Sec+ Week 3 review (Ch 10 - 14)

Question 1

What microwave link mode has the qualities of having high gain, making OTA encryption not necessary (but still good)?

Accepted Answer

P2P

Question 2

What's not one of the main mitigations for embedded systems?

Accepted Answer

Firewall

Question 3

What header option mitigates clickjacking, script injection, and other client-side attacks?

Accepted Answer

CSP

Question 4

Protocol that handles authentication and key exchange for IPSec.

Accepted Answer

IKE

Question 5

NIDS can be much more application specific than HIDS/HIPS

Accepted Answer

False

Question 6

Choose two recommended DNS safety measures:

Accepted Answer

Only local hosts can make recursive queries, DNSSEC

Question 7

What two statements describe the relationship between ICSs, SCADAs, and PLCs?

Accepted Answer

An ICS is made from plant devices/equipment with embedded PLCs, A SCADA system controls large-scale, multi-site ICSs

Question 8

__________ is the process of deploying an application to the target environment.

Accepted Answer

Provisioning

Question 9

What authentication type might an LDAP server use if you wanted to implement Kerberos?

Accepted Answer

SASL

Question 10

Which of the following is a stand-alone hardware FW that performs as a FW only?

Accepted Answer

Appliance FW

Question 11

What type of firewall is distinguished by the fact they inspect IP headers?

Accepted Answer

Packet filtering

Question 12

Standard for secure data transfer across the internet that functions at the network layer.

Accepted Answer

IPSec

Question 13

What would NB-IoT use as an identifier?

Accepted Answer

SIM card

Question 14

What controller is built to be customizable, thus the structure/logic is not fully set at the time of manufacture?

Accepted Answer

FPGA

Question 15

What is something a network monitor wouldn't be concerned about?

Accepted Answer

Network traffic

Question 16

What principle involves developers committing/testing coding updates early and often?

Accepted Answer

Continuous Integration

Question 17

The most secure compiled code is without redundancy/dead code, as well as being clear to follow and analyze.

Accepted Answer

False

Question 18

Chose two correct statements on the differences between compiled and interpreted codes:

Accepted Answer

Interpreted code is dependent to run, but is platform independent, Compiled code can run independently, but is platform dependent

Question 19

IPSs are always inline, meaning traffic must pass through them instead of being redirected to them.

Accepted Answer

True

Question 20

What two statements correctly describes an SNMP monitor?

Accepted Answer

Displays alerts and pulls info from MIBs, A location from which network activity can be overseen

Questions 20