Question 1

Which of the following is used in conjunction with an algorithm to make computer data secure from anybody except the intended recipient of the data?

Accepted Answer

A)  Key 
B)  Plaintext 
C)  Cipher 
D)  Cryptosystem 
A)  Key 
B)  Plaintext 
C)  Cipher 
D)  Cryptosystem A

Question 2

List the most common firewall implementation architectures.

Accepted Answer

Three architectural implementations of firewalls are especially common: single bastion hosts,screened-host firewalls,and screened-subnet firewalls. ​

Question 3

The intermediate area between trusted and untrusted networks is referred to as which of the following?

Accepted Answer

A)  Unfiltered area 
B)  Semi-trusted area 
C)  Demilitarized zone 
D)  Proxy zone 
A)  Unfiltered area 
B)  Semi-trusted area 
C)  Demilitarized zone 
D)  Proxy zone C

Question 4

A(n)____________________ token uses a challenge-response system in which the server challenges the user with a number,that when entered into the token provides a response that provides access.

Accepted Answer

The answer of A(n)____________________ token uses a challenge-response system in...

Question 5

Which type of IDPS is also known as a behavior-based intrusion detection system?

Accepted Answer

A)  Network-based 
B)  Anomaly-based 
C)  Host-based 
D)  Signature-based 
A)  Network-based 
B)  Anomaly-based 
C)  Host-based 
D)  Signature-based

Question 6

​____________  is a technology in which multiple real,routable external IP addresses are converted to special ranges of internal IP addresses,usually on a one-to-one basis.

Accepted Answer

Network-address tran

Question 7

​A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message.

Accepted Answer

A)  VPN 
B)  transport mode 
C)  SSL 
D)  PKI 
E)  digital certificate
F) asymmetric encryption
G) Vernam cipher
H) transposition cipher
I) content filter
J) footprinting 
A)  VPN 
B)  transport mode 
C)  SSL 
D)  PKI 
E)  digital certificate
F) asymmetric encryption
G) Vernam cipher
H) transposition cipher
I) content filter
J) footprinting

Question 8

Which of the following provides an identification card of sorts to clients who request services in a Kerberos system?

Accepted Answer

A)  Ticket Granting Service 
B)  Authentication Server 
C)  Authentication Client 
D)  Key Distribution Center 
A)  Ticket Granting Service 
B)  Authentication Server 
C)  Authentication Client 
D)  Key Distribution Center

Question 9

Which tool can best identify active computers on a network?

Accepted Answer

A)  Packet sniffer 
B)  Port scanner 
C)  Trap and trace 
D)  Honey pot 
A)  Packet sniffer 
B)  Port scanner 
C)  Trap and trace 
D)  Honey pot

Question 10

Was developed by Netscape in 1994 to provide security for online e-commerce transactions.

Accepted Answer

A)  VPN 
B)  transport mode 
C)  SSL 
D)  PKI 
E)  digital certificate
F) asymmetric encryption
G) Vernam cipher
H) transposition cipher
I) content filter
J) footprinting 
A)  VPN 
B)  transport mode 
C)  SSL 
D)  PKI 
E)  digital certificate
F) asymmetric encryption
G) Vernam cipher
H) transposition cipher
I) content filter
J) footprinting

Question 11

What is most commonly used for the goal of nonrepudiation in cryptography?

Accepted Answer

A)  Block cipher 
B)  Secret key 
C)  PKI 
D)  Digital signature 
A)  Block cipher 
B)  Secret key 
C)  PKI 
D)  Digital signature

Question 12

Which type of device allows only specific packets with a particular source,destination,and port address to pass through it.

Accepted Answer

A)  Dynamic packet filtering firewall 
B)  Proxy server 
C)  Intrusion detection system 
D)  Application layer firewall 
A)  Dynamic packet filtering firewall 
B)  Proxy server 
C)  Intrusion detection system 
D)  Application layer firewall

Question 13

What is the next phase of the preattack data gathering process after an attacker has collected all of an organization's Internet addresses?

Accepted Answer

A)  Footprinting 
B)  Content filtering 
C)  Deciphering 
D)  Fingerprinting 
A)  Footprinting 
B)  Content filtering 
C)  Deciphering 
D)  Fingerprinting

Question 14

What is the range of the well-known ports used by TCP and UDP?

Accepted Answer

A)  1024-65,536 
B)  0-1023 
C)  0-65,536 
D)  20, 21, 25, 53, 80 
A)  1024-65,536 
B)  0-1023 
C)  0-65,536 
D)  20, 21, 25, 53, 80

Question 15

Which of the following biometric authentication systems is the most accepted by users?

Accepted Answer

A)  Keystroke pattern recognition 
B)  Fingerprint recognition 
C)  Signature recognition 
D)  Retina pattern recognition 
A)  Keystroke pattern recognition 
B)  Fingerprint recognition 
C)  Signature recognition 
D)  Retina pattern recognition

Question 16

____________________ presents a threat to wireless communications,a practice that makes it prudent to use a wireless encryption protocol to prevent unauthorized use of your Wi-Fi network.

Accepted Answer

The answer of ____________________ presents a threat to wireless communications,a...

