Final Exam Questions

Front 1

One example of cognitive biometrics requires the user to indentify speicif faces

Back 1

TRUE

Front 2

Several large internet providers support SSO, but only for their own suite of services and applications.

Back 2

TRUE

Front 3

OpenID is completely centralized.

Back 3

FALSE

Front 4

Determining vulnerabilities often depends upong the background and experience of the assesor.

Back 4

TRUE

Front 5

Security weaknesses can always be entirely eliminated.

Back 5

FALSE

Front 6

Most network mappers utilize the TCP/IP protocol Internet Control Message Protocol (ICMP)

Back 6

TRUE

Front 7

Permissions inheritance becomes less complicated with GPOs.

Back 7

FALSE

Front 8

A baseline is a reference set of data against which operational data is compared.

Back 8

TRUE

Front 9

Plaintext is text that has no formatting (such as bolding or underlining) applied.

Back 9

FALSE

Front 10

Although hashing is considered a cryptographic algorithm, its function is not to create cipertext that can later be decrypted by the receiving party.

Back 10

TRUE

Front 11

a CA can be external to the organization, such as a commercial CA that charges for the service, or it can be a CA interal to the organization that provides this service to the employees.

Back 11

TRUE

Front 12

Direct trust is only feasible when dealing with multiple users who each have digital certificates.

Back 12

FALSE

Front 13

Instead of letting a key expire and then creating a new key, an existing key can be renewed.

Back 13

TRUE

Front 14

First suppression is an important concern for the safety of employees and business continuity.

Back 14

TRUE

Front 15

It is rare for electromagnetic fields to "leak" out from wires network cables, since the insulation and shielding that covers a copper cable are intended to prevent this.

Back 15

FALSE

Front 16

Mirror image backups are not considered a primary key to unconvering evidence because they cannot create exact replicas of the crime scene.

Back 16

FALSE

Front 17

One of the key policies in an organization is a security policy.

Back 17

TRUE

Front 18

A security policy attempts to provide the right amount of trust by balancin no trust and too much trust.

Back 18

TRUE

Front 19

Security policies should be at least 10 pages long in order to be effective.

Back 19

FALSE

Front 20

The ethics of decisions and actions is defined individually, not by a group.

Back 20

FALSE

Front 21

___ is the presentation of credentials or identification, typically performed when logging on to a system.

Back 21

Indentification

Front 22

___ is the verification of the credentials to ensure that they are genuine and not fabricated.

Back 22

Authentication

Front 23

___ is granting permission for admittance.

Back 23

Authorization

Front 24

___ is the right to use specific resources.

Back 24

Access

Front 25

There are several types of OTPs. The most common type is a ___ OTP.

Back 25

time-synchronized.

Front 26

A ___ fingerprint scanner has a small slit or opening. Instead of placing the entire finger on the scanner, the scanner is swipped across the opening.

Back 26

dynamic

Front 27

___ is a feature of Windows that is intended to provide users with control of their digital identities while helping them to manage privacy.

Back 27

Windows CardSpace

Front 28

___ is a decentralized open source FIM that does not require specific software to be installed on the desktop.

Back 28

OpenID

Front 29

___ is an industry standard protocol specification that forwards username and password information to a centralized server.

Back 29

LDAP

Front 30

The ___, sometimes called X.500 Lite, is a simple subset of DAP.

Back 30

LDAP.

Front 31

The management protocol of IEEE 802.1x that governs the interaction between the system, authenticator, and RADIUS server, known as the ___.

Back 31

EAP

Front 32

___ is a very basic authentication protocol that was used to authenticate a user to a remote access server or to an Internet Service Provider (ISP).

Back 32

PAP.

Front 33

___ refer to any combination of hardware and software that enables access to remote users to a local internet network.

Back 33

RAS

Front 34

A(n) ___ uses an unsecured public network, such as the Internet, as if it were a secure private network.

Back 34

VPN

Front 35

A(n) ___ is the end of the tunnel between VPN devices.

Back 35

endpoint

Front 36

In information security, a ___ is the likelihood that a threat agent will exploit a vulnerability.

Back 36

risk

Front 37

___ generally denotes a potential negative impact to an asset.

Back 37

risk

Front 38

The goal of ___ is to better understand who the attackers are, why they attack, and what types of attacks might occur.

Back 38

threat modeling.

Front 39

The ___ is the expected monetary loss every time a risk occurs.

Back 39

Single Loss Expectancy (SLE)

Front 40

The ___ is the expected monetary loss that can be expected for an asset due to a risk over a one-year period.

Back 40

Annualized Loss Expectancy (ALE)

Front 41

In a ___, the risk is spread over all of the members of the pool.

Back 41

risk retention pool.

Front 42

Indentifying vulnerabilities through a(n) ___ determines the current security weakenesses that could expose assets to threats.

