Network Security

Front 1

Which of the following issues is not addressed by Kerberos?
Availability
Privacy
Integrity
Authentication

Back 1

Availability

Front 2

Which access control model is best suited in an environment where a high security level is required and where it is desired that only the administrator grants access control?
DAC
MAC
RBAC
TACACS

Back 2

MAC

Front 3

Which of the following represents the columns of the table in a relational database?
attributes
relation
record retention
records or tuples

Back 3

attributes

Front 4

Which of the following reviews system and event logs to detect attacks on the host and determine if the attack was successful?
host-based IDS
firewall-based IDS
bastion-based IDS
server-based IDS

Back 4

host-based IDS

Front 5

Which of the following is the primary security feature of a proxy server?
Client hiding
URL blocking
Route blocking
Content filtering

Back 5

Client hiding

Front 6

Which of the following is not an OSI architecture-defined broad category of security standards?
Security techniques standards
Layer security protocol standards
Application-specific security
Firewall security standards

Back 6

Firewall security standards

Front 7

Which of the following is an ipaddress that is private (i.e. reserved for internal networks, and not a valid address to use on the Internet)?
172.12.42.5
172.140.42.5
172.31.42.5
172.15.42.5

Back 7

172.31.42.5

Front 8

All following observations about IPSec are correct except:
Default Hashing protocols are HMAC-MD5 or HMAC-SHA-1
Default Encryption protocol is Cipher Block Chaining mode DES, but other algorithms like ECC (Elliptic curve cryptosystem) can be used
Support two communication modes - Tunnel mode and Transport mode
Works only with Secret Key Cryptography

Back 8

Works only with Secret Key Cryptography

Front 9

Which of the following tape format types offer the highest transfer rate?
Digital Audio Tape (DAT)
Quarter inch Cartridge (QIC)
8mm tape
Digital Linear Tape (DLT)

Back 9

Digital Linear Tape (DLT)

Front 10

Which of the following tasks may be performed by the same person in a well-controlled information processing facility/computer center?
System development and change management
System development and systems maintenance
Security administration and change management
Computer operations and system development

Back 10

System development and systems maintenance

Front 11

If risk is defined as "the potential that a given threat will exploit vulnerabilities of an asset or group of assets to cause loss or damage to the assets" then risk has all of the following elements EXCEPT?
An impact on assets based on threats and vulnerabilities
Controls addressing the threats
Threats to and vulnerabilities of processes and/or assets
Probabilities of the threats

Back 11

Controls addressing the threats

Front 12

Which of the following is not a responsibility of a database administrator?
Maintaining databases
Implementing access rules to databases
Reorganizing databases
Providing access authorization to databases

Back 12

Reorganizing databases

Front 13

Related to information security, the prevention of the intentional or unintentional unauthorized disclosure of contents is which of the following?
Confidentiality
Integrity
Availability
capability

Back 13

Confidentiality

Front 14

Which of the following methodologies is appropriate for planning and controlling activities and resources in a system project?
Gantt charts
Program evaluation review technique (PERT)
Critical path methodology (CPM)
Function point analysis (FP)

Back 14

Program evaluation review technique (PERT)

Front 15

Which of the following refers to the work product satisfying the real-world requirements and concepts?
validation
verification
concurrence
accuracy

Back 15

validation

Front 16

Which of the following is an advantage of using a high-level programming language?
It decreases the total amount of code written
It allows programmers to define syntax
It requires programmer-controlled storage management
It enforces coding standards

Back 16

It decreases the total amount of code written

Front 17

Which of the following is the marriage of object-oriented and relational technologies combining the attributes of both?
object-relational database
object-oriented database
object-linking database
object-management database

Back 17

object-relational database

Front 18

Which of the following files should the security administrator be restricted to READ only access?
Security parameters
User passwords
User profiles
System log

Back 18

System log

Front 19

Which of the following can best be defined as a cryptanalysis technique in which the analyst tries to determine the key from knowledge of some plaintext-ciphertext pairs?
A known-plaintext attack
A known-algorithm attack
A chosen-ciphertext attack
A chosen-plaintext attack

Back 19

A known-plaintext attack

Front 20

Which of the following is *NOT* a symmetric key algorithm?
Blowfish
Digital Signature Standard (DSS)
Triple DES (3DES)
RC5

Back 20

Digital Signature Standard (DSS)

Front 21

How many bits compose an IPv6 address?

Back 21

128 bits

Front 22

What key size is used by the Clipper Chip?

Back 22

80 bits

Front 23

Before the advent of classless addressing, the address 128.192.168.16 would have been considered part of:

Back 23

a class B network.

Front 24

Which of the following takes the concept of RAID 1 (mirroring) and applies it to a pair of servers?

Back 24

A redundant server implementation

Front 25

What is used to help IP match an IP address to the appropriate hardware address of the packet's destination so it can be sent?

Back 25

Address resolution protocol (ARP)

Front 26

Which of the following best represent Misuse detectors?

Back 26

analyze system activity, looking for events or sets of events that match a predefined pattern of events that describe a known attack.

Front 27

Which OSI/ISO layer does a SOCKS server operate at?

Back 27

Application layer

Front 28

Discretionary access controls:

Back 28

are widely used in commercial environments.

Front 29

What is the PRIMARY use of a password?

Back 29

Authenticate the user.

Front 30

Which of the following services is provided by S-RPC?

Back 30

Authentication

Front 31

Which of the following issues is not addressed by Kerberos?

Back 31

Availability

Front 32

The only difference between RAID 3 and RAID 4 is that level 3 is implemented at the byte level while level 4 is usually implemented at which of the following?

Back 32

block level.

Front 33

In what LAN topology do all the transmissions of the network travel the full length of cable and are received by all other stations?

