Copiar e Editar

Midterm review Chapters 1-5

Descrição

Information Technology Quiz sobre Midterm review Chapters 1-5, criado por Mary Sunseri em 03-03-2018.
Mary Sunseri
Quiz por Mary Sunseri, atualizado more than 1 year ago
Mary Sunseri
Criado por Mary Sunseri mais de 6 anos atrás
232
1
0

Resumo de Recurso

Questão 1

Questão
Which of the following is the best definition for war-driving?
Responda
  • Driving and seeking rival hackers
  • Driving while hacking and seeking a computer job
  • Driving looking for wireless networks to hack
  • Driving while using a wireless connection to hack

Questão 2

Questão
In addition to mandating federal agencies to establish security measures, the Computer Security Act of 1987 defined important terms such as:
Responda
  • security information
  • private information
  • unauthorized access
  • sensitive information

Questão 3

Questão
What are the three approaches to security?
Responda
  • High security, medium security, and low security
  • Perimeter, layered, and hybrid
  • Internal, external, and hybrid
  • Perimeter, complete, and none

Questão 4

Questão
An attack characterized by an explicit attempt by attackers to prevent legitimate users from accessing a system is called:
Responda
  • war-dialing
  • spoofing
  • denial of service
  • social engineering

Questão 5

Questão
The first computer incident response team is affiliated with what university?
Responda
  • Harvard University
  • Princeton
  • Carnegie-Mellon University
  • Yale

Questão 6

Questão
The process of reviewing logs, records, and procedures to determine whether they meet appropriate standards is called:
Responda
  • auditing
  • filtering
  • authenticating
  • sneaking

Questão 7

Questão
Which of the following best defines the primary difference between a sneaker and an auditor?
Responda
  • There is no difference
  • The sneaker tends to be less skilled
  • The sneaker tends to use more unconventional methods
  • The auditor tends to be less skilled

Questão 8

Questão
Which of the following types of privacy laws affect computer security?
Responda
  • Any privacy law applicable to your organization
  • Any privacy law
  • Any federal privacy law
  • Any state privacy law

Questão 9

Questão
An intrusion-detection system is an example of:
Responda
  • Proactive security
  • Perimeter security
  • Good security practices
  • Hybrid security

Questão 10

Questão
Which of the following is the best definition of “sensitive information”?
Responda
  • Any information that is worth more than $1,000
  • Any information that has monetary value and is protected by any privacy laws
  • Any information that, if accessed by unauthorized personnel, could damage your organization in any way
  • Military or defense related information

Questão 11

Questão
Which of the following maintains a repository for information on virus outbreaks and detailed information about specific viruses?
Responda
  • F-Secure Corporation
  • CERT
  • SANS Institute
  • Microsoft Security Advisor

Questão 12

Questão
Which is a technique used to provide false information about data packets?
Responda
  • Phreaking
  • Social engineering
  • Hacking
  • Spoofing

Questão 13

Questão
What is the term for hacking a phone system?
Responda
  • phreaking
  • Cracking
  • Hacking
  • Telco-hacking

Questão 14

Questão
Which is NOT one of the three broad classes of security threats?
Responda
  • Preventing or blocking access to a system
  • Gaining unauthorized access into a system
  • Malicious software
  • Disclosing contents of private networks

Questão 15

Questão
Are there any reasons not to take an extreme view of security, if that view errs on the side of caution?
Responda
  • No, there is no reason not to take such an extreme view.
  • Yes, if you are going to err, assume there are few if any realistic threats.
  • Yes, that can lead to wasting resources on threats that are not likely.
  • Yes, that can require that you increase your security skills in order to implement more rigorous defenses.

Questão 16

Questão
A text file that is downloaded to a computer by a Web site to provide information about the Web site and online access is called a:
Responda
  • cookie
  • Trojan horse
  • script kiddy
  • key logger

Questão 17

Questão
Which of the following is the most basic security activity?
Responda
  • Installing a firewall
  • Controlling access to resources
  • Authenticating users
  • Using a virus scanner

Questão 18

Questão
Which of the following is NOT a connectivity device used to connect machines on a network?
Responda
  • Network interface card
  • Hub
  • Proxy server
  • Switch

Questão 19

Questão
The process of determining whether the credentials given by a user are authorized to access a particular network resource is called:
Responda
  • auditing
  • accessing
  • authorization
  • authentication

Questão 20

Questão
Which approach to security is proactive in addressing potential threats before they occur?
Responda
  • Layered security approach
  • Passive security approach
  • Dynamic security approach
  • Hybrid security approach

Questão 21

Questão
Those who exploit systems for harm such as to erase files, change data, or deface Web sites are typically called:
Responda
  • gray hat hackers
  • black hat hackers
  • white hat hackers
  • red hat hackers

Questão 22

Questão
Encryption and virtual private networks are techniques used to secure which of the following?
Responda
  • Connection points
  • Data
  • Firewalls
  • Proxy servers