Back 42

vulnerability appraisal

Front 43

Most communication in TCP/IP involves the exchange of information between a programming running on device (known as a ___) and the same or corresponding process running on another device.

Back 43

process

Front 44

___ are typically used to determine the state of a port to know what applications are running and could be exploited.

Back 44

Port scanners

Front 45

A(n) ___ port means that the application or service assigned to that port is listening.

Back 45

open

Front 46

A(n) ___ port indicates that no process is listening at that port.

Back 46

closed.

Front 47

A(n) ___ port means tha the host system does not reply to any inquiries to this port number.

Back 47

blocked.

Front 48

___ are software tools that can identify all the systems connected to a network.

Back 48

Network mappers.

Front 49

The key feature of a protocol analyzer is that it places the computer's network interfact care (NIC) adapter into ___, meaning that NIC does not ignore packets intended for other systems and shows all network traffic.

Back 49

promiscuous mode

Front 50

___ is a generic term that refers to a range of products that look for vulnerabilities in networks or systems.

Back 50

vulnerability scanner

Front 51

___ programs use the file of hashed passwords and then attempts to break the hashed passwords offline.

Back 51

Password cracker.

Front 52

The ___ is typically defined as the person responsible for the information, who determines the level of security needed for the data, and delegates security duties as required.

Back 52

owner

Front 53

The Windows file and folder ___ permission allowed files or folder to opened as read-only and to be copied.

Back 53

read

Front 54

The Windows file and folder ___ permission allows the creation of files and folders, and allows data to be added to or removed from files

Back 54

write

Front 55

___ is part of the pre-trial phase of a lawsuit in which each party though the law of civil procedure can request documents and other evidence from other parties or can compel the production of evidence by using a subpoena.

Back 55

Discovery

Front 56

ILM strategies are typically recorded in ___ policies.

Back 56

storage and rentention

Front 57

___ assigns a level of business importance, availability, sensitivity, security and regulation requirements to data.

Back 57

Data classification

Front 58

___ means permissions given to a higher level "parent" will also be inherited by a lower-level "child".

Back 58

Inheritance

Front 59

___ is the process for generating, transmitting, storing, analyzing, and disposing of computer security log data.

Back 59

log management

Front 60

___ servers are intermediate hosts through which web sites are accessed.

Back 60

proxy

Front 61

In a ___, the risk is spread over all of the members of the pool.

Back 61

risk retention pool.

Front 62

Indentifying vulnerabilities through a(n) ___ determines the current security weakenesses that could expose assets to threats.

Back 62

vulnerability appraisal

Front 63

Most communication in TCP/IP involves the exchange of information between a programming running on device (known as a ___) and the same or corresponding process running on another device.

Back 63

process

Front 64

___ are typically used to determine the state of a port to know what applications are running and could be exploited.

Back 64

Port scanners

Front 65

A(n) ___ port means that the application or service assigned to that port is listening.

Back 65

open

Front 66

A(n) ___ port indicates that no process is listening at that port.

Back 66

closed.

Front 67

A(n) ___ port means tha the host system does not reply to any inquiries to this port number.

Back 67

blocked.

Front 68

___ are software tools that can identify all the systems connected to a network.

Back 68

Network mappers.

Front 69

The key feature of a protocol analyzer is that it places the computer's network interfact care (NIC) adapter into ___, meaning that NIC does not ignore packets intended for other systems and shows all network traffic.

Back 69

promiscuous mode

Front 70

___ is a generic term that refers to a range of products that look for vulnerabilities in networks or systems.

Back 70

vulnerability scanner

Front 71

___ servers are intermediate hosts through which websites are accessed.

Back 71

proxy

Front 72

___ logs can be used to determine whether nre IP addresses are attempting to probe the network and if stronger firewall rules are necessary to block them.

Back 72

firewall

Front 73

A(n) ___ is an occurence within a software system that is communicated to users or other programs outside the operating system.

Back 73

event

Front 74

___ are operational actions that are performed by the operating system, such as shutting down the system or starting a service.

Back 74

system events

Front 75

___ refers to a methodology for making changes and keeping track of those changes, often manually

Back 75

change mangement

Front 76

___ monitoring is designed for detecting statistical anomalies.

Back 76

anomaly-based

Front 77

___ monitoring compares activities against a predefined signature.

Back 77

signature-based

Front 78

a ___ monitor is typically a low-level system program that uses a notification engine designed to monitor and track down hidden activity on a desktop system, server, or even personal digital assistants (PDAs) or cell phones.

Back 78

system

Front 79

Changing the original text to a secret message using cyprography is known as ___.

Back 79

encryption

Front 80

___ is a relatively recent cyrptographic hash function that has received internation recognition and adoption by standards organizations.

Back 80

Whirlpool

Front 81

A ___ substitution cipher maps a single plaintext character to multiple ciphertext characters.

