Question 1

Which of the following is not a signaling protocol?

Accepted Answer

A)  RTP 
B)  SIP 
C)  H.323 
D)  All of the above ARE signaling protocols. 
A)  RTP 
B)  SIP 
C)  H.323 
D)  All of the above ARE signaling protocols.

Question 2

Under what Internet Options tabs are cookies controlled?

Accepted Answer

A)  Privacy 
B)  Security 
C)  Protection 
D)  Advanced 
A)  Privacy 
B)  Security 
C)  Protection 
D)  Advanced

Question 3

Most firms do a satisfactory job overseeing the deployment of custom programs used to supplement packaged software.

Accepted Answer

A) True 
 B)False

Question 4

In IM, ________ servers allow two users to locate each other.

Accepted Answer

A)  index 
B)  relay 
C)  presence 
D)  All of the above 
A)  index 
B)  relay 
C)  presence 
D)  All of the above

Question 5

E-mail filtering can be done at which of the following?

Accepted Answer

A)  The user's PC 
B)  The corporate e-mail servers 
C)  E-mail managed service providers 
D)  All of the above 
A)  The user's PC 
B)  The corporate e-mail servers 
C)  E-mail managed service providers 
D)  All of the above

Question 6

If a hacker takes over an application program, he or she receives the permissions with which the program runs.

Accepted Answer

A) True 
 B)False

Question 7

________ introduced community strings for security, in which a shared secret was used to authenticate messages.

Accepted Answer

A)  SNMP V1 
B)  SNMP V2 
C)  SNMP V3 
D)  None of the above 
A)  SNMP V1 
B)  SNMP V2 
C)  SNMP V3 
D)  None of the above

Question 8

An attacker types more data in a field than the programmer expected. This is a(n) ________ attack.

Accepted Answer

A)  denial-of-service 
B)  directory traversal 
C)  buffer overflow 
D)  XSS 
A)  denial-of-service 
B)  directory traversal 
C)  buffer overflow 
D)  XSS

Question 9

Which of the following uses a PKI?

Accepted Answer

A)  S/MIME 
B)  PGP 
C)  Both A and B 
D)  Neither A nor B 
A)  S/MIME 
B)  PGP 
C)  Both A and B 
D)  Neither A nor B

Question 10

Testers have permissions on the ________.

Accepted Answer

A)  development server 
B)  testing server 
C)  production server 
D)  Both A and B 
A)  development server 
B)  testing server 
C)  production server 
D)  Both A and B

Question 11

Compared to full programming languages, scripts are ________ in what they can do.

Accepted Answer

A)  more limited 
B)  less limited 
C)  about as limited (but easier to use) 
D)  not limited at all 
A)  more limited 
B)  less limited 
C)  about as limited (but easier to use) 
D)  not limited at all

Question 12

Transport consists of communication to manage the network.

Accepted Answer

A) True 
 B)False

Question 13

Spammers use sticky spam, which presents their message as a graphical image.

Accepted Answer

A) True 
 B)False

Question 14

In a(n) ________ attack, the user enters part of a database query instead of giving the expected input.

Accepted Answer

A)  login screen bypass 
B)  buffer overflow 
C)  XSS 
D)  SQL injection attack 
A)  login screen bypass 
B)  buffer overflow 
C)  XSS 
D)  SQL injection attack

Question 15

RTP is used in ________.

Accepted Answer

A)  signaling 
B)  transport 
C)  Both A and B 
D)  Neither A nor B 
A)  signaling 
B)  transport 
C)  Both A and B 
D)  Neither A nor B

Question 16

The most popular way for hackers to take over hosts today is ________.

Accepted Answer

A)  by taking over the operating system 
B)  by taking over an application 
C)  by guessing the root password 
D)  by taking over the user interface 
A)  by taking over the operating system 
B)  by taking over an application 
C)  by guessing the root password 
D)  by taking over the user interface

Question 17

Spammers are one reason that some companies have outsourced e-mail filtering.

Accepted Answer

A) True 
 B)False

Question 18

VoIP traffic and data traffic tend to be segregated from each other on a network for added security.

Accepted Answer

A)  True. 
B)  False. This would increase costs too much. 
C)  False. This would negate the benefits of convergence. 
A)  True. 
B)  False. This would increase costs too much. 
C)  False. This would negate the benefits of convergence.

Question 19

Which of the following are reasons to ensure WWW Service and E-Commerce security?

Accepted Answer

A)  Cost of disruptions 
B)  Customer fraud 
C)  Exposure of sensitive private information 
D)  All of the above 
A)  Cost of disruptions 
B)  Customer fraud 
C)  Exposure of sensitive private information 
D)  All of the above

Question 20

A PSTN gateway translates between a VoIP network's ________ protocols and those of the public switched telephone network.

Accepted Answer

A)  signaling 
B)  transport 
C)  Both A and B 
D)  Neither A nor B 
A)  signaling 
B)  transport 
C)  Both A and B 
D)  Neither A nor B

Which of the following is not a signaling protocol?

Under what Internet Options tabs are cookies controlled?

Most firms do a satisfactory job overseeing the deployment of custom programs used to supplement packaged software.

In IM, ________ servers allow two users to locate each other.

E-mail filtering can be done at which of the following?

If a hacker takes over an application program, he or she receives the permissions with which the program runs.

________ introduced community strings for security, in which a shared secret was used to authenticate messages.

An attacker types more data in a field than the programmer expected. This is a(n) ________ attack.

Which of the following uses a PKI?

Testers have permissions on the ________.

Compared to full programming languages, scripts are ________ in what they can do.

Transport consists of communication to manage the network.

Spammers use sticky spam, which presents their message as a graphical image.

In a(n) ________ attack, the user enters part of a database query instead of giving the expected input.

RTP is used in ________.

The most popular way for hackers to take over hosts today is ________.

Spammers are one reason that some companies have outsourced e-mail filtering.

VoIP traffic and data traffic tend to be segregated from each other on a network for added security.

Which of the following are reasons to ensure WWW Service and E-Commerce security?

A PSTN gateway translates between a VoIP network's ________ protocols and those of the public switched telephone network.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 8: Application Security

Which of the following is not a signaling protocol?

Under what Internet Options tabs are cookies controlled?

Most firms do a satisfactory job overseeing the deployment of custom programs used to supplement packaged software.

In IM, ________ servers allow two users to locate each other.

E-mail filtering can be done at which of the following?

If a hacker takes over an application program, he or she receives the permissions with which the program runs.

________ introduced community strings for security, in which a shared secret was used to authenticate messages.

An attacker types more data in a field than the programmer expected. This is a(n) ________ attack.

Which of the following uses a PKI?

Testers have permissions on the ________.

Compared to full programming languages, scripts are ________ in what they can do.

Transport consists of communication to manage the network.

Spammers use sticky spam, which presents their message as a graphical image.

In a(n) ________ attack, the user enters part of a database query instead of giving the expected input.

RTP is used in ________.

The most popular way for hackers to take over hosts today is ________.

Spammers are one reason that some companies have outsourced e-mail filtering.

VoIP traffic and data traffic tend to be segregated from each other on a network for added security.

Which of the following are reasons to ensure WWW Service and E-Commerce security?

A PSTN gateway translates between a VoIP network's ________ protocols and those of the public switched telephone network.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters