Question 1

Access requestors are also referred to as clients.

Accepted Answer

Access requestors are also known as clients.

Question 2

___________ is an umbrella term for managing access to a network.
A)NAS
B)ARC
C)NAC
D)RAS

Accepted Answer

NAC stands for Network Access Control, which is an umbrella term for managing access to a network. NAS stands for Network-Attached Storage, which refers to a storage device that is connected to a network. ARC is not a term commonly used in networking, and RAS stands for Remote Access Service, which refers specifically to providing remote access to a network.

Question 3

A cloud broker is useful when cloud services are too complex for a cloud consumer to easily manage.

Accepted Answer

A cloud broker can help a cloud consumer to navigate through the complexity of cloud services and select the best options based on their requirements. The broker can also act as an intermediary between the consumer and multiple cloud providers, managing contracts, and service level agreements on behalf of the consumer.

Question 4

Data must be secured while at rest,in transit,and in use,and access to the data must be controlled.

Accepted Answer

Data security requires that data is protected not only when it is stored (at rest) or transferred between systems (in transit), but also when it is being used (in use). Additionally, access to the data must be controlled to prevent unauthorized access or modification.

Question 5

The threat of data compromise decreases in the cloud.

Accepted Answer

The threat of data compromise does not inherently decrease in the cloud; it depends on the security measures implemented by the cloud provider and the user.

Question 6

Cloud computing gives you the ability to expand and reduce resources according to your specific service requirement.

Accepted Answer

Cloud computing provides scalability which allows for the expansion or reduction of resources as needed for specific services.

Question 7

Network access control authenticates users logging into the network and determines what data they can access and actions they can perform.

Accepted Answer

Network access control (NAC) systems typically require users to authenticate themselves before being granted access to the network. Once authenticated, the NAC system can then enforce policies that restrict the data they can access and the actions they can perform based on their role and privileges within the network.

Question 8

In using cloud infrastructures,the client necessarily cedes control to the CP on a number of issues that may affect security.

Accepted Answer

When a client uses cloud infrastructures, they rely on the cloud provider to manage and secure the underlying infrastructure, which leads to ceding control over certain security issues such as physical security, network security, and access control.

Question 9

The _________ is the node that is attempting to access the network and may be any device that is managed by the network access control system.
A)AR
B)RAS
C)IP
D)PS

Accepted Answer

AR is the node that is attempting to access the network and may be any device that is managed by the network access control system.

Question 10

For many clients,the most devastating impact from a security breach is the loss or leakage of data.

Accepted Answer

Loss or leakage of data can have serious consequences for clients, such as identity theft, financial loss, and damage to reputation. It is often considered the most significant impact of a security breach.

Question 11

The NIST cloud computing reference architecture focuses on the requirements of "what" cloud services provide,not a "how to" design solution and implementation.

Accepted Answer

The NIST cloud computing reference architecture describes the different components and functions of a cloud computing system, but it does not provide specific design solutions or implementation instructions. It is meant to guide architects and developers in building cloud systems that meet certain requirements, rather than dictating how those systems should be built.

Question 12

EAPOL operates at the network layers and makes use of an IEEE 802 LAN,such as Ethernet or Wi-Fi,at the link level.

Accepted Answer

EAPOL (Extensible Authentication Protocol over LAN) is a network protocol that provides a framework for secure communication between devices in a wireless computer network. It operates at the network layers and makes use of an IEEE 802 LAN, such as Ethernet or Wi-Fi, at the link level.

Question 13

The __________ determines what access should be granted.
A)authentication server
B)policy server
C)supplicant
D)access requestor

Accepted Answer

The policy server determines what access should be granted based on predefined rules and policies. The authentication server verifies the identity of the user or device, the supplicant is the device requesting access, and the access requestor is a general term that could refer to any device or application requesting access.

Question 14

The cloud provider in a private cloud infrastructure is responsible for both the infrastructure and the control.

Accepted Answer

In a private cloud infrastructure, the organization itself is responsible for both the infrastructure and control, not an external cloud provider.

Question 15

A network access server does not include its own authentication services.

Accepted Answer

A network access server (NAS) typically includes its own authentication services, allowing it to authenticate users attempting to access the network. The NAS may use various authentication methods such as using a RADIUS server or LDAP directory.

Question 16

_________ is a client computer that is attempting to access a network.
A)EAP peer
B)PSK
C)NAC
D)RAS

Accepted Answer

An EAP (Extensible Authentication Protocol) peer refers to a client computer that is attempting to access a network. PSK (Pre-Shared Key) is a type of authentication method used in Wi-Fi networks. NAC (Network Access Control) is a security solution used to control access to a network. RAS (Remote Access Server) is a server that provides remote access to a network. Therefore, the best choice that fits the given description is A) EAP peer.

Question 17

There is a decreasing trend in organizations to move information technology operations to a cloud computing infrastructure.

Accepted Answer

This statement is false. There is actually a increasing trend in organizations to move information technology operations to a cloud computing infrastructure.

Question 18

The __________ is an Internet protocol that enables dynamic allocation of IP addresses to hosts.
A)VLAN
B)IEEE 802.1X
C)EAPS
D)DHCP

Accepted Answer

DHCP (Dynamic Host Configuration Protocol) is the Internet protocol that enables dynamic allocation of IP addresses to hosts. It allows a device to automatically obtain an IP address, subnet mask, default gateway, and other network settings, eliminating the need for manual configuration. VLAN, IEEE 802.1X, and EAPS are different networking technologies and protocols that are not related to DHCP.

Question 19

The Extensible Authentication Protocol supports multiple authentication methods.

Accepted Answer

The Extensible Authentication Protocol (EAP) is designed to support multiple authentication methods, providing flexibility for different types of network environments and security requirements.

Question 20

VLANs are common NAC enforcement methods.

Accepted Answer

VLANs are commonly used as a NAC enforcement method to segment network traffic and control access to specific network resources.

Quiz 16: Network Access Control and Cloud Security