Chapter 7 Flashcards
Which of the following TCP/IP protocols do not relate to security?
IP
SNMP
HTTPS
FTP
IP
FTP (?)
Aideen sent an email to her supervisor explaining the Domain Name System Security Extensions (DNSSEC). Which of the following statements would Aideen have NOT included in her email?
It is fully supported in BIND9.
It adds additional resource records.
It adds message header information.
It can prevent a DNS transfer attack.
It can prevent a DNS transfer attack.
What is the recommended secure protocol for voice and video applications?
Secure Real-time Transport Protocol (SRTP)
Hypertext Transport Protocol Secure (HTTPS)
Network Time Protocol (NTP)
Secure/Multipurpose Internet Mail Extensions (S/MIME)
Secure Real-time Transport Protocol (SRTP)
Which type of log can provide details regarding requests for specific files on a system?
Audit log
Event log
Access log
SysFile log
Access log
Which type of device log contains the most beneficial security data?
Firewall log
Email log
Switch log
Router log
Firewall log
Which type of cloud is offered to specific organizations that have common concerns?
Public cloud
Hybrid cloud
Private cloud
Community cloud
Community cloud
Which of these is NOT correct about an SSL accelerator?
It can be a separate hardware card that inserts into a web server.
It can be a separate hardware module.
It should reside between the user’s device and the web servers.
It can only handle the SSL protocol.
It can only handle the SSL protocol.
Catriona needed to monitor network traffic. She did not have the resources to install an additional device on the network. Which of the following solutions would meet her needs?
Network tap
Port mirroring
Aggregation switch
Correlation engine
Port mirroring
Which version of Simple Network Management Protocol (SNMP) is considered the most secure?
SNMPv2
SNMPv3
SNMPv4
SNMPv5
SNMPv3
Which Domain Name System (DNS) attack replaces a fraudulent IP address for a symbolic name?
DNS replay
DNS masking
DNS poisoning
DNS forwarding
DNS poisoning
Which of these is the most secure protocol for transferring files?
FTPS
c. TCP
SFTP
d. FTP
SFTP
Which of the following can be used to prevent a buffer overflow attack?
DEP
FIM
VPN
DNS
Data Execution Prevention (DEP)
Which of the following is NOT a service model in cloud computing?
Software as a Service (SaaS)
Hardware as a Service (HaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)
Hardware as a Service (HaaS)
Eachna is showing a new security intern the log file from a firewall. Which of the following entries would she tell him do not need to be investigated?
Suspicious outbound connections
IP addresses that are being rejected and dropped
Successful logins
IP addresses that are being rejected and dropped
Successful logins
Which application stores the user’s desktop inside a virtual machine that resides on a server and is accessible from multiple locations?
Application cell
Container
VDE
VDI
VDI