Exam 2 - Ch. 8, 9, 10, 11, 12, 13, 14
Which of the following is the process of providing additional private credentials that match the user ID or username?
Authentication
Which of the following terms means the process to decide what a user can do?
Authorization
A successful DoS attack violates the ______ property of C-I-A.
Availability
The term _______ defines the components, including people, information, and conditions, that support business objectives.
Business drivers
______ cabling provides excellent protection from interference but can be expensive.
Fiber Optic
Which of the following is commonly the primary security control for data entering the LAN-to-WAN domain?
Filtering
Which type of network device is most commonly used to filter network traffic?
Firewall
Which security related act requires organizations to protect all personal medical information?
HIPAA
Which of the following protocols is used for encrypted traffic?
HTTPS
Which of the following devices repeats input received to all ports?
Hub
Which department should take the lead in User Domain compliance accountability?
Human Resources
Which of the following devices detect potential intrusions? (Select two). A. Firewall B. IPS C. IDS D. Load balancer
IPS; IDS
Which of the following is the process of verifying credentials of a specific user?
Identification
Which of the following is not a common feature of a data center? A. Controlled environment B. Limited physical access C. In-room generator D. Raised floor
In-room generator
The ______ property of the C-I-A triad provides the assurance the information cannot be changed by unauthorized users.
Integrity
Which of the following best describes the purpose of auditing?
It verifies that systems are operating in compliance
Which of the following terms defines a strategy in which you grant access that allows a user to complete assigned tasks and nothing else?
Least Privilege
Which WAN technology is a cost-effective solution for connecting multiple locations?
MPLS
Which common term originally referred to the large cabinets that housed the processing units and memory modules of early computers?
Mainframe
Which benefits do application performance monitoring software provide? (Select two). A. Measure end-user response time B. Measure senior management browsing habits C. Measure end-user traffic volume D. Measure application installed code base
Measure end-user response time; Measure end-user traffic volume
Which of the following controls would comply with the directive to limit access to payroll data to computers in the HR department?
Media Access Control-based authorization
Which of the following describes a common LAN protocol deployed to a network the size of a city?
Metro Ethernet
The ______ feature speeds up routing network packets by adding a label to each packet with routing information.
Multi-protocol label switching (MPLS)
Which of the following is a solution that defines and implements a policy that describes the requirements to access your network?
NAC
When using DAC, a subject must possess sufficient clearance as well as ________ to access an object.
Need to Know
A(n) ______ is a dedicated computer on a LAN that runs network management software.
Network Monitoring Plan (NMP)
Every disaster recovery plan should protect ______ first.
People
Which of the following is a series of individual tasks that users accomplish to comply with one or more goals?
Procedure
What are the types of malware? (Select two). A. Programs that actively spread or infect B. Programs that slow down data transfer C. Programs that cause damage D. Programs that hide
Programs that actively spread or infect Programs that hide
A(n) _______ makes requests for remote services on behalf of local clients.
Proxy Server
Which access control method is based on granting permissions?
RBAC
Using a RACI matrix, which attribute refers to the party that actually carries out the work?
Responsible
Which LAN device commonly has the ability to filter packets and deny traffic based on the destination address?
Router
______ is a network protocol used to monitor network devices.
SNMP
Which of the following is an internal control report for the services provided by a service provider?
SOC
Which of the following protocols works well with firewalls?
SSTP
Which of the following terms ensures at least two people must perform a series of actions to complete as task?
Separation of Duties
The _____ contains guaranteed availability for your WAN connection.
Service level agreement (SLA)
If you only have one connection to the Internet and that connection fails, your organization loses its Internet connection. This is an example of a(n) ______.
Single Point of Failure
According to SOX requirements, which type of user accounts are prohibited from accessing the production environment?
Software developers
Which of the following is a collection of requirements that the users must meet?
Standard
Which of the following controls would best protect sensitive data disclosure to unauthorized users using remote computers?
Strong passwords
A(n) ______ is a subdivision or part of a network.
Subnet
_______ is a technique that creates a virtual encrypted channel that allows applications to use any protocol to communicate with servers and services without having to worry about addressing privacy concerns.
Tunneling
Which protocol does SNMP use to transport messages?
UDP
A(n) ______ makes it easy to establish what appears to be a dedicated connection over a WAN.
Virtual Private Network (VPN)
Many organizations use a(n) ______ to allow remote users to connect to internal network resources.
Virtual Private Network (VPN)
Why is mapping a LAN a productive exercise?
Visual maps help in understanding your LAN design
A(n) ______ can exclude unnecessary traffic from the WAN.
WAN Optimizer
Which entity is responsible for controlling access to network traffic in the WAN?
WAN service provider
Who writes SLAs?
