Question 1

In network security,a firewall is a device which lies between two networks and _____.

Accepted Answer

A) regulates data traffic between the networks to prevent attacks originating from the external network to cause harm to the internal network 
B) regulates the movement of network administrators from the external network to the internal network 
C) prevents fires in the external network from spreading to the internal network 
D) None of the above 
A) regulates data traffic between the networks to prevent attacks originating from the external network to cause harm to the internal network 
B) regulates the movement of network administrators from the external network to the internal network 
C) prevents fires in the external network from spreading to the internal network 
D) None of the above A

Question 2

The limitations of firewalls include all the following except _____.

Accepted Answer

A) it is ineffective if an internal computer is compromised 
B) it cannot protect services accessible from the Internet 
C) it can block traffic from any identified host or network 
D) its effectiveness depends upon the abilities of the administrator 
A) it is ineffective if an internal computer is compromised 
B) it cannot protect services accessible from the Internet 
C) it can block traffic from any identified host or network 
D) its effectiveness depends upon the abilities of the administrator C

Question 3

Controls are _____.

Accepted Answer

A) weaknesses in an information system that can be exploited to compromise information security 
B) capabilities,intentions and methods of adversaries to compromise information security 
C) measures taken to mitigate the dangers from information security threats 
D) restrictions on information to protect personal privacy 
A) weaknesses in an information system that can be exploited to compromise information security 
B) capabilities,intentions and methods of adversaries to compromise information security 
C) measures taken to mitigate the dangers from information security threats 
D) restrictions on information to protect personal privacy C

Question 4

Most commercial encryption technologies such as SSL and VPN _____.

Accepted Answer

A) combine the best features of symmetric and asymmetric key encryption 
B) use only symmetric key encryption 
C) use only asymmetric key encryption 
D) allow the user to choose whether to use symmetric or asymmetric key encryption 
A) combine the best features of symmetric and asymmetric key encryption 
B) use only symmetric key encryption 
C) use only asymmetric key encryption 
D) allow the user to choose whether to use symmetric or asymmetric key encryption

Question 5

Authorization is _____.

Accepted Answer

A) hiding information 
B) providing an alternate identity 
C) the verification of a claimed identity 
D) granting certain specific privileges over information to a user 
A) hiding information 
B) providing an alternate identity 
C) the verification of a claimed identity 
D) granting certain specific privileges over information to a user

Question 6

Vulnerabilities are _____.

Accepted Answer

A) weaknesses in an information system that can be exploited to compromise information security 
B) capabilities,intentions and methods of adversaries to compromise information security 
C) measures taken to mitigate the dangers from information security threats 
D) restrictions on information to protect personal privacy 
A) weaknesses in an information system that can be exploited to compromise information security 
B) capabilities,intentions and methods of adversaries to compromise information security 
C) measures taken to mitigate the dangers from information security threats 
D) restrictions on information to protect personal privacy

Question 7

Confidentiality is defined as _____.

Accepted Answer

A) guarding against improper modification of information to ensure authenticity 
B) maintaining restrictions on information to protect personal privacy 
C) ensuring timely and reliable use of information 
D) None of the above 
A) guarding against improper modification of information to ensure authenticity 
B) maintaining restrictions on information to protect personal privacy 
C) ensuring timely and reliable use of information 
D) None of the above

Question 8

Authentication is _____.

Accepted Answer

A) hiding information 
B) providing an alternate identity 
C) the verification of a claimed identity 
D) granting certain specific privileges over information to a user 
A) hiding information 
B) providing an alternate identity 
C) the verification of a claimed identity 
D) granting certain specific privileges over information to a user

Question 9

Encryption is the process of _____.

Accepted Answer

A) rendering information unreadable in such a way that authorized users may later make the information readable 
B) adding a password to information 
C) placing information behind a firewall 
D) placing information in the de-militarized zone 
A) rendering information unreadable in such a way that authorized users may later make the information readable 
B) adding a password to information 
C) placing information behind a firewall 
D) placing information in the de-militarized zone

Question 10

All the following are properties of asymmetric key encryption except _____.

Accepted Answer

A) it makes it easy to exchange the encryption key 
B) it uses two keys 
C) it is computationally simple 
D) the key used for encryption cannot be used for decryption 
A) it makes it easy to exchange the encryption key 
B) it uses two keys 
C) it is computationally simple 
D) the key used for encryption cannot be used for decryption

Question 11

Information security controls are commonly classified in the industry as _____.

Accepted Answer

A) confidentiality,integrity and availability controls 
B) firewalls,passwords and anti-virus systems 
C) militarized and de-militarized zones 
D) procedural,physical and technical controls 
A) confidentiality,integrity and availability controls 
B) firewalls,passwords and anti-virus systems 
C) militarized and de-militarized zones 
D) procedural,physical and technical controls

Question 12

In symmetric key encryption _____.

Accepted Answer

A) the key used for encryption is a mirror image of the key used for decryption 
B) the same key is used for encryption and decryption 
C) the key used for encryption is independent of the key used for decryption 
D) None of the above 
A) the key used for encryption is a mirror image of the key used for decryption 
B) the same key is used for encryption and decryption 
C) the key used for encryption is independent of the key used for decryption 
D) None of the above

Question 13

Integrity is defined as _____.

