Chapter 11 quiz

Question 1

Human errors, ignorance, and omissions cause more than half of all security breaches sustained by networks.
True
False

Answer 1

True

Question 2

Network security is more often compromised “from the inside” than from external sources.
True
False

Answer 2

True

Question 3

A security policy should state exactly which hardware, software, architecture, or protocols will be used to ensure security.
True
False

Answer 3

False

Question 4

Encryption is the last means of defense against data theft.
True
False

Answer 4

True

Question 5

By default, the 802.11 standard offers substantial security.
True
False

Answer 5

False

Question 6

____ is a social engineering practice in which a person attempts to glean access or authentication information by posing as someone who needs that information.
Cracking
Hacking
War driving
Phishing

Answer 6

Phishing

Question 7

In a ____ attack, a person redirects or captures secure transmissions as they occur.
denial-of service
man-in-the-middle
war driving
phishing

Answer 7

man-in-the-middle

Question 8

____ software searches a node for open ports.
Phishing
Sniffing
Authentication
Port scanner

Answer 8

Port scanner

Question 9

A router that is not configured to drop packets that match certain or suspicious characteristics is an example of a risk associated with ____.
people
transmission and hardware
protocols and software
Internet access

Answer 9

transmission and hardware

Question 10

A NOS that contains a “back door”is an example of a risk associated with ____.
people
transmission and hardware
protocols and software
Internet access

Answer 10

protocols and software

Question 11

A ____ attack occurs when an Internet chat user sends commands to a victim’s machine that causes the screen to fill with garbage characters and requires the victim to terminate their chat sessions.
flashing
denial-of-service
war driving
phishing

Answer 11

flashing

Question 12

A ____ attack occurs when a system becomes unable to function because it has inundated with requests for services and can’t respond to any of them.
flashing
denial-of-service
war driving
phishing

Answer 12

denial-of-service

Question 13

A ____ main function is to examine packets and determine where to direct them based on their Network layer addressing information.
switch’s
gateway’s
router’s
proxy server’s

Answer 13

router’s

Question 14

A ____ firewall is a router (or a computer installed with software that enables it to act as a router) that examines the header of every packet of data it receives to determine whether that type of packet is authorized to continue to its destination.
packet-filtering
gateway
proxy
selective

Answer 14

packet-filtering

Question 15

A ____ attack occurs when a hacker uses programs that try a combination of a user ID and every word in a dictionary to gain access to the network.
flashing
denial-of-service
dictionary
brute force

Answer 15

dictionary

Question 16

A ____ attack occurs when a hacker tries numerous possible character combinations to find the key that will decrypt encrypted data.
flashing
denial-of-service
dictionary
brute force

Answer 16

brute force

Question 17

The combination of a public key and a private key is known as a ____.
key lock
key frame
key pair
key set

Answer 17

key pair

Question 18

A(n) ____ is a password-protected and encrypted file that holds an individual’s identification information, including a public key.
digital certificate
authentication file
access control list
authentication certificate

Answer 18

digital certificate

Question 19

The use of certificate authorities to associate public keys with certain users is known as ____.
PGP
PKI
IPSec
SSL

Answer 19

PKI

Question 20

____ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.
PGP
SSH
IPSec
SSL

Answer 20

PGP

Question 21

____ is a method of encrypting TCP/IP transmissions above the network layer.
PGP
IPSec
PAP
SSL

Answer 21

SSL

Question 22

In ____, a hacker forges name server records to falsify his host’s identity.
IP spoofing
DNS spoofing
ID spoofing
DHCP spoofing

Answer 22

DNS spoofing

Question 23

A VPN ____ authenticates VPN clients and establishes tunnels for VPN connections.
router
service
concentrator
certificate authority

Answer 23

concentrator

Question 24

____ protocols are the rules that computers follow to accomplish authentication.
Access
Availability
Authority
Authentication

Answer 24

Authentication

Question 25

RADIUS and TACACS belong to a category of protocols known as AAA (____).
access, authorization, and accounting
authentication, authorization, and accounting
authentication, authorization, and authority
authentication, authorization, and access

Answer 25

authentication, authorization, and accounting

Question 26

In ____, both computers verify the credentials of the other.
mutual authorization
mutual access
mutual authentication
mutual verification

Answer 26

mutual authentication