Test
CIT 370 Unit 2
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (112)
1PKI consists of all of the following EXCEPT what?
- AProcedures
- BPractices
- CSoftware
- DPeople
2On which of the following devices is IPsec likely to be implemented?
- ANetwork Analyzer
- BSwitch
- CHub
- DRouter
3The strongest technology that would assure Alice that Bob is the sender of a message is a(n) _____.
- Adigital signature
- Bencrypted signature
- Cdigital certificate
- Ddigest
4What is the purpose of suspending a digital certificate rather than revoking it?
- ATo ensure the certificate goes through the proper disposal procedures before revocation
- BTo limit use of a certificate after an employee temporarily leaves
- CWhen a certificate is compromised, a suspension can be used while the certificate's key is modified to become secure once again
- DThere is no suspension of certificates; all digital certificates must be revoked then recreated
5Why is a pre-master secret an important component of a web browser and web server handshake?
- AThe pre-master secret generates a pre-master key that creates asymmetric keys for the transmission
- BThe pre-master secret is what shares public and private keys between the involved parties
- CThe pre-master secret is used to create a master key, which can then create session keys for symmetric encryption
- DThe pre-master secret generates a hash to ensure integrity of the encryption key
6The -party trust model supports CA.
- Afirst
- Bsecond
- Cthird
- Dfourth
7_____ are symmetric keys to encrypt and decrypt information exchanged during the session and to verify its integrity.
- ASession keys
- BEncrypted signatures
- CDigital digests
- DDigital certificates
8_____ refers to a situation in which keys are managed by a third party, such as a trusted CA.
- AKey escrow
- BRemote key administration
- CTrusted key authority
- DKey authorization
9Which statement is NOT true regarding hierarchical trust models?
- AThe root signs all digital certificate authorities with a single key.
- BIt assigns a single hierarchy with one master CA.
- CIt is designed for use on a large scale.
- DThe master CA is called the root.
10Which of the following is provided by a server digital certificate?
- AIntegrity of the cryptographic connection
- BAuthentication the author of a book
- CSecure email transmissions
- DAuthentication of the web server
11How does an internet content filter stop traffic based on the fact that it contains the word 'drugs'?
- AText filtering
- BContent inspection
- CURL filtering
- DMalware inspection
12How does a proxy server contribute to a stronger defense?
- AHides a client's IP address
- BEncrypts traffic as it is transmitted
- CCaches web pages
- DCreates a DMZ zone to distract attackers
13Which secure feature does a load balancer NOT provide?
- Ahide HTTP error pages
- Bremove server identification headers from HTTP responses
- Cfilter packets based on protocol settings
- Dblock denial-of-service (DoS) attacks
14How does a virtual LAN (VLAN) allow devices to be grouped?
- Abased on subnets
- Blogically
- Cdirectly to hubs
- Donly around core switches
15Which device is easiest for an attacker to take advantage of in order to capture and analyze packets?
- Ahub
- Bswitch
- Crouter
- Dload balancer
16A web application firewall is an example of what?
- ARule-based firewall
- BRole-based firewall
- CApplication-specific firewall
- DNext-generation firewall
17What type of an attack can cause a switch to act as a hub?
- AMAC flooding
- BARP poisoning
- CVPN overflow
- DDDOS
18How does IMAP store its emails?
- AIn the firewall
- BIn RAM only
- COn the local client
- DOn a server
19Each of these can be used to hide information about the internal network EXCEPT _____.
- Aa protocol analyzer
- Bsubnetting
- Ca proxy server
- Dnetwork address translation (NAT)
20Which function does an Internet content filter NOT perform?
- AURL filtering
- Bmalware inspection
- Ccontent inspection
- Dintrusion detection
21How does FTP transfer data?
- AUsing TCP port 20
- BUsing TCP port 21
- CUsing UDP port 20
- DUsing UDP port 21
22Which of the following allows a network device to be managed and configured by SNMP?
- AModify string
- BRead-write community string
- CVPN software
- DICMP
23What does MAC limiting and filtering do?
- AIt limits devices that can connect to a switch.
- BIt allows only approved wireless devices to connect to a network.
- CIt prevents Address Resolution Protocol spoofing.
- DIt provides security for a router.
24When using FTP active mode, which command is sent to the server?
- ACHANNEL
- BPASV
- CPORT
- DFTPS
25Which version of Simple Network Management Protocol (SNMP) is considered the most secure?
- ASNMPv2
- BSNMPv3
- CSNMPv4
- DSNMPv5
26Which Fibre Channel zone is the most restrictive?
