CH 19 BB

Question 1

What is physical security? Pg 897

Answer 1

Physical barriers that bar unwanted personnel entering an environment. Example: Locked doors, securing physical documents, biometrics, badges, key fobs, and privacy filters.

Question 2

Why are locked doors not a guaranteed security system? Pg 897

Answer 2

Tailgating

Question 3

What is multifactor authentication? Pg 899

Answer 3

Anytime more than one item(factor) is required to authenticate a user.

Question 4

What is a packet filter firewall? Pg 901

Answer 4

Passes or blocks traffic based on the packet’s addressing information(port).

Question 5

What is a proxy firewall? Pg 901

Answer 5

Used to process requests from an outside network. Proxy firewalls examine the data and makes a rule-based decision about whether the request should be forwarded or refused.

Question 6

T/F The best method of protection is to use a layered approach. Pg 900

Answer 6

True.

Question 7

What are stateful inspection firewalls? Pg 902

Answer 7

Uses a table that tracks all communications channels to determine whether or not a packet that is being sent was requested from the internal network.

Question 8

T/F DoS attacks have no adverse affect on stateful inspection firewalls. Pg 903

Answer 8

False. DoS and DDoS attacks can overload this type of firewall and cause it to crash and have to shutdown/reboot.

Question 9

Why is user education important? Pg 905

Answer 9

All employees in your network must understand why it is important to not open suspicious files and scan every disk/email/document that they receive before they open it.

Question 10

What are AUPs? Pg 905

Answer 10

Acceptable User Policies describe how the employees in an organization can use company systems and resources, both software and hardware. Can be thought of as similar to protocols.

Question 11

What is the principle of least priviledge? Pg 906

Answer 11

Only assigning users the minimum amount of permissions they need to complete their work.

Question 12

What is email filtering? Pg 906

Answer 12

Filtering out certain emails before passing it on. Spam filters are a form of email filtering.

Question 13

What are VPNs? Pg 906

Answer 13

Virtual Private Networks work by sending private data across a public network by placing (encapsulating) that data into other packets. This process is known as tunneling.

Question 14

T/F VPNs appear as public networks. Pg 907

Answer 14

False. VPNs are created over public networks but the connection logically appears to be part of a local network.

Question 15

What is social engineering? Pg 907

Answer 15

An attacker attempts to acquire information by social means, such as talking to people in the organization.