Imahni 7 May 16

Front 1

The IP header contains a protocol field. If this field contains the value of 17, what type of data is contained within the ip datagram?

Back 1

If the protocol field has a value of 17 then it would indicate it was UDP.

Front 2

The IP header contains a protocol field. If this field contains the value of 1, what type of data is contained within the ip datagram?

Back 2

ICMP

Front 3

The IP header contains a protocol field. If this field contains the value of 2, what type of data is contained within the ip datagram?

Back 3

IGMP

Front 4

The IP header contains a protocol field. If this field contains the value of 6, what type of data is contained within the ip datagram?

Back 4

TCP

Front 5

Prior to its use in malicious activity, spyware was typically a hidden application injected through poor browser security by companies seeking to gain more information about a user’s Internet activity. Today, those methods are used to deploy other malware, collect private data, send advertising or commercial messages to a system, or monitor system input, such as keystrokes or mouse clicks.

Back 5

Spyware

Front 6

is a general term referring to programs that appear desirable, but actually contain something harmful. A Trojan horse purports to do one thing that the user wants while secretly performing other potentially malicious actions. For example, a user may download a game file, install it, and begin playing the game. Unbeknownst to the user, the application may also install a virus, launch a worm, or install a utility allowing an attacker to gain unauthorized access to the system remotely, all without the user’s knowledge.

Back 6

Trojan Horse: Named after the Trojan horse of Greek mythology (and serving a very similar function), a Trojan horse

Front 7

Self-propagating code that exploits system or application vulnerabilities to replicate. Once on a system, it may execute embedded routines to alter, destroy, or monitor the system on which it is running, then move on to the next system. _____ is effectively a virus that does not require human interaction or other programs to infect systems.

Back 7

A worm

Front 8

Parasitic code that requires human action or insertion, or which attaches itself to another program to facilitate replication and distribution. Virus-infected containers can range from e-mail, documents, and data file macros to boot sectors, partitions, and memory fobs. Viruses were the first iteration of malware and were typically transferred by floppy disks (also known as “sneakernet”) and injected into memory when the disk was accessed or infected files were transferred from system to system.

Back 8

Virus

Front 9

A public key algorithm that does both encryption and digital signature is which of the following?

Back 9

RSA can be used for encryption, key exchange, and digital signatures.

Front 10

DES IS a _____ algorithm

Back 10

symmetric

Front 11

IDEA IS a _______ algorithm

Back 11

symmetric

Front 12

Diffie-Hellman is a common _______algorithm,

Back 12

asymmetric

Front 13

When backing up an applications system's data, which of the following is a key question to be answered first?

Back 13

›What records to backup

Front 14

What is the primary role of cross certification?

Back 14

Creating trust between different PKIs

Front 15

The DOD's Model first from the top down is The ____ Layer contains protocols that implement user-level functions, such as mail delivery, file transfer and remote login.

Back 15

Application

Front 16

The DOD's Model second from the top down isthe ______ Layer handles connection rendez vous, flow control, retransmission of lost data, and other generic data flow management between hosts. The mutually exclusive TCP and UDP protocols are this layer's most important members.

Back 16

Host-to-Host

Front 17

The DOD's 3rd from the top down The ____Layer is responsible for delivering data across a series of different physical networks that interconnect a source and destination machine. Routing protocols are most closely associated with this layer, as is the IP Protocol,

Back 17

Internet

Front 18

The DOD's 4th from the top down The ______ Layer is responsible for delivering data over the particular hardware media in use. Different protocols are selected from this layer, depending on the type of physical network

Back 18

Network Access

Front 19

Which of the following can prevent hijacking of a web session?

Back 19

SSL

Front 20

What is the maximum number of different keys that can be used when encrypting with Triple DES?

Back 20

3

Front 21

Which of the following floors would be most appropriate to locate information processing facilities in a six-story building?

Back 21

You data center should be located in the middle of the facility or the core of a building to provide protection from natural disasters. Not basement nor roof nor main floor too much traffic

Front 22

To understand the whys in crime, many times it is necessary to understand the

Back 22

Motivations, Opportunities, and Means (MOM). Motivations are the who and why of a crime. Opportunities are the where and when of a crime, and Means pertains to the capabilities a criminal would need to be successful. Methods is not a component of MOM.