- AFC hard zone
- BFC soft zone
- CFC port zone
- DFC interface zone
- AFC hard zone
27What is the value of a checksum?
- AVerification of integrity
- BProof of data encryption
- CProvision of nonrepudiation
- DVerification of authenticity
- AVerification of integrity
28How is a switching loop a possibility in a network?
- ABroadcast storms can happen internally
- BLoop protection is not yet released
- CLayer 2 switch headers do not have a TTL value
- DSTA vulnerabilities
- ABroadcast storms can happen internally
29Which type of cloud is offered to all users?
- Ahybrid cloud
- Bprivate cloud
- Cpublic cloud
- Dcommunity cloud
- Ahybrid cloud
30Each of these is a technique for securing a router EXCEPT _____.
- Amaking all configuration changes remotely
- Bsecuring all ports
- Csetting a strong administrator password
- Dusing a meaningful router name
- Amaking all configuration changes remotely
31Why would a user purchase a portable computer as opposed to a tablet?
- AIncreased convenience
- BGreater performance
- CLighter device
- DPortability
- AIncreased convenience
32One of the first mobile devices was a _____.
- Apersonal digital assistant (PDA)
- Btablet
- Csmartphone
- Dnotebook
- Apersonal digital assistant (PDA)
33What is the maximum transmission power level of IEEE WLANs?
- A40 mW
- B100 mW
- C200 mW
- D400 mW
- A40 mW
34Which technology is predominately used for contactless payment systems?
- Awireless local area network (WLAN)
- BBluetooth
- Cnear field communication (NFC)
- DTemporal Key Integrity Protocol (TKIP)
- Awireless local area network (WLAN)
35Why would a user utilize container encryption on their smart phone instead of full device encryption?
- AContainer encryption is not yet supported
- BIsolation of sensitive data
- CStronger encryption key
- DAndroid companies do not support native full disk encryption
- AContainer encryption is not yet supported
36What prevents a mobile device from being used until the user enters the correct passcode?
- Aswipe identifier (SW-ID)
- Bkeyboard
- Ctouch pad
- Dlock screen
- Aswipe identifier (SW-ID)
37Why is it challenging for an attacker to compromise an Apple iOS application?
- AApple products are easily compromised
- BClosed and proprietary architecture
- CAll Apple apps are created by Apple
- DAll Apple iOS apps require encrypted passwords
- AApple products are easily compromised
38How does a web-based computer differ from a subnotebook computer?
- AWeb-based computers are limited to web apps
- BSubnotebook computers cannot utilize browsers
- CWeb-based computers are smaller than subnotebooks
- DSubnotebook computers only run Windows
- AWeb-based computers are limited to web apps
39Which of the following is a value that never changes in a WEP transmission?
- A48-bit IV
- B64-bit key
- C24-bit IV
- D32-bit key
- A48-bit IV
40Which of the following is NOT an example of an NFC vulnerability?
- AMan-in-the-middle attack
- BDNS poisoning
- CData manipulation
- DDevice theft
- AMan-in-the-middle attack
41Bob has attempted to enter the passcode for his mobile device but keeps entering the wrong code. Now he is asked to enter a special phrase to continue. This means that Bob’s mobile device is configured to _____.
- Areset to factory settings
- Bextend the lockout period
- Cuse PIN codes as passcodes
- Ddouble the amount of time he is prevented from accessing his device
- Areset to factory settings
42What enforces the location in which an app can function by tracking the location of the mobile device?
- Alocation resource management
- Bgeo-fencing
- Cgeo-tagging
- DGraphical Management Tracking (GMT)
- Alocation resource management
43Which of the following is true when a NIC is in master mode?
- AThe NIC is acting as an AP
- BThe NIC is using an ad hoc
- CThe NIC is in a piconet
- DThe NIC can no longer communicate
- AThe NIC is acting as an AP
44Which of these is NOT a type of wireless AP probe?
- Awireless device probe
- BWNIC probe
- Cdedicated probe
- DAP probe
- Awireless device probe
45The primary design of a(n) _____ is to capture the transmissions from legitimate users.
- Arogue access point
- BWEP
- Cevil twin
- DBluetooth grabber
- Arogue access point
46Which of these can a QR code NOT contain?
- Aimage
- BURL
- Cemail address
- Dphone number
47Why would an attacker use the war driving technique?
- ACreate a diversion
- BSearch for unprotected IP phones
- CDiscover hidden credentials
- DIdentify unprotected APs
- ACreate a diversion
48WPA replaces WEP with _____.