WAN service provider
Some attackers use the process of ______ to find modems that may be used to attack a computer.
War Dialing
A(n) ______ generally resides in the DMZ and provides the interface between remote users and an application server.
Web server
A ______ is a type of malware that is a self-contained program that replicates and sends copies of itself to other computers
Worm
Defining access controls where each user has the permission to carry out assigned tasks and nothing else is called
the principle of least privilege
Most WAN protocols operate at which level in the OSI reference model?
2
Which of the following is true? A. A BCP is normally part of a DRP B. A BCP addresses only IT issues C. A DRP is normally part of a BCP D. A DRP should address even minor interruptions
A DRP is normally part of a BCP
Which of the following best describes a dual-homed ISP connection?
A network that maintains two ISP connections
Which of the following best describes the term honeypot?
A server that is deliberately set up in an unsecure manner to attract attackers
Which of the following types of policies defines prohibited actions?
Acceptable use policy (AUP)
Which type of plan contains instructions on how to recover from a power failure?
BCP
Which of the following transmission techniques requires the entire bandwidth of a channel?
Baseband
True or False. The primary concern for remote access is availability.
False
True or False. WAN subscription cost tends to decrease as availability increases.
False
What does it mean when there are differences between the last security configuration baseline and the current security configuration settings?
Changes have occurred (either authorized or unauthorized)
Which type of agreement can protect the ability to file a patent application?
Confidentiality agreement
Why is LAN device configuration control important?
Configuration control can detect changes an attacker might have made to allow harmful traffic in a LAN
True or False. You only need written authorization prior to conducting a penetration test that accesses resources outside your organization.
False
Which type of WAN generally has the highest speed and is most secure?
Dedicated line
Which of the following choices protect your system from users transferring private data files from a server to a workstation? (Select two). A. Increase the frequency of object access audits. B. Deliver current security policy training. C. Place access control to prohibit inappropriate actions. D. Enable access auditing for all private data files.
Deliver current security policy training. Place access control to prohibit inappropriate actions.
A(n) ______ is an isolated part of a network that is connected both to the Internet and your internal secure network and is a common home for Internet-facing Web servers.
Demilitarized Zone (DMZ)
Which type of control only reports that a violation has occurred?
Detective
______ means the ongoing attention and care an organization places on security and compliance.
Due diligence
Where must sensitive information be encrypted to ensure its confidentiality? (Select two). A. While in use on a workstation B. During transmission over the network C. As it is stored on disk D. In memory
During transmission over the network As it is stored on disk
Which of the following is the primary type of control employed in the WAN domain?
Encryption
_______ is the primary security control used in the Remote Access domain.
Encryption
True or False. A LAN is a network that generally spans several city blocks.
False
True or False. A confidentiality agreement sets the expectations of each employee and sets job performance standards.
False
True or False. A local resource is any resource connected to the local LAN.
False
True or False. All VPN traffic is encrypted.
False
True or False. Because the System/Application domain is the innermost domain, security controls are not as important.
False
True or False. By definition, VPN traffic is encrypted.
False
True or False. PCI DSS allows merchants to store the CVV number.
False
True or False. The WAN domain commonly contains a DMZ.
False
True or False. The main concern of data security in the System/Application domain is integrity.
False
Which type of full database encryption doesn't require any user interaction?
TDE
Which protocol is commonly used to protect data sent to Web browsers when not using VPNs?
TLS
What condition must exist for a background check to be governed by FCRA?
The investigation is performed by a third party
How can some smart routers attempt to stop a DoS attack in progress?
They can terminate any connections with the source of the attack
Which of the following would be the best use for a packet sniffer? A. To approve or deny traffic based on the destination address B. To encrypt confidential data C. To analyze packet contents to specific LAN devices D. To track configuration changes to specific LAN devices
To analyze packet contents for known inappropriate traffic
True or False. A distributed application is one in which the components that make up the application reside on different computers.
True
True or False. A solid multilayered security plan means that an attacker will likely encounter several security controls before reaching the System/Application domain components.
True
True or False. Discretionary access control is based on roles and granted permissions.
True
True or False. Even the newest wireless protocols are slower than using high-quality physical cable.
True
True or False. Given adequate security controls, PDAs are appropriate for use as remote access devices.
True
True or False. NAT is helpful to hide internal IP addresses from the outside world.
True
True or False. One of the most important concerns when sending data across a WAN is confidentiality
True
True or False. The use of global user accounts can simplify user maintenance.
True
True or False. You should back up LAN device configuration settings as part of a LAN backup.
True
Many organizations use a RCI matrix to document tasks and the personnel responsible for the assignments. RACI stands for ______, ______, consulted, and informed.
responsible, accountable
