Test
Midterm review 6-8
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (102)
1Why is the binary mathematical operation that is used for simple encryption not secure?
- AIt does not change letter or word frequency
- BIt does not use a symmetric key system.
- CThe key length is too short.
- DThe mathematics are flawed
2Which is a very complicated block cipher using 128-bit keys to generate sub-keys to be applied to multiple blocks at the same time?
- AAES
- BDES3
- CIDEA
- DDES
3Which is a weakness of Data Encryption Standard?
- AThroughput is minimal, making it a poor choice for large files.
- BIt is based on a 1970s era block cipher.
- CIt’s complexity in scrambling text makes it very processor-intensive and slow.
- DThe key must be transmitted, thus risking it being compromised.
4Which of the following is a symmetric key system using blocks?
- APGP
- BRSA
- CDES
- DBlowfish
5Who issues certificates?
- AThe UN encryption authority
- BThe United States Department of Defense
- CA private certificate authority
- DThe Association for Computer Machinery
6Which of the following is the most common legitimate use for a password cracker?
- AMilitary intelligence agents using it to break enemy communications
- BThere is no legitimate use for a password cracker
- CTrying to break the communications of criminal organizations in order to gather evidence
- DTesting the encryption of your own network
7Attempting to determine a password by simply trying every possible combination within the set parameters until successful is called:
- Abrute force
- Bauthentication auditing
- Cpassword recovery
- Dpassword cracking
8Which is a symmetric key encryption system?
- ARSA
- BDES
- CPGP
- DAES
9Which of the following uses a total of 52 16-bit sub-keys?
- AIDEA
- BDES
- CTriple DES
- DAES
10Which is NOT an encryption method?
- AAES
- BASCII
- CDES
- DPGP
11What is a digital signature?
- AA scanned-in version of your signature, often in .jpg format
- BA method for verifying the recipient of a document
- CA signature that is entered via a digital pad or other device
- DA piece of encrypted data added to other data to verify the sender
12What type of encryption uses a different key to encrypt the message than it uses to decrypt the message?
- ASymmetric
- Bsecure
- CPublic key
- DPrivate key
13Operations not found in normal math that can be performed on binary numbers include all of the following EXCEPT:
- AXOR
- BOR
- CNOT
- DAND
14If you are using a block cipher to encrypt large amounts of data, which of the following would be the most important consideration when deciding which cipher to use (assuming all of your possible choices are well known and secure):
- AWhether or not it has been used by any military group
- BSize of the keys used
- CNumber of keys used
- DSpeed of the algorithm
15Which type of encrypted communication is most common?
- AComputer and Internet communications
- BWritten documents
- CRadio communications
- DTelephone conversations
16What is the purpose of a certificate?
- ATo validate the sender of a digital signature or software
- BTo guarantee that a signature is valid
- CTo validate the recipient of a document
- DTo verify that software is virus free
17Which encryption algorithm uses a variable length symmetric key?
- AADEA
- BPGP
- CDES
- DRSA
18Which is a widely used public key system that is considered by many experts to be very secure and is available as a plug-in for Netscape Messenger, MSN Messenger, and other communication software?
- AIDEA
- BPGP
- CBlowfish
- DAES
19What is the primary advantage of the encryption algorithm described as a symmetric key system using blocks?
- AIt uses asymmetric keys
- BIt is complex
- CIt is unbreakable
- DIt is relatively fast
20Which is NOT a part of a step in the XOR operation of encryption method.
- AConvert message text to ASCII
- BXOR ASCII with a key
- CXOR binary numbers with a key
- DConvert ASCII to binary
21Which is a public key encryption standard developed by three mathematicians in 1977 that provides very high but slow security?
- AAES
- BRSA
- CDES
- DDES3
22Which of the following is the oldest known encryption method?
- ACryptic cipher
- BPGP
- CCaesar cipher
- DMulti-alphabet
23Which of the following is the primary weakness in the Caesar cipher?
- AThere is no significant weakness; the Caesar cipher is adequate for most encryption uses.
- BIt does not use complex mathematics
- CIt does not disrupt letter frequency.
- DIt does not use a public key system.
24Which of the following encryption algorithms uses three key ciphers in a block system, and uses the Rijndael algorithm?
- ADES
- BRSA
- CAES
- DNSA
25Which is a symmetric block cipher developed in 1993 that provides variable-length key sizes ranging from 32 to 448 bits?
- ABlowfish
- BDES3
- CIDEA
- DAES
26Which encryption method is most widely available as an add-in for various applications, including email clients?
- ARSA
- BCaesar cipher
- CDES
- DPGP
27What size key does this system use?
- A255bit
- B64bit
- C128big
- D56bit
28Which binary mathematical operation can be used for a simple encryption method?