- AWPA2
- BTemporal Key Integrity Protocol (TKIP)
- CCyclic Redundancy Check (CRC)
- DMessage Integrity Check (MIC)
49How does a bus mastering feature allow a CardBus to be more efficient when accessing data?
- ACaching data within unused circuits
- BCommunicating with devices without the CPU
- CAllowing backwards compatibility
- DIncreasing the bus size of PC cards
- ACaching data within unused circuits
50What is the unauthorized access of information from a wireless device through a Bluetooth connection called?
- Abluejacking
- Bbluesnarfing
- CBluetooth snatching
- DBluetooth spoofing
51What is the name given to the individual who periodically reviews security settings and maintains records of access by users?
- Asupervisor
- Bcustodian
- Cowner
- Dmanager
52_____ in access control means that if a condition is not explicitly met, then access is to be rejected.
- APrevention control
- BDenial of duties
- CImplicit deny
- DExplicit rejection
- APrevention control
53How are roles dissimilar to groups?
- AGroups do not give users access to resources
- BRoles are considered global groups
- CRoles are specific to Linux and UNIX systems
- DA user can only be assigned one role
- AGroups do not give users access to resources
54Which statement about Rule Based Access Control is true?
- AIt requires that a custodian set all rules.
- BIt is considered obsolete today.
- CIt dynamically assigns roles to subjects based on rules.
- DIt is considered a real-world approach by linking a user’s job function with security.
- AIt requires that a custodian set all rules.
55Which of the following is NOT considered a role in access control?
- ACustodian
- BConservator
- CEnd-user
- DOwner
- ACustodian
56Which of the following directory access protocols is designed to run over a TCP/IP network?
- AX.500
- BX.501
- CLDAP
- DDAP
- AX.500
57In the _____ model, the end-user cannot change any security settings.
- ADiscretionary Access Control
- BRestricted Access Control
- CSecurity Access Control
- DMandatory Access Control
- ADiscretionary Access Control
58What is the least restrictive access control model?
- ADiscretionary Access Control (DAC)
- BRole Based Access Control (RBAC)
- CMandatory Access Control (MAC)
- DRule Based Access Control (RBAC)
- ADiscretionary Access Control (DAC)
59What does an organization accomplish using least privilege?
- ACreating redundancy in access
- BExposing avenues for fraud
- CSimplifying access to resources
- DLimiting attack surface
- ACreating redundancy in access
60On Windows systems, a security identifier is a unique variable directly linked to which of the following?
- AIntegrity level
- BAuthorization level
- CAuthenticity level
- DAccess level
- AIntegrity level
61Which type of computer most closely resembles a desktop computer?
- Anotebook
- Bsubnotebook
- Claptop
- Dnetbook
62Which type of device log contains the most beneficial security data?
- Aemail log
- Bswitch log
- Cfirewall log
- Drouter log
- Aemail log
63Which of these is NOT an attack against a switch?
- AMAC address impersonation
- BARP poisoning
- CMAC flooding
- DARP address impersonation
- AMAC address impersonation
64How does network address translation (NAT) improve security?
- AIt discards unsolicited packets.
- BIt filters based on protocol.
- CIt masks the IP address of the NAT device.
- DNATs do not improve security.
- AIt discards unsolicited packets.
65Rule Based Access Control can NOT be based off of which criteria?
- AProtocol
- BSubnet
- CUser
- DNetwork address
66When a user logs in to a computer with their username and password, those credentials are validated through a user management database. This is an example of which of the following?
- AAuthentication
- BAccess
- CAuthorization
- DIdentification
67Which of the following is a security vulnerability associated with MAC address filtering?
- AMAC addresses are not unique
- BMAC addresses are limited to preventing access
- CMAC addresses can be altered on devices
- DExchange between devices is unencrypted
- AMAC addresses are not unique
68Why is loop protection necessary?
- AIt makes a DMZ more secure.
- BIt denies attackers from launching DDoS attacks.
- CIt prevents a broadcast storm that can cripple a network.
- DIt must be installed before IEEE 802.1d can be implemented.
- AIt makes a DMZ more secure.
69An entity that issues digital certificates is a _____.
- ACertificate Authority (CA)
- BSignature Authority (SA)
- CCertificate Signatory (CS)
- DDigital Signer (DS)
- ACertificate Authority (CA)
70Which of the following could make an entire POP server inaccessible?
- AThe installation of an SMTP server
- BA missing MX record
- CA compromised NIPS
- DPOP email injection
- AThe installation of an SMTP server
71How is a VoIP system different from IP telephony?
- AVoIP is more secure than IP telephony
- BThey are exactly the same
- CIP telephony uses a different twisted-pair
- DVoIP technology uses IP telephony
- AVoIP is more secure than IP telephony
72A RADIUS authentication server requires that the _____ be authenticated first.