Question 17

Which of the following is true about firewalls and their ability to adapt in a network?

Accepted Answer

A)  Firewalls can interpret human actions and make decisions outside their programming 
B)  Because firewalls are not programmed like a computer, they are less error prone 
C)  Firewalls are flexible and can adapt to new threats 
D)  Firewalls deal strictly with defined patterns of measured observation 
A)  Firewalls can interpret human actions and make decisions outside their programming 
B)  Because firewalls are not programmed like a computer, they are less error prone 
C)  Firewalls are flexible and can adapt to new threats 
D)  Firewalls deal strictly with defined patterns of measured observation

Question 18

You might put a proxy server in the __________________,which is exposed to the outside world,neither in the trusted nor untrusted network.

Accepted Answer

demilitari

Question 19

Which technology employs sockets to map internal private network addresses to a public address using a one-to-many mapping?

Accepted Answer

A)  Network-address translation 
B)  Screened-subnet firewall 
C)  Port-address translation 
D)  Private address mapping 
A)  Network-address translation 
B)  Screened-subnet firewall 
C)  Port-address translation 
D)  Private address mapping

Question 20

Which of the following is NOT among the three types of authentication mechanisms?

Accepted Answer

A)  Something a person knows 
B)  Something a person has 
C)  Something a person sees 
D)  Something a person can produce 
A)  Something a person knows 
B)  Something a person has 
C)  Something a person sees 
D)  Something a person can produce

Which of the following is used in conjunction with an algorithm to make computer data secure from anybody except the intended recipient of the data?

List the most common firewall implementation architectures.

The intermediate area between trusted and untrusted networks is referred to as which of the following?

A(n)____________________ token uses a challenge-response system in which the server challenges the user with a number,that when entered into the token provides a response that provides access.

Which type of IDPS is also known as a behavior-based intrusion detection system?

____________ is a technology in which multiple real,routable external IP addresses are converted to special ranges of internal IP addresses,usually on a one-to-one basis.

A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message.

Which of the following provides an identification card of sorts to clients who request services in a Kerberos system?

Which tool can best identify active computers on a network?

Was developed by Netscape in 1994 to provide security for online e-commerce transactions.

What is most commonly used for the goal of nonrepudiation in cryptography?

Which type of device allows only specific packets with a particular source,destination,and port address to pass through it.

What is the next phase of the preattack data gathering process after an attacker has collected all of an organization's Internet addresses?

What is the range of the well-known ports used by TCP and UDP?

Which of the following biometric authentication systems is the most accepted by users?

____________________ presents a threat to wireless communications,a practice that makes it prudent to use a wireless encryption protocol to prevent unauthorized use of your Wi-Fi network.

Which of the following is true about firewalls and their ability to adapt in a network?

You might put a proxy server in the __________________,which is exposed to the outside world,neither in the trusted nor untrusted network.

Which technology employs sockets to map internal private network addresses to a public address using a one-to-many mapping?

Which of the following is NOT among the three types of authentication mechanisms?

Introduction to the Management of Information Security

Compliance: Law and Ethics

Governance and Strategic Planning for Security

Information Security Policy

Developing the Security Program

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Security Management Models

Security Management Practices

Planning for Contingencies

Personnel and Security

Filters

Exam 12: Protection Mechanisms

Which of the following is used in conjunction with an algorithm to make computer data secure from anybody except the intended recipient of the data?

List the most common firewall implementation architectures.

The intermediate area between trusted and untrusted networks is referred to as which of the following?

A(n)____________________ token uses a challenge-response system in which the server challenges the user with a number,that when entered into the token provides a response that provides access.

Which type of IDPS is also known as a behavior-based intrusion detection system?

​____________ is a technology in which multiple real,routable external IP addresses are converted to special ranges of internal IP addresses,usually on a one-to-one basis.

​A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message.

Which of the following provides an identification card of sorts to clients who request services in a Kerberos system?

Which tool can best identify active computers on a network?

Was developed by Netscape in 1994 to provide security for online e-commerce transactions.

What is most commonly used for the goal of nonrepudiation in cryptography?

Which type of device allows only specific packets with a particular source,destination,and port address to pass through it.

What is the next phase of the preattack data gathering process after an attacker has collected all of an organization's Internet addresses?

What is the range of the well-known ports used by TCP and UDP?

Which of the following biometric authentication systems is the most accepted by users?

____________________ presents a threat to wireless communications,a practice that makes it prudent to use a wireless encryption protocol to prevent unauthorized use of your Wi-Fi network.

Which of the following is true about firewalls and their ability to adapt in a network?

You might put a proxy server in the __________________,which is exposed to the outside world,neither in the trusted nor untrusted network.

Which technology employs sockets to map internal private network addresses to a public address using a one-to-many mapping?

Which of the following is NOT among the three types of authentication mechanisms?

Introduction to the Management of Information Security

Compliance: Law and Ethics

Governance and Strategic Planning for Security

Information Security Policy

Developing the Security Program

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Security Management Models

Security Management Practices

Planning for Contingencies

Personnel and Security

Filters

____________ is a technology in which multiple real,routable external IP addresses are converted to special ranges of internal IP addresses,usually on a one-to-one basis.

A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message.