Chapter 5 Firewalls

Front 1

Which of the following refers to the end user’s desktop devices such as a desktop computer, laptop, VoIP telephone, or other endpoint device?

Back 1

Workstation Domain

Front 2

Which of the following refers to the entity responsible for global coordination of IP addressing, DNS root, and other Internet protocol resources?

Back 2

Internet Assigned Numbers Authority (IANA)

Front 3

Which of the following is not a characteristic of a private address?

Back 3

They are leased to users and businesses

Front 4

Which term describes a form of security based on hiding details of a system, or creating convolutions that are difficult to understand?

Back 4

Security through obscurity

Front 5

What attack cracks a password or encryption key by trying all possible valid combinations from a defined set of possibilities (a set of characters or hex values)?

Back 5

Brute-force attack

Front 6

Which attack uses a pre-constructed list of potential passwords or encryption keys?

Back 6

Dictionary password attack

Front 7

Which protocol and a data exchange system commonly used over TCP/IP networks, including the Internet, but which is unencrypted and performs authentication and data transfer in plaintext?

Back 7

File Transfer Protocol (FTP)

Front 8

Which of the following refers to the process of simulating and testing a new concept, design, programming technique, and so on before deployment into a production environment?

Back 8

Modeling

Front 9

Which of the following refers to the hardware, operating system software, database software, client-server applications, and data that are typically housed in the organization’s data center and/or computer rooms?

Back 9

System/Application Domain

Front 10

Which of the following is given to an Application Layer protocol used by e-mail clients to receive messages from an e-mail server?

Back 10

Post Office Protocol (POP)

Front 11

Which term describes portions of a software system that unauthenticated users can run?

Back 11

Attack surface

Front 12

Which of the following is defined as the act of avoiding single points of failure by building in multiple elements, pathways, or methods of accomplishing each mission-critical task?

Back 12

Redundancy

Front 13

Which of the following is not true of VLANs?

Back 13

They require a change of IP address or re-cabling.

Front 14

The best defenses against covert channels include IDS and intrusion prevention system (IPS) and thoroughly watching all aspects of an IT infrastructure for aberrant or abnormal events of any type.

Back 14

True

Front 15

The WAN Domain refers to the hardware, operating system software, database software, client-server applications, and data that are typically housed in the organization’s data center and/or computer rooms.

Back 15

False

Front 16

SMTP is an Application Layer protocol used by e-mail clients to send messages to an e-mail server and is also used to relay messages between e-mail servers.

Back 16

True

Front 17

Telnet is a protocol and a service used to remotely control or administer a host through a plaintext command-line interface.

Back 17

True

Front 18

Multifactor authentication is significantly less secure than any single factor form of authentication.

Back 18

False

Front 19

The principle of least privilege states that you should grant users the fewest capabilities, permissions, and privileges possible to complete their assigned work, without additional capabilities.

Back 19

True

Front 20

Node security focuses on the tasks for each type of networking device to improve its security; it takes the generic recommendations of system hardening and expands them with additional node/host specific improvements.

Back 20

True

Front 21

sdf

Back 21

sdf

Front 22

sdf

Back 22

sdf