Quiz
CIT 370 Unit 2
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (112)
1PKI consists of all of the following EXCEPT what?
- AProcedures
- BPractices
- CSoftware
- DPeople
2On which of the following devices is IPsec likely to be implemented?
- ANetwork Analyzer
- BSwitch
- CHub
- DRouter
3The strongest technology that would assure Alice that Bob is the sender of a message is a(n) _____.
- Adigital signature
- Bencrypted signature
- Cdigital certificate
- Ddigest
4What is the purpose of suspending a digital certificate rather than revoking it?
- ATo ensure the certificate goes through the proper disposal procedures before revocation
- BTo limit use of a certificate after an employee temporarily leaves
- CWhen a certificate is compromised, a suspension can be used while the certificate's key is modified to become secure once again
- DThere is no suspension of certificates; all digital certificates must be revoked then recreated
5Why is a pre-master secret an important component of a web browser and web server handshake?
- AThe pre-master secret generates a pre-master key that creates asymmetric keys for the transmission
- BThe pre-master secret is what shares public and private keys between the involved parties
- CThe pre-master secret is used to create a master key, which can then create session keys for symmetric encryption
- DThe pre-master secret generates a hash to ensure integrity of the encryption key
6The -party trust model supports CA.
- Afirst
- Bsecond
- Cthird
- Dfourth
7_____ are symmetric keys to encrypt and decrypt information exchanged during the session and to verify its integrity.
- ASession keys
- BEncrypted signatures
- CDigital digests
- DDigital certificates
8_____ refers to a situation in which keys are managed by a third party, such as a trusted CA.
- AKey escrow
- BRemote key administration
- CTrusted key authority
- DKey authorization
9Which statement is NOT true regarding hierarchical trust models?
- AThe root signs all digital certificate authorities with a single key.
- BIt assigns a single hierarchy with one master CA.
- CIt is designed for use on a large scale.
- DThe master CA is called the root.
10Which of the following is provided by a server digital certificate?
- AIntegrity of the cryptographic connection
- BAuthentication the author of a book
- CSecure email transmissions
- DAuthentication of the web server
11How does an internet content filter stop traffic based on the fact that it contains the word 'drugs'?
- AText filtering
- BContent inspection
- CURL filtering
- DMalware inspection
12How does a proxy server contribute to a stronger defense?
- AHides a client's IP address
- BEncrypts traffic as it is transmitted
- CCaches web pages
- DCreates a DMZ zone to distract attackers
13Which secure feature does a load balancer NOT provide?
- Ahide HTTP error pages
- Bremove server identification headers from HTTP responses
- Cfilter packets based on protocol settings
- Dblock denial-of-service (DoS) attacks
14How does a virtual LAN (VLAN) allow devices to be grouped?
- Abased on subnets
- Blogically
- Cdirectly to hubs
- Donly around core switches
15Which device is easiest for an attacker to take advantage of in order to capture and analyze packets?
- Ahub
- Bswitch
- Crouter
- Dload balancer
16A web application firewall is an example of what?
- ARule-based firewall
- BRole-based firewall
- CApplication-specific firewall
- DNext-generation firewall
17What type of an attack can cause a switch to act as a hub?
- AMAC flooding
- BARP poisoning
- CVPN overflow
- DDDOS
18How does IMAP store its emails?
- AIn the firewall
- BIn RAM only
- COn the local client
- DOn a server
19Each of these can be used to hide information about the internal network EXCEPT _____.
- Aa protocol analyzer
- Bsubnetting
- Ca proxy server
- Dnetwork address translation (NAT)
20Which function does an Internet content filter NOT perform?
- AURL filtering
- Bmalware inspection
- Ccontent inspection
- Dintrusion detection
21How does FTP transfer data?
- AUsing TCP port 20
- BUsing TCP port 21
- CUsing UDP port 20
- DUsing UDP port 21
22Which of the following allows a network device to be managed and configured by SNMP?
- AModify string
- BRead-write community string
- CVPN software
- DICMP
23What does MAC limiting and filtering do?
- AIt limits devices that can connect to a switch.
- BIt allows only approved wireless devices to connect to a network.
- CIt prevents Address Resolution Protocol spoofing.
- DIt provides security for a router.
24When using FTP active mode, which command is sent to the server?
- ACHANNEL
- BPASV
- CPORT
- DFTPS
25Which version of Simple Network Management Protocol (SNMP) is considered the most secure?
- ASNMPv2
- BSNMPv3
- CSNMPv4
- DSNMPv5
26Which Fibre Channel zone is the most restrictive?