Front 23

Who is responsible for initiating corrective measures and capabilities used when there are security violations?

Back 23

Management is responsible for protecting all assets that are directly or indirectly under their control.They must ensure that employees understand their obligations to protect the company's assets, and implement security in accordance with the company policy. Finally, management is responsible for initiating corrective actions when there are security violations.

Front 24

Which of the following term best describes a weakness that could potentially be exploited?

Back 24

Vulnerability: A vulnerability is mostly a weakness, it could be a weakness in a piece of sotware, it could be a weakness in your physical security, it could take many forms.

Front 25

It is the combination of a threat exploiting some vulnerability that could cause harm to some asset.

Back 25

Risk

Front 26

Possibility that vulnerability may be exploited to cause harm to a system, environment, or personnel. Any potential danger.

Back 26

Threat

Front 27

he equation used to calculate the total number of symmetric keys (K) needed for a group of users (N) to communicate securely with each other is given by which of the following?

Back 27

N(N – 1)/ 2

Front 28

Which two of the following technologies help protect web communications and promote a secure online environment?

Back 28

TLS and SSL

Front 29

Type I error,

Back 29

False Rejection Rate or False Reject Rate (FRR)

Front 30

Type II error,

Back 30

False Acceptance Rate or False Accept Rate (FAR)

Front 31

Cross Over Error Rate (CER)

Back 31

Equal error rate (ERR)

Front 32

the probability that the system fails to detect a match between the input pattern and a matching template in the database. It measures the percent of valid inputs which are incorrectly rejected. An authorize individual is falsely rejected by the system

Back 32

False Rejection Rate (FRR) or Type 1 error

Front 33

the probability that the system incorrectly matches the input pattern to a non-matching template in the database. It measures the percent of invalid inputs which are incorrectly accepted. An impostor is being falsely accepted by biometric system

Back 33

False Acceptance Rate (FAR) or Type 2 error

Front 34

the rate at which both acceptance and rejection errors are equal.

Back 34

Equal error rate (ERR) – the rate at which both acceptance and rejection errors are equal. The value of the EER can be easily obtained from the ROC curve. The EER is a quick way to compare the accuracy of devices with different ROC curves. In general, the device with the lowest EER is the most accurate.

Front 35

n operation (represented by the➢symbol) that checks to see whether at least one ofthe input values is true.

Back 35

OR symbol

Front 36

The _____operation (represented by the ∧ symbol) checks to see whether two values are both true. In Boolean math, there are only two possible values for each of these variables, leading to four possible inputs to the ____function. It’s this finite number of possibilities that makes it extremely easy for computers to implement logical functions in hardware. Notice in the following truth table that only one combination of inputs (where both inputs are true) produces an output value of true:

Back 36

The AND operation (represented by the ∧ symbol) checks to see whether two values areboth true.

Front 37

The ________operation (represented by the ∨ symbol) checks to see whether at least one of theinput values is true. Refer to the following truth table for all possible values of the ORfunction. Notice that the only time the OR function returns a false value is when both ofthe input values are false:

Back 37

The OR operation (represented by the ∨ symbol) checks to see whether at least one of theinput values is true.

Front 38

The ____operation (represented by the ∨ symbol) checks to see whether at least one of theinput values is true.

Back 38

The OR operation (represented by the ∨ symbol) checks to see whether at least one of theinput values is true.

Front 39

The _______operation (represented by the ∧ symbol) checks to see whether two values areboth true.

Back 39

The AND operation (represented by the ∧ symbol) checks to see whether two values areboth true.

Front 40

What is the formula used to compute the ALE?

Back 40

ALE = AV * EF * ARO

Front 41

What is EF?

Back 41

Exposure Factor

Front 42

What is ARO

Back 42

Annualized Rate of Occurrence

Front 43

What is AV

Back 43

asset value

Front 44

is computed as the product of the asset value (AV) times the exposure factor (EF) times the annualized rate of occurrence (ARO)

Back 44

The annualized loss expectancy (ALE)

Front 45

SLE*ARO

Back 45

annualized loss expectancy (ALE)

Front 46

what AV*EF?

