Question 1

A denial-of-service attack _____.

Accepted Answer

A)  blocks traffic from any identified host or network
B)  typically only affects military computers
C)  compromises the integrity of information
D)  prevents a host from performing its legitimate functions

Question 2

Information security is defined as _____.

Accepted Answer

A)  providing confidentiality,integrity and availability to information
B)  encrypting information
C)  hiding information
D)  providing robust data storage of information

Question 3

Vulnerabilities are _____.

Accepted Answer

A)  weaknesses in an information system that can be exploited to compromise information security
B)  capabilities,intentions and methods of adversaries to compromise information security
C)  measures taken to mitigate the dangers from information security threats
D)  restrictions on information to protect personal privacy

Question 4

Information security controls are commonly classified in the industry as _____.

Accepted Answer

A)  confidentiality,integrity and availability controls
B)  firewalls,passwords and anti-virus systems
C)  militarized and de-militarized zones
D)  procedural,physical and technical controls

Question 5

Redundancy is _____.

Accepted Answer

A)  scheduling periodic maintenance to improve availability
B)  hiding information to provide confidentiality
C)  the provision of surplus service capacity to improve availability
D)  None of the above

Question 6

Most commercial encryption technologies such as SSL and VPN _____.

Accepted Answer

A)  combine the best features of symmetric and asymmetric key encryption
B)  use only symmetric key encryption
C)  use only asymmetric key encryption
D)  allow the user to choose whether to use symmetric or asymmetric key encryption

Question 7

In symmetric key encryption _____.

Accepted Answer

A)  the key used for encryption is a mirror image of the key used for decryption
B)  the same key is used for encryption and decryption
C)  the key used for encryption is independent of the key used for decryption
D)  None of the above

Question 8

Authentication is _____.

Accepted Answer

A)  hiding information
B)  providing an alternate identity
C)  the verification of a claimed identity
D)  granting certain specific privileges over information to a user

Question 9

Integrity is defined as _____.

Accepted Answer

A)  maintaining restrictions on information to protect personal privacy
B)  ensuring timely and reliable use of information
C)  guarding against improper modification of information to ensure authenticity
D)  None of the above

Question 10

The limitations of firewalls include all the following except _____.

Accepted Answer

A)  it is ineffective if an internal computer is compromised
B)  it cannot protect services accessible from the Internet
C)  it can block traffic from any identified host or network
D)  its effectiveness depends upon the abilities of the administrator C

Question 11

In network security,a firewall is a device which lies between two networks and _____.

Accepted Answer

A)  regulates data traffic between the networks to prevent attacks originating from the external network to cause harm to the internal network
B)  regulates the movement of network administrators from the external network to the internal network
C)  prevents fires in the external network from spreading to the internal network
D)  None of the above A

Question 12

Authorization is _____.

Accepted Answer

A)  hiding information
B)  providing an alternate identity
C)  the verification of a claimed identity
D)  granting certain specific privileges over information to a user

Question 13

In the context of network security,patching _____.

Accepted Answer

A)  applies cosmetic changes to software
B)  updates software to fix known software bugs
C)  improves the look and feel of software
D)  adds user friendly features to software

Question 14

Threats are _____.

Accepted Answer

A)  weaknesses in an information system that can be exploited to compromise information security
B)  capabilities,intentions and methods of adversaries to compromise information security
C)  measures taken to mitigate the dangers from information security threats
D)  restrictions on information to protect personal privacy

Question 15

A mobile worker requires secure access to corporate business applications from his hotel room.The most suitable encryption technology for this purpose is _____.

Accepted Answer

A)  Virtual Private Network VPN) 
B)  Transport Layer Security TLS) 
C)  Secure Shell SSH) 
D)  Digital Signature

Question 16

Confidentiality is defined as _____.

Accepted Answer

A)  guarding against improper modification of information to ensure authenticity
B)  maintaining restrictions on information to protect personal privacy
C)  ensuring timely and reliable use of information
D)  None of the above

Question 17

In the context of network security,the de-militarized zone _____.

Accepted Answer

A)  is most useful in military networks
B)  contains the organization's external services such as web and email servers
C)  contains the organization's sensitive data
D)  None of the above

Question 18

Controls are _____.

Accepted Answer

A)  weaknesses in an information system that can be exploited to compromise information security
B)  capabilities,intentions and methods of adversaries to compromise information security
C)  measures taken to mitigate the dangers from information security threats
D)  restrictions on information to protect personal privacy C

Question 19

All the following are properties of asymmetric key encryption except _____.

Accepted Answer

A)  it makes it easy to exchange the encryption key
B)  it uses two keys
C)  it is computationally simple
D)  the key used for encryption cannot be used for decryption

Question 20

Encryption is the process of _____.

Accepted Answer

A)  rendering information unreadable in such a way that authorized users may later make the information readable
B)  adding a password to information
C)  placing information behind a firewall
D)  placing information in the de-militarized zone

Exam 13: Network Security

A denial-of-service attack _____.

Correct AnswerverifiedShow Answer

Information security is defined as _____.

Correct AnswerverifiedShow Answer

Vulnerabilities are _____.

Correct AnswerverifiedShow Answer

Information security controls are commonly classified in the industry as _____.

Correct AnswerverifiedShow Answer

Redundancy is _____.

Correct AnswerverifiedShow Answer

Most commercial encryption technologies such as SSL and VPN _____.

Correct AnswerverifiedShow Answer

In symmetric key encryption _____.

Correct AnswerverifiedShow Answer

Authentication is _____.

Correct AnswerverifiedShow Answer

Integrity is defined as _____.

Correct AnswerverifiedShow Answer

The limitations of firewalls include all the following except _____.

Correct AnswerverifiedC

In network security,a firewall is a device which lies between two networks and _____.

Correct AnswerverifiedA

Authorization is _____.

Correct AnswerverifiedShow Answer

In the context of network security,patching _____.

Correct AnswerverifiedShow Answer

Threats are _____.

Correct AnswerverifiedShow Answer

A mobile worker requires secure access to corporate business applications from his hotel room.The most suitable encryption technology for this purpose is _____.

Correct AnswerverifiedShow Answer

Confidentiality is defined as _____.

Correct AnswerverifiedShow Answer

In the context of network security,the de-militarized zone _____.

Correct AnswerverifiedShow Answer

Controls are _____.

Correct AnswerverifiedC

All the following are properties of asymmetric key encryption except _____.

Correct AnswerverifiedShow Answer

Encryption is the process of _____.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
C

Correct Answer
verified
A

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
C

Correct Answer
verified

Correct Answer
verified