Question 1

Which of the following provides an identification card of sorts to clients who request services in a Kerberos system?

Accepted Answer

A)   Ticket Granting Service
B)   Authentication Server 
C)   Authentication Client
D)   Key Distribution Center

Question 2

You might put a proxy server in the __________________,which is exposed to the outside world,neither in the trusted nor untrusted network.

Accepted Answer

demilitari...

Question 3

Which type of IDPS is also known as a behavior-based intrusion detection system?

Accepted Answer

A)   Network-based
B)   Anomaly-based 
C)   Host-based
D)   Signature-based

Question 4

What is the range of the well-known ports used by TCP and UDP?

Accepted Answer

A)   1024-65,536
B)   0-1023 
C)   0-65,536
D)   20, 21, 25, 53, 80

Question 5

Which of the following biometric authentication systems is the most accepted by users?

Accepted Answer

A)   Keystroke pattern recognition
B)   Fingerprint recognition 
C)   Signature recognition
D)   Retina pattern recognition

Question 6

What is the next phase of the preattack data gathering process after an attacker has collected all of an organization's Internet addresses?

Accepted Answer

A)   Footprinting
B)   Content filtering 
C)   Deciphering
D)   Fingerprinting

Question 7

​____________  is a technology in which multiple real,routable external IP addresses are converted to special ranges of internal IP addresses,usually on a one-to-one basis.

Accepted Answer

Network-address tran...

Question 8

Which technology employs sockets to map internal private network addresses to a public address using a one-to-many mapping?

Accepted Answer

A)   Network-address translation
B)   Screened-subnet firewall 
C)   Port-address translation
D)   Private address mapping

Question 9

Was developed by Netscape in 1994 to provide security for online e-commerce transactions.

Accepted Answer

A)   VPN
B)   transport mode
C)   SSL
D)   PKI
E)   digital certificateF)  asymmetric encryptionG)  Vernam cipherH)  transposition cipherI)  content filterJ)  footprinting

Question 10

The intermediate area between trusted and untrusted networks is referred to as which of the following?

Accepted Answer

A)   Unfiltered area
B)   Semi-trusted area 
C)   Demilitarized zone
D)   Proxy zone C

Question 11

Which of the following is used in conjunction with an algorithm to make computer data secure from anybody except the intended recipient of the data?

Accepted Answer

A)   Key
B)   Plaintext 
C)   Cipher
D)   Cryptosystem A

Question 12

Which of the following is NOT among the three types of authentication mechanisms?

Accepted Answer

A)   Something a person knows
B)   Something a person has 
C)   Something a person sees
D)   Something a person can produce

Question 13

What is most commonly used for the goal of nonrepudiation in cryptography?

Accepted Answer

A)   Block cipher
B)   Secret key 
C)   PKI
D)   Digital signature

Question 14

A(n)____________________ token uses a challenge-response system in which the server challenges the user with a number,that when entered into the token provides a response that provides access.

Accepted Answer

The answer of A(n)____________________ token uses a challenge-response system in...

Question 15

Which of the following is true about firewalls and their ability to adapt in a network?

Accepted Answer

A)   Firewalls can interpret human actions and make decisions outside their programming 
B)   Because firewalls are not programmed like a computer, they are less error prone 
C)   Firewalls are flexible and can adapt to new threats 
D)   Firewalls deal strictly with defined patterns of measured observation

Question 16

____________________ presents a threat to wireless communications,a practice that makes it prudent to use a wireless encryption protocol to prevent unauthorized use of your Wi-Fi network.

Accepted Answer

The answer of ____________________ presents a threat to wireless communications,a...

Question 17

​A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message.

Accepted Answer

A)   VPN
B)   transport mode
C)   SSL
D)   PKI
E)   digital certificateF)  asymmetric encryptionG)  Vernam cipherH)  transposition cipherI)  content filterJ)  footprinting

Question 18

Which tool can best identify active computers on a network?

Accepted Answer

A)   Packet sniffer 
B)   Port scanner 
C)   Trap and trace 
D)   Honey pot

Question 19

Which type of device allows only specific packets with a particular source,destination,and port address to pass through it.

Accepted Answer

A)   Dynamic packet filtering firewall
B)   Proxy server 
C)   Intrusion detection system
D)   Application layer firewall

Question 20

List the most common firewall implementation architectures.

Accepted Answer

Three architectural implementations of firewalls are especially common: single bastion hosts,screened-host firewalls,and screened-subnet firewalls. ​

Exam 12: Protection Mechanisms

Which of the following provides an identification card of sorts to clients who request services in a Kerberos system?

Correct AnswerverifiedShow Answer

You might put a proxy server in the __________________,which is exposed to the outside world,neither in the trusted nor untrusted network.

Correct Answerverifieddemilitari...View AnswerShow Answer

Which type of IDPS is also known as a behavior-based intrusion detection system?

Correct AnswerverifiedShow Answer

What is the range of the well-known ports used by TCP and UDP?

Correct AnswerverifiedShow Answer

Which of the following biometric authentication systems is the most accepted by users?

Correct AnswerverifiedShow Answer

What is the next phase of the preattack data gathering process after an attacker has collected all of an organization's Internet addresses?

Correct AnswerverifiedShow Answer

​____________ is a technology in which multiple real,routable external IP addresses are converted to special ranges of internal IP addresses,usually on a one-to-one basis.

Correct AnswerverifiedNetwork-address tran...View AnswerShow Answer

Which technology employs sockets to map internal private network addresses to a public address using a one-to-many mapping?

Correct AnswerverifiedShow Answer

Was developed by Netscape in 1994 to provide security for online e-commerce transactions.

Correct AnswerverifiedShow Answer

The intermediate area between trusted and untrusted networks is referred to as which of the following?

Correct AnswerverifiedC

Which of the following is used in conjunction with an algorithm to make computer data secure from anybody except the intended recipient of the data?

Correct AnswerverifiedA

Which of the following is NOT among the three types of authentication mechanisms?

Correct AnswerverifiedShow Answer

What is most commonly used for the goal of nonrepudiation in cryptography?

Correct AnswerverifiedShow Answer

A(n)____________________ token uses a challenge-response system in which the server challenges the user with a number,that when entered into the token provides a response that provides access.

Correct AnswerverifiedShow Answer

Which of the following is true about firewalls and their ability to adapt in a network?

Correct AnswerverifiedShow Answer

____________________ presents a threat to wireless communications,a practice that makes it prudent to use a wireless encryption protocol to prevent unauthorized use of your Wi-Fi network.

Correct AnswerverifiedShow Answer

​A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message.

Correct AnswerverifiedShow Answer

Which tool can best identify active computers on a network?

Correct AnswerverifiedShow Answer

Which type of device allows only specific packets with a particular source,destination,and port address to pass through it.

Correct AnswerverifiedShow Answer

List the most common firewall implementation architectures.

Correct AnswerverifiedThree architectural implementations of firewalls are especially common: single bastion hosts,screened-host firewalls,and screened-subnet firewalls. ​

Correct Answer
verified

Correct Answer
verified
demilitari...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

____________ is a technology in which multiple real,routable external IP addresses are converted to special ranges of internal IP addresses,usually on a one-to-one basis.

Correct Answer
verified
Network-address tran...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
C

Correct Answer
verified
A

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message.

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Three architectural implementations of firewalls are especially common: single bastion hosts,screened-host firewalls,and screened-subnet firewalls.