- AFC hard zone
- BFC soft zone
- CFC port zone
- DFC interface zone
- AFC hard zone
27What is the value of a checksum?
- AVerification of integrity
- BProof of data encryption
- CProvision of nonrepudiation
- DVerification of authenticity
- AVerification of integrity
28How is a switching loop a possibility in a network?
- ABroadcast storms can happen internally
- BLoop protection is not yet released
- CLayer 2 switch headers do not have a TTL value
- DSTA vulnerabilities
- ABroadcast storms can happen internally
29Which type of cloud is offered to all users?
- Ahybrid cloud
- Bprivate cloud
- Cpublic cloud
- Dcommunity cloud
- Ahybrid cloud
30Each of these is a technique for securing a router EXCEPT _____.
- Amaking all configuration changes remotely
- Bsecuring all ports
- Csetting a strong administrator password
- Dusing a meaningful router name
- Amaking all configuration changes remotely
31Why would a user purchase a portable computer as opposed to a tablet?
- AIncreased convenience
- BGreater performance
- CLighter device
- DPortability
- AIncreased convenience
32One of the first mobile devices was a _____.
- Apersonal digital assistant (PDA)
- Btablet
- Csmartphone
- Dnotebook
- Apersonal digital assistant (PDA)
33What is the maximum transmission power level of IEEE WLANs?
- A40 mW
- B100 mW
- C200 mW
- D400 mW
- A40 mW
34Which technology is predominately used for contactless payment systems?
- Awireless local area network (WLAN)
- BBluetooth
- Cnear field communication (NFC)
- DTemporal Key Integrity Protocol (TKIP)
- Awireless local area network (WLAN)
35Why would a user utilize container encryption on their smart phone instead of full device encryption?
- AContainer encryption is not yet supported
- BIsolation of sensitive data
- CStronger encryption key
- DAndroid companies do not support native full disk encryption
- AContainer encryption is not yet supported
36What prevents a mobile device from being used until the user enters the correct passcode?
- Aswipe identifier (SW-ID)
- Bkeyboard
- Ctouch pad
- Dlock screen
- Aswipe identifier (SW-ID)
37Why is it challenging for an attacker to compromise an Apple iOS application?
- AApple products are easily compromised
- BClosed and proprietary architecture
- CAll Apple apps are created by Apple
- DAll Apple iOS apps require encrypted passwords
- AApple products are easily compromised
38How does a web-based computer differ from a subnotebook computer?
- AWeb-based computers are limited to web apps
- BSubnotebook computers cannot utilize browsers
- CWeb-based computers are smaller than subnotebooks
- DSubnotebook computers only run Windows
- AWeb-based computers are limited to web apps
39Which of the following is a value that never changes in a WEP transmission?
- A48-bit IV
- B64-bit key
- C24-bit IV
- D32-bit key
- A48-bit IV
40Which of the following is NOT an example of an NFC vulnerability?
- AMan-in-the-middle attack
- BDNS poisoning
- CData manipulation
- DDevice theft
- AMan-in-the-middle attack
41Bob has attempted to enter the passcode for his mobile device but keeps entering the wrong code. Now he is asked to enter a special phrase to continue. This means that Bob’s mobile device is configured to _____.
- Areset to factory settings
- Bextend the lockout period
- Cuse PIN codes as passcodes
- Ddouble the amount of time he is prevented from accessing his device
- Areset to factory settings
42What enforces the location in which an app can function by tracking the location of the mobile device?
- Alocation resource management
- Bgeo-fencing
- Cgeo-tagging
- DGraphical Management Tracking (GMT)
- Alocation resource management
43Which of the following is true when a NIC is in master mode?
- AThe NIC is acting as an AP
- BThe NIC is using an ad hoc
- CThe NIC is in a piconet
- DThe NIC can no longer communicate
- AThe NIC is acting as an AP
44Which of these is NOT a type of wireless AP probe?
- Awireless device probe
- BWNIC probe
- Cdedicated probe
- DAP probe
- Awireless device probe
45The primary design of a(n) _____ is to capture the transmissions from legitimate users.
- Arogue access point
- BWEP
- Cevil twin
- DBluetooth grabber
- Arogue access point
46Which of these can a QR code NOT contain?
- Aimage
- BURL
- Cemail address
- Dphone number
47Why would an attacker use the war driving technique?
- ACreate a diversion
- BSearch for unprotected IP phones
- CDiscover hidden credentials
- DIdentify unprotected APs
- ACreate a diversion
48WPA replaces WEP with _____.
