Security+ Set 4

Front 1

What are the seven stages in a certificate life cycle?

Back 1

certificate enrollment; distribution; validation; revocation; renewal; destruction; auditing

Front 2

What security advantage do managed hubs provide over other hubs?

Back 2

they can detect physical configuration changes and report them

Front 3

What is port mirroring?

Back 3

on switches, the ability to map the input and output of one or more ports to a single port

Front 4

What does an attacker need to conduct ARP cache poisoning?

Back 4

physical connectivity to a local segment

Front 5

What security hole does RIPv1 pose?

Back 5

RIPv1 does not allow router passwords

Front 6

What are the five main services provided by firewalls?

Back 6

packet filtering; application filtering; proxy server; circuit-level; stateful inspection

Front 7

Which of the five router services do e-mail gateways provide?

Back 7

application filtering

Front 8

What OSI layer do stateful firewalls reside at?

Back 8

network layer

Front 9

What are the three types of NAT?

Back 9

static NAT; dynamic NAT; overloading NAT

Front 10

What security weakness does SPAP have?

Back 10

does not protect against remote server impersonation

Front 11

How do the RADIUS client and server avoid sending their shared secret across the network?

Back 11

shared secret is hashed and hash is sent

Front 12

In MAC, what is read-up?

Back 12

the ability of users in lower security categories to read information in higher categories

Front 13

In MAC, of read-up, read-down, write-up, and write-down, which two are legal? Which two are illegal?

Back 13

legal- read-down, write-up
illegal- read-up, write-down

Front 14

Do hashing algorithms protect files from unauthorized viewing?

Back 14

no, only verify files have not been changed

Front 15

What is an SIV?

Back 15

System Integrity Verifier- IDS that monitors critical system files for modification

Front 16

Why are VLAN's considered broadcast domains?

Back 16

all hosts on the VLAN can broadcast to all other hosts on the VLAN

Front 17

What language are most new smart card applications written in?

Back 17

Java

Front 18

What is a bastion host?

Back 18

a gateway in a DMZ used to secure an internal network

Front 19

What type of IDS will likely detect a potential attack first? Why?

Back 19

Network-based IDS: runs in real-time

Front 20

What drawback do heuristic-based IDS's have?

Back 20

higher rate of false positives

Front 21

What are the four layers of the TCP/IP suite? How do they map to the OSI model?

Back 21

Application > Application-Session
Transport > Transport
Internet > Network
Network < Data Link-Physical

Front 22

What are the six steps to incident response?

Back 22

Preparation; Identification; Containment; Eradication; Recovery; Follow-Up

Front 23

What are most fire extinguishers loaded with?

Back 23

FE-36

Front 24

What is FE-13 used for?

Back 24

explosion prevention

Front 25

What is FE-13 used for?

Back 25

explosion prevention

Front 26

What is the maximum length of a valid IP datagram?

Back 26

64K

Front 27

What is the RFC-recommended size of an IP datagram?

Back 27

576 bytes

Front 28

What is IGMP used for?

Back 28

multicasting

Front 29

What is bytestream?

Back 29

data from Application layer is segmented into datagrams that source and destination computers will support

Front 30

What two pieces of information comprise a socket?

Back 30

source IP address and source port

Front 31

At the Network Interface layer, what is the packet of information placed on the wire known as?

Back 31

a frame

Front 32

What IP layer do man-in-the-middle attacks take place at?

Back 32

internet layer

Front 33

What IP layers do DoS attacks occur at?

Back 33

any layer

Front 34

What IP layer do SYN floods occur at?

Back 34

transport layer

Front 35

Which hashing algorithm is more secure, MD5 or SHA-1?

Back 35

SHA-1

Front 36

What is the key length for Blowfish?

Back 36

variable length

Front 37

How are digital signatures implemented?

Back 37

a hash is created and encrypted with the creator's private key

Front 38

How are asymmetric algorithms used for authentication?

Back 38

authenticator sends a random number (nonce) to receiver, who encrypts it with their private key

Front 39

In a bridge CA architecture, what is the CA that connects to a bridge CA called?

Back 39

a principal CA

Front 40

Who defines a certificate's life cycle?

Back 40

the issuing CA

Front 41

At what OSI layer (and above) must networked computers share a common protocol?

Back 41

data link and above

Front 42

What security hole does SPAP have?

Back 42

remote server can be impersonated

Front 43

What protocol does RADIUS use?

Back 43

UDP

Front 44

What protocol does TACACS+ use?

Back 44

TCP

Front 45

What sort of devices normally use TACACS?

Back 45

network infrastructure devices

Front 46

What limitation does IPSec have?

Back 46

only supports unicast transmissions

Front 47

What does IPSec require to be scaleable?

Back 47

a PKI

Front 48

What are the three major components of SSH?

Back 48

Transport Layer protocol (SSH-TRANS); User authentication protocol (SSH-USERAUTH); connection protocol (SSH-CONN)

Front 49

What do BSS and ESS stand for?

Back 49

Basic Service Set and Extended Service Set

Front 50

What does ESS offer that BSS does not?

Back 50

the ability to roam between AP's

Front 51

What are the two parts of a Key Distribution Center?

Back 51

An authentication server (AS) and a ticket-granting server (TGS)

Front 52

What are the three major classification levels with MAC?

Back 52

Top Secret; Confidential; Unclassified