- AOR
- BBit shift
- CBit swap
- DXOR
29Which is NOT a way in which quantum physics might improve encryption in the future?
- ATransferring keys could be based on changing states of subatomic particles.
- BIf someone tried to read a key without authorization, it could result in destruction of the key.
- CComputers based on quantum physics would be much faster.
- DTransferring keys would be immune to interference with subatomic particles.
30Which is a powerful password cracker that works on Windows and Linux platforms?
- AJohn the Ripper
- BQuantum Cracker
- CSolarwinds
- DBrutus
31An improvement on the Caesar cipher that uses more than one shift is called a what?
- ADES encryption
- BTriple DES
- CIDEA
- DMulti-alphabet substitution
32Which of the following is an encryption method developed by three mathematicians in the 1970s?
- ADES
- BPGP
- CRSA
- DDSA
33Which is a block cipher developed by Belgian researchers and providing 128-, 192-, and 256-bit key sizes?
- ABlowfish
- BAES
- CDES3
- DRSA
34Which is a very early encryption method?
- ACaesar cipher
- BWEP
- CDES3
- DAES
35Many encryption techniques such as XOR are easily broken because:
- Atheir basis in binary numbers makes them easy targets for math processors
- Btheir public keys are readily available
- Cbrute force techniques can break them
- Dthe underlying letter and word frequency can still be determined
36Why is encryption an important part of security?
- ANo matter how secure your network is, the data being transmitted is still vulnerable without encryption.
- BA packet that is encrypted will travel faster across networks.
- CEncrypted transmissions are only necessary with VPNs.
- DEncrypted transmissions will help stop Denial of Service Attacks.
37Which is true about public key encryption?
- AIt uses two different keys.
- BIt is based on the PGP protocol.
- CIt uses symmetric keys.
- DBoth keys must be closely protected to avoid hacking.
38Which is NOT true about MS-CHAP?
- AIt does not require clear-text passwords to be stored by the authenticator.
- BIt was designed to integrate with encryption and hashing algorithms of Microsoft Windows.
- CIt defines a set of reason-for-failure codes readable by Microsoft Windows.
- DIt requires the authenticator to store a reversibly encrypted password.
39At what layer of the OSI does PPTP operate?
- ANetwork
- BData link
- CPhysical
- Dtransport
40Which is true of a virtual private network?
- AIt is faster than a typical broadband connection.
- BIt utilizes inexpensive leased lines.
- CIt emulates a direct network connection.
- DIt connects via a private network connection.
41Which authentication protocols are available under PPTP?
- ASPAP, MS-CHAP
- BPAP, EAP, MS-CHAP
- CEAP, CHAP
- DMS-CHAP, PAP, SPAP
42Which is NOT part of basic VPN capability?
- AEncapsulation and tunneling
- BEncryption and decryption of data
- CCircuit-switched connection over the Internet
- DUser authentication and access control
43Which of the following is generally considered the least secure?
- APAP
- BSPAP
- CMS-CHAP
- DX-PAP
44What encryption does PPTP use?
- AAES
- B3DES
- CIPSec
- DMPPE
45What is the difference between transport mode and tunnel mode in IPSec?
- AOnly tunneling mode does not encrypt the header.
- BOnly transport mode does not encrypt the header.
- COnly tunneling mode is unencrypted.
- DOnly transport mode is unencrypted.
46What two types of tunneling are supported by PPTP?
- ACompulsory and voluntary
- BEncapsulated and non-encapsulated
- CMandatory and optional
- DPoint-to-point and layer 2
47What protects the actual packet data in IPSec?
- ASPAP
- BCHAP
- CAH
- DESP
48Which of the following is a weakness in PPTP?
- Anot supported on most platforms
- BClear text passwords
- CNo encryption
- Dused only with IP networks
49What protocols make up IPSec?
- AIPComp, MS-CHAP, PAP, AH
- BAH, PAP, CHAP, IPComp
- CAH, IKE, ESP, IPComp
- DAH, SPAP, CHAP, IPComp
50What is a hash function?
- AA password encryption method using a variable mathematical equation
- BThe mathematical transformation of a variable-sized input that returns a fixed-length string
- CThe transformation of an encrypted variable-length password by a mathematical string
- DA secure encryption key determined by a mathematical calculation on the password
51What is the primary vulnerability in SPAP?
- APlayback attacks
- BNo hash code
- CWeak encryption
- DClear text passwords
52Which authentication method was designed specifically for PPTP?
- AExtensible Authentication Protocol
- BPassword Authentication Protocol
- CShiva Password Authentication Protocol
- DChallenge Handshake Authentication Protocol
53At what layer of the OSI model does PPTP work?