Back 33

Bus topology

Front 34

What is a hub used for?

Back 34

Connecting two segments of a single LAN

Front 35

Passwords can be required to change monthly, quarterly, or at other intervals:

Back 35

depending on the criticality of the information needing protection and the password's frequency of use.

Front 36

Which of the following does not allow for a workstation to get an IP address assigned?

Back 36

DHCP

Front 37

What is the framing specification used for transmitting digital signals at 1.544 Mbps on a T1 facility?

Back 37

DS-1

Front 38

What encryption algorithm is best suited for communication with handheld wireless devices?

Back 38

ECC

Front 39

In order to ensure the privacy and integrity of the data, connections between firewalls over public networks should use:

Back 39

Encrypted Virtual Private Networks

Front 40

Which of the following is not an advantage that TACACS+ has over TACACS?

Back 40

Event logging

Front 41

What are cognitive passwords?

Back 41

Fact- or opinion-based information used to verify an individual's identity.

Front 42

Which of the following transmission media would NOT be affected by cross talk or interference?

Back 42

Fiber optic cables

Front 43

Which protocol's primary function is to facilitate file and directory transfer between two machines?

Back 43

File Transfer Protocol (FTP).

Front 44

According to the Minimum Security Requirements (MSR) for Multi-User Operating Systems (NISTIR 5153) document, which of the following statements pertaining to audit data recording is incorrect?

Back 44

For maintenance purposes, it shall be possible to disable the recording of activities that require privileges.

Front 45

The type of discretionary access control that is based on an individual's identity is called:

Back 45

Identity-based Access control

Front 46

Detective/Technical measures:

Back 46

include intrusion detection systems and automatically-generated violation reports from audit trail information.

Front 47

A one-way hash provides which of the following?

Back 47

Integrity

Front 48

Low cost Internet products, like web browsers can be utilized on Intranets due to which of the following?

Back 48

Intranets use TCP/IP and SMTP standards.

Front 49

Which of the following are suitable protocols for securing VPN connections?

Back 49

IPsec and L2TP

Front 50

Who must bear the primary responsibility for determining the level of protection needed for information systems resources?

Back 50

IS security specialists

Front 51

What refers to legitimate users accessing networked services that would normally be restricted to them?

Back 51

Logon abuse

Front 52

Which access control model is best suited in an environment where a high security level is required and where it is desired that only the administrator grants access control?

Back 52

MAC

Front 53

Which of the following Common Data Network Services is used to send and receive email internally or externally through an email gateway device?

Back 53

Mail services.

Front 54

Which of the following layers does IPSec operate at?

Back 54

Network

Front 55

Which of the following is an issue with signature-based intrusion detection systems?

Back 55

Only previously identified attack signatures are detected.

Front 56

Which one of the following is used to provide authentication and confidentiality for e-mail messages?

Back 56

PGP

Front 57

The International Standards Organization / Open Systems Interconnection (ISO/OSI) Layers 6 is which of the following?

Back 57

Presentation Layer

Front 58

The Internet can be utilized by either:

Back 58

public or private networks (with a Virtual Private Networks).

Front 59

Which of the following is less likely to assist in ensuring availability?

Back 59

Regular system and security audits

Front 60

Secure Shell (SSH-2) has two important components: RSA certificate exchange for authentication and Triple DES for:

Back 60

session encryption.

Front 61

Which of the following is not a defined layer in the TCP/IP protocol model?

Back 61

Session layer

Front 62

CAT3 is an older specification with a:

Back 62

shorter effective distance.

Front 63

What type of attack involves IP spoofing, ICMP ECHO and a bounce site?

Back 63

Smurf attack

Front 64

Security pros are not interested in which of the following?

Back 64

softening their networks

Front 65

Zip/Jaz drives are frequently used for the individual backups of small data sets of:

Back 65

specific application data.

Front 66

The IP header contains a protocol field. If this field contains the value of 6, what type of data is contained within the ip datagram?

Back 66

TCP

Front 67

What is the main problem of the renewal of a root CA certificate?

Back 67

The authentic distribution of the new root CA certificate to all PKI participants

Front 68

How do you distinguish between a bridge and a router?

Back 68

The bridge connects two networks at the link layer, while router connects two networks at the network layer.

Front 69

Which of the following is a drawback of fiber optic cables?

Back 69

The expertise needed to install it.

Front 70

Advanced Research Projects Agency Network (ARPANET), Department of Defense Research Projects Agency Network (DARPANET), Defense Data Network (DDN), or DoD Internets is referred to as which of the following?

Back 70

the Internet.

Front 71

Which of the following is a Wide Area Network that was originally funded by the Department of Defense, which uses TCP/IP for data interchange?

Back 71

the Internet.

Front 72

In Mandatory Access Control, sensitivity labels contain what information?

Back 72

the item's classification and category set

Front 73

What approach to a security program makes sure that the people actually responsible for protecting the company's assets are driving the program?

Back 73

The top-down approach

Front 74

Which of the following is most relevant to determining the maximum effective cost of access control?

Back 74

the value of information that is protected.

Front 75

In addition to the accuracy of the biometric systems, there are other factors that must also be considered:

Back 75

These factors include the enrolment time, the throughput rate, and acceptability.

Front 76

What can be best defined as the examination of threat sources against system vulnerabilities to determine the threats for a particular system in a particular operational environment?

Back 76

Threat analysis

Front 77

Which OSI/ISO layers are TCP and UDP implemented at?

Back 77

Transport layer

Front 78

In a hierarchical PKI, the root CA has following specific functions?

Back 78

Trust anchor for all PKI participants

Front 79

Which of the following Operating Systems provides Kerberos implementation?

Back 79

Windows 2000