Question 1

What type of attacker are most attackers today?

Accepted Answer

A)  disgruntled employees and ex-employees 
B)  career criminals 
C)  hackers motivated by a sense of power 
D)  cyberterrorists 
A)  disgruntled employees and ex-employees 
B)  career criminals 
C)  hackers motivated by a sense of power 
D)  cyberterrorists

Question 2

In most encryption,keys must be at least ________ long to be considered safe.

Accepted Answer

A)  128 bits 
B)  128 bytes 
C)  1,280 bits 
D)  1,280 bytes 
A)  128 bits 
B)  128 bytes 
C)  1,280 bits 
D)  1,280 bytes

Question 3

Iris scanning is attractive because of its ________.

Accepted Answer

A)  low cost 
B)  precision 
C)  both A and B 
D)  neither A nor B 
A)  low cost 
B)  precision 
C)  both A and B 
D)  neither A nor B

Question 4

In authentication,________ are the general name for proofs of identity.

Accepted Answer

A)  credentials 
B)  authorizations 
C)  digital certificates 
D)  all of the above 
A)  credentials 
B)  authorizations 
C)  digital certificates 
D)  all of the above

Question 5

Digital certificate authentication fails if the supplicant ________.

Accepted Answer

A)  is the true party 
B)  learns the true party's private key 
C)  learns the true party's public key 
D)  either B or C 
A)  is the true party 
B)  learns the true party's private key 
C)  learns the true party's public key 
D)  either B or C

Question 6

The Target attackers probably first broke into Target using the credentials of a(n)________.

Accepted Answer

A)  low-level Target employee 
B)  Target IT employee 
C)  Target security employee 
D)  employee in a firm outside Target 
A)  low-level Target employee 
B)  Target IT employee 
C)  Target security employee 
D)  employee in a firm outside Target

Question 7

Employees often attack ________.

Accepted Answer

A)  for revenge 
B)  for money 
C)  both A and B 
D)  neither A nor B 
A)  for revenge 
B)  for money 
C)  both A and B 
D)  neither A nor B

Question 8

NIST guidelines for reusable passwords permit ________.

Accepted Answer

A)  entirely lower-case passwords 
B)  the use of the same password at different sites 
C)  both A and B 
D)  neither A nor B 
A)  entirely lower-case passwords 
B)  the use of the same password at different sites 
C)  both A and B 
D)  neither A nor B

Question 9

Why are employees especially dangerous?

Accepted Answer

A)  They are technically sophisticated. 
B)  They are trusted. 
C)  both A and B 
D)  neither A nor B 
A)  They are technically sophisticated. 
B)  They are trusted. 
C)  both A and B 
D)  neither A nor B

Question 10

Using encryption,you make it impossible for attackers to read your messages even if they intercept them.This is ________.

Accepted Answer

A)  authentication 
B)  confidentiality 
C)  both A and B 
D)  neither A nor B 
A)  authentication 
B)  confidentiality 
C)  both A and B 
D)  neither A nor B

Question 11

The general term for evil software is ________.

Accepted Answer

A)  virus 
B)  worm 
C)  malware 
D)  all of the above 
A)  virus 
B)  worm 
C)  malware 
D)  all of the above

Question 12

If you see a username and password on a Post-It note that anyone can see on a monitor,is it hacking if you use this information to log in?

Accepted Answer

A)  yes 
B)  no 
C)  We cannot say from the information given. 
A)  yes 
B)  no 
C)  We cannot say from the information given.

Question 13

Which of the following can be upgraded after it is installed on a victim computer (choose the most specific answer)?

Accepted Answer

A)  Trojan horses 
B)  bots 
C)  viruses 
D)  worms 
A)  Trojan horses 
B)  bots 
C)  viruses 
D)  worms

Question 14

Which of the following is the most frustrating to use?

Accepted Answer

A)  IDSs 
B)  opaque filtering 
C)  SPI firewalls 
D)  NGFW firewalls 
A)  IDSs 
B)  opaque filtering 
C)  SPI firewalls 
D)  NGFW firewalls

Question 15

Which of the following can spread very rapidly?

Accepted Answer

A)  directly-propagating viruses 
B)  directly-propagating worms 
C)  both A and B 
D)  neither A nor B 
A)  directly-propagating viruses 
B)  directly-propagating worms 
C)  both A and B 
D)  neither A nor B

Question 16

Hacking is defined as using a computer resource without authorization or in excess of authorization.