Questão 23

Questão
Which of the following is the best definition for the term sneaker?
Responda
  • An amateur hacker
  • A person who hacks a system to test its vulnerabilities
  • A person who hacks a system by faking a legitimate password
  • An amateur who hacks a system without being caught

Questão 24

Questão
Which of the following is not one of the three major classes of threats?
Responda
  • Online auction fraud
  • Denial of Service attacks
  • A computer virus or worm
  • Actually intruding on a system

Questão 25

Questão
Which is NOT one of the three broad classes of security threats?
Responda
  • Disclosing contents of private networks
  • Malicious software
  • Preventing or blocking access to a system
  • Gaining unauthorized access into a system

Questão 26

Questão
What is a computer virus?
Responda
  • Any program that can change your Windows registry.
  • Any program that self replicates
  • Any program that causes harm to your system
  • Any program that is downloaded to your system without your permission

Questão 27

Questão
When assessing threats to a system, what three factors should you consider?
Responda
  • How much traffic the system gets, the security budget, and the skill level of the security team
  • The system’s attractiveness, the information contained on the system, and how much traffic the system gets
  • The skill level of the security team, the system’s attractiveness, and how much traffic the system gets
  • The system’s attractiveness, the information contained on the system, and the security budget

Questão 28

Questão
Which of the following would most likely be classified as misuses of systems?
Responda
  • Using your business computer to conduct your own (non-company) business
  • Getting an occasional personal email
  • Looking up information on a competitor using the Web
  • Shopping on the web during lunch

Questão 29

Questão
What is a technique used to determine if someone is trying to falsely deny that they performed a particular action?
Responda
  • Non-repudiation
  • Access Control Authorization
  • Audiiting
  • Sneaking

Questão 30

Questão
Which approach to security addresses both the system perimeter and individual systems within the network?
Responda
  • Perimeter security approach
  • Layered security approach
  • Hybrid aecurity approach
  • Dynamic security approach

Questão 31

Questão
Which of the following gives the best definition of spyware?
Responda
  • Any software that monitors which Web sites you visit
  • Any software or hardware that monitors your system
  • Any software that logs keystrokes
  • Any software used to gather intelligence

Questão 32

Questão
Which of the following is the best definition for non-repudiation?
Responda
  • It is another term for user authentication
  • Processes that verify which user performs what action
  • Security that does not allow the potential intruder to deny his attack
  • Access control

Questão 33

Questão
Blocking attacks seek to accomplish what?
Responda
  • Prevent legitimate users from accessing a system
  • Breaking into a target system
  • Shut down security measures
  • Install a virus on the target machine

Questão 34

Questão
Which term is generally used by hackers to refer to attempts at intrusion into a system without permission and usually for malevolent purposes?
Responda
  • Social engineering
  • Blocking
  • Hacking
  • Cracking

Questão 35

Questão
The most desirable approach to security is one which is:
Responda
  • Layered and dynamic
  • Perimeter and static
  • Layered and static
  • Perimeter and dynamic

Questão 36

Questão
Which of the following activities do security professionals recommend to limit the chances of becoming a target for a Trojan horse?
Responda
  • Prevent employees from downloading and installing any programs
  • Download and install Windows updates and patches monthly
  • Only open e-mail attachments from friends or co-workers
  • Only download jokes, animated Flash files, or utility programs from popular sites

Questão 37

Questão
Which method of defense against a SYN flood involves altering the response timeout?
Responda
  • Micro blocks
  • SYN cookies
  • RST cookies
  • Stack tweaking

Questão 38

Questão
Which created a buffer overflow attack against a Windows flaw called the DCOM RPC vulnerability?
Responda
  • Blaster
  • MyDoom
  • SoBig
  • Slammer

Questão 39

Questão
What do many analysts believe was the reason for the MyDoom virus/worm?
Responda
  • A DoS attack against Microsoft.com
  • A DoS attack targeting Microsoft Windows IIS servers
  • An e-mail attack targeting Bill Gates
  • A DDoS attack targeting Santa Cruz Operations

Questão 40

Questão
Which is NOT true about a buffer overflow attack?
Responda
  • Susceptibility to a buffer overflow is entirely contingent on software flaws.
  • A hacker does not need a good working knowledge of some programming language to create a buffer overflow.
  • A buffer overflow can load malicious data into memory and run it on a target machine.
  • A careful programmer will write applications so the buffer will truncate or reject data that exceeds the buffer length.

