Question 1

Most organizations agree that __________ become their worst security problem.
A)their own users
B)viruses
C)intrusions
D)managers

Accepted Answer

While viruses and intrusions can certainly pose significant security threats, most security breaches occur because of human error or intentional misconduct by employees or other insiders. Therefore, organizations often view their own users as their most significant security problem. However, it is worth noting that effective training and policies can help mitigate this risk.

Question 2

At _________ the IP header is exposed and so filtering or firewalls can be applied to IP addresses.
A)layer 1
B)layer 2
C)layer 3
D)layer 4

Accepted Answer

IP header resides in Layer 3 of the OSI model. At this layer, the source and destination IP addresses are visible and can be filtered or blocked by firewalls or routers.

Question 3

A __________ is a security service that monitors and analyzes system events for the purpose of finding,and providing real-time or near-real-time warning of, attempts to access system resources in an unauthorized manner.

Accepted Answer

The answer of A __________ is a security service that...

Question 4

Which of the following is not a central element of a typical antivirus scheme?
A)detection
B)identification
C)removal
D)deterrence

Accepted Answer

Deterrence is not a central element of a typical antivirus scheme. The other three options (detection, identification, and removal) are all essential components of an antivirus program, aimed at detecting and eliminating viruses, malware, and other threats from a computer or network. Deterrence may refer to measures aimed at discouraging users from engaging in unsafe computing practices, but it is not a core part of antivirus protection.

Question 5

The IPsec Architecture document mandates support for two types of key management: manual and ___________.

Accepted Answer

The answer of The IPsec Architecture document mandates support for...

Question 6

An IDS comprises three logical components: sensors,user interface,and _______.

Accepted Answer

The answer of An IDS comprises three logical components: sensors,user...

Question 7

__________ is a monitored behavior.
A)Attempts to open,view,delete,and / or modify files
B)Attempts to format disk drives and other unrecoverable disk operations
C)Modification to the logic of executable files or macros
D)All of the above

Accepted Answer

All of the mentioned behaviors are monitored as part of security measures to ensure the safety of data and prevent any unauthorized access or modifications. Attempting to open, view, delete, or modify files can signify an attempt to gain access or steal sensitive information. Formatting disk drives and other unrecoverable disk operations can lead to permanent data loss. Modification to the logic of executable files or macros can introduce malicious code and compromise system security. Thus, all of these behaviors are monitored closely to prevent any security breaches.

Question 8

Which of the following is a higher-layer protocol defined as part of SSL?
A)the Handshake Protocol
B)the Change Cipher Spec Protocol
C)the Alert Protocol
D)all of the above

Accepted Answer

All three protocols (Handshake, Change Cipher Spec, and Alert) are defined as part of SSL at a higher-layer protocol level.

Question 9

The SSL Record Protocol provides two services for SSL connections: confidentiality and ___________.

Accepted Answer

The answer of The SSL Record Protocol provides two services...

Question 10

The ________________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.

Accepted Answer

The answer of The ________________ facility enables communicating nodes to...

Question 11

A ____________ is a security event,or a combination of multiple security events, that constitutes a security incident in which an intruder gains,or attempts to gain,access to a system (or system resource)without having authorization to do so.

Accepted Answer

The answer of A ____________ is a security event,or a...

Question 12

The ideal solution to the threat of viruses is:
A)detection
B)prevention
C)identification
D)removal

Accepted Answer

Prevention is the best solution to the threat of viruses as it stops them from entering the system in the first place. Detection helps to identify viruses that have already infected the system, and removal helps to get rid of them, but prevention is always better than cure. Identification is important for understanding what type of virus has infected the system, but it does not provide a solution to the problem.

