GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

Topic 4: Computer Networks cont'd (1)

Cassie Xayaseng computer informations English 200 cards

Cards in this deck (200)

  1. 1Which of the following statements is not part of the path a message takes from one computer to another?All messages require a response from the destination machine to the sending device ; Not all messages require a response from the destination machine to the sending device.
  2. 2_________________ is computed from other data contained within an IP packet and stored as part of the IP packet.a checksum
  3. 3Your site’s Internet point of presence is called a:gateway
  4. 4Traditionally, IP addresses have been how many bits in size?32 bits ; Newer versions of the IP protocol are beginning to implement 64 bit addresses.
  5. 5What device enables packet switching over the Internet?router
  6. 6Due to packet switching of individual packets which are sent over the Internet independently from one another, it is possible that they do not arrive in the correct order. What happens in such a case?The packets are numbered in a given sequence, and the receiving computer assembles the complete message according to this sequence ; The packets are marked as belonging to the same message and then are numbered in sequence, and the total number of packets in the message are indicated as well. With this information, the message can be correctly assembled.
  7. 7When communicating with TCP/IP over the Internet, what tool is used to give a unique identification of each particular device’s location?IP address
  8. 8Jeremy has provided an alias for a website that he wants to visit, but the local DNS does not recognize the alias. What is the local DNS likely to do in such a situation?forward the alias to another DNS to see if the other DNS recognizes the alias and can provide its IP address ; There is a hierarchy of DNS servers that can be used in order to try to identify an alias. Only if none of the DNS servers can recognize the alias, is the user then informed the website cannot be identified with that alias.
  9. 9What is the function of NAT in the Internet communications process?NAT enables networks to convert between private addresses used only for internal purposes and public addresses used for external communications.
  10. 10What service significantly simplifies the process of Internet communications for users by removing the need for them to memorize IP addresses?DNS services
  11. 11What type of domains are indicated by two letter extensions at the end of the domain name portion of the URL?countries
  12. 12Which of the following is not a main part of a webpage’s URL?protocol
    domain name
    resource/file name
    ** All of the above are parts of the URL.
  13. 13is any device that (technically has an IP address) can be connected to the Internethost
  14. 14information assurance and security (IAS)The IAS model combines the three components of IT—communications, hardware, and software—with the information utilized by the three components. Focusing on how information is used, IAS prescribes three goals, commonly referred to as CIA: confidentiality, integrity, and availability.
  15. 15requires that data be kept secure so that an unauthorized user will not be able to use it. This means that if data stored on a computer or that is traveling over a network is obtained or intercepted by an unauthorized user they will not be able to utilize the data.confidentiality
    To maintain confidentiality, proper security measures must then be taken including secure forms of login, encryption/decryption, and proper access controls (e.g., file permissions).
  16. 16requires that data are correct timely backups of data need to be made, but typically during the time that files are in the process of being backed up, they are not availableintegrity
    1. data gathering must include a component that ensures the accuracy of the collected data
    2. data must be entered into the system accurately
    3. data modification must be tracked
  17. 17requires that information is available when neededavailability
    complication for availability is any computer downtime, caused when doing computer upgrades, power outages, hardware failures, or denial of service attacks.
  18. 18Mary works for a large school district. Her responsibility is to monitor the site containing student attendance records. Mary has created an elaborate security system with unique identification numbers for each student. She has built in a number of security controls and is continually monitoring for unauthorized users. Each day, Mary takes two 10-minute breaks at exactly 10 a.m. and 3 p.m. Since she is gone such a short time she leaves whatever project she is working on up on on her computer screen for anyone to see. Which security goal is at risk?confidentiality
  19. 19First City Bank is preparing to roll out a new online banking system for its customers. Installing the new hardware and software has taken longer than expected, but the manager is confident customers will be thrilled with the new service. On the day of the launch, a seemingly minor programming error causes the system to shutdown and reboot each time the clock reaches a new hour. It takes about ten minutes for it to be up and running again. Which security goal is at risk?availability
  20. 20Randy runs a small consulting firm and keeps all of his business contacts in a computer database. When Randy turns on his computer on Monday morning, he gets a weird error message. He calls in his IT specialist who determines their system has been infected with a virus. After hours of work, they think they have the customer database cleaned up, but occasionally, over the next few weeks, small errors still are being found. Which security goal is at risk?integrity
  21. 21What part of information assurance and security (IAS) requires that data be kept secure so that an unauthorized user will not be able to use it?confidentiality
  22. 22What part of information assurance and security (IAS) requires that data are correct, data gathering ensures the accuracy of the data, data must be entered into the system accurately, and data modification must be tracked.integrity
  23. 23When one user is accessing some data and others are shut out of accessing that data, this is a problem for?availability
  24. 24Physical assets, intellectual property, and information.information assets
  25. 25Defines an organization's information assets, the vulnerabilities of those assets, the threats that can damage those assets, and the policies to protect the assets.strategic risk analysis
  26. 26risk assessment1. identify the organization’s information assets
    2. identify vulnerabilities of each asset
    3. determine threats
    4. prioritize risks
    5. develop and enact policies as necessary
  27. 27Student ID numberprivate
  28. 28Project plan for new IT rolloutconfidential
  29. 29Online list of company Board of Directorspublic
  30. 30Security classifications can be public, sensitive, private, or confidential. Information that can be found online or in the phone book is ____public
  31. 31What information is not public and will not be considered a threat to a person’s privacy if others learned of it?sensitive ; Sensitive information will not be considered a threat to a person’s privacy.
