Question 1

________ is not a common access right.

Accepted Answer

A)  Remove 
B)  Read 
C)  Write 
D)  Execute 
A)  Remove 
B)  Read 
C)  Write 
D)  Execute A

Question 2

What is IP spoofing?

Accepted Answer

A)  A denial-of-service attack that uses a single IP address. 
B)  Simulating the IP address of an authorized user to gain access to a system. 
C)  A means of filtering packets by testing their source IP address. 
D)  A secure means of transmitting data over the Internet. 
A)  A denial-of-service attack that uses a single IP address. 
B)  Simulating the IP address of an authorized user to gain access to a system. 
C)  A means of filtering packets by testing their source IP address. 
D)  A secure means of transmitting data over the Internet. B

Question 3

Digital certificates are created with an expiration date ________.

Accepted Answer

A)  So that if the certificate is compromised it can be cancelled. 
B)  To force users to refresh their certificate regularly. 
C)  So that if a certificate is issued incorrectly, it will eventually expire. 
D)  none of the above 
A)  So that if the certificate is compromised it can be cancelled. 
B)  To force users to refresh their certificate regularly. 
C)  So that if a certificate is issued incorrectly, it will eventually expire. 
D)  none of the above B

Question 4

A certificate authority is a(n) ________.

Accepted Answer

A)  repository for digital certificates. 
B)  digital document that identifies a user. 
C)  organization that sets policies for obtaining digital certificates. 
D)  trusted third party that issues a digital certificate. 
A)  repository for digital certificates. 
B)  digital document that identifies a user. 
C)  organization that sets policies for obtaining digital certificates. 
D)  trusted third party that issues a digital certificate.

Question 5

Which of the following is not a problem with secret-key cryptography?

Accepted Answer

A)  It requires a large amount of processing time and complexity to implement. 
B)  Two parties must find a secure way to exchange the key. 
C)  A sender needs a different key for each receiver. 
D)  If the key is intercepted, a third party could pose as either host in the communication. 
A)  It requires a large amount of processing time and complexity to implement. 
B)  Two parties must find a secure way to exchange the key. 
C)  A sender needs a different key for each receiver. 
D)  If the key is intercepted, a third party could pose as either host in the communication.

Question 6

A shadow password file is a(n) ________.

Accepted Answer

A)  imitation password file used by the system to trick malicious users 
B)  false password file that is placed on a system by a malicious user 
C)  password file that is accessible only by users with root privileges 
D)  deleted password file that is still stored in memory 
A)  imitation password file used by the system to trick malicious users 
B)  false password file that is placed on a system by a malicious user 
C)  password file that is accessible only by users with root privileges 
D)  deleted password file that is still stored in memory

Question 7

What is the nonrepudiation issue for secure transactions?

Accepted Answer

A)  How do you ensure that the information you transmit has not been compromised? 
B)  How do you ensure that the information you transmit has not been captured? 
C)  How do you prove that a message was sent or received? 
D)  How do the sender and receiver verify their identities? 
A)  How do you ensure that the information you transmit has not been compromised? 
B)  How do you ensure that the information you transmit has not been captured? 
C)  How do you prove that a message was sent or received? 
D)  How do the sender and receiver verify their identities?

Question 8

Which of the following is not true of system penetration?

Accepted Answer

A)  Every system penetration is potentially dangerous. 
B)  It is a successful breach of a system's security. 
C)  It leads to denial of service. 
D)  Many attacks rely on a successful system penetration. 
A)  Every system penetration is potentially dangerous. 
B)  It is a successful breach of a system's security. 
C)  It leads to denial of service. 
D)  Many attacks rely on a successful system penetration.

Question 9

Security threats can originate from ________.

Accepted Answer

A)  malicious users 
B)  malicious software 
C)  outside the system via a network connection 
D)  all of the above 
A)  malicious users 
B)  malicious software 
C)  outside the system via a network connection 
D)  all of the above

Question 10

Authentication server scripts more secure than workstation login scripts because ________.

Accepted Answer

A)  a single login allows a user access to multiple applications 
B)  user passwords are encrypted to hide them from other users 
C)  passwords are maintained in only one (typically secure) location 
D)  none of the above 
A)  a single login allows a user access to multiple applications 
B)  user passwords are encrypted to hide them from other users 
C)  passwords are maintained in only one (typically secure) location 
D)  none of the above

Question 11

Public-key cryptography is symmetric in that ________.

Accepted Answer

A)  it decrypts messages using the same key it uses to encrypt 
B)  both the sender and the receiver use the same key 
C)  it employs two inversely related keys 
D)  either host can create a key and both hosts can use it 
A)  it decrypts messages using the same key it uses to encrypt 
B)  both the sender and the receiver use the same key 
C)  it employs two inversely related keys 
D)  either host can create a key and both hosts can use it

Question 12

________ is the most advanced single sign-on system.

Accepted Answer

A)  A workstation login script 
B)  An authentication server script 
C)  Token-based authentication 
D)  none of the above 
A)  A workstation login script 
B)  An authentication server script 
C)  Token-based authentication 
D)  none of the above

Question 13

Digital signatures are designed to address ________.