Questão 41

Questão
What is the name for a DoS defense that is dependent on sending back a hash code to the client?
Responda
  • Server reflection
  • RST cookie
  • Stack tweaking
  • SYN cookie

Questão 42

Questão
What is the best way to defend against a buffer overflow?
Responda
  • Stopping all ICMP traffic
  • Using a robust firewall
  • Keeping all software patched and updated
  • Blocking TCP packets at the router

Questão 43

Questão
The spread of viruses can be minimized by all of the following EXCEPT:
Responda
  • using a code word with friends to determine if attachments are legitimate
  • using a virus scanner
  • immediately following instructions in security alerts e-mailed to you from Microsoft
  • never opening attachments you are unsure of

Questão 44

Questão
Which of the following is NOT a denial of service attack?
Responda
  • Ping of Death
  • SYN flood
  • Smurf attack
  • Stack tweaking

Questão 45

Questão
Which of the following is the best definition for IP spoofing?
Responda
  • Sending packets that are misconfigured
  • Sending a packet that appears to come from a trusted IP
  • Setting up a fake Web site that appears to be a different site
  • Rerouting packets to a different IP

Questão 46

Questão
Which attack relies on broadcast packets to cause a network to actually flood itself with ICMP packets?
Responda
  • Smurf attack
  • SYN flood
  • Tribal flood
  • ICMP flood

Questão 47

Questão
Which attack occurs by sending packets that are too large for the target machine to handle?
Responda
  • SYN flood
  • ICMP flood
  • Ping of death
  • Stack tweaking

Questão 48

Questão
One of the most common types of attacks via the Internet is:
Responda
  • Buffer overflow
  • IP spoofing
  • Session hacking
  • Denial of service

Questão 49

Questão
Which of the following virus attacks initiated a DoS attack?
Responda
  • Walachi
  • MyDoom
  • Bagle
  • Faux

Questão 50

Questão
Which router configuration is potentially least vulnerable to an attack?
Responda
  • Routers that filter packets with source addresses in the local domain
  • Proxy firewalls where the proxy applications use the source IP address for authentication
  • Routers to external networks that support multiple internal interfaces
  • Routers with two interfaces that support subnetting on the internal network

Questão 51

Questão
What is a technical weakness of the Stack tweaking defense?
Responda
  • It only decreases time out but does not actually stop DoS attacks
  • It is complicated and requires very skilled technicians to implement
  • It is resource intensive and can degrade server performance.
  • It is ineffective against DoS attacks

Questão 52

Questão
Which created a domestic “cyber terrorism” attack against a Unix distributor?
Responda
  • MyDoom
  • W32.Storm.Worm
  • Blaster
  • Slammer

Questão 53

Questão
What is the name for a DoS attack that causes machines on a network to initiate a DoS against one of that network’s servers?
Responda
  • Smurf attack
  • Distributed Denial of Service
  • SYN flood
  • Ping of Death

Questão 54

Questão
Which of the following would be the best defense if your Web server had limited resources but you needed a strong defense against DoS?
Responda
  • Stack tweaking
  • A firewall
  • SYN cookies
  • RST cookies

Questão 55

Questão
What was the greatest damage from the Bagle virus?
Responda
  • It deleted system files
  • It corrupted the Windows registry
  • It was difficult to detect
  • It shut down antivirus software

Questão 56

Questão
How does the SYN cookie work?
Responda
  • Replaces cookies left by virus/worm programs.
  • Causes server to send wrong SYNACK to the client.
  • Prevents memory allocation until third part of SYN ACK handshaking.
  • Enables encryption of outbound packets.

Questão 57

Questão
From the attacker’s point of view, what is the primary weakness in a DoS attack?
Responda
  • The attack does not cause actual damage
  • The attack must be sustained.
  • The attack is difficult to execute
  • The attack is easily thwarted

Questão 58

Questão
Shutting down router and firewall ports 5554 and 9996 will block most damage from which of these?
Responda
  • Sobig
  • Trojan horses
  • Bagle
  • Sasser

Questão 59

Questão
Which attack causes Internet routers to attack the target systems without actually compromising the routers themselves?
Responda
  • ICMP flood
  • SYN flood
  • Tribal Flood Network
  • Distributed Reflection Denial of Service

Questão 60

Questão
Which attack relies on broadcast packets to cause a network to actually flood itself with ICMP packets?
Responda
  • Tribal flood
  • SYN flood
  • Smurf attack
  • ICMP flood

Questão 61

Questão
What DoS attack is based on leaving connections half open?
Responda
  • SYN flood
  • Smurf Attack
  • Ping of Death
  • Distributed Denial of Service

Questão 62

Questão
What is the best method of defending against IP spoofing?
Responda
  • Installing a router/firewall that blocks packets that appear to be originating within the network
  • Blocking all incoming TCP traffic
  • Blocking all incoming ICMP traffic
  • Installing a router/firewall that blocks packets that appear to be originating from outside the network

Questão 63

Questão
Which of the following best describes session hacking?
Responda
  • Taking over a target machine via a Trojan horse
  • Taking control of the login session
  • Taking control of a target machine remotely
  • Taking control of the communication link between two machines

Questão 64

Questão
Which of the following is a recommended configuration of your firewall to defend against DoS attacks?
Responda
  • Block TCP packets that originate outside your network
  • Block all incoming packets
  • Block ICMP packets that originate outside your network
  • Block all ICMP packets

Questão 65

Questão
Which copies itself into the Windows directory and creates a registry key to load itself at startup?
Responda
  • Slammer
  • MyDoom
  • Sasser
  • Bagle

