Question 1

What routing protocol is usually used on the Internet? Why is the information used by the protocol vulnerable to compromise?

Accepted Answer

The Internet network is linked by routers.Routing protocols such as Border Gateway Protocol (BGP)are used to communicate information updates for routing tables.However,routing information is not authenticated,so it is vulnerable to compromise.Attackers could send modified routing updates that misdirect data to a destination of their choosing.With this data,they can launch DoS attacks,use IP spoofing to intercept packets,or launch man-in-the-middle attacks,in which the attacker's computer or router is placed between the source and destination of a communication to intercept and steal information.

Question 2

MATCHING
-highly secure public facilities where commercial Internet backbones and ISPs exchange routing and traffic data

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer 
A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer C

Question 3

What makes IP spoofing possible for computers on the Internet?

Accepted Answer

A)  network address translation 
B)  the lack of authentication 
C)  the 32-bit address space 
D)  the DNS hierarchy 
A)  network address translation 
B)  the lack of authentication 
C)  the 32-bit address space 
D)  the DNS hierarchy B

Question 4

Computers on the Internet are identified primarily by their IP address.

Accepted Answer

A) True 
 B)False

Question 5

The _______________ Web Server is the most widely used Web server application.

Accepted Answer

The answer of The _______________ Web Server is the most...

Question 6

MATCHING
-a protocol designed to improve DNS security by using cryptography to ensure DNS integrity and authentication

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer 
A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 7

The lack of authentication for computers on the Internet make IP _____________ possible,which is a change in the IP addresses in the headers of malicious packets.

Accepted Answer

The answer of The lack of authentication for computers on...

Question 8

What is a zone transfer?

Accepted Answer

A)  the movement of e-mail from one domain to another 
B)  updating a secondary DNS server 
C)  backing up an SQL data file 
D)  copying host file data to another system 
A)  the movement of e-mail from one domain to another 
B)  updating a secondary DNS server 
C)  backing up an SQL data file 
D)  copying host file data to another system

Question 9

DNS _____________ poisoning steers unsuspecting victims to a server of the attacker's choice instead of the intended Web site.

Accepted Answer

The answer of DNS _____________ poisoning steers unsuspecting victims to...

Question 10

What is the origin and structure of the Internet? Include some of the services it provides and the protocols they use.

Accepted Answer

The Internet is a group of networks tied

Question 11

MATCHING
-a network addressing scheme that allows DNS services to be decentralized among a group of servers,regardless of their location

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer 
A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 12

What is the Internet backbone? Describe how routers work with the Internet backbone.

Accepted Answer

The Internet communication backbone is a

Question 13

MATCHING
-a network architecture that divides DNS services between two servers

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer 
A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 14

_______________________ is a name-resolution service that translates domain names to IP addresses.

Accepted Answer

Domain Nam

Question 15

Which of the following is a top-level digital certificate in the PKI chain?

Accepted Answer

A)  security-aware resolver 
B)  trust anchor 
C)  DNSSEC resolver 
D)  RRSIG record 
A)  security-aware resolver 
B)  trust anchor 
C)  DNSSEC resolver 
D)  RRSIG record

Question 16

MATCHING
-ISP facilities that provide connectivity to the Internet for business,education,and home users

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer 
A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 17

List three of the steps you should take to close potential holes against SQL injection attacks.

Accepted Answer

Tighten database authentication and limi

Question 18

A _______________ applet is a small program sometimes used as embedded code in Web pages.

Accepted Answer

The answer of A _______________ applet is a small program...

Question 19

The objective of a phishing attack is to entice e-mail recipients to click a bogus link where personal information can be stolen.

Accepted Answer

A) True 
 B)False

Question 20

A critical buffer component is the function _________ and buffer overflows are usually aimed at this component.

Accepted Answer

The answer of A critical buffer component is the function...

What routing protocol is usually used on the Internet? Why is the information used by the protocol vulnerable to compromise?

MATCHING -highly secure public facilities where commercial Internet backbones and ISPs exchange routing and traffic data

What makes IP spoofing possible for computers on the Internet?

Computers on the Internet are identified primarily by their IP address.

The _______________ Web Server is the most widely used Web server application.

MATCHING -a protocol designed to improve DNS security by using cryptography to ensure DNS integrity and authentication

The lack of authentication for computers on the Internet make IP _____________ possible,which is a change in the IP addresses in the headers of malicious packets.

What is a zone transfer?

DNS _____________ poisoning steers unsuspecting victims to a server of the attacker's choice instead of the intended Web site.

What is the origin and structure of the Internet? Include some of the services it provides and the protocols they use.

MATCHING -a network addressing scheme that allows DNS services to be decentralized among a group of servers,regardless of their location

What is the Internet backbone? Describe how routers work with the Internet backbone.

MATCHING -a network architecture that divides DNS services between two servers

_______________________ is a name-resolution service that translates domain names to IP addresses.

Which of the following is a top-level digital certificate in the PKI chain?

MATCHING -ISP facilities that provide connectivity to the Internet for business,education,and home users

List three of the steps you should take to close potential holes against SQL injection attacks.

A _______________ applet is a small program sometimes used as embedded code in Web pages.

The objective of a phishing attack is to entice e-mail recipients to click a bogus link where personal information can be stolen.

A critical buffer component is the function _________ and buffer overflows are usually aimed at this component.

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

Firewall Design and Management

VPN Concepts

Security Policy Design and Implementation

On-Going Security Management

Filters

Exam 12: Internet and World Wide Web Security

What routing protocol is usually used on the Internet? Why is the information used by the protocol vulnerable to compromise?

MATCHING -highly secure public facilities where commercial Internet backbones and ISPs exchange routing and traffic data

What makes IP spoofing possible for computers on the Internet?

Computers on the Internet are identified primarily by their IP address.

The _______________ Web Server is the most widely used Web server application.

MATCHING -a protocol designed to improve DNS security by using cryptography to ensure DNS integrity and authentication

The lack of authentication for computers on the Internet make IP _____________ possible,which is a change in the IP addresses in the headers of malicious packets.

What is a zone transfer?

DNS _____________ poisoning steers unsuspecting victims to a server of the attacker's choice instead of the intended Web site.

What is the origin and structure of the Internet? Include some of the services it provides and the protocols they use.

MATCHING -a network addressing scheme that allows DNS services to be decentralized among a group of servers,regardless of their location

What is the Internet backbone? Describe how routers work with the Internet backbone.

MATCHING -a network architecture that divides DNS services between two servers

_______________________ is a name-resolution service that translates domain names to IP addresses.

Which of the following is a top-level digital certificate in the PKI chain?

MATCHING -ISP facilities that provide connectivity to the Internet for business,education,and home users

List three of the steps you should take to close potential holes against SQL injection attacks.

A _______________ applet is a small program sometimes used as embedded code in Web pages.

The objective of a phishing attack is to entice e-mail recipients to click a bogus link where personal information can be stolen.

A critical buffer component is the function _________ and buffer overflows are usually aimed at this component.

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

Firewall Design and Management

VPN Concepts

Security Policy Design and Implementation

On-Going Security Management

Filters