Quiz
Network Pro
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (50)
1A user copies files from her desktop computer to a USB flash device and puts the device into her pocket. Which of the following security goals is most at risk?
- AConfidentiality
- BAvailability
- CIntergrity
- DNon Repudiation
2Which is the star property of bell-LaPadula?
- ANo Write Down
- BNo read up
- CNo Read down
- DNo write up
3The Clark Wilson model is primarily based on?
- AA directed graph
- BA metrix
- CDynamic Access Controls
- DControlled intermediary access applications
4The brewer-nash model is designed primarily to prevent?
- AConflicts of interest
- BDenials of service attacks
- CFalse acceptance
- DInference attacks
5Which of the following is a password that relates to thing that people know, such as a mother's maiden name, or the name of a pet?
- AOne time
- BPass phrase
- CDynamic
- DCogntive
6What type of password is maryhadalittlelamb?
- AComposition
- BCognitive
- CPass Phrase
- DStatic
7Which of the following defines the crossover rate for evaluating bio-metric systems?
- AThe number of subjects or authentication attempts that can be validated
- BThe rate of people who are given access that should be denied access
- CThe point where the number of false positives matches the number of false negatives in a bio-metric system
8Which of the following conditions is desirable when selecting a biometric system (select two)
- AA high processing rate
- BA high false negative rate
- CA low crossover error rate
- DA high false positive rate
9Which of the following is an example of type 1 authentication?
- ASmartcard
- BPass phrase
- CRetina scan
10Which one of the following information is typically not included in an access token?
- AUser rights
- BUser security identifier
- CUser account password
11Marcus White has just been promoted to manager. To give him access to the files that he needs, you make his user account a member of the managers group which has access to a special shared folder. Later that afternoon, Marcus tells you that he is still unable to access the files reserved for the managers group. What should you do?
- AManually refresh group policy settings on his computer
- BAdd his user account to the ACL for the share folder
- CHave Marcus Log off and log back on
12Which of the following terms describes the component that is generated following authentication and which is used to gain access to resources following logon?
- AAccess token
- BProxy
13Which security mechanism uses a unique list for each object embedded directly in the object itself that defines which subject have access to certain object and the level or type of access allowed?
- AUser ACL
- BMandatory access control
14Which type of media preparation is sufficient for media that will be reused in a different security context within your organization?
- AFormatting
- BSanitization
15Which of the following is an example of privilege escalation?
- APrinciples of least privilege
- BCreeping privileges
16Which security principle prevents any one administrator from having sufficient access to compromise the security of the overall IT solution?
- ASeparation of duties
- BNeed to know
17By assigning access permissions so that users can only access those resources which are required to accomplish their specific work tasks, you would be in compliance with
- ANeed to know
- BPrinciple of least privilege
18An access control list (ACL) contains a list of users and allowed permissions. What is it called if the ACL automatically prevents access to anyone not on the list?
- AImplicit deny
- BExplicit deny
19One of your users, Karen Scott, has recently married and is now Karen Jones. She has requested that her username be changed from kscott to kjones, but on other values change. Which of the following commands will accomplish this?
- Ausermod -l kscott kjones
- Busermod -l kjones kscott
- Cusermod -u kscott kjones
20You are the administrator for a small company. You need to add a new group of users, name sales, to the system. Which command will accomplish this?
- Agroupadd sales
- Baddgroup sales
21Which of the following is the single best rule to enforce when designing complex passwords?
- ALonger passwords
- BComputer generated passwords
22You want to setup a service to allow multiple users to dial in to the office server from modems on their home computers. What service should your implement?
- ARAS
- BISDN
23You often travel away from the office. While travelling, you would like to use a modem on your laptop computer to connect directly to a server in your office and access files on that server that you need. You want the connection to be as secure as possible. Which type of connection will you need?
- ARemote access
- BVPN
24Which of the following are methods for providing centralized authentication, authorization, and accounting for remote access (select two)
- APKI
- BEAP
- CRADIUS
- DTACACS+
- E802.1X
25You have decided to implement a remote access solution that uses multiple remote access servers. You want to implement RADIUS to centralize remote access authentication and authorization Which of the following would be a required part of your configuration?
