Question 1

The Internet tier system starts with a backbone network connected via _____________________ to regional Internet service providers.

Accepted Answer

The answer of The Internet tier system starts with a...

Question 2

Windows Basic Authentication requires that users enter a username and password and the password is transmitted using a hashing algorithm.

Accepted Answer

A) True 
 B)False

Question 3

What is the DNS hierarchical system? Include a discussion of root servers in your answer.

Accepted Answer

The answer of What is the DNS hierarchical system? Include...

Question 4

How can you harden a DNS server using the split DNS architecture?

Accepted Answer

The answer of How can you harden a DNS server...

Question 5

Which of the following is NOT a recommended security setting for Apache Web servers?

Accepted Answer

A)  harden the underlying OS 
B)  create Web groups 
C)  use the default standard Web page error messages 
D)  disable HTTP traces

Question 6

Which of the following is NOT a step you should take to prevent attackers from exploiting SQL security holes?

Accepted Answer

A)  limit table access 
B)  use stored procedures 
C)  use standard naming conventions 
D)  place the database server in a DMZ

Question 7

The goal of _____________ is to provide authentication of DNS data and ensure integrity of DNS data.

Accepted Answer

The answer of The goal of _____________ is to provide...

Question 8

Which of the following is a highly secure public facility in which backbones have interconnected data lines and routers that exchange routing and traffic data?

Accepted Answer

A)  ISP 
B)  POP 
C)  NAP 
D)  NSF

Question 9

What type of DNS server is authoritative for a specific domain?

Accepted Answer

A)  primary 
B)  secondary 
C)  read-only 
D)  initial

Question 10

How can you provide data confidentiality for your IIS Web server?

Accepted Answer

The answer of How can you provide data confidentiality for...

Question 11

MATCHING
-the communication of a zone file from the primary DNS server to secondary DNS servers for updating

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 12

What type of attack involves plaintext scripting that affects databases?

Accepted Answer

A)  phishing 
B)  ActiveX control 
C)  Java applet 
D)  SQL injection

Question 13

Which variation on phishing modifies the user's host file to redirect traffic?

Accepted Answer

A)  spear phishing 
B)  pharming 
C)  DNS phishing 
D)  hijacking

Question 14

What type of attack displays false information masquerading as legitimate data?

Accepted Answer

A)  Java applet 
B)  phishing 
C)  buffer overflow 
D)  SQL injection

Question 15

MATCHING
-a variation of phishing that intercepts traffic to a legitimate Web site and redirects it to a phony replica site

Accepted Answer

A) anycast addressing 
B) DNSSEC 
C) network access points 
D) pharming 
E) POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer

Question 16

The term Internet and World Wide Web are different terms that mean the same thing.

Accepted Answer

A) True 
 B)False

Question 17

___________ direct network traffic to its destination on the Internet using tables and protocols.

Accepted Answer

The answer of ___________ direct network traffic to its destination...

Question 18

What is a buffer overflow attack?

Accepted Answer

The answer of What is a buffer overflow attack?...

Question 19

What type of attack exploits a lack of bounds checking on the size of data stored in an array?

Accepted Answer

A)  buffer overflow 
B)  SQL injection 
C)  phishing 
D)  ActiveX control

Question 20

Which aspect of hardening a Windows Web server allows you to restrict access to the web server based on IP address?

Accepted Answer

A)  authentication 
B)  NTFS permissions 
C)  access control 
D)  data confidentiality

Exam 12: Internet and World Wide Web Security