Questão 66

Questão
Which presented itself as an e-mail from the system administrator informing the user of a virus infection and gave directions to open an e-mail attachment which would then scan for e-mail addresses and shared folders?
Responda
  • Sobig
  • Sasser
  • Minmail
  • Bagle

Questão 67

Questão
Which of the following best describes a buffer overflow attack?
Responda
  • An attack that attempts to put misconfigured data into a memory buffer
  • An attack that attempts to send oversized TCP packets
  • An attack that attempts to put too much data in a memory buffer
  • An attack that overflows the target with too many TCP packets

Questão 68

Questão
What is a Trojan horse?
Responda
  • Software that deletes system files then infects other machines
  • Software that self replicates
  • Software that causes harm to your system
  • Software that appears to be benign but really has some malicious purpose

Questão 69

Questão
Which of the following denial of service attacks results from a client’s failure to respond to the server’s reply to a request for connection?
Responda
  • ICMP flood
  • SYN flood
  • Tribal flood
  • UDP flood

Questão 70

Questão
What is the danger inherent in IP spoofing attacks?
Responda
  • Many of these attacks open the door for other attacks
  • Many firewalls don’t examine packets that seem to come from within the network.
  • They can be difficult to stop
  • They are very damaging to target systems

Questão 71

Questão
Which is NOT a typical adverse result of a virus?
Responda
  • Increased network traffic
  • Changing system settings
  • Increased network functionality and responsiveness
  • Deletion of files

Questão 72

Questão
What type of firewall is Check Point Firewall-1?
Responda
  • Packet filtering/application gateway hybrid
  • SPI/application gateway hybrid
  • Circuit level gateway
  • Application gateway

Questão 73

Questão
What implementation is Check Point Firewall-1?
Responda
  • Switch based
  • Host based
  • Network based
  • Router based

Questão 74

Questão
Which is a hardware firewall vendor manufacturing Stateful Packet Inspection units with NAT and DES especially for small offices?
Responda
  • Cisco
  • Wolverine
  • D-Link
  • Check Point

Questão 75

Questão
Should a home user with ICF block port 80, and why or why not?
Responda
  • She should not because it would prevent her from using Web Pages
  • She should not because that will prevent her from getting updates and patches
  • She should unless she is running a Web server on her machine.
  • She should because port 80 is a common attack point for hackers

Questão 76

Questão
Why is an SPI firewall more resistant to flooding attacks?
Responda
  • It requires user authentication
  • It examines each packet in the context of previous packets
  • It automatically blocks large traffic from a single IP
  • It examines the destination IP of all packets

Questão 77

Questão
Snort is which type of IDS?
Responda
  • Client-based
  • Router-based
  • OS-based
  • Host-based

Questão 78

Questão
Snort is which type of IDS?
Responda
  • Client-based
  • Router-based
  • OS-based
  • Host-based

Questão 79

Questão
What is one complexity found in enterprise environements that is unlikely in small networks or SOHO environments?
Responda
  • Diverse user groups
  • Web vulnerabilities
  • Multiple operating systems
  • Users running different applications

Questão 80

Questão
Which type of IDS is the Cisco Sensor?
Responda
  • Anomaly detection
  • Intrusion deterrence
  • Intrusion deflection
  • Anomaly deterrence

Questão 81

Questão
It should be routine for someone in the IT security staff to
Responda
  • Physically inspect the firewall
  • Review firewall logs
  • Reboot the firewall
  • Test the firewall by attempting a ping flood

Questão 82

Questão
Using a server running the Linux operating system with its built-in firewall as the network firewall is one example of which firewall configuration?
Responda
  • router-based
  • dual-homed host
  • network host-based
  • screened host

Questão 83

Questão
What is an advantage of an enterprise environment?
Responda
  • Skilled technical personnel available
  • Multiple operating systems to deal with
  • IDS systems not needed
  • Lower security needs

Questão 84

Questão
Which is true about SonicWALL firewall solutions?
Responda
  • They work on Linux, Unix, Solaris, and Windows platforms.
  • They are relatively inexpensive.
  • All models contain built-in encryption.
  • They include built-in proxy server capabilities.

Questão 85

Questão
In which mode of operation does Snort display a continuous stream of packet contents to the console?
Responda
  • Heuristic mode
  • Network intrusion-detection mode
  • Packet logger mode
  • Packet sniffer mode

Questão 86

Questão
In comparing a packet filter firewall with a stateful packet inspection firewall (SPI), the SPI firewall is:
Responda
  • LESS susceptible to ping and SYN floods but MORE susceptible to IP spoofing
  • LESS susceptible to ping and SYN floods and LESS susceptible to IP spoofing.
  • MORE susceptible to ping and SYN floods and MORE susceptible to IP spoofing
  • MORE susceptible to ping and SYN floods and LESS susceptible to IP spoofing

Questão 87

Questão
Which of the following are four basic types of firewalls?
Responda
  • Screening, bastion, dual-homed, circuit level
  • Packet filtering, application gateway, circuit level, stateful packet inspection
  • Stateful packet inspection, gateway, bastion, screening
  • Application gateway, bastion, dual-homed, screening