- ALayers 2 and 3
- BLayer 1
- CLayer 2
- DLayer 3
54PPTP is an acronym for which of the following?
- APoint-to-point tunneling protocol
- BPoint-to-point tunneling procedure
- CPoint-to-point transmission protocol
- DPoint-to-point transmission procedure
55PPTP is based on what earlier protocol?
- ASLIP
- BPPP
- CL2TP
- DIPSec
56Which IPSec mode enables encryption of the header and data during a VPN connection?
- ATunnel mode
- BPoint-to-point encryption mode
- CVPN encryption mode
- DTransport mode
57What makes SPAP susceptible to fraudulent login attacks via a recorded authentication exchange?
- ASPAP uses the same reversible encryption method every time.
- BSPAP uses weak encryption that is easily decrypted.
- CSPAP does not encrypt the username and password.
- DSPAP transmits the decryption key during the exchange.
58What advantage does AH have of SPAP?
- AAH protects the data as well as the header.
- BNone; SPAP is more secure.
- CAH uses stronger encryption
- DAH is not susceptible to replay attacks
59Which is an authentication protocol that uses a three-part handshaking procedure?
- APAP
- BEAP
- CCHAP
- DSPAP
60Which is NOT likely a consideration of an administrator in determining which VPN solution to implement?
- AWhether existing hardware and software supports the technology
- BWhich ISPs offer which services
- CWhat authentication is used
- DHow packets are encrypted
61Which of the following is an important security feature in CHAP?
- AIt periodically re-authenticates
- BIt uses 3DES encryption
- CIt is immune to IP spoofing
- DIt uses AES encryption
62What is the difference between voluntary and compulsory tunneling in PPTP?
- AOnly compulsory tunneling forces 3DES encryption.
- BOnly voluntary tunneling allows standard PPP/non VPN connection
- COnly compulsory tunneling forces the user to send his password.
- DOnly voluntary tunneling allows the user to choose which network to connect to.
63Which is a very basic authentication protocol that transmits passwords in unencrypted clear text?
- APAP
- BCHAP
- CEAP
- DSPAP
64What encryption technology is used by the module offered by Cisco to provide VPN capability with Cisco switches and routers?
- ADES
- BIPSec
- C3DES
- DAES
65Which common VPN technology supports five authentication methods?
- APPP
- BPPTP
- CL2TP
- DIPSec
66Which is NOT true about development of IPSec?
- AIPSec requires sending and receiving devices to share a single encryption key.
- BIPSec was developed by the IETF to support secure exchange of packets.
- CIPSec provides two encryption modes and no additional protocols for encrypting data.
- DIPSec is built into Windows operating systems such as Windows XP Internet Connection Firewall.
67Which was the earlier VPN technology?
- APPP
- BPPTP
- CL2TP
- DIPSec
68What does L2TP stand for?
- ALevel 2 tunneling protocol
- BLayer 2 transfer protocol
- CLevel 2 transfer protocol
- DLevel 2 transfer protocol???
69What is a virtual private network?
- AA method for Internet users to connect to a network via a dedicated line
- BA method for remote users to connect to a network via a leased line
- CA method for a remote office to connect to a private network via a leased line
- DA method for users at other sites to connect to a private network via the Internet
70What is the purpose of IKE?
- AKey exchange
- BPacket encryption
- Cauthentication
- DHeader protection
71Which is NOT true about L2TP technology?
- AIt is based on a combination of PPTP and Cisco’s layer 2 forwarding protocol.
- BIt works only with public IP addresses.
- CIt is supported by all versions of Windows since NT.
- DIt can use IPSec for encryption.
72Which authentication protocols are available with L2TP that are not available with PPTP?
- APAP, EAP, MS-CHAP
- BSPAP, MS-CHAP
- CEAP, CHAP
- DMS-CHAP, PAP, SPAP
73What version of Windows operating system provides the ability to set application policies?
- AWindows XP
- BWindows 2003
- CWindows 2000 Server
- DWindows 2000
74Why do some Windows system administrators recommend leaving the default administrator account enabled but moving it from the administrator’s group and greatly restricting privileges?
- AThe administrator account cannot be deleted, but reducing privileges reduces security risks from hackers.
- BPrivileges on the default administrator account cannot be changed because it is the default Administrator account.
- CThere must be an administrator account for Windows to work properly.
- DReducing privileges reduces security risks from hackers, but leaving the account enabled provides a better chance to track hacker activities.
75Which would NOT be a default account on a Windows machine?
- AIUSR_machine name
- BASP.NET
- CAdministrator
- Dusername
76In Windows, what is the default maximum password age?
- A30 days
- B28 days
- C60 days
- D42 days
77What type of encryption does EFS utilize?
