Exam 12: Assessing a System

What is the greatest threat to most networks?

Although often considered nonessential by some security experts,a(n)____________ is the only way to know of impending attacks.

What port numbers are assigned and used by well-known protocols?

To ensure that the appropriate level of security is being maintained,periodic ____________ should be conducted.

____________ is a free Unix scanner originally used by hackers to learn about target systems.

Which is a Windows application that displays detailed listings of TCP and UDP endpoints on a system including remote addresses connection state?

To provide protection for data when connecting from outside the network,all external connections should be made via a(n)____________.

What does the author consider the absolute minimum patching frequency for any organization?

In evaluating security aspects to arrive at a numeric score,which is NOT an aspect the author included?

Which is NOT an advantage to an organization provided by a proxy server?

An organization must consider the impact of data being made ____________ in order to evaluate the actual value of the data.

Perhaps the most critical first step in assessing network security is to:

Using three or four port scanners can increase the chances of identifying all possible ____________.

Having ____________ to evaluate threat levels provides a quantifiable method for evaluating system security.

Which is a scanner that can provide reports on registry entries,shared drives,services running,and operating system flaws?

____________ is one of the most popular protocol monitors in part because it is included with Windows.

When should a security audit report be filed and maintained?

The only way to know of impending attacks is by installation and use of which of the following?

Which does the author suggest is perhaps the most fundamental part of security?

Which is NOT one of the "Six P's" the author refers to in the stages of assessing a system's security?