Back 81

homoalphabetic

Front 82

A ___ cipher manipulates an entire block of plaintext at one time.

Back 82

block

Front 83

___ is a block cipher that processes blocks of 64 bits.

Back 83

RC2

Front 84

The ___ algorithm dates back to the early 1990s an is used in European nations.

Back 84

IDEA

Front 85

___ encryption uses two keys instead of one. These keys are mathematically related are are known as the public key and the private key.

Back 85

Asymmetric

Front 86

The asymmetric algorithm ___ was published in 1977 and patented by MIT in 1983.

Back 86

RSA

Front 87

A smilar program known as ___ is a PGP open-source product.

Back 87

GPG

Front 88

To protect data stored on a hard drive, Microsoft Windows Vista includes ___ drive encryption.

Back 88

BitLocker

Front 89

___ is a hardware-enabled data encryption feature.

Back 89

BitLocker

Front 90

___ is essentially a chip on the motherboard of the computer that provides cryptographic services.

Back 90

TPM

Front 91

Some organizations set up a subordinate entity, called a ___, to handle some CA tasks such as processing certificate requests and authenticating users.

Back 91

Registration Authority (RA)

Front 92

___ digital certificates are issues by a CA or RA directly to individuals.

Back 92

Personal

Front 93

When Bob sends one digital certificate to Alice along with his message, that is known as a ___ certificate.

Back 93

single-sided

Front 94

In one type of trust model, ___ trust, a relationship exists between two individuals because one person known the other person.

Back 94

direct

Front 95

A(n) ___ trust refers to a situation in which two individuals trust each other because each trusts a third part.

Back 95

third party.

Front 96

The ___ trust model assigns a single hierarchy with one master CA called the root.

Back 96

hierarchial

Front 97

The ___ trist model has multiple CAs that sign digital certificates.

Back 97

distributed

Front 98

The ___ trust model is the basis for digital certifcates issues by Internet users.

Back 98

distributed

Front 99

With the ___ trust model, there is one CA that acts as a "facilitator" to interconnect all other CAs.

Back 99

bridge

Front 100

The ___ provides recommended baseline security requirements for the use and operation of CA, RA, and other PKI components.

Back 100

certificate policy

Front 101

___ is used to connect to an FTP server, much in the same way that HTTP links to a web server.

Back 101

FTP

Front 102

___ is a protocol that guarantees privacy and data integrity between applications communication over the Internet.

Back 102

TLS

Front 103

The TLS ___ Protocol is used to encapsulate higher-level protocols.

Back 103

Record

Front 104

___ is actually a suite of three utilities--slogin, scp, and ssh--that are secure versions of the unsecure UNIX counterpart utilities rlogin, rcp, and rsh.

Back 104

SSH

Front 105

___ is the most widely deployed tunneling protocol.

Back 105

PPTP

Front 106

One variation of PPP that is used by broadband internet procivers with DSL or cable modem connects is ___.

Back 106

PPPoE

Front 107

___ systems disperse a fine, dry powder over the fire.

Back 107

dry chemical

Front 108

___ fire suppression systems do not harm people, documents, or electrical equipment in the room

Back 108

clean agent

Front 109

In a ___ server cluser, every server in the cluster performs useful work. If one server fails, the reamining servers continue to perform their normal work as well as that of the failed server.

Back 109

symmetric

Front 110

A system of hard drives based on redundancy can be achieved through using a technology known as ___ , which uses multiple hard disk drives for increased reliability and performance.

Back 110

RAID

Front 111

Disk ___ involves connecting multiple drives in the server to the same disk controller card.

Back 111

mirroring.

Front 112

RAID Level 5 distributes ___ data (a type of error checking) across all drives instead of using a separate drive to hold the parity error checking information.

Back 112

parity

Front 113

A(n) ___ UPS is always running off its battery while the main power runs the battery charger.

Back 113

on-line

Front 114

A ___ site is generally run by a commercial disaster recovery service that allows a business to continue computer and network operations to maintain business continuity.

Back 114

hot

Front 115

A ___ site has all of the equipment installed but does not have active Internet or telecommunications facilities, and does not have current backups of data.

Back 115

warm

Front 116

An alternative to using magnetic tape is to back up to magnetic disk, such as a large hard drive or RAID configuration. This is known as ___.

Back 116

D2D

Front 117

As its core, a(n) ___ policy is a document that outlines the protections that should be enacted to ensure that the organizations assets face minimal risks.

Back 117

security.

Front 118

A ___ is a docuement that outlines specific requirements or rules that must be met

Back 118

policy

Front 119

___ determines the items that have a positive economic value and may include data, hardware, personnel, physical assets, and software.

Back 119

Asset identification

Front 120

___ takes a snapshot of the security of the organization as it now stands.

Back 120

Vulneralbility appraisal.