Deck 16: Network Access Control and Cloud Security

Question 1

Access requestors are also referred to as clients.

Answer 1

True

Question 2

___________ is an umbrella term for managing access to a network.

A)NAS
B)ARC
C)NAC
D)RAS

Answer 2

C

Question 3

A cloud broker is useful when cloud services are too complex for a cloud consumer to easily manage.

Answer 3

True

Question 4

Data must be secured while at rest,in transit,and in use,and access to the data must be controlled.

Question 5

The threat of data compromise decreases in the cloud.

Question 6

Cloud computing gives you the ability to expand and reduce resources according to your specific service requirement.

Question 7

Network access control authenticates users logging into the network and determines what data they can access and actions they can perform.

Question 8

In using cloud infrastructures,the client necessarily cedes control to the CP on a number of issues that may affect security.

Question 9

The _________ is the node that is attempting to access the network and may be any device that is managed by the network access control system.

A)AR
B)RAS
C)IP
D)PS

Question 10

For many clients,the most devastating impact from a security breach is the loss or leakage of data.

Question 11

The NIST cloud computing reference architecture focuses on the requirements of "what" cloud services provide,not a "how to" design solution and implementation.

Question 12

EAPOL operates at the network layers and makes use of an IEEE 802 LAN,such as Ethernet or Wi-Fi,at the link level.

Question 13

The __________ determines what access should be granted.

A)authentication server
B)policy server
C)supplicant
D)access requestor

Question 14

The cloud provider in a private cloud infrastructure is responsible for both the infrastructure and the control.

Question 15

A network access server does not include its own authentication services.

Question 16

_________ is a client computer that is attempting to access a network.

A)EAP peer
B)PSK
C)NAC
D)RAS

Question 17

There is a decreasing trend in organizations to move information technology operations to a cloud computing infrastructure.

Question 18

The __________ is an Internet protocol that enables dynamic allocation of IP addresses to hosts.

A)VLAN
B)IEEE 802.1X
C)EAPS
D)DHCP

Question 19

The Extensible Authentication Protocol supports multiple authentication methods.

Question 20

VLANs are common NAC enforcement methods.

Question 21

Broad network access,measured service,resource pooling,and rapid elasticity are essential characteristics of ___________.

A)PaaS
B)network access control
C)cloud computing
D)EAP-TLS

Question 22

A _________ is an entity at one end of a point-to-point LAN segment that seeks to be authenticated by an autheticator attached to the other end of that link.

Question 23

_________ enables customers to combine basic computing services,such as number crunching and data storage,to build highly adaptable computer systems.

A)IaaS
B)EAP peer
C)CP
D)SaaS

Question 24

A __________ provides a form of NAC by allowing or denying network traffic between an enterprise host and an external user.

Question 25

_________ saves the complexity of software installation,maintenance,upgrades,and patches.

A)IaaS
B)SaaS
C)EAP
D)DHCP

Question 26

NIST defines three service models,which can be viewed as nested service alternatives: software as a service,platform as a service,and _________ as a service.

Question 27

An __________ is a server computer that negotiates the use of a specific EAP method with an EAP peer,validates the EAP peer's credentials,and authorizes access to the network.

Question 28

A _________ in an intermediary that provides connectivity and transport of cloud services from CP's to cloud consumers.

Question 29

In effect,________ is an operating system in the cloud.

A)IEEE 802.1X
B)PaaS
C)IaaS
D)DHCP

Question 30

The ___________ functions as an access control point for users in remote locations connecting to an enterprise's internal network.

Question 31

With a _________ infrastructure,the cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.

A)hybrid cloud
B)private cloud
C )public cloud
D)community cloud

Question 32

_________ is the provision of security applications and services via the cloud either to cloud-based infrastructure and software or from the cloud to the customers' on-premise systems.

A)IaaS
B)PaaS
C)SaaS
D)SecaaS

Question 33

__________ methods are the actions that are applied to ARs to regulate access to the enterprise network.

Question 34

With a ________ infrastructure,the cloud infrastructure is a composition of two or more clouds that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability.

Question 35

___________ includes people,processes,and systems that are used to manage access to enterprise resources by assuring that the identity of an entity is verified,and then granting the correct level of access based on this assured identity.

Question 36

_________ is a model for enabling ubiquitous,convenient,on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.

Question 37

A ________ is a person,organization,or entity responsible for making a service available to interested parties.

A)cloud broker
B)cloud auditor
C)cloud provider
D)cloud carrier

Question 38

With a _________ infrastructure,the cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns.

A)community cloud
B)public cloud
C)private cloud
D)hybrid cloud

Question 39

A _________ is a person or organization that maintains a business relationship with,and uses service from,cloud providers.

A)cloud auditor
B)cloud broker
C)cloud carrier
D)cloud consumer

Question 40

A ________ is a party that can conduct independent assessment of cloud service,information sytem operations,performance,and security of the cloud implementation.

A)cloud auditor
B)cloud carrier
C)cloud broker
D)all of the above

Question 41

____________ is an EAP method for mutual authentication and session key derivation using a Pre-Shared Key.

Question 42

_________ defines how the TLS protocol can be encapsulated in EAP messages.

Question 43

An _________ is an access point or NAS that requires EAP authentication prior to granting access to a network.

Question 44

__________ are third party audits of cloud services.

Question 45

The Cloud Security Alliance defines _______ as the provision of security applications and services via the cloud either to cloud-based infrastructure and software or from the cloud to the customers' on-premise systems.