Quiz Questions Security +

Which encryption/security measure, originally developed by Netscape, is used to establish a secure, lower-layer communication connection between two TCP/IP-based machines?

SSL

The ___________________ method of backup keeps all data that has ever been on the system, regardless of its value.

Full archival

The __________ backup method is based on the philosophy that a full backup should occur at regular intervals, such as monthly or weekly?

GFS

The cyberspace Security Enhancement Act gives law enforcement the right to:

Gain access to encryption keys

Which of the following is a passive method of threat response?

Logging the event

In TCP/IP parlance, any computer or device with an IP address on a TCP/IP network is known as a(n):

host

Which access control model is a static model that uses predefined access privileges for resources that are assigned by the administrator?

MAC

Which organization is tasked with developing standards for, and tries to improve, the Internet.

IETF

__________________ is an attack in which the intruder sends a frame to the AP with a spoofed address to make it look like it came from the victim and disconnects them from the network.

Disassociation

Which kind of security attack is a result of the trusting nature of human beings?

social engineering

Computer room humidity should ideally be kept above ___________________ percent.

50

Which feature of cloud computing involves dynamically provisioning (or de-provisioning) resources as needed?

Elasticity

With which type of technology will allow a device to function only if it is within certain geographical locations?

Geofencing

What is the machine on which virtualization software is running known as?

Host

The TCP protocol functions at which layer of the TCP/IP model?

Host-to-Host

A ___________________ is a backup location that can provide services within hours of complete system failure.

Hot site

A ___________________ is a repair made while the system being repaired remains in operation.

Hotfix

Which of the following is NOT one of the cloud delivery models recognized by NIST?

Hybrid Community Unlisted Private

Wireless Ethernet conforms to which IEEE standard?

IEEE 802.11

A ___________________is the term for an area in a building where access is individually monitored and controlled.

Security Zone

Which U.S. government agency publishes lists of known vulnerabilities in operating systems?

NIST

___________________ is a type of penetration/vulnerability testing that takes a passive approach rather than actually trying to break into the network.

Nonintrusive

Whether or not your server operating system can force the change of a password is considered what kind of a security issue?

Operational

Which PKCS standard is the standard for password-based cryptography?

PKCS #5

A firewall operating as a ___________________ firewall will pass or block packets based on their application or TCP port number.

Packet filter

Packets between the WAP server and the Internet may be intercepted. What is this vulnerability known as?

Packet sniffing

Which fire extinguisher type is the best to be used on computer equipment in the case of a computer fire?

Type C

Which hypervisor model needs the operating system to be up and cannot boot until it is?

Type II

To prevent files from being copied on a workstation to removable media, you should disable which ports?

USB

If you wanted to connect two networks securely over the Internet, what type of technology could you use?

VPN

What technology is used to simplify network setup by allowing a router to have the administrator push a button on it to allow a new host to join?

WPS

__________________ is the security layer for wireless 802.11 connections using WAP.

WTLS

"Full disclosure testing" is more often known as which of the following?

White box

Which "X" standard defines certificate formats and fields for public keys?

X.509

A ___________________ is a system designed to fool attackers into thinking a system is unsecured so they will attack it. Then the "victim" will learn their attack methods without compromising a live system.

Honey pot

Which of the following is a single sign-on system used widely on the Internet?

Shibboleth

How many channels does the 802.11 standard define?

14

What TCP port does HTTP use?

80

Which security standard is used to encrypt e-mails?

S/MIME

Which type of risk strategy is undertaken when you attempt to reduce the risk?

mitigation

If SLE is calculated at $2,500 and there are an anticipated 4 occurrences a year (ARO), then ALE is:

$10,000

Your company owns a printing press worth $100,000. If it were damaged in a fire, it would be worth $8,000 in parts. What would the single loss expectance (SLE) be?

$8000 (Using the formula SLE = Asset value * exposure factor, you come up with $100,000 8%, or $8,000)

How many programs are traditionally run during vulnerability scanning?

1

What TCP port does Telnet use?

23

Which of the following is NOT an asymmetric encryption algorithm?

3DES

Which of the following will NOT contribute to network hardening?

>>>>Installing new anti-virus software on workstations Updating network switch firmware to newest versions Putting passwords on all remote-configurable network hardware Locking down all unused ports on the firewall

Which of the following is used to refer to any sophisticated series of related attacks taking place over an extended period of time?

APT

Which access control method model allows the owner of a resource to grant privileges to information they own?

DAC

Which of the following is the process of ensuring that policies, procedures, and regulations are carried out in a manner consistent with organizational standards?

Auditing

Which of the following is not part of the CIA triad?

Avoidance

Which of the following is an attack where a program or service is placed on a server to bypass normal security procedures?

Backdoor

Which method of code breaking tries every possible combination of characters in an attempt to "guess" the password or key?

Brute Force

Which method of attack against a password happens when an attacker tries many different combinations of alphanumeric characters until successful?

Brute force

Which encryption algorithm uses a 40 to 128-bit key and is used on many products from Microsoft and IBM?

CAST

Your company has given you a laptop to use as you travel. What category does this laptop fall under?

