Question 1

In order to inform the users of their rights and responsibilities while using computers on an institutions network a(n)____ is made available.

Accepted Answer

A) Internet Rights Policy 
B) Acceptable Use Policy 
C) Internet Abuse Policy 
D) Standard Rights Policy 
A) Internet Rights Policy 
B) Acceptable Use Policy 
C) Internet Abuse Policy 
D) Standard Rights Policy B

Question 2

Capturing packets is also referred to as ____.

Accepted Answer

A) packet stiffing 
B) packet sniffing 
C) packet hiding 
D) packet blocking 
A) packet stiffing 
B) packet sniffing 
C) packet hiding 
D) packet blocking B

Question 3

Describe host-based intrusion detection.

Accepted Answer

In host-based intrusion detection,every computer (host)on the network is responsible for examining its network traffic and recognizing the signatures of different types of intrusions.These may be denial of service attacks,buffer overflow attacks,and malicious code such as worms and scripts.These problems may be discovered and prevented through the use of a software firewall and an anti-virus application.It may,however,be necessary to verify the integrity of a system,as firewalls and anti-virus programs are not perfect.Sometimes the malicious code gets through because it is new and the signatures for its detection are not yet distributed.One way to help detect that a system is not compromised is to examine critical system files for changes.This may be done by creating a secure hash of a set of files and periodically rehashing the files to look for any changes.
Host-based intrusion detection may be expensive to implement due to having to purchase firewall,anti-virus,or other protective software for every system on the network.It is also a decentralized approach,since the intrusion detection is being performed on individual systems.This may require a significant amount of time for IT personnel to maintain the systems and respond to individual problems.

Question 4

Match each item with a statement below.
-Uses a list of common passwords to try to crack an unknown password

Accepted Answer

A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection 
A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection

Question 5

____ is a vulnerability scanner that will scan the host system,or any and all computers on the local network or anywhere on the Internet.

Accepted Answer

A) GFI LANguard 
B) NetCat 
C) L0phtCrack 
D) Brutus 
A) GFI LANguard 
B) NetCat 
C) L0phtCrack 
D) Brutus

Question 6

Match each item with a statement below.
-The technique of examining the network traffic entering a network or a computer and determining if the traffic is malicious in nature

Accepted Answer

A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection 
A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection

Question 7

There are only two ways to help prevent a password from being cracked.

Accepted Answer

A) True 
 B)False

Question 8

A ____ provides the rules and expectations and the consequences of not following the rules.

Accepted Answer

A) password policy 
B) software policy 
C) security policy 
D) network policy 
A) password policy 
B) software policy 
C) security policy 
D) network policy

Question 9

A(n)____________________ examines traffic and notes suspicious behavior in a log and may also notify a network manager through email,instant message,or some other communication.

Accepted Answer

The answer of A(n)____________________ examines traffic and notes suspicious behavior...

Question 10

Match each item with a statement below.
-Examines network traffic for known attack signatures

Accepted Answer

A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection 
A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection

Question 11

A ____ is an alert given when normal,non-malicious traffic happens to match one or more rules for malicious traffic.

Accepted Answer

A) false negative 
B) true negative 
C) true positive 
D) false positive 
A) false negative 
B) true negative 
C) true positive 
D) false positive

Question 12

The most common approaches to password ____________________ are guessing,brute force,and dictionary attacks.

Accepted Answer

The answer of The most common approaches to password ____________________...

Question 13

The ____ technique tries all combinations of letters,numbers,and symbols until eventually landing on the correct password.

Accepted Answer

A) dictionary 
B) brute force 
C) computed hash 
D) linear hash 
A) dictionary 
B) brute force 
C) computed hash 
D) linear hash

Question 14

Security policies and procedures should be static.

Accepted Answer

A) True 
 B)False

Question 15

A list of ports that are in use can be obtained through the ____ utility.

Accepted Answer

A) NBTSTAT 
B) IPCONFIG 
C) NETSTAT 
D) TCPSTAT 
A) NBTSTAT 
B) IPCONFIG 
C) NETSTAT 
D) TCPSTAT

Question 16

One way around the switch-based limitation is to use a managed switch that allows a ____ to be designated.

Accepted Answer

A) block port 
B) pan port 
C) management port 
D) mirror port 
A) block port 
B) pan port 
C) management port 
D) mirror port

Question 17

Promiscuous mode guarantees that the network adapter will capture all the network traffic on the LAN.

Accepted Answer

A) True 
 B)False

Question 18

Packet sniffing is possible through the use of a special mode of operation in the network adapter called ____________________ mode.

Accepted Answer

The answer of Packet sniffing is possible through the use...

Question 19

Describe the educational,diagnostics,network baseline measurements,and security reasons to capture network traffic.

Accepted Answer

For educational purposes.Taking the time

Question 20

Match each item with a statement below.
-Composed of information commonly known about the individual

Accepted Answer

A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection 
A) Snort 
B) Weak password 
C) Dictionary attack 
D) Brute force 
E) Intrusion detection

Exam 23: Security Software

In order to inform the users of their rights and responsibilities while using computers on an institutions network a(n)____ is made available.

Capturing packets is also referred to as ____.

Describe host-based intrusion detection.

Match each item with a statement below. -Uses a list of common passwords to try to crack an unknown password

____ is a vulnerability scanner that will scan the host system,or any and all computers on the local network or anywhere on the Internet.

Match each item with a statement below. -The technique of examining the network traffic entering a network or a computer and determining if the traffic is malicious in nature

There are only two ways to help prevent a password from being cracked.

A ____ provides the rules and expectations and the consequences of not following the rules.

A(n)____________________ examines traffic and notes suspicious behavior in a log and may also notify a network manager through email,instant message,or some other communication.

Match each item with a statement below. -Examines network traffic for known attack signatures

A ____ is an alert given when normal,non-malicious traffic happens to match one or more rules for malicious traffic.

The most common approaches to password ____________________ are guessing,brute force,and dictionary attacks.

The ____ technique tries all combinations of letters,numbers,and symbols until eventually landing on the correct password.

Security policies and procedures should be static.

A list of ports that are in use can be obtained through the ____ utility.

One way around the switch-based limitation is to use a managed switch that allows a ____ to be designated.

Promiscuous mode guarantees that the network adapter will capture all the network traffic on the LAN.

Packet sniffing is possible through the use of a special mode of operation in the network adapter called ____________________ mode.

Describe the educational,diagnostics,network baseline measurements,and security reasons to capture network traffic.

Match each item with a statement below. -Composed of information commonly known about the individual

What Is a Computer Network

Network Topology

Networking Hardware

Ethernet Technology

Token-Ring, fddi, and Other LAN Technologies

Network Design and Troubleshooting Scenarios

Low-Level Protocols

The Tcpip Protocols

Ipxspx, Appletalk, and Other Network Protocols

Switching and Routing

Network Management and Security

Electronic Mail

FTP and Telnet

Multimedia Networking

The Internet

Writing a Network Application

An Introduction to Networking With Windows

Windows Domains

Unix and Linux

Other Network Operating Systems

Cryptography and Security

Security Hardware

Forensic Techniques

Filters