Network Security, Firewalls & Vpns

Front 1

1. What can you detect by analyzing a data packet?

Back 1

1. Policy violations and network vulnerabilities
N/A

Front 2

2. Which of the following is true about Net Witness investigator?

Back 2

2. Analyzes static and real-time data.
N/A

Front 3

3. What is used by TCP to establish a session between two systems?

Back 3

3. Three-way Handshake
Ch. 2, 69
Ch 4, 121

Front 4

4. Which of the following protocols is a connection-oriented protocol that operates at the transport layer of the OSI model and supports reliable connections?

Back 4

4. TCP
Ch. 2, 65,69

Front 5

5. Promiscuous mode is most commonly associated with which of the following?

Back 5

5. A network interface.

N/A

Front 6

6. Which of the following is NOT a primary objective of information security?

Back 6

6. Privacy
Ch. 1, 6

Front 7

7. Personnel should be authenticated and authorized prior to being granted access to company’s information resources. This statement is an example of which of the following?

Back 7

7. Policy
Ch 1, 9

Front 8

8. Which security group is responsible for managing network vulnerabilities and threats?

Back 8

8. IT security staff
Ch. 1,12

Front 9

9. Which network component filters traffic between nodes?

Back 9

9. Firewall
Ch2, 44

Front 10

10. Which is the most important consideration when designing a network?

Back 10

10. Ability to meet business needs.
Ch1, 10

Front 11

11. What is usually the first activity in the hacking process?

Back 11

11. Reconnaissance
Ch4,119

Front 12

12. Which of the following might a hacker offer as a service?

Back 12

12. DoS attack, spam distribution and password cracking.
Ch4, 113

Front 13

13. Which of the following IT domains is most vulnerable to social engineering?

Back 13

13. User
Ch4, 115

Front 14

14. What type of attack can result in arbitrary code execution with system-level privileges?

Back 14

14. Buffer Overflow
Ch4, 134

Front 15

15. Name three (3) social engineering techniques?

Back 15

15. Impersonation, Reciprocity and Phishing. (All of these).
Ch4, 129, 144, 145

Front 16

16. Which domain marks the boundary where the private network meets the public network?

Back 16

16. LAN-to-WAN
Ch5, 152

Front 17

17. A port scanner is a type of vulnerability assessment scanner. True or False?

Back 17

17. False.
N/A

Front 18

18. Which of the following is NOT covered by a data loss, data leak prevention tool?

Back 18

18. Paper documents
Ch1, 22
Ch15

Front 19

19. Which of the following is not a purpose of network analysis?

Back 19

19. Detect security policy violations.
Ch1

Front 20

20. Where do you capture network data to analyze inbound/outbound network traffic?

Back 20

20. Inside the perimeter firewall.
Ch1

Front 21

21. What can you accomplish by filtering network packets?

Back 21

21. Prevent malware infections.
Ch2, 69

Front 22

22. Which of the following characteristics does NOT apply to stateful firewalls?

Back 22

22. Analyze both static and real-time data
Ch2, 69,70,73

Front 23

23. What does an application-level proxy do?

Back 23

23. Examines packet payloads.
Ch2, 70, 71

Front 24

24. Which of the following is a problem for static filtering?

Back 24

24. Random source ports.
Ch2, 69

Front 25

25. What type of firewall keeps track of state tables to sieve network traffic?

Back 25

25. Stateful packet inspection
Ch2, 60, 69

Front 26

26. Where should firewall rules that explicitly deny traffic be placed?

Back 26

26. At the top of the rules list
Ch7, 213

Front 27

27. What is the most important practice associated with firewall logging?

Back 27

27. Review the log files frequently.
Ch7 227, 228

Front 28

28. Which firewall limitation is typically characterized by a memory-based exploit?

Back 28

28. Buffer Overrun (Overflow)
Ch7, 234

Front 29

29. Firewall enhancements are desirable in all situations and should be deployed at any cost. True or False?

Back 29

29. False
Ch7, 239, 240

Front 30

30. Which of the following characteristics is included in a reverse proxy?

Back 30

30. Caching and authentication
Ch4, 141
Ch8, 261, 262

Front 31

31. What is benefit of using VPNs?

Back 31

31. Establish remote network access
Ch3, 85

Front 32

32. Which aspect of the VPN prevents others from eavesdropping and observation?

Back 32

32. Cryptographic functions
Ch3, 81

Front 33

33. What is an advantage of VPN tunnel mode?

Back 33

33. Encapsulates protocol headers and packet payloads
Ch3, 94

Front 34

34. Which of the following characteristics of software VPN makes it less advantageous than hardware VPN?

Back 34

34. Open source clients can be complex to install
Ch12, 2-4

Front 35

35. To develop an AUP, you need to _____.

Back 35

35. Establish baseline rules.
Ch5, 151
Ch6, 198

Front 36

36. Uninstalling all unnecessary applications and services on a system is an example of which of the following?

Back 36

36. System hardening.
Ch5, 166

Front 37

37. 192.168312.12/222.255.255.255. Is an example of which of the following?

Back 37

37. Private IP address.
Ch5, 152

Front 38

38. Encryption is primarily concerned with which of the following primary objectives(s)?

Back 38

38. Integrity and confidentiality
Ch1, 21
Ch5, 171,172

Front 39

39. Logging what time a user accessed a particular resource is an example of which of the following?

Back 39

39. Accounting
Ch5 171

Front 40

40. Using a fingerprint to unlock a workstation is an example of which of the following?

Back 40

40. Something you are
Ch6, 169, 170

Front 41

41. What is the primary purpose of log monitoring?

Back 41

41. Detect injection attacks.
Ch6, 229-230
Ch9

Front 42

42. Building your own firewall can result in which of the following?

Back 42

42. Complex setup, cost savings and customized features
Ch9

Front 43

43. When planning a firewall implementation, which of the following is the key consideration?

Back 43

43. Availability, Address space and Skill set of support personnel (all of these).
Ch2
Ch5

Front 44

44. When dealing with a firewall emergency, what should you NOT do?

Back 44

44. Document your network.
Ch9

Front 45

45. Which of the following is true for a VPN?

Back 45

45. Has software installed on the host and gateway
Ch14

Front 46

46. Which of the following must an administrator organize to ensure follow-through of a new security plan?

Back 46

46. End-user training and awareness
Ch6, 196, 198

Front 47

47. Which of the following steps is included in a security assessment?

Back 47

47. Perform a risk assessment, Perform penetration testing and Perform vulnerability scanning (All of these).
Ch6, 205

Front 48

48. Which of the following is a valid network monitoring tool?

Back 48

48. Smoke-Ping
N/A

Front 49

49. Which of the following does NOT represent a valid incident response strategy phase?

Back 49

49. Collection
Ch6, 191

Front 50

50. Which of the following is NOT a security management best practice?

Back 50

50. Assign maximum required permissions
Ch6, 182-189