Exam Compass Net+ Security Concepts

Question 1

T/F: The term “CIA triad” is used to describe the basic principles of information security.

Answer 1

True

Question 2

Which of the following terms refer to the concept of confidentiality? (Select 3 answers)

Fault tolerance
Encryption
Non-repudiation
Access control methods
Steganography
Redundancy
Patch management
Hashing
Load balancing

Answer 2

Encryption
Access control methods
Steganography

Question 3

Which of the following terms refer(s) to the concept of integrity? (Select all that apply)

Steganography
Hashing
Digital signatures
Encryption
Digital certificates
Redundancy
Non-repudiation
Access control methods
Fault tolerance

Answer 3

Hashing
Digital signatures
Digital certificates
Non-repudiation

Question 4

Which of the following terms refer(s) to the concept of availability? (Select all that apply)

Redundancy
Fault tolerance
Non-repudiation
Hashing
Load balancing
Patch management
Digital certificates
Encryption
Access control methods

Answer 4

Redundancy
Fault tolerance
Load balancing
Patch management

Question 5

Which of the security measures listed below would be effective against the malicious insider threat? (Select 3 answers)

DLP system
Principle of least privilege
Time-of-day restrictions
Strong authentication
Usage auditing and review

Answer 5

DLP system
Principle of least privilege
Usage auditing and review

Question 6

A concept of effective security posture employing multiple tools and different techniques to slow down an attacker is known as: (Select 2 answers)

Network Access Control (NAC)
Layered security
AAA framework
Principle of least privilege
Defense in depth

Answer 6

Layered security
Defense in depth

Question 7

A lightly protected subnet (previously known as a DMZ) consisting of publicly available servers placed on the outside of the company’s firewall is called:

Captive portal
Honeynet
Quarantine network
Extranet
Screened subnet

Answer 7

Screened subnet

Question 8

T/F: Network Access Control (NAC) defines a set of rules enforced in a network that the clients attempting to access the network must comply with. With NAC, policies can be enforced before or after end-stations gain access to the network. NAC can be implemented as pre-admission NAC where a host must, for example, be virus free or have patches applied before it can be allowed to connect to the network, and/or post-admission NAC, where a host is being granted/denied permissions based on its actions after it has been provided with the access to the network.

Answer 8

True

Question 9

802.1X is an IEEE standard for implementing what?

Answer 9

Port-based NAC

Question 10

A monitored host holding no valuable data specifically designed to detect unauthorized access attempts and divert attacker’s attention from the corporate network is known as:

Answer 10

honeypot

Question 11

T/F: Authentication process can be based on various categories of authentication factors and attributes. Authentication factors include unique physical traits of each individual such as fingerprints (“something you are”), physical tokens such as smart cards (“something you have”), or usernames and passwords (“something you know”). The categories of authentication attributes include geolocation (“somewhere you are”), user-specific activity patterns, such as keyboard typing style (“something you can do”), revealing something about an individual, e.g. wearing an ID badge (“something you exhibit”), or proving the relation with a trusted third party (“someone you know”). Multifactor authentication systems require implementation of authentication factors from two or more distinct categories.

Answer 11

True

Question 12

What are the characteristics of TACACS+? (Select 3 answers)

Encrypts only the password in the access-request packet
Combines authentication and authorization
Encrypts the entire payload of the access-request packet
Primarily used for device administration
Separates authentication and authorization
Primarily used for network access

Answer 12

Encrypts the entire payload of the access-request packet
Primarily used for device administration
Separates authentication and authorization

Question 13

An authentication subsystem that enables a user to access multiple, connected system components (such as separate hosts on a network) after a single login on only one of the components is known as:

Answer 13

SSO

Question 14

What are the characteristic features of RADIUS? (Select 3 answers)

Primarily used for network access
Encrypts the entire payload of the access-request packet
Combines authentication and authorization
Encrypts only the password in the access-request packet
Primarily used for device administration
Separates authentication and authorization

Answer 14

Primarily used for network access
Combines authentication and authorization
Encrypts only the password in the access-request packet

Question 15

Which of the following authentication protocols can be used to enable SSO?
-PAP
-LDAP
-MS-CHAP
-Kerberos
-Radius

Answer 15

Kerberos

Question 16

Assigning a unique encrypted key, called a ticket, to each user that logs on to the network is a characteristic feature of what?

Answer 16

Kerberos

Question 17

In the Kerberos-based authentication process, the purpose of the client’s timestamp is to provide countermeasure against what?

Answer 17

Replay attacks

Question 18

Which protocol ensures the reliability of the Kerberos authentication process?

Answer 18

NTP

Question 19

T/F: Extensible Authentication Protocol (EAP) is an authentication framework frequently used in wireless networks and point-to-point connections. EAP provides an authentication framework, not a specific authentication mechanism. There are many authentication mechanisms (referred to as EAP methods) that can be used with EAP. Wireless networks take advantage of several EAP methods, including PEAP, EAP-FAST, EAP-TLS, and EAP-TTLS.

Answer 19

True

Question 20

Vulnerability scanning: (Select all that apply)

Identifies lack of security controls
Actively tests security controls
Identifies common misconfigurations 
Exploits vulnerabilities
Passively tests security controls

Answer 20

Identifies lack of security controls
Identifies common misconfigurations
Passively tests security controls

Question 21

Penetration testing: (Select all that apply)

Bypasses security controls
Only identifies lack of security controls
Actively tests security controls
Exploits vulnerabilities
Passively tests security controls

Answer 21

Bypasses security controls
Actively tests security controls
Exploits vulnerabilities

Question 22

What is the name of a security solution designed to detect anomalies in the log and event data collected from multiple network devices?

Answer 22

SIEM