- Auser
- Bauthentication server
- Csupplicant
- Dauthenticator
73Which of these is NOT a risk when a home wireless router is not securely configured?
- AAn attacker can steal data from any folder with file sharing enabled.
- BUsernames, passwords, credit card numbers, and other information sent over the WLAN could be captured by an attacker.
- COnly 50 percent of the packets will be encrypted.
- DMalware can be injected into a computer connected to the WLAN.
- AAn attacker can steal data from any folder with file sharing enabled.
74What is involved in key escrow?
- AA key is encrypted with several different random algorithms by a third party
- BA key is downloaded from a third party every time it is used
- CThe key is split in two halves, then encrypted by a third party
- DFragments of a key are sent to several third parties and stored in different locations
- AA key is encrypted with several different random algorithms by a third party
75A process functioning on behalf of the user who attempts to access a file is known as a(n) _____.
- Aobject
- Boperation check
- Csubject
- Dresource
76A(n) _____ intercepts internal user requests and then processes those requests on behalf of the users.
- Acontent filter
- Bhost detection server
- Cproxy server
- Dintrusion prevention device
- Acontent filter
77Why would a person upgrade their wireless network from an 802.11g to an 802.11n?
- ABackwards compatibility with 802.11a
- BOversaturated 5 Ghz frequency
- CThere are more overlapping channels
- DIncreased data transfer rates
- ABackwards compatibility with 802.11a
78A(n) _____ is the person who is responsible for the information, determines the level of security needed for the data, and delegates security duties as required.
- Aowner
- Badministrator
- Ccustodian
- Dend-user
79Which of the following is an advantage to a network tap as opposed to port mirroring?
- AA network tap can analyze a broader range of packets than port mirroring
- BA network tap is less expensive than a switch that supports port mirroring
- CA network tap is legacy technology and has no advantages to port mirroring
- DA network tap can analyze traffic faster than port mirroring
- AA network tap can analyze a broader range of packets than port mirroring
80Which technology should be used instead of LEAP?
- ASTREAK
- BPEAP
- CLEAP-2
- DREAP
81Orphaned accounts and dormant accounts are security risks that differ at what capacity?
- ADormant accounts have not been accessed for a lengthy duration
- BOrphaned accounts are no longer active
- COrphaned accounts are limited in access
- DDormant account credentials have been lost
- ADormant accounts have not been accessed for a lengthy duration
82Which of the following is most likely to use Secure Copy Protocol?
- ANewer Windows systems
- BUNIX and Linux systems
- CLegacy systems
- DFirewalls
- ANewer Windows systems
83Which of these is NOT a security feature for locating a lost or stolen mobile device?
- Aremote lockout
- Blast known good configuration
- Calarm
- Dthief picture
- Aremote lockout
84Each of these is an entry in a firewall log that should be investigated EXCEPT _____.
- AIP addresses that are being rejected and dropped
- Bsuccessful logins
- Csuspicious outbound connections
- AIP addresses that are being rejected and dropped
85Which two subprotocols are utilized by IPsec?
- AAH and ESP
- BSSL and TLS
- CSSH and SFTP
- DL2TP and SSH
- AAH and ESP
86How would an app be restricted by MDMs based on geographical criteria?
- ALocation services
- BGeo-tagging
- CRemote lock
- DGeo-fencing
- ALocation services
87A digital certificate that turns the address bar green is a(n) _____.
- APersonal Web-Client Certificate
- BAdvanced Web Server Certificate (AWSC)
- CX.509 Certificate
- DExtended Validation SSL Certificate
- APersonal Web-Client Certificate
88Which of these is NOT an advantage of a load balancer?
- AThe risk of overloading a desktop client is reduced.
- BNetwork hosts can benefit from having optimized bandwidth.
- CNetwork downtime can be reduced.
- DDoS attacks can be detected and stopped.
- AThe risk of overloading a desktop client is reduced.
89Which of the following is NOT a security feature provided by mobile devices?
- AAlarm
- BGPS tracking of dead devices
- CThief picture
- DRemote wiping
90What is the biggest difference between a CA and an RA?
- ARAs generate private keys and CAs generate public keys
- BCertificate Authorities can generate public key certificates
- CCAs primarily process certificate revocation requests
- DRAs are more reliable than CAs
- ARAs generate private keys and CAs generate public keys
91Which of the following is used to digitally sign a certificate?
- ACSR
- BCA Public key
- CCA Private key
- DRA
92There are three types of PC cards that all share which common trait?
- A87 mm length
- B5.0 mm thickness
- C53 mm width
- D64-pin connector
- A87 mm length
93What is the Extensible Authentication Protocol (EAP)?
- Aa framework for transporting authentication protocols
- Ba subset of WPA2
- Cthe protocol used in TCP/IP for authentication
- Da technology used by IEEE 802.11 for encryption
- Aa framework for transporting authentication protocols
94If a packet has an internal IP address but the traffic is coming from the outside, this is an indication of which of the following?
- ANetwork protocols are malfunctioning
- BThe address has been spoofed
- CThere is a routing loop
- DDHCP is down
- ANetwork protocols are malfunctioning
95Which statement is true regarding security for a computer that boots to Apple Mac OS X and then runs a Windows virtual machine?
- AThe security of the Apple Mac OS X completely protects the Windows virtual machine.
- BThe hypervisor protects both the Apple Mac OS X and Windows operating systems.
- CThe security of the Windows virtual machine completely protects the Apple Mac OS X.
- DThe Windows virtual machine needs its own security.
- AThe security of the Apple Mac OS X completely protects the Windows virtual machine.
96How is the Security Assertion Markup Language (SAML) used?
- AIt is a backup to a RADIUS server.
- BIt allows secure web domains to exchange user authentication and authorization data.
- CIt is an authenticator in IEEE 802.1x.
- DIt is no longer used because it has been replaced by LDAP.
- AIt is a backup to a RADIUS server.
97Which mobile device is the smallest?
- Asubnotebook
- Blaptop
- Cnotebook
- Ddesktop
98Heuristic monitoring uses which of the following to determine if risk is present?
- ASignature
- BRegistry entry
- CAnomaly
- DAlgorithm
99Which of these is NOT where keys can be stored?
- Ain tokens
- Bin digests
- Con the user's local system
- Dembedded in digital certificates
100Which of these is considered the weakest cryptographic transport protocol?
- ASSL v2.0
- BTLS v1.0
- CTLS v1.1
- DTLS v1.3
101Which of these is NOT part of the certificate life cycle?
- Arevocation
- Bauthorization
- Ccreation
- Dexpiration
102_______ is a protocol for securely accessing a remote computer.
- ASecure Shell (SSH)
- BSecure Sockets Layer (SSL)
- CSecure Hypertext Transport Protocol (SHTTP)
- DTransport layer Security (TLS)
103Which of these would NOT be a filtering mechanism found in a firewall rule?
- Asource address
- Bdate
- Cprotocol
- Ddirection
104A(n) _______ can identify the applications that send packets and then make decisions about filtering based on it.
- Aapplication-aware firewall
- Breverse proxy
- CInternet content filter
- Dweb security gateway
105Which statement regarding a demilitarized zone (DMZ) is NOT true?
- AIt can be configured to have one or two firewalls
- BIt provides an extra degree of security
- CIt typically includes an email or web server
- DIt contains servers that are used only by internal network users
106Which statement about network address translation (NAT) is true?
- Ait can be stateful or stateless
- BIt substitutes MAC addresses for IP addresses
- CIt removes private addresses when the packet leaves the network
- DIt can be found only on core routers
107A reverse proxy __________.
- Aonly handles outgoing requests.
- Bis the same as a proxy server.
- Cmust be used together with a firewall
- Droutes incoming requests to the correct server
108Which is the preferred location of installation of a spam filter?
- Aon the POP3 server
- Bwith the SMTP server
- Con the local host client
- Don the proxy server
109A _________ watches for attacks and sounds an alert only when one occurs.
- Afirewall
- BNIPS
- Cproxy intrusion device
- DNIDS
110A multipurpose security device is known as _________.
- ACohesive Attack management System
- BProxy Security System
- CIntrusion Detection/Prevention
- DUnified Threat Management
111What is the difference between NIDS and NIPS?
- AThere is no difference; a NIDS and a NIPS are equal.
- BA NIPS can take actions more quickly to combat an attack.
- CA NIDS provides more valuable information about attacks.
- DA NIPS is much slower because it uses protocol analysis.
112If a device is determined to have an out-of-date virus signature file, then Network Access Control can redirect that device to a network by ________.
- Aa Trojan horse
- BTCP/IP hijacking
- CAddress Resolution Protocol (ARP) poisoning
- DDHCP man-in-the middle
Información
- Descripción
- Test sobre CIT 370 Unit 2, creado por sta13001 el 22/07/2015.
- Autor
- sta13001
- Idioma
- English
- Visitas
- 9
- Valoración
- Aún sin valoraciones Valora este test