Network Security

Front 1

In information security, what are the three main goals?

Back 1

Integrity, confidentiality, and availability

Front 2

Which of the following is the greatest risk when it comes to removable storage?

Back 2

Confidentiality of data

Front 3

Which of these can hide an entire network of IP addresses?

Back 3

NAT

Front 4

Where are software firewalls usually located?

Back 4

On a PC

Front 5

You are implementing a testing environment for the development team. They use several virtual servers to test their applications. One of these applications requires that the servers communicate which each other. However, to keep this network safe and private, you do not want it to be routable to the firewall. What would be the best method to accomplish this?

Back 5

Use a virtual switch

Front 6

Which device's log file will show access control lists and which systems were or were not allowed access?

Back 6

Firewall

Front 7

HIDS and NIDS are similar intrusion detection systems. However, one is for indiviudal computers, and the other is for networks. Which of the following would a HIDS be installed to a monitor?

Back 7

System Files

Front 8

Jake is in the process of running a bulk data update. However, the process writes incorrect data throughout the database. What has been compromised?

Back 8

Integrity

Front 9

Which tool would you use if you want to view the contents of a packet?

Back 9

Protocol analyzer

Front 10

The IT director asks you t protect a server's data from unauthorized access and disclosure. What is this an example of?

Back 10

Confidentiality

Front 11

What is a goal for information security?

Back 11

Accountability

Front 12

Where is the optimal place to have a proxy server?

Back 12

In between a private network and a public network

Front 13

Which of the following devices should you employ to protect your network?

Back 13

Firewall

Front 14

Specific secure data is only supposed to be viewed by certain authorized users. What concept ensures this?

Back 14

Confidentiality

Front 15

If you ISP blocks objectionable material, what device wold you guess has been implemented?

Back 15

Internet content filter

Front 16

You are developing a security plan for your organization. Which of the following is an example of a physical control?

Back 16

ID Card

Front 17

Which of the following displays a single public IP address to the Internet while hiding a group of internal private IP addresses?

Back 17

IP Proxy

Front 18

Which of the following does the A in CIA stand for when it comes to IT security?

Back 18

Availability

Front 19

Which of the following security applications cannot proactively prevent computer anomalies?

Back 19

NIDS

Front 20

Which of the following types of firewalls provides inspection of data at layer 7 of the OSI model?

Back 20

Application-proxy

Front 21

You have been alerted to suspicious traffic without a specific signature. Under further investigation, you determine that the alert was a false indicator. Furthermore, the same alert has arrived at your workstation several times. Which security devices needs to be configured to disable false alarms in the future?

Back 21

Anomaly-based IDS

Front 22

Which device can use packet inspection?

Back 22

Firewall

Front 23

Of the following, which type of device attempts to serve client request without the user actually contacting the remove server

Back 23

HTTP Proxy

Front 24

Which of the following firewall rules only denies DNS zone transfers?

Back 24

Deny TCP any any port 53

Front 25

Which of the following is a type of packet filtering used by firewalls that retains memory of the packets that pass through the firewall?

Back 25

Stateful packet inspection

Front 26

Which of the following provides for the best application availability and can be easily expanded as an organization's demand grows?

Back 26

Load balancing

Front 27

Which of the following is a layer 7 device used to prevent specific typed of HTML tags from passing through to the client computer?

Back 27

Content filter

Front 28

One of the programmers in your organization complains that he can no longer transfer files to the FTP server. You check the network firewall and see thar the proper FTP ports are open. What should your check next?

Back 28

ACLs

Front 29

Allowing or denying traffic based on ports, protocols, addresses, or direction of data is an example of what?

Back 29

Firewall rules

Front 30

Which of the following will an Internet filtering appliance analyze?

Back 30

Content

Front 31

Which of the following devices would detect but not react to suspicious behavior on the network?

Back 31

NIDS

Front 32

Which of the following cable media is the least susceptible to a tap?

Back 32

Fiber-optic cable

Front 33

Which of the following uses multiple computers to share work?

Back 33

Load balancing

Front 34

Which of the following will detect malicious packets and discard them?

Back 34

NIPS

Front 35

A client contracts you to prevent users from accessing inappropriate websites. Which of the following technologies should you implement?

Back 35

Internet content filter

Front 36

Which of the following is the most secure type of cabling?

Back 36

Shield twisted-pair

Front 37

Which of the following is a best practice when installing and securing a new computer for a home user?

Back 37

Install a firewall

Front 38

What is a device doing when it actively monitors data streams for malicious code?

Back 38

Content inspection

Front 39

What kind of attack would a flood guard protect a network from?

Back 39

SYN attack

Front 40

Don must configure his firewall to support TACACS+. Which port should he open on the firewall?

Back 40

Port 49

Front 41

Which of the following protocols or services uses port 19?

Back 41

CHARGEN

Front 42

Which of the following will most likely enable an attacker to force a switch to function like a hub?

Back 42

MAC flooding

Front 43

A security analyst wants to ensure that all external traffic is able to access an organization's front-end servers but also wants to protect access to internal resources. Which network design element is the best option for the security analyst?

Back 43

DMZ

Front 44

Which of the following services uses port 49?

Back 44

Terminal Access Controller Access-Control System Plus

Front 45

Which of the following should a security administrator implement to limit web-based traffic that is based on the country of origin?

Back 45

Proxy server

Front 46

Which of the following threats is not associated with Bluetooth?

Back 46

Fraggle attack

Front 47

In your organization's network you have VoIP phones and PCs connected to the same switch. Which of the following is the best way to logically separate the device types while still allowing traffic between them via an ACL

Back 47

Create two VLANs on the switch connected to a router

Front 48

Tom sends out many e-mails containing secure information to other companies. What concept should be implemented to prove that Tom did indeed send the e-mails?

Back 48

Non-repudiation

Front 49

Which of the following is likely to be the last rule contained within the ACLs of a firewall?

Back 49

Implicit deny

Front 50

Which of the following might be included in Microsoft Security Bulletins?

Back 50

CVE

Front 51

Which port is used by Microsoft SQL

Back 51

1433

Front 52

Which port number is used by RPC?

Back 52

135

Front 53

A user receives an e-mail but the e-mail client software says that the digital signature is invalid and the sender of the e-mail cannot be verified. The would-be recipient is concerned about which of the following concepts?

Back 53

Integrity

Front 54

A coworker has installed an SMTP server on your organization's database server. What security principle does this violate?

Back 54

use of a device as it was intended

Front 55

You are working on a server and are busy implementing a network intrusion detection system on the network. You need to monitor the network traffic from the server. What mode should you configure the network adapter to work in?

Back 55

Promiscuous mode

Front 56

Cloud environments often reuse the same physical hardware (such as hard drives) for multiple customers. These hard drives are used and reused when customer virtual machines are created and deleted over time. What security concern does this bring up implications for?

Back 56

Data confidentiality

Front 57

For a remote tech to access the desktop of a user's computer in another state, what inbound port must be open on the user's computer?

Back 57

3389

Front 58

Tom is getting reports from several users that they are unable to download specific items from particular websites, although they can access other pages of those websites. Also, they can download information from other websites just fine. Tom's IDS is also sending him alarms about possible malicious traffic on the network. What is the most likely cause why the users cannot download the information they want?

Back 58

The NIPS is blocking web activity from those specific websites.

Front 59

Your organization's network has a main office and has two remote sites that connect back to the main office solely. You have been tasked with blocking Telnet access into the entire network. Which would be the best way to go about this?

Back 59

Block port 23 on the main office's firewall

Front 60

To protect against malicious attacks, who should you think like?

Back 60

hacker