Question 1

The Internet tier system starts with a backbone network connected via _____________________ to regional Internet service providers.

Accepted Answer

NAPs
netwo

Question 2

Windows Basic Authentication requires that users enter a username and password and the password is transmitted using a hashing algorithm.

Accepted Answer

A) True 
 B)False

Question 3

What is the DNS hierarchical system? Include a discussion of root servers in your answer.

Accepted Answer

DNS is a hierarchical system.Root server

Question 4

How can you harden a DNS server using the split DNS architecture?

Accepted Answer

If your organization has a DNS server th

Question 5

Which of the following is NOT a recommended security setting for Apache Web servers?

Accepted Answer

A)  harden the underlying OS 
B)  create Web groups 
C)  use the default standard Web page error messages 
D)  disable HTTP traces 
A)  harden the underlying OS 
B)  create Web groups 
C)  use the default standard Web page error messages 
D)  disable HTTP traces

Question 6

Which of the following is NOT a step you should take to prevent attackers from exploiting SQL security holes?

Accepted Answer

A)  limit table access 
B)  use stored procedures 
C)  use standard naming conventions 
D)  place the database server in a DMZ 
A)  limit table access 
B)  use stored procedures 
C)  use standard naming conventions 
D)  place the database server in a DMZ

Question 7

The goal of _____________ is to provide authentication of DNS data and ensure integrity of DNS data.

Accepted Answer

The answer of The goal of _____________ is to provide...

Question 8

Which of the following is a highly secure public facility in which backbones have interconnected data lines and routers that exchange routing and traffic data?

Accepted Answer

A)  ISP 
B)  POP 
C)  NAP 
D)  NSF 
A)  ISP 
B)  POP 
C)  NAP 
D)  NSF

Question 9

What type of DNS server is authoritative for a specific domain?

Accepted Answer

A)  primary 
B)  secondary 
C)  read-only 
D)  initial 
A)  primary 
B)  secondary 
C)  read-only 
D)  initial

Question 10

How can you provide data confidentiality for your IIS Web server?

Accepted Answer

IIS supports SSL encryption,so you can r

Question 11

MATCHING
-the communication of a zone file from the primary DNS server to secondary DNS servers for updating

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer 
A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 12

What type of attack involves plaintext scripting that affects databases?

Accepted Answer

A)  phishing 
B)  ActiveX control 
C)  Java applet 
D)  SQL injection 
A)  phishing 
B)  ActiveX control 
C)  Java applet 
D)  SQL injection

Question 13

Which variation on phishing modifies the user's host file to redirect traffic?

Accepted Answer

A)  spear phishing 
B)  pharming 
C)  DNS phishing 
D)  hijacking 
A)  spear phishing 
B)  pharming 
C)  DNS phishing 
D)  hijacking

Question 14

What type of attack displays false information masquerading as legitimate data?

Accepted Answer

A)  Java applet 
B)  phishing 
C)  buffer overflow 
D)  SQL injection 
A)  Java applet 
B)  phishing 
C)  buffer overflow 
D)  SQL injection

Question 15

MATCHING
-a variation of phishing that intercepts traffic to a legitimate Web site and redirects it to a phony replica site

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer 
A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 16

The term Internet and World Wide Web are different terms that mean the same thing.

Accepted Answer

A) True 
 B)False

Question 17

___________ direct network traffic to its destination on the Internet using tables and protocols.

Accepted Answer

The answer of ___________ direct network traffic to its destination...

Question 18

What is a buffer overflow attack?

Accepted Answer

A buffer overflow attack exploits softwa

Question 19

What type of attack exploits a lack of bounds checking on the size of data stored in an array?

Accepted Answer

A)  buffer overflow 
B)  SQL injection 
C)  phishing 
D)  ActiveX control 
A)  buffer overflow 
B)  SQL injection 
C)  phishing 
D)  ActiveX control

Question 20

Which aspect of hardening a Windows Web server allows you to restrict access to the web server based on IP address?

Accepted Answer

A)  authentication 
B)  NTFS permissions 
C)  access control 
D)  data confidentiality 
A)  authentication 
B)  NTFS permissions 
C)  access control 
D)  data confidentiality

The Internet tier system starts with a backbone network connected via _____________________ to regional Internet service providers.

Windows Basic Authentication requires that users enter a username and password and the password is transmitted using a hashing algorithm.

What is the DNS hierarchical system? Include a discussion of root servers in your answer.

How can you harden a DNS server using the split DNS architecture?

Which of the following is NOT a recommended security setting for Apache Web servers?

Which of the following is NOT a step you should take to prevent attackers from exploiting SQL security holes?

The goal of _____________ is to provide authentication of DNS data and ensure integrity of DNS data.

Which of the following is a highly secure public facility in which backbones have interconnected data lines and routers that exchange routing and traffic data?

What type of DNS server is authoritative for a specific domain?

How can you provide data confidentiality for your IIS Web server?

MATCHING -the communication of a zone file from the primary DNS server to secondary DNS servers for updating

What type of attack involves plaintext scripting that affects databases?

Which variation on phishing modifies the user's host file to redirect traffic?

What type of attack displays false information masquerading as legitimate data?

MATCHING -a variation of phishing that intercepts traffic to a legitimate Web site and redirects it to a phony replica site

The term Internet and World Wide Web are different terms that mean the same thing.

___________ direct network traffic to its destination on the Internet using tables and protocols.

What is a buffer overflow attack?

What type of attack exploits a lack of bounds checking on the size of data stored in an array?

Which aspect of hardening a Windows Web server allows you to restrict access to the web server based on IP address?

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

Firewall Design and Management

VPN Concepts

Security Policy Design and Implementation

On-Going Security Management

Filters

Exam 12: Internet and World Wide Web Security

The Internet tier system starts with a backbone network connected via _____________________ to regional Internet service providers.

Windows Basic Authentication requires that users enter a username and password and the password is transmitted using a hashing algorithm.

What is the DNS hierarchical system? Include a discussion of root servers in your answer.

How can you harden a DNS server using the split DNS architecture?

Which of the following is NOT a recommended security setting for Apache Web servers?

Which of the following is NOT a step you should take to prevent attackers from exploiting SQL security holes?

The goal of _____________ is to provide authentication of DNS data and ensure integrity of DNS data.

Which of the following is a highly secure public facility in which backbones have interconnected data lines and routers that exchange routing and traffic data?

What type of DNS server is authoritative for a specific domain?

How can you provide data confidentiality for your IIS Web server?

MATCHING -the communication of a zone file from the primary DNS server to secondary DNS servers for updating

What type of attack involves plaintext scripting that affects databases?

Which variation on phishing modifies the user's host file to redirect traffic?

What type of attack displays false information masquerading as legitimate data?

MATCHING -a variation of phishing that intercepts traffic to a legitimate Web site and redirects it to a phony replica site

The term Internet and World Wide Web are different terms that mean the same thing.

___________ direct network traffic to its destination on the Internet using tables and protocols.

What is a buffer overflow attack?

What type of attack exploits a lack of bounds checking on the size of data stored in an array?

Which aspect of hardening a Windows Web server allows you to restrict access to the web server based on IP address?

Network Security Fundamentals

TCP-IP

Network Traffic Signatures

Routing Fundamentals

Cryptography

Wireless Network Fundamentals

Understanding Wireless Security

Intrusion Detection and Prevention Systems

Firewalls

Firewall Design and Management

VPN Concepts

Security Policy Design and Implementation

On-Going Security Management

Filters