- AWPA2
- BTemporal Key Integrity Protocol (TKIP)
- CCyclic Redundancy Check (CRC)
- DMessage Integrity Check (MIC)
49How does a bus mastering feature allow a CardBus to be more efficient when accessing data?
- ACaching data within unused circuits
- BCommunicating with devices without the CPU
- CAllowing backwards compatibility
- DIncreasing the bus size of PC cards
- ACaching data within unused circuits
50What is the unauthorized access of information from a wireless device through a Bluetooth connection called?
- Abluejacking
- Bbluesnarfing
- CBluetooth snatching
- DBluetooth spoofing
51What is the name given to the individual who periodically reviews security settings and maintains records of access by users?
- Asupervisor
- Bcustodian
- Cowner
- Dmanager
52_____ in access control means that if a condition is not explicitly met, then access is to be rejected.
- APrevention control
- BDenial of duties
- CImplicit deny
- DExplicit rejection
- APrevention control
53How are roles dissimilar to groups?
- AGroups do not give users access to resources
- BRoles are considered global groups
- CRoles are specific to Linux and UNIX systems
- DA user can only be assigned one role
- AGroups do not give users access to resources
54Which statement about Rule Based Access Control is true?
- AIt requires that a custodian set all rules.
- BIt is considered obsolete today.
- CIt dynamically assigns roles to subjects based on rules.
- DIt is considered a real-world approach by linking a user’s job function with security.
- AIt requires that a custodian set all rules.
55Which of the following is NOT considered a role in access control?
- ACustodian
- BConservator
- CEnd-user
- DOwner
- ACustodian
56Which of the following directory access protocols is designed to run over a TCP/IP network?
- AX.500
- BX.501
- CLDAP
- DDAP
- AX.500
57In the _____ model, the end-user cannot change any security settings.
- ADiscretionary Access Control
- BRestricted Access Control
- CSecurity Access Control
- DMandatory Access Control
- ADiscretionary Access Control
58What is the least restrictive access control model?
- ADiscretionary Access Control (DAC)
- BRole Based Access Control (RBAC)
- CMandatory Access Control (MAC)
- DRule Based Access Control (RBAC)
- ADiscretionary Access Control (DAC)
59What does an organization accomplish using least privilege?
- ACreating redundancy in access
- BExposing avenues for fraud
- CSimplifying access to resources
- DLimiting attack surface
- ACreating redundancy in access
60On Windows systems, a security identifier is a unique variable directly linked to which of the following?
- AIntegrity level
- BAuthorization level
- CAuthenticity level
- DAccess level
- AIntegrity level
61Which type of computer most closely resembles a desktop computer?
- Anotebook
- Bsubnotebook
- Claptop
- Dnetbook
62Which type of device log contains the most beneficial security data?
- Aemail log
- Bswitch log
- Cfirewall log
- Drouter log
- Aemail log
63Which of these is NOT an attack against a switch?
- AMAC address impersonation
- BARP poisoning
- CMAC flooding
- DARP address impersonation
- AMAC address impersonation
64How does network address translation (NAT) improve security?
- AIt discards unsolicited packets.
- BIt filters based on protocol.
- CIt masks the IP address of the NAT device.
- DNATs do not improve security.
- AIt discards unsolicited packets.
65Rule Based Access Control can NOT be based off of which criteria?
- AProtocol
- BSubnet
- CUser
- DNetwork address
66When a user logs in to a computer with their username and password, those credentials are validated through a user management database. This is an example of which of the following?
- AAuthentication
- BAccess
- CAuthorization
- DIdentification
67Which of the following is a security vulnerability associated with MAC address filtering?
- AMAC addresses are not unique
- BMAC addresses are limited to preventing access
- CMAC addresses can be altered on devices
- DExchange between devices is unencrypted
- AMAC addresses are not unique
68Why is loop protection necessary?
- AIt makes a DMZ more secure.
- BIt denies attackers from launching DDoS attacks.
- CIt prevents a broadcast storm that can cripple a network.
- DIt must be installed before IEEE 802.1d can be implemented.
- AIt makes a DMZ more secure.
69An entity that issues digital certificates is a _____.
- ACertificate Authority (CA)
- BSignature Authority (SA)
- CCertificate Signatory (CS)
- DDigital Signer (DS)
- ACertificate Authority (CA)
70Which of the following could make an entire POP server inaccessible?
- AThe installation of an SMTP server
- BA missing MX record
- CA compromised NIPS
- DPOP email injection
- AThe installation of an SMTP server
71How is a VoIP system different from IP telephony?
