Deck 5: Network Access Control and Cloud Security

Question 1

Data must be secured while at rest, in transit, and in use, and access to the data must be controlled.

Answer 1

True

Question 2

In using cloud infrastructures, the client necessarily cedes control to the CP on a number of issues that may affect security.

Answer 2

True

Question 3

The __________ is an Internet protocol that enables dynamic allocation of IP addresses to hosts

A)VLAN
B)IEEE 802.1X
C)EAPS
D)DHCP

Answer 3

D

Question 4

Cloud computing gives you the ability to expand and reduce resources according to your specific service requirement.

Question 5

The threat of data compromise decreases in the cloud.

Question 6

The NIST cloud computing reference architecture focuses on the requirements of "what" cloud services provide, not a "how to" design solution and implementation.

Question 7

The Extensible Authentication Protocol supports multiple authentication methods.

Question 8

___________ is an umbrella term for managing access to a network

A)NAS
B)ARC
C)NAC
D)RAS

Question 9

For many clients, the most devastating impact from a security breach is the loss or leakage of data.

Question 10

_________ is a client computer that is attempting to access a network

A)EAP peer
B)PSK
C)NAC
D)RAS

Question 11

The _________ is the node that is attempting to access the network and may be any device that is managed by the network access control system

A)AR
B)RAS
C)IP
D)PS

Question 12

Network access control authenticates users logging into the network and determines what data they can access and actions they can perform.

Question 13

The cloud provider in a private cloud infrastructure is responsible for both the infrastructure and the control.

Question 14

Access requestors are also referred to as clients.

Question 15

A network access server does not include its own authentication services.

Question 16

A cloud broker is useful when cloud services are too complex for a cloud consumer to easily manage.

Question 17

There is a decreasing trend in organizations to move information technology operations to a cloud computing infrastructure.

Question 18

VLANs are common NAC enforcement methods.

Question 19

The __________ determines what access should be granted

A)authentication server
B)policy server
C)supplicant
D)access requestor

Question 20

EAPOL operates at the network layers and makes use of an IEEE 802 LAN, such as Ethernet or Wi-Fi, at the link level.

Question 21

___________ includes people, processes, and systems that are used to manage access to enterprise resources by assuring that the identity of an entity is verified, and then granting the correct level of access based on this assured identity.

Question 22

A ________ is a person, organization, or entity responsible for making a service available to interested parties

A)cloud broker
B)cloud auditor
C)cloud provider
D)cloud carrier

Question 23

With a ________ infrastructure, the cloud infrastructure is a composition of two or more clouds that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability.

Question 24

__________ methods are the actions that are applied to ARs to regulate access to the enterprise network.

Question 25

A _________ is a person or organization that maintains a business relationship with, and uses service from, cloud providers

A)cloud auditor
B)cloud broker
C)cloud carrier
D)cloud consumer

Question 26

With a _________ infrastructure, the cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services

A)hybrid cloud
B)private cloud C public cloud
D)community cloud

Question 27

_________ saves the complexity of software installation, maintenance, upgrades, and patches

A)IaaS
B)SaaS
C)EAP
D)DHCP

Question 28

An __________ is a server computer that negotiates the use of a specific EAP method with an EAP peer, validates the EAP peer's credentials, and authorizes access to the network.

Question 29

_________ is the provision of security applications and services via the cloud either to cloud-based infrastructure and software or from the cloud to the customers' on-premise systems

A)IaaS
B)PaaS
C)SaaS
D)SecaaS

Question 30

With a _________ infrastructure, the cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns

A)community cloud
B)public cloud
C)private cloud
D)hybrid cloud

Question 31

A _________ in an intermediary that provides connectivity and transport of cloud services from CP's to cloud consumers.

Question 32

A _________ is an entity at one end of a point-to-point LAN segment that seeks to be authenticated by an autheticator attached to the other end of that link.

Question 33

In effect, ________ is an operating system in the cloud

A)IEEE 802.1X
B)PaaS
C)IaaS
D)DHCP

Question 34

The ___________ functions as an access control point for users in remote locations connecting to an enterprise's internal network.

Question 35

A ________ is a party that can conduct independent assessment of cloud service, information sytem operations, performance, and security of the cloud implementation

A)cloud auditor
B)cloud carrier
C)cloud broker
D)all of the above

Question 36

Broad network access, measured service, resource pooling, and rapid elasticity are essential characteristics of ___________

A)PaaS
B)network access control
C)cloud computing
D)EAP-TLS

Question 37

NIST defines three service models, which can be viewed as nested service alternatives: software as a service, platform as a service, and _________ as a service.

Question 38

_________ enables customers to combine basic computing services, such as number crunching and data storage, to build highly adaptable computer systems

A)IaaS
B)EAP peer
C)CP
D)SaaS

Question 39

A __________ provides a form of NAC by allowing or denying network traffic between an enterprise host and an external user.

Question 40

_________ is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.

Question 41

An _________ is an access point or NAS that requires EAP authentication prior to granting access to a network.

Question 42

____________ is an EAP method for mutual authentication and session key derivation using a Pre-Shared Key.

Question 43

__________ are third party audits of cloud services.

Question 44

The Cloud Security Alliance defines _______ as the provision of security applications and services via the cloud either to cloud-based infrastructure and software or from the cloud to the customers' on-premise systems.

Question 45

_________ defines how the TLS protocol can be encapsulated in EAP messages.