Questão 88

Questão
In many typical configurations with multiple firewalls, e-mail servers and FTP servers are located in the:
Responda
  • internal corporate network
  • demilitarized zone
  • corporate intranet
  • external network

Questão 89

Questão
Which of the following is not an advantage of the Fortigate firewall?
Responda
  • Built-in encryption
  • Built-in virus scanning
  • Content filtering
  • Low cost

Questão 90

Questão
Should a home user block ICMP traffic, and why or why not?
Responda
  • It should be blocked because such traffic is often used to transmit a virus
  • It should be blocked because such traffic is often used to do port scans and flood attacks
  • It should not be blocked because it is necessary for network operations
  • It should not be blocked because it is necessary for using the Web

Questão 91

Questão
Why might a proxy gateway be susceptible to a flood attack?
Responda
  • It does not require user authentication
  • It allows multiple simultaneous connections
  • It does not properly filter packets
  • Its authentication method takes more time and resources

Questão 92

Questão
A standalone technology that hides internal addresses from the outside and only allows connections that originate from inside the network is called:
Responda
  • TFTP
  • HTTP
  • DMZ
  • NAT

Questão 93

Questão
What is another term for preemptive blocking?
Responda
  • Banishment vigilance
  • Intruder blocking
  • Intrusion deflection
  • User deflection

Questão 94

Questão
Which serves as a single contact point between the Internet and the private network?
Responda
  • Bastion host
  • DMZ
  • Screened host
  • Dual-homed host

Questão 95

Questão
One type of intrusion-detection and avoidance which involves identifying suspect IP addresses and preventing intrusions is called:
Responda
  • anomaly detection
  • intrusion deterrence
  • preemptive blocking
  • intrusion deflection

Questão 96

Questão
NAT is a replacement for what technology?
Responda
  • Proxy server
  • Firewall
  • IDS
  • Antivirus software

Questão 97

Questão
Which is a robust commercial software firewall solution for Linux operating systems?
Responda
  • SonicWALL
  • Wolverine
  • McAfee Personal Firewall
  • Symantec Norton Firewall

Questão 98

Questão
Which is true about Windows XP Internet Connection Firewall (ICF)?
Responda
  • It has a logging feature enabled by default.
  • It works best in conjunction with a perimeter firewall.
  • It blocks incoming and outgoing packets.
  • It is a screened host firewall.

Questão 99

Questão
Which of the following is not a profiling strategy used in anomaly detection?
Responda
  • Executable profiling
  • Threshold monitoring
  • Resource profiling
  • System monitoring

Questão 100

Questão
Which type of intrusion-detection relies on people rather than software or hardware?
Responda
  • Banishment vigilance
  • Intrusion deterrence
  • Infiltration
  • Anomaly detection

Questão 101

Questão
Which type of firewall is included in Windows XP and many distributions of Linux operating systems?
Responda
  • Stateful packet inspection
  • User authentication
  • Packet filter
  • Application proxy

Questão 102

Questão
What is one complexity found in enterprise environements that is unlikely in small networks or SOHO environments?
Responda
  • Users running different applications
  • Multiple operating systems
  • Diverse user groups
  • Web vulnerabilities

Questão 103

Questão
What type of firewall requires individual client applications to be authorized to connect?
Responda
  • Stateful packet inspection
  • Dual-homed
  • Application gateway
  • Screened gateway

Questão 104

Questão
Which of the following is not one of Snort’s modes?
Responda
  • Network intrusion-detection
  • Sniffer
  • Packet logger
  • Packet filtering

Questão 105

Questão
What tool does McAfee Personal Firewall offer?
Responda
  • A visual tool to trace attacks
  • NAT
  • Strong encryption
  • Vulnerability scanning

Questão 106

Questão
An open source software circuit level gateway is available from which of the following?
Responda
  • Watchguard Technologies
  • SonicWALL
  • Teros
  • Amrita Labs

Questão 107

Questão
Which of the following are four basic types of firewalls?
Responda
  • Application gateway, bastion, dual-homed, screening
  • Packet filtering, application gateway, circuit level, stateful packet inspection
  • Stateful packet inspection, gateway, bastion, screening
  • Screening, bastion, dual-homed, circuit level

Questão 108

Questão
Which type of firewall creates a private virtual connection with the client?
Responda
  • Circuit level gateway
  • Dual-homed
  • Application gateway
  • Bastion

Questão 109

Questão
Which type of firewall negotiates between the server and client to permit or deny connection based on the type of software and connection requested?
Responda
  • Circuit level gateway
  • Application gateway
  • Packet filter
  • Stateful packet inspection

Questão 110

Questão
Which firewall configuration would be appropriate within a network to separate and protect various subnets of a network to provide greater security?
Responda
  • bastion host
  • demilitarized zone
  • router-based
  • dual-homed host

Questão 111

Questão
Which of the following is not a common feature of most single PC firewalls?
Responda
  • Packet filtering
  • Software-based
  • Ease of use
  • Built-in NAT

