quiz 7

Question 1

Default accounts often have weak passwords.

Answer 1

True—Devices with default accounts such as “admin” often have weak passwords or no password at all.

Question 2

Six characters or more constitutes a strong password.

Answer 2

False—A strong password is often classified as eight characters or more, along with other complexity requirements, although some companies stress the need for more characters.

Question 3

Privilege escalation is used in computer programs to bypass normal authentication.

Answer 3

False—Privilege escalation is the act of exploiting a bug or design flaw in a software or firmware application to gain access to resources that normally would be protected from an application or user. Backdoors are used in computer programs to bypass normal authentication and other security mechanisms in place.

Question 4

Fiber-optic cable is not susceptible to data emanations.

Answer 4

True—Fiber-optic cable is not susceptible to data emanations in the way that twisted-pair cable is.

Question 5

RFI is a disturbance that can affect electrical circuits, devices, and cables due to electromagnetic conduction or radiation.

Answer 5

False—RFI is for example interference that can come from AM/FM transmissions and cell towers. EMI is a disturbance that can affect electrical circuits, devices, and cables due to electromagnetic conduction or radiation.

Question 6

Crosstalk is when a signal transmitted on one copper wire creates an undesired effect on another wire; the signal “bleeds” over, so to speak.

Answer 6

True - Crosstalk is when a signal transmitted on one copper wire creates an undesired effect on another wire; the signal “bleeds” over, so to speak. The original crosstalk dealt with phone conversations, but the term is used for data transmissions as well. W

Question 7

Data emanation occurs most commonly on coaxial cable.

Answer 7

True—Data emanation occurs most commonly on coaxial cable but can also occur on twisted-pair cable.

Question 8

One way to secure the administration interface of a WAP is to turn it off when not in use.

Answer 8

False—Turning off the WAP can make it inaccessible to client computers. It cannot change the state of the administration interface.

Question 9

WEP is deprecated; it should be replaced with a more secure protocol, such as WPA.

Answer 9

True—WEP is an older encryption protocol for wireless networks. It should be replaced with a stronger protocol, such as WPA or WPA2.

Question 10

WPA2 has a typical key size of 128 bits.

Answer 10

False—WPA2 has a typical key size of 256 bits.

Question 11

Which of the following has the strongest level of encryption? 
A. WEP 
B. WAP 
C. WPA 
D. WPA2

Answer 11

D. WPA2 has the strongest level of encryption at 256 bits. WEP is weak, deprecated, and should be replaced. WAP stands for wireless access point. WPA2 is stronger than WPA and should be used if possible.

Question 12

Which of the following is not a good strategy for securing a WAP? 
A. NAT filtering 
B. Turn off the SSID 
C. Place it in a Faraday cage 
D. Use PNAC

Answer 12

C. If a WAP is placed in a Faraday cage, no clients can access it! However, using NAT filtering, disabling the SSID, and using PNAC are all ways to secure the WAP.

Question 13

A person searches for wireless networks from their car. What is this an example of? 
A. Wardriving 
B. DDoS 
C. Replay attack 
D. Bluejacking

Answer 13

. A. Wardriving is the act of searching for wireless networks by a person in a vehicle through the use of a device with a wireless antenna, often a particularly strong antenna. DDoS and replays are network attacks. Bluejacking is the sending of unsolicited messages to a Bluetooth-enabled phone.

Question 14

Which of the following is the unauthorized access of information from a wireless device through a Bluetooth connection? 
A. Bluejacking 
B. Bluesnarfing 
C. Bluebeard 
D. The blues

Answer 14

B. Bluesnarfing is the unauthorized access of information from a wireless device through a Bluetooth connection. Bluejacking is the sending of unsolicited messages to a Bluetooth-enabled phone. Bluebeard and the blues do not have to do with wireless technologies.

Question 15

What should you configure to improve wireless security? 
A. Enable the SSID. 
B. IP spoofing. 
C. Remove repeaters. 
D. MAC filtering.

Answer 15

D. MAC filtering disallows connections from any wireless clients unless the wireless client’s MAC address is on the MAC filtering list.

Question 16

Which of the following should be modified because it is weak by default? 
A. Default account 
B. NAT firewall 
C. Wireless encryption 
D. PNAC

Answer 16

A. The default account should be modified; often, it has a weak password or no password at all. NAT firewalls need to be enabled to work as does wireless encryption and PNAC.

Question 17

Which of the following is the act of exploiting a bug or design flaw in a software or firmware application to gain access to resources that normally would be protected from an application or user? 
A. Backdoor 
B. Privilege escalation 
C. Weak password 
D. DDoS

Answer 17

B. Privilege escalation is the act of exploiting a bug or design flaw in a software or firmware application to gain access to resources that normally would be protected from an application or user.

Question 18

Which of the following cable types can be susceptible to crosstalk? (Select the two best answers.) 
A. Fiber-optic 
B. Twisted-pair 
C. Coaxial 
D. Data emanation Which of the following

Answer 18

. B and C. Twisted-pair cable and coaxial cables are both susceptible to crosstalk. Fiber-optic is not, and data emanation is the electromagnetic (EM) field generated by a network cable or network device, which can be manipulated to eavesdrop on conversations or to steal data.

Question 19

The act of splitting the wires of a twisted-pair cable connection would be an example of which of the following? 
A. Wardriving 
B. Data emanation 
C. Wiretapping 
D. Spectral analyzing

Answer 19

C. Wiretapping is the act of splitting the wires of a twisted-pair cable connection to eavesdrop or steal data.

Question 20

You find a rogue access point on your network. What should you do with it? (Select the best answer.) 
A. Remove it. 
B. Disable the SSID. 
C. Use strong encryption. 
D. Use PNAC.

Answer 20

A. If a rogue access point is found, it should be removed. The other options are possibilities if the WAP needs to be used later, but more often than not, it should be removed.