COPE

Individuals who specialize in the making of codes are known as

Cryptographers

Servers or computers that have two NIC cards, each connected to separate networks, are known as what type of computers?(TCOs F and G)

Dual-homed

Which of the following Evaluation Assurance Levels (EAL) specifies that the user wants assurance that the system will operate correctly, but threats to security are not viewed as serious?

EAL 1

Which of the following Evaluation Assurance Levels (EAL) is the common security benchmark for commercial systems?

EAL 4

Which type of attack is one in which a rogue wireless access point poses as a legitimate wireless service provider to intercept information that users transmit?

Evil twin

You've been notified that you'll soon be transferred to another site. Before you leave, you're to audit the network and document everything in use and the reason why it's in use. The next administrator will use this documentation to keep the network running. Which of the following protocols isn't a tunneling protocol but is probably used at your site by tunneling protocols for network security?

IPSec

Which of the following is a series of standards that define procedures for implementing electronically secure industrial automation and control systems?

ISA/IEC-62443

A(n) ___________________ is a broad term that applies to a wide range of systems used to manage information security.

ISMS

Which of the following is NOT one of the three cloud service models recognized by the NIST?

IaaS SaaS PaaS XaaS

__________________ is the first step in the incident response cycle.

Incident identification

___________________ are used to monitor a network for suspect activity.

Intrusion detection system

How does a user obtain a Message Authentication Code (MAC)?

It is derived from the message itself using an algorithm

Which authentication method uses a Key Distribution Center (KCD)?

Kerberos

When assigning permissions to users, which principle should you adhere to?

Least privilege

When the entire network, including all security devices, is virtualized, this is known as:

SDN

Which hashing algorithm uses a 160-bit hash value?

SHA

Which of the following is NOT a tunneling protocol?

SLIP (L2F is)

What is it known as when an attacker manipulates the database code to take advantage of a weakness in it?

SQL injection

Which of the following is a type of attack that occurs when an attacker pretends to be a legitimate client, using information it has gained from a legitimate client (like it's IP address).

Spoofing

What kind of cryptographic method replaces one character with another from a "match-up list" to produce the ciphertext? The decoder wheels kids get in cereal boxes often make this kind of cryptography.

Substitution cipher

Which of the following is an internal threat?

System Failure

Which remote access protocol, implemented almost exclusively by Cisco, is a central server providing remote access usernames that dial-up users can use for authentication.

TACACS+

The area of an application that is available to users (those who are authenticated as well as those who are not) is known as its:

attack surface

Which of the following is NOT necessary to back up?

Applications

Locking the door(s) to the server room involves what kind of security?

Physical

What protocol is used by technologies for load balancing/prioritizing traffic?

QoS

You have taken out an insurance policy on your data/systems to share some of the risk with another entity. What type of risk strategy is this?

Transference

You are the administrator for Mercury Technical. Due to several expansions, the network has grown exponentially in size within the past two years. Which of the following is a popular method for breaking a network into smaller private networks that can coexist on the same wiring and yet be unaware of each other?

VLAN

Which RAID level provides for no fault tolerance?

RAID 0

Which of the following is an IPsec header used to provide a mix of security services in IPv4 and IPv6?

ESP

According to the TCP/IP model, HTTP functions at which layer?

Application

You are the administrator of the sybex.com website. You are working when suddenly web server and network utilization spikes to 100% and stays there for several minutes and users start reporting "Server not available" errors. You may have been the victim of what kind of attack?

DoS

The process of making a computing environment more secure from attacks and intruders is known as ___________________.

Hardening

On the outer edge of physical security is the first barrier to entry. This barrier is known as a(n) ___________________.

Perimeter

__________________ provide rules for expected behaviors to people in an organization.

Policies

Which type of tool would best describe Nmap?

Vulnerability scanner

Which level of RAID is a "stripe of mirrors"?

RAID 1+0 or 10

A ___________________ is used to provide EMI & RFI shielding for an entire room of computer or electronic equipment (also used to prevent eavesdropping).

Faraday cage

Which of the following security features are not needed in a SAN?

Firewall Antivirus User access control {None of the above}

Which of the following devices are the first line of defense for networks connected to the Internet?

Firewalls

Separation of duties polices are designed to reduce the risk of what?

Fraud

You've been chosen to lead a team of administrators in an attempt to increase security. You're currently creating an outline of all the aspects of security that will need to be examined and acted upon. Which of the following terms describes the process of improving security in an NOS?

Hardening

Which of the following is NOT a routing protocol?

ICMP (RIP, BGP, OSPF)

Which set of applications is designed to allow XML-based programs access to PKI services?

XKMS

A major organization in the tracking and reporting of common computer and network security problems is ___________________.

CERT

If RF levels become too high, it can cause the receivers in wireless units to become deaf. The process is called:

Desensitizing

Which of the following is a wireless networking technology that uses two or more streams of data transmission to increase data throughput?

MIMO

Which method of cryptography uses a sequence of photons to represent the encrypted data?

Quantum Cryptography

Which access control method model grants rights or privileges based on their job function or position held?

RBAC