  32. 32What type of information can present a threat if disclosed such as social security numbers?private
  33. 33When data cannot be changed/manipulated while it resides on a host or travels across a network, or if it is changed, manipulated, then the change can be detected.data integrity
  34. 34Protecting data across the operating system, software application, computer resources, networks and users layers in an organization.Defense in Depth
  35. 35The psychological manipulation of individuals into doing something or revelating confidential information.social engineering
  36. 36A fraudulent email meant to look like it emanates from a legitimate business/user.phishing
  37. 37Software that attaches itself to another legitimate (or seemingly legitimate) software application.viruses
  38. 38Literally "evil" software - viruses and/or worms.malware
  39. 39Social engineering targets ____.users
  40. 40Margo is afraid she will forget her work login and password, so she keeps them on a sticky note in her top desk drawer. Is this an example of social engineering?No, This is a security risk, but it is through Margo’s own poor choices, not influenced by anyone else.
  41. 41Felix receives an email on his work account indicating that he can get a large discount on a one-month pass at a new local gym – a deal said to be only available to a few select company employees. The email has been sent by the gym and does not include the company logo. If he is interested, he has 24 hours to purchase the deal. All he needs to do is send his name, address, and credit card information. Is this an example of social engineering?yes
  42. 42Angelo is at a cocktail party. He gets in a conversation with an attractive woman who is very interested in his career. She asks detailed questions and expresses amazement at the importance of his position. She particularly focuses on how the company is able to keep their information secure. In his desire to impress the lady, Angelo is a little too free with his information. The next day, when he arrives at work, his file on a major account has been hacked. Is this an example of social engineering?yes
  43. 43a specific address in a computer's memory where a variable is stored. The buffer is of limited size. If the software does not ensure that insertions into the buffer are limited to in size, then it is possible to insert into the buffer a sufficient amount so that the memory locations after the array are filled as well. Since memory stores both data and code, one could attempt to overflow a buffer with malicious code. Once stored in memory, the processor could potentially execute this code and thus perform the operations inserted by the attacker.buffer overflow
  44. 44When an individual obtains unauthorized access to a host.hacking
    white-hat, black-hat, grey-hat
  45. 45are security professionals and hack for “good purposes” to find vulnerabilities and fix or protect against themwhite-hat hackers
  46. 46are individuals with malicious intent who violate security in order to commit crimes or acts of terrorismblack-hat hackers
  47. 47engage in both types of hacking activitiesgrey-hat hackers
  48. 48obtain anything being sent over the network if the data being transmitted is sent without encryptionpacket sniffing
  49. 49SQL injection is a method used for ____.inserting malicious commands into a system ; In a SQL injection, an attacker issues an SQL command to a web server. The web server might pass the SQL command onto the database, and the command could delete and change records.
  50. 50Buffer overflow, a technique used to attack computer systems is ____.easily preventable ; Software engineers can ensure that insertions into the buffer are limited to its size.
  51. 51The practice of packet sniffing involves ____.stealing unencrypted information ; Packet sniffing will obtain passwords if the data being transmitted is sent without encryption.
  52. 52CGI scripts are vulnerable to hacking because ____.a hacker may insert a purposefully incorrect parameter as a part of the URL ; Incorrect parameter values are how to exploit CGI scripts.
