Chapter10

Front 1

A security policy should clearly state the desired rules, even if they cannot be enforced..

Back 1

False

Front 2

You don’t need to physically secure your servers as long as you use a good strong password for your accounts.

Back 2

False

Front 3

In a file system that uses FAT or FAT32, the only file security option that is available is the sharing permissions

Back 3

True

Front 4

A Trojan is a self-replicating program that masks itself as a useful program but is actually a type of malware.

Back 4

False

Front 5

A DoS attack ties up network bandwidth or services, rendering resources useless to legitimate users.

Back 5

Truwe

Front 6

The ultimate goal of network security is to protect which of the following?

Back 6

ALL THE ABOVE (customers who use the system,organization and its employees,business partners who access the network)

Front 7

What is a policy that defines the methods involved when a user logs on to the network called?

Back 7

Authentication

Front 8

Which of the following should not be a concern when discerning the level of security that is required in a network?

Back 8

How difficult it would be to enforce a password policy

Front 9

In Windows 7, what is the maximum length that a password can be?

Back 9

128

Front 10

If the minimum password length on a Windows system is set to zero, what does that mean?

Back 10

The user can use a blank password

Front 11

Which one of the following passwords meets Windows password complexity requirement?

Back 11

N3tworking1O1

Front 12

Which protocol is used to encrypt data as it travels a network?

Back 12

IPSec

Front 13

Which form of authentication involves the exchange of a password-like key that must be entered on both devices?

Back 13

Preshared Key

Front 14

When using BitLocker to encrypt your entire disk, which mode must you use if your system is not configured for TPM support?

Back 14

USB key mode

Front 15

f you need to implement a VPN on a Windows Server 2008 system, what server role must be installed to access routing and remote access services?

Back 15

Network policy and access services

Front 16

Which VPN implementation needs no additional configuration to be allowed access through a firewall

Back 16

SSTP (Secure Socket Tunneling Protocol)

Front 17

What process, available on most routers, will help improve security by masking the internal IP address of the transmitting device?

Back 17

NAT

Front 18

What is the generic term used to describe programs that are designed to cause harm or disruption to a computer system?

Back 18

Malware

Front 19

What is a type of malware that is so difficult to detect and remove that most experts agree that it is better to backup your critical data and reinstall the OS?

Back 19

RootKIts

Front 20

Which of the following is a type of malware that isn’t self-replicating and is usually installed by the user without his knowledge. It’s primary goal is to invade your privacy by monitoring your system and reporting your activities to advertisers and spammers.

Back 20

Spyware

Front 21

The 802.11i standard is the newest version of wireless security that uses more advanced encryption methods than the previous versions. What is it more commonly referred to as?

Back 21

WPA2

Front 22

Which of the following is a scanner used as a tool to determine what possible points of entry exist that are open and vulnerable on your system?

Back 22

Port Scanner

Front 23

Which of the following is a type of denial-of-service attack that involves flooding the network with broadcast messages that contain a spoofed source address of an intended victim?

Back 23

Smurf Attack

Front 24

Which of the following can be used to secure data on disk drives? (Choose all that apply.

Back 24

EFS, Bitlocker, truecrypt

Front 25

Firewall rules can be based on which of the following properties? (Choose all that apply.)

Back 25

OS, Context, protocol

Front 26

How the network resources are to be used should be clearly defined in a (an) ____________ policy.

Back 26

Acceptable USe

Front 27

In Linux, passwords are stored in an encrypted format in the ____________ file, which is located in the /etc directory.

Back 27

shadow

Front 28

____________ authentication uses keys that are generated by the OS instead of being manually entered by an administrator

Back 28

Kerberos

Front 29

____________ is a free open-source product that can be used to encrypt the contents of an entire drive.

Back 29

True Crypt

Front 30

A(an) ____________ is a type of Trojan program that hides in the operating system files and is extremely difficult to detect

Back 30

Rookit

Front 31

software designed to cause harm or corruption

Back 31

Malware

Front 32

-spreads by replicating itself into programs or documents

Back 32

Virus

Front 33

--monopolizes network services or network bandwidth

Back 33

denial of service (DOS)

Front 34

packets are denied on context as well as packet properties

Back 34

Firewall

Front 35

--unsolicited email

Back 35

Spam

Front 36

masquerades as a useful program

Back 36

Trojan

Front 37

a self-contained, self-replicating program

Back 37

Worm

Front 38

inspects packets as they go into and out of the network

Back 38

Stateful packet inspection

Front 39

-used to discover breaches in security

Back 39

IDS (Intrustion Detection System)

Front 40

permits access to computer, bypassing normal authentication

Back 40

Backdoor

Front 41

What is a network security policy?

Back 41

A network security policy defines the rules that apply to all users accessing the network. It includes how they are given access, what they can do once they have access, and what will happen if they don’t follow the rules.

Front 42

Briefly describe the three levels of network security policies.

Back 42

A highly restrictive security policy is the most secure. It makes use of data encryption, complex passwords, auditing and monitoring of all network access, advanced authentication methods, and strict usage policies.

A moderately restrictive security policy includes the use of passwords but not necessarily complex ones. It audits the network but usually only for unauthorized access and misuse of resources.
An open security policy might use passwords, but they would be simple. Network access is usually not monitored and available to all users.

Front 43

How should a room that is going to house your servers be equipped?

Back 43

A server room should have a locked door to limit access. It should also have adequate power receptacles, a cooling system, and there should be no sources of EMI to interfere with the network.

Front 44

What are the complexity requirements for a Windows password? List the four characteristics.

Back 44

For a password to be complex, it must contain three of the four characteristics. The four characteristics are uppercase letters, lowercase letters, numerals, and special characters.

Front 45

What is a VPN?

Back 45

A connection across a public network that uses encryption to ensure the communication is privte and secure

Front 46

A firewall can be implemented in two different ways. What are they?

Back 46

a firewall can be a software program installed in a OS. Second a firewall can be a hardware device which is usually a router

Front 47

What is an IDS

Back 47

An IDS is similar to a firewall but it tries to detect security breaches before they happen

Front 48

What is the difference between a virus and a worm?

Back 48

virus attaches itself to another program where as the worm is a self contained program

Front 49

what is a penetration tester?

Back 49

a person skilled in breaking into a network to find where the network is vulnerable for the purpose of advising a company how to be more secure

Front 50

Describe the purpose of a protocol analyzer and how an attacker could use one to compromise your network.

Back 50

Protocol analyzers can capture packets including the data contained in them. They can be used to capture authentication info.