- AVoIP is more secure than IP telephony
- BThey are exactly the same
- CIP telephony uses a different twisted-pair
- DVoIP technology uses IP telephony
- AVoIP is more secure than IP telephony
72A RADIUS authentication server requires that the _____ be authenticated first.
- Auser
- Bauthentication server
- Csupplicant
- Dauthenticator
73Which of these is NOT a risk when a home wireless router is not securely configured?
- AAn attacker can steal data from any folder with file sharing enabled.
- BUsernames, passwords, credit card numbers, and other information sent over the WLAN could be captured by an attacker.
- COnly 50 percent of the packets will be encrypted.
- DMalware can be injected into a computer connected to the WLAN.
- AAn attacker can steal data from any folder with file sharing enabled.
74What is involved in key escrow?
- AA key is encrypted with several different random algorithms by a third party
- BA key is downloaded from a third party every time it is used
- CThe key is split in two halves, then encrypted by a third party
- DFragments of a key are sent to several third parties and stored in different locations
- AA key is encrypted with several different random algorithms by a third party
75A process functioning on behalf of the user who attempts to access a file is known as a(n) _____.
- Aobject
- Boperation check
- Csubject
- Dresource
76A(n) _____ intercepts internal user requests and then processes those requests on behalf of the users.
- Acontent filter
- Bhost detection server
- Cproxy server
- Dintrusion prevention device
- Acontent filter
77Why would a person upgrade their wireless network from an 802.11g to an 802.11n?
- ABackwards compatibility with 802.11a
- BOversaturated 5 Ghz frequency
- CThere are more overlapping channels
- DIncreased data transfer rates
- ABackwards compatibility with 802.11a
78A(n) _____ is the person who is responsible for the information, determines the level of security needed for the data, and delegates security duties as required.
- Aowner
- Badministrator
- Ccustodian
- Dend-user
79Which of the following is an advantage to a network tap as opposed to port mirroring?
- AA network tap can analyze a broader range of packets than port mirroring
- BA network tap is less expensive than a switch that supports port mirroring
- CA network tap is legacy technology and has no advantages to port mirroring
- DA network tap can analyze traffic faster than port mirroring
- AA network tap can analyze a broader range of packets than port mirroring
80Which technology should be used instead of LEAP?
- ASTREAK
- BPEAP
- CLEAP-2
- DREAP
81Orphaned accounts and dormant accounts are security risks that differ at what capacity?
- ADormant accounts have not been accessed for a lengthy duration
- BOrphaned accounts are no longer active
- COrphaned accounts are limited in access
- DDormant account credentials have been lost
- ADormant accounts have not been accessed for a lengthy duration
82Which of the following is most likely to use Secure Copy Protocol?
- ANewer Windows systems
- BUNIX and Linux systems
- CLegacy systems
- DFirewalls
- ANewer Windows systems
83Which of these is NOT a security feature for locating a lost or stolen mobile device?
- Aremote lockout
- Blast known good configuration
- Calarm
- Dthief picture
- Aremote lockout
84Each of these is an entry in a firewall log that should be investigated EXCEPT _____.
- AIP addresses that are being rejected and dropped
- Bsuccessful logins
- Csuspicious outbound connections
- AIP addresses that are being rejected and dropped
85Which two subprotocols are utilized by IPsec?
- AAH and ESP
- BSSL and TLS
- CSSH and SFTP
- DL2TP and SSH
- AAH and ESP
86How would an app be restricted by MDMs based on geographical criteria?
- ALocation services
- BGeo-tagging
- CRemote lock
- DGeo-fencing
- ALocation services
87A digital certificate that turns the address bar green is a(n) _____.
- APersonal Web-Client Certificate
- BAdvanced Web Server Certificate (AWSC)
- CX.509 Certificate
- DExtended Validation SSL Certificate
- APersonal Web-Client Certificate
88Which of these is NOT an advantage of a load balancer?
- AThe risk of overloading a desktop client is reduced.
- BNetwork hosts can benefit from having optimized bandwidth.
- CNetwork downtime can be reduced.
- DDoS attacks can be detected and stopped.
- AThe risk of overloading a desktop client is reduced.
89Which of the following is NOT a security feature provided by mobile devices?
- AAlarm
- BGPS tracking of dead devices
- CThief picture
- DRemote wiping
90What is the biggest difference between a CA and an RA?
- ARAs generate private keys and CAs generate public keys
- BCertificate Authorities can generate public key certificates
- CCAs primarily process certificate revocation requests
- DRAs are more reliable than CAs
- ARAs generate private keys and CAs generate public keys
91Which of the following is used to digitally sign a certificate?
- ACSR
- BCA Public key
- CCA Private key
- DRA
92There are three types of PC cards that all share which common trait?