  53. 53Maria is staring intently at the computer screen in front of her, her mind racing! She types in a few lines of code and sits back to see what happens. Yes! It is just as she thought! She has discovered a way to circumvent the security system of her company and gain access to all records without anyone knowing. Maria can also see an easy fix to this security glitch and she is surprised it hadn’t already been implemented. Maria will receive a hefty bonus for finding this hole in security. That’s her job! While Maria is in there, however, she decides to copy some personal information from the files of upper management. You just never know when it might come in handy! What type of hacking is described in this scenario?grey-hat
  54. 54two types of malwareviruses or worms
  55. 55Software that attaches itself to another legitimate (or seemingly legitimate) software application.viruses
  56. 56Self-contained programs that do not need other programs to propagate across computers and computer networks.worms
  57. 57this type of virus completely replaces an existing application and takes the name of the taken over fileTrojan Horse
  58. 58malware often downloaded unknown to the user when accessing websites , might spy on your browsing behavior at a minimum, or report back to a website sensitive information such as a credit card number that you entered into a web form.spyware
  59. 59an administrator account is known as a “root” account in Linux systems and thus this class of malware, due to its ability to acquire the same administrative privileges as the administrator, has the capability to hide itself from the operating system and/or anti-malware softwarerootkit ; affecting software (applications and operating systems) and ones which affect software pertaining to the functionality of hardware
  60. 60one or more attackers attempts to flood a server with so many incoming messages that the server is unable to handle legitimate business instead of one hacker/host perpetrating the attack, the attack comes from many more hosts (possible controlled by one hacker) with all attacking hosts directed at a single target.denial of service (DOS)
  61. 61malicious attack on an entire networknetwork worm
  62. 62a type of malware that attacks an individual computer by masquerading as an applicationTrojan Horse
  63. 63downloaded to a computer while the user is viewing a website to track usagespyware
  64. 64a type of malware that is able to use the privileges of the operation system to hide itself from detectionkernel rootkit
  65. 65Which of the following describes a denial of service (DOS) attack?An attacker floods the server with so many messages that the server cannot function properly.
  66. 66Rootkit malware can affect which types of software?The operating system kernel
    Applications
    Device drivers for printer hardware
    ***All of the above
  67. 67What is a method of obtaining a password when the data is sent over a network and the data is sent without encryption?packet sniffing
  68. 68Although CGI may be vulnerable they are still in use today because they enable:Dynamic webpages
  69. 69two of the most common network security softwarefirewalls and anti-malware software
  70. 70firewallsprevent certain types of messages from coming into or out of the network and anti-viral software seeks out malware ; can either be software or hardware
  71. 71firewall softwarecontains a list of rules that describe the types of messages that should either be permitted to make it through the firewall and to your computer, or those that should be blocked.
  72. 72anti-malwaresoftware that attempts to identify if a file contains a virus or, more generally, some form of malware ; can be run on demand, or you can set it up so that all incoming messages are scanned ; will not necessarily catch every piece of malware
  73. 73redundancyprovides a means so that data are available even when storage devices are damaged or offline ; through backups of the file system ; through redundant storage, particularly RAID
  74. 74Two types of threats arise when communicating secure information over the Internet when filling out a web form or sending information by e-mail.Internet communications may be handled with plain (i.e. unencrypted) text. If someone can intercept the messages, the unsecure information is open to read.
    the sender must be assured that the recipient is who he or she claims to be, so they are authenticated.
  75. 75encryptionthe idea of obfuscating the information that resides on a computer or is sent over a network so that if it is intercepted the hacker will be unable to use the information.
    requires two forms of input: the plain text and a key
  76. 76decryptionthe reverse of encryption, taking encrypted text and converting it back to plain text.
  77. 77Symmetric key encryptionuses the same key for performing the encryption and decryption
  78. 78Public/private key encryptionuses two keys, a public and private key
    The public key is known by anyone, but only the user knows the private key.
  79. 79The firewall software contains a list of rules that describe the types of incoming messages that should either be permitted or blocked from a computer.true
  80. 80IT personnel need to avoid redundancy when setting up security.false ; Information security will ensure CIA of information when it is stored, and redundancy will ensure proper storage.
  81. 81Anti-malware software should be updated frequently.true ; New releases of anti-malware software may come out daily or weekly.