Question 13

Which security area is addressed in IEEE 802.11i ?
A)authentication
B)key management
C)data transfer privacy
D)all of the above

Accepted Answer

IEEE 802.11i addresses all three security areas - authentication, key management, and data transfer privacy. It uses a combination of mechanisms such as WPA2 (Wi-Fi Protected Access 2), AES (Advanced Encryption Standard), and EAP (Extensible Authentication Protocol) to achieve secure wireless communication.

Question 14

The 802.11i architecture consists of ________ main ingredients.
A)one
B)two
C)three
D)four

Accepted Answer

The 802.11i architecture consists of three main ingredients: robust security network (RSN), counter mode with cipher block chaining message authentication code protocol (CCMP), and the 802.1X/EAP authentication framework.

Question 15

IP-level security encompasses three functional areas: authentication, confidentiality,and _________.

Accepted Answer

The answer of IP-level security encompasses three functional areas: authentication,...

Question 16

A(n)__________ looks for user behavior that differs from that expected from a legitimate user.
A)ACK
B)IDS
C)SSL
D)TLS

Accepted Answer

IDS (Intrusion Detection System) is designed to detect and alert on behavior that is not expected from a legitimate user. It monitors network traffic and system logs to find any suspicious activity that may indicate an attack or breach. ACK (Acknowledgment) is a network protocol used to confirm the receipt of data packets. SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are encryption protocols used to secure communication between web clients and servers. They do not specifically focus on detecting abnormal user behavior.

Question 17

The _________ mechanism assures that a received packet was,in fact,transmitted by the party identified as the source in the packet header

Accepted Answer

The answer of The _________ mechanism assures that a received...

Question 18

In order to accelerate the introduction of strong security into WLANs,the Wi-Fi Alliance promulgated __________ as a Wi-Fi standard.

Accepted Answer

The answer of In order to accelerate the introduction of...

Question 19

The most complex part of SSL is the ___________ Protocol.
A)Handshake
B)Change Cipher Spec
C)Alert
D)Record

Accepted Answer

The Handshake Protocol is the most complex part of SSL as it involves multiple steps for authentication, key exchange, and negotiation of cipher suites. It also includes certificate validation and server and client hello messages. The other options (Change Cipher Spec, Alert, and Record) are important components of SSL but are not as complex as the Handshake Protocol.

Question 20

_________ mode is used when at least one of the two ends is a security gateway, such as a firewall or router,that implements IPsec.

Accepted Answer

The answer of _________ mode is used when at least...

Quiz 19: Computer and Network Security Techniques

Most organizations agree that __________ become their worst security problem.

At _________ the IP header is exposed and so filtering or firewalls can be applied to IP addresses.

A __________ is a security service that monitors and analyzes system events for the purpose of finding,and providing real-time or near-real-time warning of, attempts to access system resources in an unauthorized manner.

Which of the following is not a central element of a typical antivirus scheme?

The IPsec Architecture document mandates support for two types of key management: manual and ___________.

An IDS comprises three logical components: sensors,user interface,and _______.

__________ is a monitored behavior.

Which of the following is a higher-layer protocol defined as part of SSL?

The SSL Record Protocol provides two services for SSL connections: confidentiality and ___________.

The ________________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.

A ____________ is a security event,or a combination of multiple security events, that constitutes a security incident in which an intruder gains,or attempts to gain,access to a system (or system resource)without having authorization to do so.

The ideal solution to the threat of viruses is:

Which security area is addressed in IEEE 802.11i ?

The 802.11i architecture consists of ________ main ingredients.

IP-level security encompasses three functional areas: authentication, confidentiality,and _________.

A(n) __________ looks for user behavior that differs from that expected from a legitimate user.

The _________ mechanism assures that a received packet was,in fact,transmitted by the party identified as the source in the packet header

In order to accelerate the introduction of strong security into WLANs,the Wi-Fi Alliance promulgated __________ as a Wi-Fi standard.

The most complex part of SSL is the ___________ Protocol.

_________ mode is used when at least one of the two ends is a security gateway, such as a firewall or router,that implements IPsec.