Question 1

Which type of access control would you use to grant permissions based on the sensitivity of the information contained in the objects?

Accepted Answer

A) Mandatory access control 
B) Discretionary Access Control 
C) Role-based access control 
D) Rule-based access control 
A) Mandatory access control 
B) Discretionary Access Control 
C) Role-based access control 
D) Rule-based access control

Question 2

TACACS+ uses

Accepted Answer

A) UDP port 49 and TCP port 50 for login 
B) UDP port 49 and TCP port 49 for login 
C) UDP port 49 and UDP port 50 for login 
D) TCP port 49 and UDP port 50 for login 
A) UDP port 49 and TCP port 50 for login 
B) UDP port 49 and TCP port 49 for login 
C) UDP port 49 and UDP port 50 for login 
D) TCP port 49 and UDP port 50 for login

Question 3

________ is the encapsulation of one packet within another.It allows you to hide the original packet from view.

Accepted Answer

The answer of ________ is the encapsulation of one packet...

Question 4

Which of the following protocols involves a two-way handshake in which the username and password are sent across the link in clear text?

Accepted Answer

A) PAP 
B) SSH 
C) EAP 
D) CHAP 
A) PAP 
B) SSH 
C) EAP 
D) CHAP

Question 5

_______________ authentication is a term that describes the use of more than one authentication mechanism at the same time.

Accepted Answer

The answer of _______________ authentication is a term that describes...

Question 6

One of the fundamental design aspects of TACACS+ is the separation of authentication,authorization,and accounting.

Accepted Answer

A) True 
 B)False

Question 7

The two protocols used in IPSec to provide traffic security are _________ and __________.

Accepted Answer

Authentication Heade

Question 8

RADIUS is a remote authentication protocol the uses UDP port 1812.

Accepted Answer

A) True 
 B)False

Question 9

Which of the following types of access control would you use to grant permissions based on the decision of the owner of an object?

Accepted Answer

A) Mandatory access control 
B) Discretionary access control 
C) Role-based access control 
D) Rule-based access control 
A) Mandatory access control 
B) Discretionary access control 
C) Role-based access control 
D) Rule-based access control

Question 10

The 802.1x standard is for a protocol to support communications between a user and a(n)

Accepted Answer

A) Authorization device 
B) Available device 
C) Serial device 
D) Another user 
A) Authorization device 
B) Available device 
C) Serial device 
D) Another user

Question 11

RADIUS uses

Accepted Answer

A) TCP port 1812 for authentication and TCP port 1813 for accounting 
B) TCP port 1812 for accounting and TCP port 1813 for authentication 
C) UDP port 1812 for authentication and UDP port 1813 for accounting 
D) UDP port 1812 for accounting and UDP port 1813 for authentication 
A) TCP port 1812 for authentication and TCP port 1813 for accounting 
B) TCP port 1812 for accounting and TCP port 1813 for authentication 
C) UDP port 1812 for authentication and UDP port 1813 for accounting 
D) UDP port 1812 for accounting and UDP port 1813 for authentication

Question 12

_______________ describes a process in which each side of an electronic communication verifies the authenticity of the other.

Accepted Answer

Mutual aut

Question 13

What does RADIUS stand for?

Accepted Answer

A) Real Access Device Invisible Users Solution 
B) Rational Available Device Incremental Users Service 
C) Remote Authentication Dial-In User Service 
D) Remote Authentication Device Invisible Users Solution 
A) Real Access Device Invisible Users Solution 
B) Rational Available Device Incremental Users Service 
C) Remote Authentication Dial-In User Service 
D) Remote Authentication Device Invisible Users Solution

Question 14

With IPsec,security associations are used to establish the logical set of security parameters designed to facilitate the sharing of information between entities.The security association protects

Accepted Answer

A) Confidentiality 
B) Integrity and confidentiality 
C) Confidentiality and availability 
D) Integrity and availability 
A) Confidentiality 
B) Integrity and confidentiality 
C) Confidentiality and availability 
D) Integrity and availability

Question 15

Which type of access control would allow the company to restrict employee access to the payroll file after hours or on weekends?

Accepted Answer

A) Mandatory access control 
B) Discretionary access control 
C) Role-based access control 
D) Rule-based access control 
A) Mandatory access control 
B) Discretionary access control 
C) Role-based access control 
D) Rule-based access control

Question 16

_______________ is the granting of specific permissions based on the privileges held by the account.

Accepted Answer

The answer of _______________ is the granting of specific permissions...

Question 17

_______________ is an authentication process by which the user can enter a single user ID and password then move from application to application or resource to resource without having to supply further authentication information.

Accepted Answer

The answer of _______________ is an authentication process by which...

Question 18

What are the three types of accounting records in TACACS+?

Accepted Answer

A) Availability,Accounting,Confidentiality 
B) Availability,Integrity,Confidentiality 
C) Start,Stop,Update 
D) Start,Stop,Delete 
A) Availability,Accounting,Confidentiality 
B) Availability,Integrity,Confidentiality 
C) Start,Stop,Update 
D) Start,Stop,Delete

Question 19

TACACS+ is a client/server protocol that uses IP as its transport protocol.

Accepted Answer

A) True 
 B)False

Question 20

Which of the following protocols involves a three-way handshake and uses a shared secret key for communication?

Accepted Answer

A) PAP 
B) CHAP 
C) TCP 
D) S/Telnet 
A) PAP 
B) CHAP 
C) TCP 
D) S/Telnet

Exam 11: Authentication and Remote Access

Which type of access control would you use to grant permissions based on the sensitivity of the information contained in the objects?

TACACS+ uses

________ is the encapsulation of one packet within another.It allows you to hide the original packet from view.

Which of the following protocols involves a two-way handshake in which the username and password are sent across the link in clear text?

_______________ authentication is a term that describes the use of more than one authentication mechanism at the same time.

One of the fundamental design aspects of TACACS+ is the separation of authentication,authorization,and accounting.

The two protocols used in IPSec to provide traffic security are _________ and __________.

RADIUS is a remote authentication protocol the uses UDP port 1812.

Which of the following types of access control would you use to grant permissions based on the decision of the owner of an object?

The 802.1x standard is for a protocol to support communications between a user and a(n)

RADIUS uses

_______________ describes a process in which each side of an electronic communication verifies the authenticity of the other.

What does RADIUS stand for?

With IPsec,security associations are used to establish the logical set of security parameters designed to facilitate the sharing of information between entities.The security association protects

Which type of access control would allow the company to restrict employee access to the payroll file after hours or on weekends?

_______________ is the granting of specific permissions based on the privileges held by the account.

_______________ is an authentication process by which the user can enter a single user ID and password then move from application to application or resource to resource without having to supply further authentication information.

What are the three types of accounting records in TACACS+?

TACACS+ is a client/server protocol that uses IP as its transport protocol.

Which of the following protocols involves a three-way handshake and uses a shared secret key for communication?

Introduction and Security Trends

General Security Concepts

Operational-Organizational Security

The Role of People in Security

Cryptography

Public Key Infrastructure

Standards and Protocols

Physical Security

Network Fundamentals

Infrastructure Security

Wireless

Intrusion Detection Systems and Network Security

Baselines

Types of Attacks and Malicious Software

E-Mail and Instant Messaging

Web Components

Secure Software Development

Disaster Recovery, Business Continuity, and Organizational Policies

Risk Management

Change Management

Privilege Management

Computer Forensics

Legal Issues and Ethics

Privacy

Filters

The two protocols used in IPSec to provide traffic security are _ and __.