  82. 82A tool for scanning what ports a particular host might be connected to is netscan.true
  83. 83A certificate authority ____.contains both the authentication proof and the encryption ; A certificate authority will send secure information without concern of information being intercepted and accessed.
  84. 84The process of encryption involves ____.transforming text into a scrambled, indecipherable message
  85. 85Symmetric key encryption ____.requires both parties in the communication have the same key.
  86. 86What prevents certain traffic from coming into and out of the network?firewalls
  87. 87What will ensure proper storage so that data are available even when storage devices are damaged or offline?redundancy
  88. 88Public key encryption uses __________.One public key & one private key
  89. 89What tool will identify if a computer on your network is connected to an outside host that was not authorized?netstat
  90. 90Authentication is proving you are who you say you are which can be done by:what you know
    what you have
    what you are
  91. 91Lynda, who leads a technical support team for a moderately sized corporation, reads a report on a forum about the increase in phishing scams related to the local lottery which currently has a large, unclaimed jackpot. As a preventative measure, Lynda sends a resource to company employees reminding them how to identify phishing scams and protect their personal information.education
  92. 92Evan has recently purchased new laptops for employees at his company to take with them when they travel for business. Since confidential company information may need to be stored on the laptops for use while traveling, Evan installs a biometrics program that requires users to provide a fingerprint in order to login to the laptop.authentication
  93. 93Dana has recently hired several temporary employees to assist with data entry for updating paper patient records to digital patient records at a medical center. Although, through necessity, the temporary employees will need access to the patient database in order to add records, Dana creates a special user type for the temporary employees so that they can add records to the patient database, but cannot access, modify, or view patient records already stored in the database.role-based access control
  94. 94Wes manages an online subscription service that gives users access to a variety of media to stream over their computer system. Based on data analysis of the service usage, Wes suspects that people in addition to the account holder are accessing accounts. Thus, he implements password policies into the subscription service that requires users to create stronger passwords and change them every 60 days.authentication
  95. 95biometricscan be a fingerprint, can be a voice identification match
  96. 96access rightsincludes files that the user can access, are part of the IT policy
  97. 97In ___, roles are defined that include a list of access methods.Role-based access control
  98. 98integritydata is not changed
  99. 99availabilitydata can be accessed when needed
  100. 100confidentialitydata cannot be used by unauthorized individuals
  101. 101business ecosystemit is dependent on its customers, suppliers, employees, and others to be successful
  102. 102Amazing Games LAN network can be used to share hardware among the employees in the PA office and the contractors.false; Networks can share hardware only within an office.
  103. 103Networks allow employees and contractors to share applications such as e-mail systems.true
  104. 104Network can be used to share files that relate to the work being done by the contractors.true
  105. 105Networks can be used to organize and analyze data.false; Networks share files but cannot analyze data.
  106. 106Network communication applications, such as e-mail, can be used to improve communication.true
  107. 107describe how the network improves the process of the sales force at Amazing Games in this taskThe network provides one database that stores all customer information reducing redundancy.
    The network allows any sales team member to access customer information.
    The network provides up to date information on inventory and stock.
  108. 108What aspects of the network can facilitate the CEO and Business Manager completing the report?The network can share files so that Eric and Alison can review files on the shared drive asynchronously or synchronously. The network allows Eric and Alison to work together on the report regardless of location.
  109. 109A business ecosystem consists of its:interacting and interconnecting divisions or departments and partners of the company.
    retailers, manufacturers, and customers.
    hardware, software, and human resources.
  110. 110A computer network supports a business’s ecosystem by:improving efficiency.
    reducing costs.
    improving communication.
  111. 111Challenges of using a computer network as a framework for the business ecosystem include:cost and security.
  112. 112Scenario #1: Wanting to listen to some motivational music while preparing the monthly board meeting report, Tom, a Target employee, downloads a music file from http://freemusic.com. Unbeknownst to him the music file actually contains malware to log the employee's keystrokes, thereby obtaining their employee username and password and access to secure information.Torjan Horse ; This type of virus completely replaces an existing application and takes the name of the taken over file. The Trojan horse pretends to be one piece of software, but is in fact another.
    An organization needs to have up-to-date virus and malware scanning system that might detect trojan horse or other virus software. Education and training on what is acceptable to download could help to eliminate the downloading of malware including a trojan horse.
