Deck 11: Security Topics

Question 1

9)All e-mail servers communicate with each other using ____.

A) SSH
B) FTP
C) SMTP
D) HTTP

Answer 1

C

Question 2

15)A ____ is a statement of security the system should enforce when implemented correctly.

A) security policy
B) security model
C) security plan
D) security tree

Answer 2

A

Question 3

19)The OSI ____ layer provides switching and routing technologies for transmitting data from node to node.

A) transport
B) network
C) session
D) data link

Answer 3

B

Question 4

7)A SMTP server listens on a well-known TCP port ____ for an incoming request.

A) 21
B) 25
C) 110
D) 115

Question 5

18)The OSI ____ layer provides the mechanisms to establish, manage, and terminate connections between applications.

A) session
B) transport
C) network
D) presentation

Question 6

6)____ is a simple text-based protocol where one or more recipients of a message are specified and then the message text is transferred.

A) SMTP
B) TCP
C) IP
D) SSL

Question 7

4)PGP and S/MIME is compatible at the protocol level.

Question 8

12)The OS provides its services through a well-defined ____.

A) GUI
B) UI
C) command line interface
D) API

Question 9

8)The SMTP server supports two common protocols for e-mail retrieval: IMAP and ____.

A) TCP
B) IP
C) ICMP
D) POP

Question 10

13)Users can interact directly with the OS through a user interface such as a command language or a(n) ____.

A) GUI
B) API
C) DLL
D) DBMS

Question 11

Security applies to every aspect of computing.

Question 12

2)E-mail is one of the most secure types of communication media.

Question 13

10)The two common database formats are relational, using constructs such as tables, views, and procedures, and ____, using objects and hierarchy.

A) procedure-oriented
B) object-oriented
C) hierarchy-based
D) view-based

Question 14

5)The DBMS should provide fine-grained access control besides the file permissions that control the OS user's access.

Question 15

14)____ and segmentation can provide a way of managing main memory.

A) Sectoring
B) Clustering
C) Paging
D) Partitioning

Question 16

20)The OSI ____ layer defines all electrical and physical specifications for devices.

A) network
B) application
C) data link
D) physical

Question 17

11)____ is the first step in providing security for databases.

A) Access control
B) ACL
C) Authentication
D) Authorization

Question 18

3)E-mail messages are stored in plain, unencrypted text on SMTP servers.

Question 19

16)A ____ is a representation of the security policy of the OS.

A) security plan
B) security tree
C) security infrastructure
D) security model

Question 20

17)A ____ is a group of computers and peripherals connected together to communicate with each other and to share information and resources.

A) domain
B) computer network
C) computer cluster
D) computer partition

Question 21

31)A(n) ____________________ is the fundamental component of the computer system.

Question 22

22)____ is a network layer protocol. It performs tasks such as routing, carrying datagrams, and mapping an Internet address to a physical network address.

A) TCP
B) IP
C) UDP
D) ICMP

Question 23

33)What are the scenarios that can result from using SMTP protocol for delivering e-mail messages?

Question 24

36)Describe the mail access vulnerability.

Question 25

41)What are the four types of separation supported by an OS?

Question 26

25)A(n) ____ firewall provides the highest level of security and provides full application layer awareness without interposing a proxy server.

A) application gateway
B) route-filtering
C) packet-filtering
D) proxy

Question 27

29)A(n) ____________________ is a repository or store of data that has an internal organization using a particular format.

Question 28

35)Describe the inter-mail server vulnerability.

Question 29

26)____ is a set of automated methods for recognizing or verifying the identity of a person based on a physiological or behavioral characteristic.

A) Multifactor authentication
B) Database authentication
C) Biometrics
D) RADIUS

Question 30

30)The term ____________________ is applied to a software product that manages the creation, modification, and deletion of database objects such as databases instances and users.

Question 31

28)____________________ is a standard for public key encryption and signing of e-mail encapsulated in MIME.

Question 32

38)What are the e-mail security problems addressed by asymmetric key encryption used in conjunction with SSL?

Question 33

24)A(n) ____ firewall scans all network packets and blocks all but selected network traffic according to policies set in the firewall.

A) proxy
B) route-filtering
C) application gateway
D) packet-filtering

Question 34

40)Why are the security measures taken by DBMSs unlikely to be sufficient to prevent attacks by themselves?

Question 35

27)____________________ is the de facto standard for e-mail transmission.

Question 36

21)____ is a name given to the collection of networking protocols that have been used to construct the global Internet.

A) SSL
B) HTTPS
C) TCP/IP
D) HTTP

Question 37

39)What are the authentication considerations for network access regarding mobile devices?

Question 38

23)The ____ attack enables one host to claim that it has the IP address of another. It is most effective where trusted relationships exist between machines networked using TCP/IP.

A) denial of service
B) TCP SYN flood
C) IP spoofing
D) IP session hijacking

Question 39

34)Describe the process of receiving an e-mail.

Question 40

37)Briefly describe e-mail identity spoofing.

Question 42

What are the steps to develop a secure OS?