Back 46

SLE Single Loss Expectancy

Front 47

?what layer File Transfer Protocol (FTP)

Back 47

application

Front 48

what layer Trivial File Transfer Protocol (TFTP)

Back 48

application

Front 49

what layer Simple Network Management Protocol (SNMP)

Back 49

application

Front 50

what layer Simple Mail Transfer Protocol (SMTP)

Back 50

application

Front 51

what layer telnet

Back 51

application

Front 52

what layer Hypertext Transfer Protocol (HTTP)

Back 52

application

Front 53

what layer American Standard Code for Information Interchange (ASCII)

Back 53

presentation

Front 54

what layer Extended Binary-Coded Decimal Interchange Mode (EBCDIC)

Back 54

presentation

Front 55

what layer Tagged Image File Format (TIFF)

Back 55

presentation

Front 56

what layer Joint Photographic Experts Group (JPEG)

Back 56

presentation

Front 57

what layer Motion Picture Experts Group (MPEG)

Back 57

presentation

Front 58

what layer Musical Instrument Digital Interface (MIDI)

Back 58

presentation

Front 59

what layer Network File System (NFS)

Back 59

session

Front 60

what layer NetBIOS

Back 60

session

Front 61

what layer Structured Query Language (SQL)

Back 61

session

Front 62

what layer Remote procedure call (RPC)

Back 62

session

Front 63

what layer Transmission Control Protocol (TCP)

Back 63

transport

Front 64

what layer User Datagram Protocol (UDP)

Back 64

transport

Front 65

what layer Secure Sockets Layer (SSL)/Transport Layer Security (TLS)

Back 65

transport

Front 66

what layer Sequenced Packet Exchange (SPX)

Back 66

transport

Front 67

what layer Internet Protocol (IP)

Back 67

network

Front 68

what layer Internet Control Message Protocol (ICMP)

Back 68

network

Front 69

what layer Internet Group Management Protocol (IGMP)

Back 69

network

Front 70

what layer Routing Information Protocol (RIP)

Back 70

network

Front 71

what layer Open Shortest Path First (OSPF)

Back 71

network

Front 72

what layer Internetwork Packet Exchange (IPX)

Back 72

network

Front 73

what layer Address Resolution Protocol (ARP)

Back 73

datalink

Front 74

what layer Reverse Address Resolution Protocol (RARP)

Back 74

data link

Front 75

what layer Point-to-Point Protocol (PPP)

Back 75

data link

Front 76

what layer Serial Line Internet Protocol (SLIP)

Back 76

data link

Front 77

what layer Ethernet

Back 77

data link

Front 78

what layer Token Ring

Back 78

data link

Front 79

what layer

Back 79

FDDI

Front 80

what layer ATM

Back 80

data link

Front 81

what layer EIA-422, EIA-423, RS-449, RS-485

Back 81

physical

Front 82

what layer 10BASE-T, 10BASE2, 10BASE5, 100BASE-TX, 100BASE-FX, 100BASE-T,1000BASE-T, 1000BASE-SX

Back 82

physical

Front 83

what layer Integrated Services Digital Network (ISDN)

Back 83

physical

Front 84

what layer Digital subscriber line (DSL)

Back 84

physical

Front 85

what layer Synchronous Optical Networking (SONET)

Back 85

physical

Front 86

In response to an access-request from a client,

a RADIUS server returns one of three authentication responses:

Back 86

access-accept,

access-reject, or

access-challenge

Front 87

is simply a primary drive with a mirror drive.

Back 87

Raid 1

Front 88

This RAID configuration stripes data at the bit-level but quickly became useless and is now considered obsolete.

Back 88

Raid 2

Front 89

______ comprises block-level striping, not byte-level striping AND, it has largely been replaced by RAID 6.

Back 89

Raid 4

Front 90

Which RAID disk configuration uses three separate physical drives, byte-level striping, plus one additional physical drive for parity data?

Back 90

Raid 3