  113. 113Scenario #2:S The computer memory set aside for accepting sales orders from Target’s website is large enough for orders up to 9,999 units. However, an unscrupulous hacker wishing to crash the system enters a quantity of 999,999.buffer overflow; Buffer overflow will overflow a buffer with malicious code and perform operations by the attacker.
    When developing software, the type of data being accepted as input needs to be tested to ensure it is of the type and size expected.
  114. 114Scenario #3: A Target employee is expecting word about her yearly holiday bonus. She receives an e-mail letting her know that before she can receive any bonus she must download a .pdf form which contains important information about the bonus. When she downloads the file a malware program is placed on her computer and begins to infect the company network.phishing; Phishing involves e-mails to people to redirect them to a website to perform some operation.
    The best way to help to reduce phishing attempts is to train employees to recognize fictitious e-mails, looking for grammar mistakes, typos and unusual URLs. It is also important to let them know that your company would never ask them for any personal information via e-mail.
  115. 115Scenario #4: In order to access the corporate website, Target employees have to log-in with a username and password. However, unscrupulous hackers instead type in database commands in an effort to retrieve the company’s password file.SQL injection; With an SQL injection, an attacker issues an SQL command to a web server as part of the URL or as input to a form on a company's website.
    When developing database applications, the application needs to test input data and to escape input data to ensure expected data and not SQL commands are being accepted as input.
  116. 116goals of network securityconfidentiality, availability, intergrity
  117. 117What tool is used to show the various hops a packet takes from source to destination?traceroute ; Traceroute lets you see each hop a packet takes and can be used to monitor network security by mapping a network topology.
  118. 118policies to improve network securitykeeping the firewall updated
    requiring computers to be locked with a password when not in use
    minimum password length restrictions for all users
  119. 119Commonly available information that does not need to be secured when stored on your network is known as ___________.public
  120. 120What is the first step of strategic risk analysis?identify information assets
  121. 121Remote users who take laptops on the road are at special risk of attack from malicious hackers and other external sources. Which of these is a risk that James should advise these users to be on the lookout for?phone calls or emails from someone claiming to work at XYZ Systems and needing access to their computer
    writing passwords down on post-it notes and other locations
    emails with links that appear to go to XYZ Systems or another secure location, like a bank
  122. 122James receives a shipment of laptops with a built-in fingerprint reader. If properly used, these should help keep unauthorized users from accessing the laptops. A fingerprint reader is an example of ___________.biometrics ; Biometrics leverages the uniqueness of each person as a security measure.
  123. 123James is travelling for a convention, and needs to access internal company documents while on the road. Which type of network would be necessary for this task?LAN, WAN
  124. 124An XYZ employee reports to James that she accidentally entered her network password into a fake website that she received a link to in an email. What security goal does this relate to?confidentiality
  125. 125Someone holding a stack of papers is gesturing, asking James to let him into the building. What should James be careful of in this specific situation?social engineering ; This person could be attempting to gain access to a secure area where they could gain an advantage.
  126. 126James wants to implement a “what you have” security authentication procedure. Which item would meet this requirement?biometric readings
    a magnetic swipe card
    a USB stick with a software security key
  127. 127Encrypting data as it is transmitted over a network to prevent it from being useful to any unauthorized individual who might intercept it is an example of ____.confidentiality
  128. 128Entering data into the system accurately is an example of ____.integrity
  129. 129Obtaining data from computers all over the organization is an example of ____.availability
  130. 130Which of the following types of information present a threat to someone’s privacy?Student ID and credit card numbers
  131. 131Which of the following will find vulnerabilities and fix or protect against them?White-hat hacking
  132. 132What is required to verify authenticity of the recipient? Select all that apply.Digital signatures
    Encryption
  133. 133In strategic risk analysis, what is the first step?Identify information assets
  134. 134In strategic risk analysis, what is the final step?Develop and enact policies against threats
  135. 135In the strategic risk analysis, prioritizing risks is before which step?Develop and enact policies against threats
  136. 136Learning about social engineering and how to protect passwords is ___.Education
  137. 137All of the following are authentication except:Phishing
  138. 138Access rights ____.Will include files that the user can access
  139. 139What are advantages of a network?Cost savings
  140. 140A local area network (LAN) ____.Allows hardware sharing within one office
  141. 141How does a network enhance the business ecosystem? Select all that apply.The network provides greater security.
    Employees in different locations can share hardware and software.
    Team members can review files on the shared drive synchronously.
