Security Controls - 5 & 6

Question 1

What is multifactor authentication?

Accepted Answer

Multiple systems

Question 2

True or false: Authorization is about confidence level

Accepted Answer

False

Question 3

What is the difference between misuse detection and anomaly detection?

Accepted Answer

Anomaly: Baselines incoming data with normal behavior, Misuse: Baselines incoming data with patterns, or signatures

Question 4

What does authentication measure?

Accepted Answer

Confidence level

Question 5

In the context of user authentication, what is the distinction between identification and verification?

Accepted Answer

Verification corroborates the ID, Identification is presenting an ID

Question 6

What are two generic approaches to intrusion detection?

Accepted Answer

Anomaly detection, Misuse detection

Question 7

What is the principle of least privilege?

Accepted Answer

Minimal access

Question 8

What is inherence in authentication factors?

Accepted Answer

Something you are

Question 9

Name all the techniques that firewalls use to control access and enforce a site’s security policy.

Accepted Answer

Behavior Control, Service Control, User Control, Direction Control

Question 10

Need-to-know grants access to?

Accepted Answer

Resources needed

Question 11

Need-to-use grants access to?

Accepted Answer

IT equipment

Question 12

What is identification in authentication?

Accepted Answer

Presenting identifier

Question 13

What are the typical locations for the sensors in network intrusion detection systems?

Accepted Answer

Behind internal firewall monitoring LANs, In the DMZ, between external and internal firewalls, Behind the internal firewalls, monitoring backbone/central network, Outside the firewall

Question 14

Describe the placement of intrusion detection systems.

Accepted Answer

IDSs can only see data on the network segment which it is attached to

Question 15

What are some of the weaknesses of packet filters?

Accepted Answer

Vulnerable to TCP/IP attacks such as spoofing, Limited logging capability, Cannot examine upper layer data

Question 16

What is the difference between disinfecting and quarantining files?

Accepted Answer

Disinfecting – Removing malware from within a file, Quarantining – Malware stored in isolation

Question 17

What is knowledge in authentication factors?

Accepted Answer

Something you know

Question 18

What is the difference between need-to-know and need-to-use?

Accepted Answer

Need to know, Need to use

Security Controls - 5 & 6

Questions 18

Security Controls - 5 & 6

Questions 18