Practice E

Question 1

RSA is most vulnerable to ___ attacks

Answer 1

chosen ciphertext

Question 2

a ___ , or application-level gateway firewall, is primarily used to hide the source of a network connection by terminating and replacing it with a new connection

Answer 2

proxy firewall

Question 3

___ is when two database processes are denied access to the same record at the same time

Answer 3

deadlocking

Question 4

WEP is considered unsecure because it uses a ___

Answer 4

24 bit Initialization Vector

Question 5

ISDN, PPP, T1 and telephone landlines are all ___, while Frame Relay and X.25 are ___

Answer 5

circuit switched; packet switched

Question 6

in pipelining the CPU fetches a second instruction while the first instruction is ___

Answer 6

decoding

Question 7

___ obfuscation attempts to make code obscure to computers

Answer 7

prevention

Question 8

security labeling refers to the use of ___ for managing data, but security ___ must be human-readable

Answer 8

attributes; marking

Question 9

___ testing is submitting data that is out of range for a given field

Answer 9

boundary

Question 10

in a ___ attack data is entered into a browser field in hexadecimal format

Answer 10

double encoding

Question 11

___ memory is the fastest

Answer 11

cache

Question 12

each port on a switch creates a new ___, unless it it has VLAN’s configured, because each VLAN is its own ___

Answer 12

collision domain; broadcast domain

Question 13

VLAN’s, like routers, divide a network into different ___

Answer 13

broadcast domains

Question 14

unicast ___ addresses are not routable, but are used in neighbor discovery

Answer 14

link local

Question 15

in International Common Criteria evaluation, the Security Target (ST) refers to ___

Answer 15

documentation which describes the device to be tested and any security requirements

Question 16

___ and ___ are a memory protection techniques that map processes to specific hardware memory locations

Answer 16

hardware segmentation; virtual memory

Question 17

___ does not provide Confidentiality, Integrity or Authentication, and so has been largely replaced by PPP, but is still used for IP packet encapsulation by microcontrollers

Answer 17

SLIP

Question 18

___ is using a trademarked name as a general description (like “coke” for any soft drink)

Answer 18

dilution

Question 19

___ uses flip-flops to store data, which is faster than ___ which uses capacitors and must be constantly refreshed to maintain integrity

Answer 19

SRAM; DRAM

Question 20

access control mechanisms use the ___ OS kernel to determine whether a subject with a given clearance can access an object of a different classification set

Answer 20

reference monitor

Question 21

Vulnerabilities labeled “CVE…” have been identified by ___

Answer 21

MITRE