  142. 142Storing employee usernames and passwords as plain text would violate what principle of information security?confidentiality
  143. 143What primary goal of information security requires that data modification must be tracked?integrity ; Integrity requires that data be kept correct. This includes a focus on integrity when the data is first collected, when it is entered into a system for storage, and while it is being stored. If the data is altered, a clear record of that needs to be saved.
  144. 144Which of the following would not be a potential reason why information availability might be necessarily limited for a time?employee vacation
  145. 145What is the relationship between asset vulnerabilities and threats?Vulnerabilities are the inherent weaknesses of assets, and threats are how those weaknesses might be exploited by others.
  146. 146Information that a company has patented for its own use is classified as what type of information?confidential
  147. 147Social engineering ploys are effective because a user is more likely to reveal information in a ____ setting.social
  148. 148Which of the following is not a specific example of a software exploit attack?malware
  149. 149What name is given to a hacker that attempts to infiltrate security systems for the good purpose of finding potential security problems and helping fix them?white-hat
  150. 150What are the two main types of malware?viruses and worms
  151. 151What aspect of public-key encryption aids in dealing with the problem of authenticating the identity of the parties involved in the communication?The publicly known key associated with a particular party will only work to decrypt messages that were encrypted using that party’s private key.
  152. 152If one type of firewall is software that uses lists of rules to decide which messages will be allowed into a network or computer system, what is the other type of firewall?a server dedicated to running firewall software
  153. 153Using an employee’s voice pattern or fingerprint to authenticate their identity is an example of what type of technology?biometrics
  154. 154Mitch’s company has a significant interest in keeping information related to their activities secret from those outside the company. They have had security breaches in the past and so have strengthened their security practices considerably in recent months. They now require Mitch to swipe an electronic ID card and enter a passcode whenever he enters the company’s facilities. What type of authentication process are they using?two-factor authentication
  155. 155Jenny owns a small business as a florist. She loves growing and caring for flowers of all sorts. However, she is not particularly fond of the other aspects of the business such as sales, creative design, overseeing the logistics of transportation and delivery, and customer service. She has friends and acquaintances however, whom are particularly good at each of those other aspects. What tool would be necessary to enable them to connect their individual skillsets together and mutually benefit from what each can offer?a network
  156. 156A business environment is often described using what term borrowed from the natural environment in which many interacting organisms live together and affect one another’s activities in complex relationships?ecosystem
  157. 157Which of the following is a fairly common customer service improvement that many companies have been able to implement thanks to computer networking technology?offering live online chat for customers who need support
  158. 158Which of the following is not a beneficial capability of computer networks?Computer networks have provided the means by which information can be protected and kept private far more effectively than ever before.
  159. 159Kevin’s work situation sometimes allows him the flexibility of working from home. When he does so, he accesses his workstation at the office by logging on to it through the Internet. While he is using his workplace computer from home, his workplace computer is what type of computer in relation to him?remote ; The difference between local computers and remote computers is that users have direct physical access to local computers but access remote computers through network connections.
  160. 160Which of the following is a common way to view a computer network?the logical level
    the physical level
    the software level
  161. 161Fiber optic cables transmit what type of signal in place of electromagnetic waves?light pulses
  162. 162Which of the following is a network device that may be used to connect multiple computers together?a network hub
    a network switch
    a router
  163. 163Which of the following is a significant example of a circuit switched network?telephone network
  164. 164Which of the following is a factor in the pathway chosen in a packet switched network?other message traffic on the network
  165. 165Why is a switch able to utilize bandwidth more efficiently than a hub?Because it recognizes the intended recipient for a particular message and is able to direct that message only towards that single device.
  166. 166Which of the following is a common trait of both routing and switching?Individual device addresses are used to direct messages.
  167. 167A server provides information to what type of computer?a client
  168. 168Which of the following correctly describes the characteristics of most servers?Servers generally need to be more powerful machines with greater disk storage and faster response times.
  169. 169How do virtual machines relate to operating systems?Virtual machines allow users to emulate various operating systems on a single computer.
  170. 170A virtual machine falls into which of the following categories?software
  171. 171What type of server may be used to support both application software and data files but usually is limited to serving requests only from clients within the local network?file server
  172. 172Why are servers sometimes built into cabinets?to allow for large numbers of components to be inserted, such as numerous hard disk drives for large storage capacity
  173. 173Kyle is wanting to create a simple network between a few devices. He needs the network to be reliable even if one of the devices fail. The devices will not be creating large volumes of traffic. The most important factor in his decision making process is cost, which needs to be low. What is probably the best network topology for his needs?bus topology
  174. 174How does a DNS relate to how a user interacts with IP addresses?A DNS converts an English-like name provided by a user to its corresponding numerical IP address so that the user does not have to remember the numerical form.