- APublic key encryption
- BMulti-alphabet
- CA secret algorithm proprietary to Microsoft
- DSingle key
78What maximum password age to Microsoft recommend?
- A42 days
- B3 months
- C1 year
- D20 days
79What level of privileges should all users have?
- AMost privileges possible
- BGuest
- CLeast possible
- DAdministrator
80What is the minimum secure setting in Internet Explorer for Run components not signed with Authenticode?
- ADisable
- Bprompt
- CForbid
- DEnable
81What steps should be taken to lessen hacker threats from Windows default accounts?
- ADefault Administrator account should be deleted and default User account given Administrator privileges.
- BDefault accounts should be deleted or disabled and a new account created with administrative privileges.
- CDefault Administrator and User accounts should be deleted.
- DAll default accounts should be deleted or disabled.
82Which Windows registry key contains links to HKEY_USERS?
- AHKEY_CURRENT_CONFIG
- BHKEY_CLASSES_ROOT
- CHKEY_CURRENT_USER
- DHKEY_LOCAL_MACHINE
83What do disabling the default administrator account and setting up an alternative account accomplish?
- AKeeps administrators conscious of security
- BAllows closer management of administrator access
- CMakes the password stronger
- DMakes it more difficult for someone to guess the log on information
84Which of the following most accurately describes the registry?
- AA database containing system settings
- BA relational database where software is registered
- CA relational database containing system settings
- DA database where software is registered
85Information and settings for all the hardware, software, users, and preferences for any Microsoft Windows computer are maintained in the:
- ASystem32 file
- BSystemRoot
- CWindows Registry
- DConfig.com file
86Which is NOT a privacy or security setting recommended for Netscape Navigator?
- ASet cookies for a short duration such as three days or less.
- BBlock pop-up windows so they will not appear.
- CCheck the remember passwords box so they do not have to be entered from a login screen.
- DEncrypt sensitive data.
87Which is NOT a recommendation for securing Linux operating systems?
- AUser and account policies should be set up the same as in Windows.
- BDaemons not in use should be shut down.
- CNo application should run as the root user unless absolutely necessary.
- DAll console-equivalent access should be enabled for regular users.
88In Windows, what is the default minimum password length?
- A0 characters
- B12 characters
- C8 characters
- D5 characters
89In Windows XP, what is the name of the file that contains the system registry information for that particular computer?
- Aregedit32
- Bntuser.dat
- Csystem.dat
- Duser.dat
90Which best describes a “security template”?
- AA reference list of standardized settings an administrator should enable
- BA file that automatically makes predetermined changes in security settings
- CA list of administrator-established settings that everyone must make on their machine
- DA file used to deploy many individual settings centrally via Group Policy Objects
91What account lockout threshold does the NSA recommend?
- A2 tries
- B4 tries
- C5 tries
- D3 tries
92Why are the default Windows account lockout policies considered not secure?
- AThey permit an infinite number of log-in attempts.
- BThey permit access by selecting Cancel.
- CThey permit users to access other’s accounts.
- DThey permit hackers to access unencrypted password files.
93What does the author suggest is probably the single greatest security threat to an individual system or corporate network?
- ANetwork users
- BPatches
- CThe Internet
- DSpyware
94Which of the following is a security recommendation for Linus not common to Windows?
- ARoutinely patch the operating system
- BShut down all services that you are not using (called daemons in Linux)
- CConfigure the browser securely
- DDisable all console-equivalent access for regular users.
95The concept of hardening the operating system involves properly configuring every machine for ____________ security.
- Aoptimum
- Bdefault
- Cmaximum
- Dfirewall
96What is the recommended secure setting in Internet Explorer for Initialize and script ActiveX controls not marked as safe?
- AEnable
- BDisable
- CForbid
- Dprompt
97What is changing the TCP/Settings in the registry called?
- AStack tweaking
- BStack compression
- CStack building
- DStack altering
98What operating systems require periodic patches?
- ALinux
- BMacintosh
- CWindows
- DAll
99What minimum password length does the NSA recommend?
- A12
- B6
- C10
- D8
100What happens if you copy an unencrypted filed into an encrypted folder?
- AIt remains unencrypted
- BNothing happens
- CThe file becomes encrypted
- DThe folder becomes unencrypted
101Which of the following templates is used to provide the most security for the domain controllers?
- ASectopdc.inf
- BHisecws.inf
- CSecuredc.inf
- DHisecdc.inf
102What is the rule for unused services on any computer?
- ATurn them off only if they are critical.
- BConfigure them for minimal privileges
- CMonitor them carefully
- DTurn them off
Información
- Descripción
- Information Technology Test sobre Midterm review 6-8, creado por Mary Sunseri el 04/03/2018.
- Autor
- Mary Sunseri
- Idioma
- English
- Visitas
- 22
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test