Deck 11: Securing Your Network

Question 1

Which technology discourages attackers because they cannot identify a specific computer to attack on the internal network?

A)Telnet
B)NAT
C)VPN
D)DMZ

Answer 1

B

Question 2

A proxy can enhance performance through caching and filter communications.

Answer 2

True

Question 3

A set of filtering rules,called a ____,is applied to packets through the use of IPTables.

A)link
B)group
C)cluster
D)chain

Answer 3

D

Question 4

Which protocol secures IP at the Network layer by using secure communications and encryptions standards?

A)SSL
B)TLS
C)IPSec
D)RSA

Question 5

A rogue Web site is one that performs unlawful activity or that puts the user who accesses it at risk.

Question 6

____ can translate an IP address from a private network to a different address used on a public network or the Internet.

A)IPSec
B)DHCP
C)TCP/IP
D)NAT

Question 7

Which of the following is a program that appears useful,but instead does harm to a user's computer?

A)virus
B)buffer attack
C)Trojan horse
D)worm

Question 8

It is best to secure your wireless network in order to prevent which of the following types of attacks that involve the attacker using a portable computer and an omnidirectional antenna?

A)spamming
B)war drive
C)port-scanning
D)sniffer attack

Question 9

Which of the following is used to interfere with normal access to network resources by flooding a network with useless information?

A)denial-of-service attack
B)buffer attack
C)Trojan horse
D)worm

Question 10

A router can perform packet filtering and can be used as a firewall on a network.

Question 11

One step in hardening a system involves deploying all available services on your system,thereby confusing a potential attacker.

Question 12

Which type of attack refers to the use of human interaction to gain access to a system or to do damage.

A)social engineering
B)psychological warfare
C)inside attack
D)spoofing

Question 13

The ____ layer reads IP packet protocol address information and forwards each packet along the most expedient route for efficient network communications.

A)Data Link
B)Transport
C)Network
D)Physical

Question 14

Stateless filtering screens on the basis of the context of the communication.

Question 15

A border ____ is a firewall that is configured with security policies to control the traffic that is permitted to cross a border in either direction.

A)gateway
B)proxy
C)switch
D)hub

Question 16

Proxies functioning as ____-level gateways create a virtual tunnel between the proxy and an external computer,such as a Web server.

A)network
B)presentation
C)presentation
D)circuit

Question 17

____ is unrequested e-mail that is sent to hundreds,thousands,or even millions of users.

A)Freeware
B)Adware
C)Spam
D)Malware

Question 18

Which of the following occurs when the attacker is able to intercept or monitor transmissions meant for a different computer?

A)source routing
B)application-layer attack
C)man-in-the-middle attack
D)buffer attack

Question 19

A(n)____ is information that a Web server stores on a client computer,such as the client's preferences when accessing a particular Web site,or where the client has been on the Web site.

A)applet
B)cookie
C)scanner
D)listener

Question 20

A(n)____ is a program that is relayed by a disk or a file and has the ability to replicate throughout a system,but does not create new files.

A)buffer attack
B)virus
C)worm
D)hoax

Question 21

A ____________________ is not a virus,but an e-mail falsely warning of a virus.

Question 22

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
a program that endlessly replicates on the same computer,or that sends itself to many other computers on a network.

Question 23

Which of the following is a portion of a network that exists between two or more networks such as a network between a private network and the Internet?

A)proxy
B)DMZ
C)subnet
D)firewall

Question 24

A DoS attack that floods a host with packets from many bogus source addresses is a form of ____________________.

Question 25

Which of the following could be an exploit that occurs at the Network layer? (Choose all that apply.)

A)exploits that involve TCP ports
B)exploits that involve packet addressing
C)exploits that involve routing
D)exploits that involve DNS

Question 26

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
used by attackers to associate IP address information with account and password communications.

Question 27

Which of the following are border points that should be protected with a strong border security design? (Choose all that apply.)

A)VPN access
B)LAN cabling access
C)802.11 access
D)internal switch port access

Question 28

A(n)____________________ is a computer that is located between a computer on an internal network and a computer on an external network with which the internal computer is communicating.

Question 29

_________________________ is the part of IPSec that encrypts data.

Question 30

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
provides information about all kinds of security threats.

Question 31

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
command line interface that enables you to configure packet filter rules through the use of tables.

Question 32

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
a portion of a network that exists between two or more networks that have different security measures in place

Question 33

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
a list of permit and deny conditions that can be associated with a particular router interface.

Question 34

Which of the following are criteria upon which a router can make filtering decisions? (Choose all that apply.)

A)protocol
B)application data
C)MAC address
D)network ID

Question 35

Which of the following are steps to keep in mind when hardening a system? (Choose all that apply.)

A)learn about new threats and how to handle them
B)regularly audit security configuration
C)focus your attention on PC operating systems since mobile operating systems are not vulnerable to attack
D)monitor for evidence of attacker

Question 36

Identify four network hardening techniques.

Question 37

_________________________ packet filtering tracks information about a communication session such as which ports are in use.

Question 38

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
used between network computers to verify the authenticity of the communication.

Question 39

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
might take the form of simply flooding a system with more packets than it can handle.

Question 40

Match each term with the correct statement below.
a.worm
b.demilitarized zone
c.National Security Institute (NSI)
d.remote denial of service (DoS) attack
e.sniffer software
f.digital certificate
g.access control list (ACL)
h.IPTables
i.spyware
software that reports back information-to an attacker or an advertiser,for example-about that computer user's activities.

Question 41

Briefly describe network address translation.

Question 42

How does a buffer attack work?

Question 43

Identify four tasks that can be fulfilled by a proxy server.

Question 44

What is spoofing and how can it be used to attack a computer or network?

Question 45

Compare and contrast stateful versus stateless packet filtering

Question 46

Identify five border points that the strongest border security is designed to protect.

Question 47

What are the advantages of using Network Address Translation (NAT)?

Question 48

Provide a general description for how routers are used in border security.

Question 49

Describe a man-in-the-middle attack.