- AConfigure remote access clients as RADIUS servers
- BConfigure the remote access server as RADIUS clients
26Which of the following are characteristics of TACAS+ (Select two)
- AUses UDP
- BAllow for a possible of two different servers, one for authentication and authorization, and accounting
- CUse TCP
- DAllows for a possible of three different servers, one each for authentication, authorization, and accounting
27You are configuring a dial up connection to a remote access server. Which protocols would you choose to establish the connection and authenticate, providing the most secure connection possible? (choose two)
- APPP
- BSLIP
- CPPPoE
- DCHAP
- EPAP
28Which of the following authentication protocols transmits passwords in clear text, and is therefore considered too insecure for modern network?
- ACHAP
- BPAP
29When using Kerberos authentication, which of the following terms I used to describe the token that verifies the identity of the user to the target system?
- AHashkey
- BTicket
30Which of the following are required when implementing Kerberos for authentication and authorization (select two)
- APPPoE
- BRADIUS or TACAS+ server
- CTime Synchronization
- DPPP
- ETicket granting server
31Which ports does LDAP use by default
- A110
- B161
- C389
- D636
- E69
32You want to deploy SSL to protect authentication traffic with your LDAP based directory service. Which port would this use?
- A60
- B636
- C2208
33Your LDAP directory services solution uses simple authentication. What should you always do when using simple authentication
- AAdd SASL and use TLS
- BUse SSL
34Which type of cipher changes the position of the characters in a plain text message
- Asubstitution
- BTransportation
35The enigma machine, a cryptographic tool introduced in 1944 and use in WW2, encrypted messages by replacing characters for plain text. Which type of cipher does the Enigma machine use?
- ATransportation
- BSubstitution
36Hashing algorithms are used to performed what activity
- ACreate a message digest
- BEncrypt bulk data for communication exchange
37Which of the following best describe high amplification when applied to hashing algorithms
- AHashes produced by two different parties using the same algorithm result in the same hash value
- BA small change in the message results in a big change in the hash value
38When two different messages produced the same has value, what has occurred?
- AHigh amplification
- BCollision
39Which of the following is used to verify that a download file has not been altered
- Aprivate Key
- BHash
40Which of the following is the strongest hashing algorithm?
- AMDS
- BSHA-1
41Which of the following is the weakest hashing algorithm?
- AAES
- BMDS
42SHA-1 uses which of the following bit length hashing algorithms?
- AOnly 128 bit
- BOnly 160 bit
43If two different messages or file produce the same hashing digest, then a collision has occurred. what form of cryptographic attack exploits this condition
- ABirthday attack
- BStatistical attack
44If a birthday attack is successful, meaning the attacker discovers a password that generates the same has as that captured from a users' logon credentials, which of the following is true? (select two)
- AA collision was discovered
- BThe user is force to change their password at their next logon attempt
- CThe discovered password will allow the attacker to log on as a user, even if it is not the same as the users password
- DThe discovered password is always the same as the user's password
45Which of the following is the most frequently used symmetric key stream cipher?
- ARon's cipher v2 RC2
- BRon's cipher v4 RC4
46How many keys are used with asymmetric or public key cryptography?
- AOne
- BTwo
47A receiver wants to verify the integrity of a message received from a sender. A hashing value is contained within the digital signature of the sender. What must the receiver use to access the hashing value to verify the integrity of the transmission?
- ASenders' private key
- BSender's public key
48Which of the following is defined as a contract which prescribes the technical support or business parameter that a provider will bestow to its client?
- AService level agreement
- BFinal audit report
49Which of the following is not an example of a service level agreement?
- Areplacement of hardware within 24 hours
- BSecurity policy design
50What is a service level agreement (SLA)
- AA contract with a legal entity to limit your asset loss liability
- BA guarantee of a specific level of service
Informações
- Descrição
- Network Pro Quiz sobre Network Pro, criado por jeanlouis76 em 02-10-2014.
- Autor
- jeanlouis76
- Idioma
- English
- Visualizações
- 59
- Histórico
- Criado em 2 out 2014 · atualizado em 19 fev 2016
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz