Question 1

Which of the following make up for two of UDP's biggest weaknesses?

Accepted Answer

A)  IP headers 
B)  UDP headers 
C)  RTP headers 
D)  Circles of trust 
A)  IP headers 
B)  UDP headers 
C)  RTP headers 
D)  Circles of trust C

Question 2

In VoIP, encryption may ________.

Accepted Answer

A)  increase jitter 
B)  reduce throughput 
C)  make traffic unreadable 
D)  increase latency 
A)  increase jitter 
B)  reduce throughput 
C)  make traffic unreadable 
D)  increase latency B

Question 3

Presence servers allow three or more parties to locate each other.

Accepted Answer

A) True 
 B)False  False

Question 4

Server-side programs should be created on ________.

Accepted Answer

A)  development servers 
B)  testing servers 
C)  production servers 
D)  authentication servers 
A)  development servers 
B)  testing servers 
C)  production servers 
D)  authentication servers

Question 5

Among the most widespread vulnerabilities in application programs are ________ vulnerabilities.

Accepted Answer

A)  operating system 
B)  buffer overflow 
C)  root 
D)  PHP 
A)  operating system 
B)  buffer overflow 
C)  root 
D)  PHP

Question 6

SSL/TLS provides security ________.

Accepted Answer

A)  between an e-mail client and its mail server 
B)  between an authentication email and an e-mail client 
C)  only with suspicious e-mail 
D)  at the level of the PC 
A)  between an e-mail client and its mail server 
B)  between an authentication email and an e-mail client 
C)  only with suspicious e-mail 
D)  at the level of the PC

Question 7

Attackers are rarely able to exploit vulnerabilities in custom programs.

Accepted Answer

A) True 
 B)False

Question 8

Numerous ________ errors indicate that a directory or file was not found.

Accepted Answer

A)  512 
B)  500 
C)  303 
D)  404 
A)  512 
B)  500 
C)  303 
D)  404

Question 9

Microsoft's web-server software is the ________.

Accepted Answer

A)  XSS 
B)  IIS 
C)  IPP 
D)  SQL 
A)  XSS 
B)  IIS 
C)  IPP 
D)  SQL

Question 10

What is the problem with image spam?

Accepted Answer

A)  It takes up more bandwidth than traditional text spam. 
B)  It isn't detectible. 
C)  It is smaller and less detectible than traditional text spam. 
D)  It consumes less bandwidth and often can get past traditional spam detectors. 
A)  It takes up more bandwidth than traditional text spam. 
B)  It isn't detectible. 
C)  It is smaller and less detectible than traditional text spam. 
D)  It consumes less bandwidth and often can get past traditional spam detectors.

Question 11

An application proxy firewall sits between a webserver and the rest of a network.

Accepted Answer

A) True 
 B)False

Question 12

It is recommended that cryptographic system protections should not be used between the user and the application.

Accepted Answer

A) True 
 B)False

Question 13

VoIP voice transmission uses ________ to carry the digital voice data.

Accepted Answer

A)  UDP 
B)  codecs 
C)  buffers 
D)  TCP 
A)  UDP 
B)  codecs 
C)  buffers 
D)  TCP

Question 14

Temporary areas in RAM are known as ________.

Accepted Answer

A)  stacks 
B)  stack entries 
C)  returns 
D)  buffers 
A)  stacks 
B)  stack entries 
C)  returns 
D)  buffers

Question 15

________ is a computer language used to access and manage databases.

Accepted Answer

A)  C 
B)  IIS 
C)  Ajax 
D)  SQL 
A)  C 
B)  IIS 
C)  Ajax 
D)  SQL

Question 16

VoIP is ________.

Accepted Answer

A)  calling someone over a PSTN line 
B)  sending e-mail through the Internet 
C)  calling someone over the Internet 
D)  sending video over the Internet 
A)  calling someone over a PSTN line 
B)  sending e-mail through the Internet 
C)  calling someone over the Internet 
D)  sending video over the Internet

Question 17

Which of the following is NOT a supervisory protocol?

Accepted Answer

A)  SNMP 
B)  ARP 
C)  OSPF 
D)  RTP 
A)  SNMP 
B)  ARP 
C)  OSPF 
D)  RTP

Question 18

An SQL statement uses the SELECT clause.

Accepted Answer

A) True 
 B)False

Question 19

Corporate IM systems should use a presence server rather than a relay server.

Accepted Answer

A) True 
 B)False

Question 20

What is BugTraq?

Accepted Answer

A)  A vulnerability tracking service 
B)  A virus 
C)  An application that runs on Windows 
D)  An antivirus program 
A)  A vulnerability tracking service 
B)  A virus 
C)  An application that runs on Windows 
D)  An antivirus program

Which of the following make up for two of UDP's biggest weaknesses?

In VoIP, encryption may ________.

Presence servers allow three or more parties to locate each other.

Server-side programs should be created on ________.

Among the most widespread vulnerabilities in application programs are ________ vulnerabilities.

SSL/TLS provides security ________.

Attackers are rarely able to exploit vulnerabilities in custom programs.

Numerous ________ errors indicate that a directory or file was not found.

Microsoft's web-server software is the ________.

What is the problem with image spam?

An application proxy firewall sits between a webserver and the rest of a network.

It is recommended that cryptographic system protections should not be used between the user and the application.

VoIP voice transmission uses ________ to carry the digital voice data.

Temporary areas in RAM are known as ________.

________ is a computer language used to access and manage databases.

VoIP is ________.

Which of the following is NOT a supervisory protocol?

An SQL statement uses the SELECT clause.

Corporate IM systems should use a presence server rather than a relay server.

What is BugTraq?

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Data Protection

Incident and Disaster Response

Module a Networking Concepts

Filters

Exam 8: Application Security

Which of the following make up for two of UDP's biggest weaknesses?

In VoIP, encryption may ________.

Presence servers allow three or more parties to locate each other.

Server-side programs should be created on ________.

Among the most widespread vulnerabilities in application programs are ________ vulnerabilities.

SSL/TLS provides security ________.

Attackers are rarely able to exploit vulnerabilities in custom programs.

Numerous ________ errors indicate that a directory or file was not found.

Microsoft's web-server software is the ________.

What is the problem with image spam?

An application proxy firewall sits between a webserver and the rest of a network.

It is recommended that cryptographic system protections should not be used between the user and the application.

VoIP voice transmission uses ________ to carry the digital voice data.

Temporary areas in RAM are known as ________.

________ is a computer language used to access and manage databases.

VoIP is ________.

Which of the following is NOT a supervisory protocol?

An SQL statement uses the SELECT clause.

Corporate IM systems should use a presence server rather than a relay server.

What is BugTraq?

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Data Protection

Incident and Disaster Response

Module a Networking Concepts

Filters