Questão 112

Questão
It should be routine for someone in the IT security staff to
Responda
  • Reboot the firewall
  • Physically inspect the firewall
  • Review firewall logs
  • Test the firewall by attempting a ping flood

Questão 113

Questão
A firewall designed to secure an individual personal computer is a:
Responda
  • screened host firewall
  • single machine firewall
  • simple hardware firewall
  • combination hardware/software firewall

Questão 114

Questão
What type of firewall is SonicWALL TI70?
Responda
  • Application gateway
  • Circuit-level gateway
  • Packet screening
  • Stateful Packet Inspection

Questão 115

Questão
Which of the following is an advantage of the network host-based configuration?
Responda
  • It is resistant to IP spoofing
  • It has user authentication
  • It is inexpensive or free
  • It is more secure

Questão 116

Questão
Which of the following is a benefit of Cisco firewalls?
Responda
  • Very low cost
  • Built-in virus scanning on all products
  • Built-in IDS on all products
  • Extensive training available on the product

Questão 117

Questão
Once a circuit level gateway verifies the user’s logon, it creates a virtual circuit between:
Responda
  • the internal client and the external server
  • the external server and the proxy server
  • the external server and the firewall
  • the internal client and the proxy server

Questão 118

Questão
At what OSI layer do packet filters function?
Responda
  • Physical layer
  • Transport layer
  • Network layer
  • Data link layer

Questão 119

Questão
Which is NOT a function of an intrusion-detection system?
Responda
  • Inspect all inbound and outbound port activity
  • Notify the system administrator of suspicious activity
  • Infiltrate the illicit system to acquire information
  • Look for patterns in port activity

Questão 120

Questão
What might one see in an implementation of intrusion deterrence?
Responda
  • Real resources with fake names
  • Fake resources with legitimate-sounding names
  • Blocking of legitimate users by mistake
  • Profiling of users, resources, groups, or applications

Questão 121

Questão
A system that is set up for attracting and monitoring intruders is called what?
Responda
  • Fly paper
  • Honey pot
  • Hacker cage
  • Trap door

Questão 122

Questão
A device that hides internal IP addresses is called
Responda
  • Dual-homed host
  • Bastion firewall
  • Proxy server
  • A screened host

Questão 123

Questão
Medium-sized networks have what problem?
Responda
  • Low budgets
  • Diverse user group
  • Need to connect multiple LANs into a single WAN
  • Lack of skilled technical personnel

Questão 124

Questão
A firewall that uses a combination of approaches rather than a single approach to protect the network is called:
Responda
  • multi-homed
  • dual-homed
  • open source
  • hybrid

Questão 125

Questão
How can vulnerability to flooding attacks be reduced with an application gateway?
Responda
  • Packets are continually checked during the connection
  • Vulnerability to flooding attacks with an application gateway cannot be mitigated
  • Authenticating users
  • External systems never see the gateway

Questão 126

Questão
Identifying abnormal activity on a firewall requires that one establish a:
Responda
  • baseline
  • screened host
  • bastion host
  • proxy server

Questão 127

Questão
An intrusion-detection system detecting a series of ICMP packets sent to each port from the same IP address might indicate:
Responda
  • scanning of the system for vulnerabilities prior to an attack
  • Trojan horse/virus infection sending information back home
  • a Distributed Denial of Service attack in progress
  • the system has been infiltrated by an outsider

Questão 128

Questão
Why is an SPI firewall less susceptible to spoofing attacks?
Responda
  • It requires user authentication
  • It requires client application authentication
  • It automatically blocks spoofed packets
  • It examines the source IP of all packets

Questão 129

Questão
What is ICF?
Responda
  • Windows XP Internet Connection Firewall
  • Windows 2000 Internet Connection Firewall
  • Windows 2000 Internet Control Firewall
  • Windows XP Internet Control Firewall

Questão 130

Questão
Which is a firewall vendor manufacturing a host-based firewall for Windows 2000 Server, Sun Solaris, and Red Hat Linux environments?
Responda
  • D-Link
  • Wolverine
  • Check Point
  • Cisco

Questão 131

Questão
Which of the following is not a reason to avoid choosing infiltration as part of an IDS strategy?
Responda
  • It can be time consuming
  • It requires knowledge of the target group
  • It can be expensive
  • The group may retaliate

Questão 132

Questão
A series of ICMP packets sent to your ports in sequence might indicate what?
Responda
  • A packet sniffer
  • A port scan
  • A DoS attack
  • A ping flood

Questão 133

Questão
An intrusion-detection method that measures and monitors how programs use system resources is called:
Responda
  • user/group profiling.
  • resource profiling.
  • executable profiling.
  • threshold monitoring.