- A87 mm length
- B5.0 mm thickness
- C53 mm width
- D64-pin connector
- A87 mm length
93What is the Extensible Authentication Protocol (EAP)?
- Aa framework for transporting authentication protocols
- Ba subset of WPA2
- Cthe protocol used in TCP/IP for authentication
- Da technology used by IEEE 802.11 for encryption
- Aa framework for transporting authentication protocols
94If a packet has an internal IP address but the traffic is coming from the outside, this is an indication of which of the following?
- ANetwork protocols are malfunctioning
- BThe address has been spoofed
- CThere is a routing loop
- DDHCP is down
- ANetwork protocols are malfunctioning
95Which statement is true regarding security for a computer that boots to Apple Mac OS X and then runs a Windows virtual machine?
- AThe security of the Apple Mac OS X completely protects the Windows virtual machine.
- BThe hypervisor protects both the Apple Mac OS X and Windows operating systems.
- CThe security of the Windows virtual machine completely protects the Apple Mac OS X.
- DThe Windows virtual machine needs its own security.
- AThe security of the Apple Mac OS X completely protects the Windows virtual machine.
96How is the Security Assertion Markup Language (SAML) used?
- AIt is a backup to a RADIUS server.
- BIt allows secure web domains to exchange user authentication and authorization data.
- CIt is an authenticator in IEEE 802.1x.
- DIt is no longer used because it has been replaced by LDAP.
- AIt is a backup to a RADIUS server.
97Which mobile device is the smallest?
- Asubnotebook
- Blaptop
- Cnotebook
- Ddesktop
98Heuristic monitoring uses which of the following to determine if risk is present?
- ASignature
- BRegistry entry
- CAnomaly
- DAlgorithm
99Which of these is NOT where keys can be stored?
- Ain tokens
- Bin digests
- Con the user's local system
- Dembedded in digital certificates
100Which of these is considered the weakest cryptographic transport protocol?
- ASSL v2.0
- BTLS v1.0
- CTLS v1.1
- DTLS v1.3
101Which of these is NOT part of the certificate life cycle?
- Arevocation
- Bauthorization
- Ccreation
- Dexpiration
102_______ is a protocol for securely accessing a remote computer.
- ASecure Shell (SSH)
- BSecure Sockets Layer (SSL)
- CSecure Hypertext Transport Protocol (SHTTP)
- DTransport layer Security (TLS)
103Which of these would NOT be a filtering mechanism found in a firewall rule?
- Asource address
- Bdate
- Cprotocol
- Ddirection
104A(n) _______ can identify the applications that send packets and then make decisions about filtering based on it.
- Aapplication-aware firewall
- Breverse proxy
- CInternet content filter
- Dweb security gateway
105Which statement regarding a demilitarized zone (DMZ) is NOT true?
- AIt can be configured to have one or two firewalls
- BIt provides an extra degree of security
- CIt typically includes an email or web server
- DIt contains servers that are used only by internal network users
106Which statement about network address translation (NAT) is true?
- Ait can be stateful or stateless
- BIt substitutes MAC addresses for IP addresses
- CIt removes private addresses when the packet leaves the network
- DIt can be found only on core routers
107A reverse proxy __________.
- Aonly handles outgoing requests.
- Bis the same as a proxy server.
- Cmust be used together with a firewall
- Droutes incoming requests to the correct server
108Which is the preferred location of installation of a spam filter?
- Aon the POP3 server
- Bwith the SMTP server
- Con the local host client
- Don the proxy server
109A _________ watches for attacks and sounds an alert only when one occurs.
- Afirewall
- BNIPS
- Cproxy intrusion device
- DNIDS
110A multipurpose security device is known as _________.
- ACohesive Attack management System
- BProxy Security System
- CIntrusion Detection/Prevention
- DUnified Threat Management
111What is the difference between NIDS and NIPS?
- AThere is no difference; a NIDS and a NIPS are equal.
- BA NIPS can take actions more quickly to combat an attack.
- CA NIDS provides more valuable information about attacks.
- DA NIPS is much slower because it uses protocol analysis.
112If a device is determined to have an out-of-date virus signature file, then Network Access Control can redirect that device to a network by ________.
- Aa Trojan horse
- BTCP/IP hijacking
- CAddress Resolution Protocol (ARP) poisoning
- DDHCP man-in-the middle
Information
- Description
- Quiz on CIT 370 Unit 2, created by sta13001 on 22/07/2015.
- Author
- sta13001
- Language
- English
- Views
- 9
- Rating
- No ratings yet Rate this quiz