  175. 175What part of an incoming packet does a router examine in order to determine the next location to send it to?destination IP address
  176. 176When a large message is broken down into multiple smaller message units which are sent across the Internet to their destination individually, what are the individual units called?packets
  177. 177What device connects a computer or computer network to the Internet?router
  178. 178What kind of tables does a DNS have?tables that contain host IP addresses and their corresponding aliases
  179. 179Which of the following steps comes first in the process of communicating a message over the Internet?The message is placed into packets.
  180. 180What is the major advantage for communications provided by DNS services?Users are far more likely to remember names for websites rather than the lengthy numerical addresses that would be needed without DNS services.
  181. 181Which of the following is not a common top-level domain name for websites hosted in the United States?.pdf
  182. 182What symbol(s) separate(s) the domain name portion of a URL from the resource ID portion?a slash (/)
  183. 183What are the two categories of concern in IAS?integrity and security
  184. 184Which of the following is not a concern related to data integrity?Data must be stored in such a way that access is denied to those who should not see it, but is available to those who need to use it.
  185. 185Lisa is in charge of employee payroll for her company. Sensitive personal employee information must be collected for payroll purposes, including such things as addresses, social security numbers, and retirement account information. Lisa is one of only two employees in the company who have access to the password protected files where the information is stored. She is able to access that information either from a secure workstation at the office or through secure remote access from her personal computer at home. She is able to make changes to the information in those files, but those changes are always recorded and documented. If she opens one of the sensitive files, the other employee who has access to it cannot alter it in any way while she is using it. What is the violation of IAS principles in this scenario?The fact that Lisa can access this private information remotely from home grants availability at the expense of integrity and security.
  186. 186What is the first step in strategic risk analysis?identifying information assets
  187. 187True or false. Phishing is an example of social engineering.true ; Social engineering threats focus on exploiting the members of an organization. Phishing is a variation that involves e-mails to people to redirect them to a website to perform some operation which results in a breach in security.
  188. 188Alan is a web administrator and he is facing a problem with one of his servers. He cannot get it to respond to requests the way it should. When he logs directly into the server and explores the situation, he finds that millions of requests are flooding the server from the same few machines over and over again so that it cannot handle the volume of activity. What type of attack is Alan dealing with?a denial of service attack
  189. 189What is a grey-hat hacker?a hacking professional who hacks for both “good and bad purposes”
  190. 190What type of malware is usually downloaded unknown to the user and observes the user’s activities in order to gain sensitive information that the user might enter in regular activities?spyware
  191. 191Anti-malware software can be configured to run on-demand, but what is another common approach to configuring when it is to run?It can be configured to scan every incoming message.
  192. 192What type of security software prevents certain types of messages from coming into or out of the network?firewall software
  193. 193Which of the following is a common basis for authenticating identity?what you know
    what you have
    what you are
  194. 194In what type of access control is a user’s access defined; according to which preset category best describes his function in the organization, such as a supervisor, manager, or analyst?role-based access control
  195. 195The many parties involved in a business setting can mutually benefit from one another in their activities, but only if they are connected through some sort of ____.network
  196. 196What term refers to the interdependent and constantly developing relationships between customers, suppliers, employees, and others involved in the business process?business ecosystem
  197. 197Which of the following statements accurately describes the benefits of computer networks in business settings?In most business settings, computer networks provide many significant benefits, but there is always a need to be aware of the increased risk associated with them.
  198. 198Why might a company’s software expenses decrease if they implement a computer network for their office?They can potentially share software over the network rather than purchasing copies of the software for each user.
  199. 199A computer network can increase the productivity of an employee traveling to attend a conference. True or false?true ; Employees are able to access the network and complete work assignments as they are traveling to the conference.
  200. 200If a computer is not a remote computer, then it must be a (n) ____ computer.local

Information

Description
computer informations Flashcards on Topic 4: Computer Networks cont'd (1), created by Cassie Xayaseng on 27/06/2024.
Created by
Cassie Xayaseng
Views
8
Rating

Feedback

What is it about?

What do you think of the new look?

How do you like it?