Questão 134

Questão
Which strategy is used in the implementation of intrusion deterrence?
Responda
  • Installing honey pots to pose as important system
  • Monitoring connection attempts to identify IP addresses of attackers
  • Using fake names to camouflage important systems
  • Infiltrating online hacker groups

Questão 135

Questão
Which method of intrusion-detection develops historic usage levels to measure activity against?
Responda
  • Threshold monitoring
  • Application profiling
  • Resource profiling
  • Infiltration profiling

Questão 136

Questão
What is the greatest danger in a network host-based configuration?
Responda
  • SYN flood attacks
  • IP spoofing
  • Operating System Security flaws
  • Ping flood attacks

Questão 137

Questão
Which type of firewall is generally the simplest and least expensive?
Responda
  • Circuit level gateway
  • Application gateway
  • Packet filter
  • Stateful packet inspection

Questão 138

Questão
Implementation of intrusion deflection as a strategy requires the use of:
Responda
  • fake targets
  • blocking software
  • warnings to intruders to leave
  • innocuous names for sensitive targets

Questão 139

Questão
Which of the following is found in Norton’s personal firewall but not in ICF?
Responda
  • Strong encryption
  • Vulnerability scanning
  • A visual tool to trace attacks
  • NAT

Questão 140

Questão
Which of the following is a common problem when seeking information on firewalls?
Responda
  • Unbiased information may be hard to find.
  • It is difficult to find information on the Web.
  • Information often emphasizes price rather than features.
  • Documentation is often incomplete

Questão 141

Questão
Which of the following can be shipped preconfigured?
Responda
  • Router-based firewalls
  • Stateful packet inspection firewalls
  • Dual-homed firewalls
  • Network host-based firewalls

Questão 142

Questão
Which is a term used to refer to the process of authentication and verification?
Responda
  • Filtering
  • Negotiation
  • Connecting
  • Screening

Questão 143

Questão
Which type of firewall negotiates between the server and client to permit or deny connection based on the type of software and connection requested?
Responda
  • Circuit level gateway
  • Stateful packet inspection
  • Application gateway
  • Packet filter

Questão 144

Questão
Which intrusion detection strategy monitors and compares activity against preset acceptable levels?
Responda
  • Threshold monitoring
  • Infiltration monitoring
  • Application monitoring
  • Resource profiling

Questão 145

Questão
Which of the following is a problem with the approach of a profiling strategy that is used in anomaly detection?
Responda
  • It misses many attacks
  • It is resource intensive
  • It yields many false positives
  • It is difficult to configure

Questão 146

Questão
What is the purpose of the warning configuration for Specter’s email file?
Responda
  • To scare off at least novice hackers
  • To keep your normal users honest
  • To deter highly skilled hackers
  • To track hackers back to their source IPs

Questão 147

Questão
Regarding the Firewall-1 firewall, which of the following is NOT true?
Responda
  • It is particularly vulnerable to SYN floods.
  • It is a packet filtering, application gateway hybrid.
  • It uses Stateful Packet Inspection.
  • It automatically blocks and logs oversized packets.

Questão 148

Questão
IDS is an acronym for:
Responda
  • Intrusion deterrence service
  • Intrusion-detection service
  • Intrusion deterrence system
  • Intrusion-detection system

Questão 149

Questão
What is the most important security advantage to NAT?
Responda
  • It hides internal network addresses
  • By default it blocks all ICMP packets
  • It blocks incoming ICMP packets
  • By default it only allows outbound connections

Questão 150

Questão
Which is true about the Wolverine firewall solution?
Responda
  • It includes built-in VPN capabilities.
  • It works on Linux, Unix, Solaris, and Windows platforms.
  • Encryption can be added with a free Web download.
  • It is expensive.

Questão 151

Questão
What four rules must be set for packet filtering firewalls?
Responda
  • Username, password, protocol type, destination IP
  • Source IP, destination IP, username, password
  • Protocol type, source port, destination port, source IP
  • Protocol version, destination IP, source port, username

Questão 152

Questão
Setting up parameters for acceptable use, such as the number of login attempts, and watching to see if those levels are exceeded is referred to as what?
Responda
  • Resource profiling
  • Executable profiling
  • System monitoring
  • Threshold monitoring

Questão 153

Questão
Attempts by an intruder to determine information about a system prior to the start of an intrusion attack is called:
Responda
  • foot printing
  • infiltration
  • deflecting
  • detecting

Questão 154

Questão
Which is NOT a service included in the Norton single machine firewall?
Responda
  • Data recovery
  • Popup ad blocking
  • Blocking of outgoing traffic
  • Privacy protection

Questão 155

Questão
Banishment vigilance is another name for:
Responda
  • anomaly detection
  • intrusion deflection
  • intrusion deterrence
  • preemptive blocking

Questão 156

Questão
Which type of encryption is included with the T170?
Responda
  • PGP and AES
  • WEP and DES
  • WEP and PGP
  • AES and DES

Questão 157

Questão
Which is a unique feature of the McAfee Personal Firewall that is not found on most personal firewalls?
Responda
  • Blocking incoming traffic on selected ports
  • Online scanning of system for vulnerabilities
  • Performing traceroute to show the source of incoming packets
  • Recording a log of all attempts at incoming packets