Accepted Answer

A)  privacy 
B)  authorization 
C)  authentication 
D)  nonrepudiation 
A)  privacy 
B)  authorization 
C)  authentication 
D)  nonrepudiation

Question 14

A security model defines ________.

Accepted Answer

A)  privileges 
B)  resource types 
C)  subjects 
D)  both a and c 
A)  privileges 
B)  resource types 
C)  subjects 
D)  both a and c

Question 15

Host-based intrusion detection is especially useful for detecting ________.

Accepted Answer

A)  brute-force attacks 
B)  cryptanalytic attacks 
C)  denial-of-service attacks 
D)  Trojan horse attacks 
A)  brute-force attacks 
B)  cryptanalytic attacks 
C)  denial-of-service attacks 
D)  Trojan horse attacks

Question 16

Attempting all possible passwords in attempt to guess the correct one is known as________.

Accepted Answer

A)  scripting 
B)  dictionary attacking 
C)  brute-force cracking 
D)  trial and error 
A)  scripting 
B)  dictionary attacking 
C)  brute-force cracking 
D)  trial and error

Question 17

A key distribution center is ________.

Accepted Answer

A)  the component that actually performs the encryption and decryption 
B)  a central authority that shares a different key with each user 
C)  an organization that develops and supports security algorithms 
D)  a system that transfers keys between hosts 
A)  the component that actually performs the encryption and decryption 
B)  a central authority that shares a different key with each user 
C)  an organization that develops and supports security algorithms 
D)  a system that transfers keys between hosts

Question 18

Which of the following statements about proprietary software security implementations is false?

Accepted Answer

A)  Developers are sometimes unwilling to disclose security flaws. 
B)  They are not always interoperable with other security programs. 
C)  They use security by obscurity. 
D)  They cannot be, in general, as secure as open-source software security implementations. 
A)  Developers are sometimes unwilling to disclose security flaws. 
B)  They are not always interoperable with other security programs. 
C)  They use security by obscurity. 
D)  They cannot be, in general, as secure as open-source software security implementations.

Question 19

Which of the following is not an effective way to increase the security of a password against cracking?

Accepted Answer

A)  Encouraging users not to write down their passwords. 
B)  Using password salting. 
C)  Limiting the number of failed attempts to access a user's account. 
D)  Encouraging users to change their passwords often. 
A)  Encouraging users not to write down their passwords. 
B)  Using password salting. 
C)  Limiting the number of failed attempts to access a user's account. 
D)  Encouraging users to change their passwords often.

Question 20

A limitation of signature-scanning virus detection is that ________.

Accepted Answer

A)  variants and polymorphic viruses can slip through undetected 
B)  it can introduce false positives and false negatives 
C)  virus lists can become prohibitively large as viruses proliferate 
D)  all of the above 
A)  variants and polymorphic viruses can slip through undetected 
B)  it can introduce false positives and false negatives 
C)  virus lists can become prohibitively large as viruses proliferate 
D)  all of the above

Exam 19: Security Threats and Solutions in Cryptography and Access Control

________ is not a common access right.

What is IP spoofing?

Digital certificates are created with an expiration date ________.

A certificate authority is a(n) ________.

Which of the following is not a problem with secret-key cryptography?

A shadow password file is a(n) ________.

What is the nonrepudiation issue for secure transactions?

Which of the following is not true of system penetration?

Security threats can originate from ________.

Authentication server scripts more secure than workstation login scripts because ________.

Public-key cryptography is symmetric in that ________.

________ is the most advanced single sign-on system.

Digital signatures are designed to address ________.

A security model defines ________.

Host-based intrusion detection is especially useful for detecting ________.

Attempting all possible passwords in attempt to guess the correct one is known as________.

A key distribution center is ________.

Which of the following statements about proprietary software security implementations is false?

Which of the following is not an effective way to increase the security of a password against cracking?

A limitation of signature-scanning virus detection is that ________.

Exploring Operating Systems and Distributed Computing: a Comprehensive Overview

Understanding Computer Systems and Programming Concepts

Understanding Processes and Threads in Operating Systems

Exploring Semaphores and Multithreading in Operating Systems

Exploring Thread Synchronization and Mutual Exclusion in Java

Concurrency and Deadlock in Database Systems: Exploring Monitor Implementation and Thread Synchronization in Java

Operating System Scheduling and Deadlock Prevention: a Comprehensive Guide

Understanding Processor Scheduling and Memory Management in Operating Systems

Memory Management in Operating Systems: Segmentation, Paging, and Strategies for Efficiency

Memory Management and Address Translation in Operating Systems

Memory Management and Page Replacement Strategies in Operating Systems

Disk Storage and Raid Technology

Understanding File Systems and Database Systems: a Comprehensive Overview

Exploring Performance Evaluation and Benchmarking in Computer Systems

Understanding Multiprocessor Organizations and System Performance

Understanding the Layers of the TCP/IP Protocol Stack

Understanding Distributed Systems and Operating Systems

Exploring Distributed File Systems and Grid Computing With NFS, AFS, Coda, and JXTA

Exploring the Linux Operating Systems Features and Functionality

In-Depth Analysis of Windows XP

Filters