet is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing among them. Once the robot software has been successfully installed on a computer, this computer becomes a zombie or a drone, unable to resist the commands of the bot commander. A botnet may be small or large, depending on the complexity and sophistication of the bots used.

Question 15

Which technology uses a person's physical characteristics to establish identity?
A)CHAP
B)PAP
C)Biometrics
D)Smart card

Accepted Answer

Biometrics is a technology that uses personal characteristics such as a retinal pattern or fingerprint to establish identity.
Biometrics refers to methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits. It is used as a form of identity access management and access control. The different types of Biometric authentication types include typing patterns, eye scans, fingerprint recognition, hand or palm geometry, voice recognition, and facial recognition.

Question 16

Jim's company is paying Chris's company to develop software and a third party keeps a copy of the source code. What should Jim have in place for protection?
A)Financial Escrow
B)Software Escrow
C)Application Escrow
D)Technical Escrow

Accepted Answer

If a company pays another company to develop software for it, it should have software escrow in place for protection. In software escrow, a third party keeps a copy of the source codes and other material, which it will release to the customer only if specific circumstances arise, mainly if the vendor who developed the code goes out of business or for some reason is not meeting its obligations and responsibilities. The procedure protects the customer because the customer pays the vendor to develop software code for it and if the vendor goes out of business.

Question 17

Software development methods provide software developers and vendor guidelines for program creation. What software development method is generally implemented in scenarios requiring rapid adaptations to changing client requirements?
A)Iterative Development
B)Component-Based Development
C)Modified Prototype model
D)Extreme Programming

Accepted Answer

Extreme programming is the software development method that is generally implemented in scenarios requiring rapid adaptations to changing client requirements. Extreme programming emphasizes client feedback to evaluate project outcomes and to analyze project domains that may require further attention. The coding principle of extreme programming throws out the traditional long-term planning carried out for code reuse and instead, focuses on creating simple code optimized for the contemporary assignment.

Question 18

What is created when RAM and secondary storage is combined?
A)Combined Mode
B)Virtual Memory
C)Salvaged Memory
D)Protection Rings

Accepted Answer

When RAM and secondary storage is combined, virtual memory is created. The system uses hard drive space to extend its RAM memory space. Wasp space is the reserved hard drive space used to extend RAM capabilities. When a system fills up its volatile memory space, it writes data from memory, not the hard drive. When a program requests access to this data, it is brought from the hard drive back into memory in specified units called pages. This process is called virtual memory paging.

Question 19

Which of the following situations would incline you to use a vulnerability scanner?
A)Enabling a protocol analyzing capability.
B)Enabling remote access.
C)Enabling encryption.
D)Identifying ports that are open on the computer.

Accepted Answer

A vulnerability scanner is used to identify open ports on a computer. This scanning is used to assess the network for any weaknesses.
Key Takeaway: A vulnerability scanner is a computer program designed to search for and map systems for weaknesses in an application, computer, or network. The different types of vulnerability scanners include port scanner, network scanner, Web application security scanner, and a computer worm.

Question 20

What would dictate the degree of association between elements, methods of access, processing alternatives, and the organization of data elements?
A)Cohesion
B)Coupling
C)Attributions
D)Data Structure

Accepted Answer

Data structure dictates the degree of association between elements, methods of access, processing alternatives, and the organization of data elements. The structure can be simple in nature, which represents a single element that can be addressed by an identifier and accessed by a single address in storage. The scalar items can be grouped in arrays, which provide access by indexes. Other data structures include hierarchical structures by using multilinked lists that constrain scalar items and vectors. The hierarchical structure provides categorization and association.

Quiz 14: Comptia Asp

Security is one of the most important issues an organization must discuss. Mitch wants security that is built into an application. Why would this be a problem?

David is a security administrator at his organization. He is trying to prevent unauthorized access to the corporate wireless network by people loafing around the office. What kind of wireless network threat is he trying to curb?

You have entered information in the database. It has been changed and is reflected in the database. What has been done?

Database models define the relationship between different data elements, dictate how data can be accessed and define acceptable operations, the type of integrity offered, and how the data is organized. What type of database uses attributes and tuples to contain and organize information?

Which of the following organizations regularly issues ethics-related statements concerning the use of the Internet?

What is a single link that is pre-established for the purposes of WAN communications between two destinations?

Which of the following statements regarding the MD5 algorithm is NOT true?

What is the type of software that is installed on someone's computer without their knowledge?

What item below is not associated with Session Initiation Protocol (SIP) ?

Which of the following is a feature of Asymmetric cryptography?

What provides for fault tolerance and higher performance when databases are clustered?

Which of these malicious agents are capable of distributing themselves without the use of a host file?

Networks have different types of topologies. Which topology is a single cable running the entire length of the network?

Which of the following is a term used to define a collection of software robots-or bots-that run autonomously and automatically and may harm your computer?

Which technology uses a person's physical characteristics to establish identity?

Jim's company is paying Chris's company to develop software and a third party keeps a copy of the source code. What should Jim have in place for protection?

Software development methods provide software developers and vendor guidelines for program creation. What software development method is generally implemented in scenarios requiring rapid adaptations to changing client requirements?

What is created when RAM and secondary storage is combined?

Which of the following situations would incline you to use a vulnerability scanner?

What would dictate the degree of association between elements, methods of access, processing alternatives, and the organization of data elements?