Questão 158

Questão
Why might you run Specter in strange mode?
Responda
  • It will be difficult to determine the system is a honey pot
  • It will deter novice hackers
  • It may fascinate hackers and keep them online long enough to catch them
  • It may confuse hackers and deter them from your systems

Questão 159

Questão
A firewall configuration using a server as a router and running multiple network interfaces with automatic routing disabled is an example of a:
Responda
  • dual-homed host
  • screened host
  • router-based
  • network host-based

Questão 160

Questão
Why might a proxy gateway be susceptible to a flood attack?
Responda
  • Its authentication method takes more time and resources
  • It does not properly filter packets
  • It allows multiple simultaneous connections
  • It does not require user authentication

Questão 161

Questão
Which intrusion-detection method measures activity levels against known short-term and/or long-term work profiles?
Responda
  • Threshold monitoring
  • User/group work profiling
  • Executable profiling
  • Resource profiling

Questão 162

Questão
Why might a circuit level gateway be inappropriate for some situations?
Responda
  • It blocks web traffic
  • It is simply too expensive
  • It has no user authentication
  • It requires client side configuration

Questão 163

Questão
Which is NOT true about enterprise networks and firewall solutions?
Responda
  • They are likely to be supported by multiple network administrators.
  • They are usually made up of several interconnected networks.
  • They are usually easier to manage and secure.
  • They are likely to contain several different operating systems.

Questão 164

Questão
Attempting to make your system appear less appealing is referred to as what?
Responda
  • Intrusion deterrence
  • System deterrence
  • System camouflage
  • Intrusion deflection

Questão 165

Questão
Which of the following is an important feature of D-Link DFL 300?
Responda
  • Vulnerability scanning
  • Liberal licensing policy
  • WEP encryption
  • Built-in IDS

Questão 166

Questão
Which firewall solution would be best for a large enterprise running Windows XP Professional and Linux operating systems, using the Internet, and requiring remote access to their Intranet server for field sales people?
Responda
  • Check Point Firewall-1
  • Cisco PIX 515E
  • Fortigate 3600
  • Windows XP Internet Connection Firewall

Questão 167

Questão
Why is an SPI firewall more resistant to flooding attacks?
Responda
  • It automatically blocks large traffic from a single IP
  • It requires user authentication
  • It examines each packet in the context of previous packets
  • It examines the destination IP of all packets

Questão 168

Questão
A profiling technique that monitors how applications use resources is called what?
Responda
  • Application monitoring
  • Resource profiling
  • System monitoring
  • Executable profiling

Questão 169

Questão
Symantec Decoy Server does all of the following EXCEPT:
Responda
  • simulate incoming mail server functions
  • record all traffic related to an intrusion attack
  • simulate outgoing mail server functions
  • track attacking packets to their source

Questão 170

Questão
Attempting to attract intruders to a system set up to monitor them is called what?
Responda
  • Intrusion routin
  • Intrusion deterrence
  • Intrusion banishment
  • Intrusion deflection

Questão 171

Questão
Which type of firewall is considered the most secure?
Responda
  • Circuit-level gateway
  • Stateful packet inspection
  • Dual-homed
  • Packet screening

Questão 172

Questão
Following rules and learning from experience as part of the process to identify and notify an administrator about an intrusion are typical when Snort is operating in which mode?
Responda
  • Network intrusion-detection mode
  • Packet logger mode
  • Sniffer mode
  • Command mode

Questão 173

Questão
Using a server running the Linux operating system with its built-in firewall as the network firewall is one example of which firewall configuration?
Responda
  • screened host
  • network host-based
  • router-based
  • dual-homed host

Questão 174

Questão
Which of the following solutions is actually a combination of firewalls?
Responda
  • Dual-homed firewalls
  • Router-based firewalls
  • Screened firewalls
  • Bastion host firewalls

Questão 175

Questão
Which is NOT one of the basic premises under which a honey pot functions?
Responda
  • Intruders will tend to go for easy targets with valuable data
  • Any traffic to the honey pot is suspicious
  • Security must allow attackers inside
  • Only legitimate users have a reason to connect to it

Questão 176

Questão
In many typical configurations with multiple firewalls, e-mail servers and FTP servers are located in the:
Responda
  • demilitarized zone
  • internal corporate network
  • corporate Intranet
  • external network

Quer criar seus próprios Quizzes gratuitos com a GoConqr? Saiba mais.

Semelhante

CCNA Security 210-260 IINS - Exam 3
Mike M
Application of technology in learning
Jeff Wall
Innovative Uses of Technology
John Marttila
Ch1 - The nature of IT Projects
mauricio5509
The Internet
Gee_0599
CCNA Answers – CCNA Exam
Abdul Demir
SQL Quiz
R M
Professional, Legal, and Ethical Issues in Information Security
mfundo.falteni
System Analysis
R A
Flash Cards Networks
JJ Pro Wrestler
EDUC260- Multimodal Literacies for a Digital Age
angelwoo2002
Explore a Biblioteca