Network Security Final

Front 1

In general which of the following is not DMZ?

Back 1

Database

Front 2

VLAN physically divides the workstations and hosts into different LANS?

T or F

Back 2

False

Front 3

A VLAN switch is a IP layer device?

T or F

Back 3

False

Front 4

In IPSEC, encapsulating security payload (ESP) can provide integrity protection?

T or F

Back 4

True

Front 5

To secure the communication between two subnetworks, which mode should we use in IPSEC?

Back 5

Tunnel mode

Front 6

In IPSec, the encryption algorithm and key information are

Back 6

Stored in Security Associations Database

Front 7

In IPSec, we use SPI (security parameter index) to locate a Security Association (SA)

T or F

Back 7

True

Front 8

We use tunnel mode IPSEC to provide host-to-host security protection.

T or F

Back 8

False

Front 9

A SPD (security policy database) indicates the control policies of the incoming/outgoing traffic. Which of the following actions is not listed in the database?

Back 9

Hold and control

Front 10

The TLS/SSL, the client and server negotiate the session key through?

Back 10

Handshake protocol

Front 11

We mainly use an X.509 digital certificate to get the ?

Back 11

Subjects public key

Front 12

The X.509 certificate can be signed by anyone?

T or F

Back 12

False

Front 13

A X.509 certificate has the certificate authority's signature

T or F

Back 13

True

Front 14

Which of the following services will NOT be provided by TLS/SSL?

Back 14

Intrusion detection

Front 15

In SSL, the client uses the servers private key to encrypt the data.

T or F

Back 15

False

Front 16

All VPN are built on IPsec

T or F

Back 16

False

Front 17

Which of the following is not part of Botnets?

Back 17

Firewall

Front 18

In DDoS attacks, normally the ___ send malicious packages to the victim directly.

Back 18

Zombies or bots

Front 19

In a distributed denial of service (DDoS) attack, the attacker aims to comprise ___

Back 19

Availability

Front 20

A stateless firewall filters each packet based on the information contained in the packet. Which of the following will NOT be checked by the stateless firewall?

Back 20

Application data

Front 21

In DDoS attacks, the attacker tries to steal valuable information from a victim?

T or F

Back 21

False

Front 22

IP spoofing is a common technique in almost all forms of DDoS attacks.

T or F

Back 22

True

Front 23

Stateless firewall filters each packet based on the connection context between the sender and receiver.

T or F

Back 23

False

Front 24

The stateless and statefull firewalls are exactly the same since they both filter the packets based on the IP address, protocol and port numbers.

T or F

Back 24

False

Front 25

In ipsec every package needs to carry the key information?

T or F

Back 25

False