Accepted Answer

A) True 
 B)False

Question 17

When a packet that is part of an ongoing connection arrives at a stateful inspection firewall,the firewall usually ________.

Accepted Answer

A)  drops the packet 
B)  drops the packet and notifies an administrator 
C)  passes the packet 
D)  passes the packet, but notifies an administrator 
A)  drops the packet 
B)  drops the packet and notifies an administrator 
C)  passes the packet 
D)  passes the packet, but notifies an administrator

Question 18

Users typically can eliminate a vulnerability in one of their programs by ________.

Accepted Answer

A)  installing a patch 
B)  using an antivirus program 
C)  both A and B 
D)  neither A nor B 
A)  installing a patch 
B)  using an antivirus program 
C)  both A and B 
D)  neither A nor B

Question 19

________ is the dominant firewall filtering method used on main border firewalls today.

Accepted Answer

A)  ACL filtering 
B)  Application content filtering 
C)  Stateful packet inspection 
D)  NGFW 
A)  ACL filtering 
B)  Application content filtering 
C)  Stateful packet inspection 
D)  NGFW

Question 20

________ is a program that can capture passwords as you enter them.

Accepted Answer

A)  A keystroke logger 
B)  Data mining software 
C)  both A and B 
D)  neither A nor B 
A)  A keystroke logger 
B)  Data mining software 
C)  both A and B 
D)  neither A nor B

What type of attacker are most attackers today?

In most encryption,keys must be at least ________ long to be considered safe.

Iris scanning is attractive because of its ________.

In authentication,________ are the general name for proofs of identity.

Digital certificate authentication fails if the supplicant ________.

The Target attackers probably first broke into Target using the credentials of a(n)________.

Employees often attack ________.

NIST guidelines for reusable passwords permit ________.

Why are employees especially dangerous?

Using encryption,you make it impossible for attackers to read your messages even if they intercept them.This is ________.

The general term for evil software is ________.

If you see a username and password on a Post-It note that anyone can see on a monitor,is it hacking if you use this information to log in?

Which of the following can be upgraded after it is installed on a victim computer (choose the most specific answer)?

Which of the following is the most frustrating to use?

Which of the following can spread very rapidly?

Hacking is defined as using a computer resource without authorization or in excess of authorization.

When a packet that is part of an ongoing connection arrives at a stateful inspection firewall,the firewall usually ________.

Users typically can eliminate a vulnerability in one of their programs by ________.

________ is the dominant firewall filtering method used on main border firewalls today.

________ is a program that can capture passwords as you enter them.

Core Network Concepts and Terminology

Network Standards

Network Management

Ethernet 802.3switched Lans

Wireless Lans I

Wireless Lans II

TCP/IP Internetworking I

TCP/IP Internetworking II

Carrier Wide Area Networks Wans

Networked Applications

Appendix: Managing the Security Process

Filters

Exam 4: Network Security

What type of attacker are most attackers today?

In most encryption,keys must be at least ________ long to be considered safe.

Iris scanning is attractive because of its ________.

In authentication,________ are the general name for proofs of identity.

Digital certificate authentication fails if the supplicant ________.

The Target attackers probably first broke into Target using the credentials of a(n)________.

Employees often attack ________.

NIST guidelines for reusable passwords permit ________.

Why are employees especially dangerous?

Using encryption,you make it impossible for attackers to read your messages even if they intercept them.This is ________.

The general term for evil software is ________.

If you see a username and password on a Post-It note that anyone can see on a monitor,is it hacking if you use this information to log in?

Which of the following can be upgraded after it is installed on a victim computer (choose the most specific answer)?

Which of the following is the most frustrating to use?

Which of the following can spread very rapidly?

Hacking is defined as using a computer resource without authorization or in excess of authorization.

When a packet that is part of an ongoing connection arrives at a stateful inspection firewall,the firewall usually ________.

Users typically can eliminate a vulnerability in one of their programs by ________.

________ is the dominant firewall filtering method used on main border firewalls today.

________ is a program that can capture passwords as you enter them.

Core Network Concepts and Terminology

Network Standards

Network Management

Ethernet 802.3switched Lans

Wireless Lans I

Wireless Lans II

TCP/IP Internetworking I

TCP/IP Internetworking II

Carrier Wide Area Networks Wans

Networked Applications

Appendix: Managing the Security Process

Filters