Deck 14: Network Security

Question 1

____ is an industry-standard protocol that simply provides authentication service.

A) TACACS+
B) SSL
C) RADIUS
D) TLS

Answer 1

C

Question 2

The ____ protocol is governed by RFC 2865 and can be used with cross-platform integration.

A) RADIUS
B) TACACS+
C) SSL
D) CHAP

Answer 2

A

Question 3

A computer program that can infect a computer without the knowledge or permission of the user is a(n)____.

A) Worm
B) Macro Virus
C) Logic bomb
D) Virus

Answer 3

D

Question 4

The ____ firewall topology consists of a packet filtering router that forwards all incoming packets to the firewall software on a bastion host.

A) packet-filtering router
B) demilitarized zone
C) single-homed bastion
D) dual-homed bastion

Question 5

The Cisco ____ service will examine your router and recommend which services should be disabled.

A) CHAP
B) RADIUS
C) SSH
D) SDM

Question 6

A ____ virus is a virus that infects a computer's master boot record.

A) stealth
B) boot-sector
C) polymorphic
D) logic bomb

Question 7

When a user opens an infected application file or document, a(n) ____ attaches itself to the application and infects other files accessed by the same application.

A) macro virus
B) worm
C) Trojan
D) logic bomb

Question 8

A ____ is a piece of code inserted into a program that will perform specific malicious functions when specified conditions are met.

A) logic bomb
B) Trojan Horse
C) macro virus
D) worm

Question 9

____ is a means of encrypting a session between two hosts through the use of digital certificates, which are based on asymmetric key encryption.

A) CHAP
B) RADIUS
C) DMZ
D) SSL

Question 10

The virus prevention industry is a proactive industry.

Question 11

The ____ is the most secure firewall solution.

A) dual-homed bastion
B) DMZ
C) packet-filtering router
D) single-homed bastion

Question 12

A ____ virus is so named because it attempts to hide itself from detection.

A) logic bomb
B) polymorphic
C) stealth
D) boot-sector

Question 13

A ____ topology works like a single-homed bastion topology, except that it has two network adapter cards in it and two IP addresses, one for each network it is connected to.

A) demilitarized zone
B) single-router zone
C) packet-filtering router
D) dual-homed bastion

Question 14

A single-homed bastion has two network interface cards and is assigned two IP addresses.

Question 15

____ are a popular technology for creating a connection between an external computer and a corporate site over the Internet.

A) Firewalls
B) DMZs
C) VPNs
D) Packet-filtering routers

Question 16

An effective security policy implements multiple layers of security.

Question 17

____ is a patch management software package.

A) Symantec's Altiris
B) Microsoft's CLI
C) Cisco's SWC
D) Cisco's SDM

Question 18

The ____ is the least protective of the four firewall topologies.

A) dual-homed bastion
B) packet-filtering router
C) single-homed bastion
D) demilitarized zone

Question 19

All devices in a RADIUS authentication stream have to be Cisco devices.

Question 20

After virus prevention software has been installed, it must be updated regularly to ensure your network is protected against all the latest malware threats.

Question 21

What are the goals of a security policy?

Question 22

Why is it important to have a patch management program?

Question 23

Briefly describe a Virtual Private Network (VPN)?

Question 24

A client-to-site VPN is also known as a ____ VPN.

A) remote user
B) client-to-server
C) site-to-site
D) client-to-client

Question 25

Briefly describe a client-to-site VPN.

Question 26

A(n) ____ is a configuration value (or simply stated, a command) that allows you to establish an IPSEC VPN on a Cisco firewall.

A) IKE set
B) transform set
C) AH script
D) SDM set

Question 27

A ____ VPN allows designated users to have access to the corporate network from remote locations.

A) site-to-site
B) client-to-site
C) user-to-user
D) user-to-server

Question 28

____ is a tunneling protocol that was developed by Microsoft and was extremely popular at one time for remote users who had to dial in to the corporate network on a secure channel.

A) GRE
B) L2TP
C) PPTP
D) IPSec

Question 29

Briefly explain how to protect an organization's hardware.

Question 30

Why is user training paramount in protecting against viruses?

Question 31

____________________ refers to malicious programs that have many different capabilities. Some might do something relatively harmless, such as opening files on a CD-ROM; others might be extremely destructive, perhaps destroying all of the data on a computer.

Question 32

____ is a suite of protocols, accepted as an industry standard, which provides secure data transmission over layer 3 of the OSI model.

A) L2TP
B) PPTP
C) GRE
D) IPSec

Question 33

Briefly explain encryption at the network level.

Question 34

A ____ VPN allows multiple corporate sites to be connected over low-cost Internet connections.

A) server-to-client
B) site-to-site
C) client-to-site
D) site-to-client

Question 35

A(n) ___________________________________ is like an IDS, except that it is placed in line so all packets coming in or going out of the network pass through it.

Question 36

In network security, a(n) ____________________ is an official approval that allows a user to access a specific network resource.

Question 37

A(n) ____________________ is a server running a single application, such as a proxy server or specialized firewall software.

Question 38

What are some of the items that a security policy should include?

Question 39

____________________ is the process by which users verify to a server that they are who they say they are.

Question 40

What are some unnecessary services on most networks?

Question 42

Describe the two IPSec protocols that have been developed to provide packet-level security.