Accepted Answer

A) maintaining restrictions on information to protect personal privacy 
B) ensuring timely and reliable use of information 
C) guarding against improper modification of information to ensure authenticity 
D) None of the above 
A) maintaining restrictions on information to protect personal privacy 
B) ensuring timely and reliable use of information 
C) guarding against improper modification of information to ensure authenticity 
D) None of the above

Question 14

Threats are _____.

Accepted Answer

A) weaknesses in an information system that can be exploited to compromise information security 
B) capabilities,intentions and methods of adversaries to compromise information security 
C) measures taken to mitigate the dangers from information security threats 
D) restrictions on information to protect personal privacy 
A) weaknesses in an information system that can be exploited to compromise information security 
B) capabilities,intentions and methods of adversaries to compromise information security 
C) measures taken to mitigate the dangers from information security threats 
D) restrictions on information to protect personal privacy

Question 15

Information security is defined as _____.

Accepted Answer

A) providing confidentiality,integrity and availability to information 
B) encrypting information 
C) hiding information 
D) providing robust data storage of information 
A) providing confidentiality,integrity and availability to information 
B) encrypting information 
C) hiding information 
D) providing robust data storage of information

Question 16

A mobile worker requires secure access to corporate business applications from his hotel room.The most suitable encryption technology for this purpose is _____.

Accepted Answer

A) Virtual Private Network VPN) 
B) Transport Layer Security TLS) 
C) Secure Shell SSH) 
D) Digital Signature 
A) Virtual Private Network VPN) 
B) Transport Layer Security TLS) 
C) Secure Shell SSH) 
D) Digital Signature

Question 17

A denial-of-service attack _____.

Accepted Answer

A) blocks traffic from any identified host or network 
B) typically only affects military computers 
C) compromises the integrity of information 
D) prevents a host from performing its legitimate functions 
A) blocks traffic from any identified host or network 
B) typically only affects military computers 
C) compromises the integrity of information 
D) prevents a host from performing its legitimate functions

Question 18

In the context of network security,patching _____.

Accepted Answer

A) applies cosmetic changes to software 
B) updates software to fix known software bugs 
C) improves the look and feel of software 
D) adds user friendly features to software 
A) applies cosmetic changes to software 
B) updates software to fix known software bugs 
C) improves the look and feel of software 
D) adds user friendly features to software

Question 19

In the context of network security,the de-militarized zone _____.

Accepted Answer

A) is most useful in military networks 
B) contains the organization's external services such as web and email servers 
C) contains the organization's sensitive data 
D) None of the above 
A) is most useful in military networks 
B) contains the organization's external services such as web and email servers 
C) contains the organization's sensitive data 
D) None of the above

Question 20

Redundancy is _____.

Accepted Answer

A) scheduling periodic maintenance to improve availability 
B) hiding information to provide confidentiality 
C) the provision of surplus service capacity to improve availability 
D) None of the above 
A) scheduling periodic maintenance to improve availability 
B) hiding information to provide confidentiality 
C) the provision of surplus service capacity to improve availability 
D) None of the above

In network security,a firewall is a device which lies between two networks and _____.

The limitations of firewalls include all the following except _____.

Controls are _____.

Most commercial encryption technologies such as SSL and VPN _____.

Authorization is _____.

Vulnerabilities are _____.

Confidentiality is defined as _____.

Authentication is _____.

Encryption is the process of _____.

All the following are properties of asymmetric key encryption except _____.

Information security controls are commonly classified in the industry as _____.

In symmetric key encryption _____.

Integrity is defined as _____.

Threats are _____.

Information security is defined as _____.

A mobile worker requires secure access to corporate business applications from his hotel room.The most suitable encryption technology for this purpose is _____.

A denial-of-service attack _____.

In the context of network security,patching _____.

In the context of network security,the de-militarized zone _____.

Redundancy is _____.

Introduction

Physical Layer

Data Link Layer

Network Layer

Transport Layer

Application Layer

Support Services

Subnetting

Routing

Wide Area Networks

Wireless Networks

Phone Networks

Managerial Issues

Filters

Exam 13: Network Security

In network security,a firewall is a device which lies between two networks and _____.

The limitations of firewalls include all the following except _____.

Controls are _____.

Most commercial encryption technologies such as SSL and VPN _____.

Authorization is _____.

Vulnerabilities are _____.

Confidentiality is defined as _____.

Authentication is _____.

Encryption is the process of _____.

All the following are properties of asymmetric key encryption except _____.

Information security controls are commonly classified in the industry as _____.

In symmetric key encryption _____.

Integrity is defined as _____.

Threats are _____.

Information security is defined as _____.

A mobile worker requires secure access to corporate business applications from his hotel room.The most suitable encryption technology for this purpose is _____.

A denial-of-service attack _____.

In the context of network security,patching _____.

In the context of network security,the de-militarized zone _____.

Redundancy is _____.

Introduction

Physical Layer

Data Link Layer

Network Layer

Transport Layer

Application Layer

Support Services

Subnetting

Routing

Wide Area Networks

Wireless Networks

Phone Networks

Managerial Issues

Filters