Network Security Revision

Like the MAC, a hash function also takes a secret key as input.

A _________ configuration ...

The most complex part of TLS is the __________.

A __________ gateway sets up ...

The assurance that data received are exactly as sent by an authorized  entity is __________.

The approach taken by Kerberos is using authentication software tied to a secure authentication server.

Which tool concentrates security events from multiple sources and can interact with other tools such as Wireshark?

The __________ strategy is ...

Which requirement of secure communications is ensured by the implementation of MD5 or SHA hash generating algorithms?​ 

 __________ scans for attack signatures in the context of a traffic stream rather than individual packets.

Each individual who is to be included in the database of authorized users must first be __________ in the system

A _____ monitors the characteristics of a single host and the events occurring within that host for suspicious activity.

__________ involves an attempt to ...

The ______ is the ...

_________ involves the collection of data relating to the behavior of legitimate users over a period of time.

A flaw or weakness in a system’s design, implementation, or operation and management that could be exploited ...

What classification is used for an alert that correctly identifies that an exploit has occurred?

The rule _______ tells Snort what to do when it finds a packet that matches the rule criteria.

A ________ is a pattern composed of a sequence of characters that describe allowable input variants.

The function of the ________ layer is to ...

The most common means of human-to-human identification are __________.

Which Windows tool can be used to review host logs?

__________ control determines the direction in which ...

________ requires that a user prove ...

The ideal solution to the threat of malware is __________.

The __________ is when the virus function is performed.

The original message or data that is fed into the algorithm is __________.

Presenting or generating authentication information that corroborates the binding between the entity and the identifier

Typically the systems in the _________ require ...

In order to ...

A _______ is a generic term used to denote ...

Incorrect handling of program _______ is one of the most common failings in software security.

Masquerade, falsification, and repudiation are threat actions that cause __________ threat consequences.

A _________ consists of a set of computers ...

The final form of the 802.11i standard is referred to as ________.

An example of a(n) __________ attack is

__________ controls access based on comparing security labels with security clearances.

Which Windows log records events related to login attempts and operations related to file or object access?

A __________ attack is a bot attack on a computer system or network that causes a loss of service to users.

Search engines support HTTPS.

_______ certificates are used ...

ESP supports two modes of use:  transport and _________

An assault on system security that derives from an intelligent act that is a deliberate attempt to evade ...

_________ is based on the roles the users assume in a system rather than the user’s identity.

A virus that attaches to an executable program can do anything that the program is permitted to do.

A _________ is a set of programs installed on ...

The __________ component deals with the management and control of the ways entities are granted access to resources.

A NIDS/NIPS has identified a threat. Which type of security data will be generated and sent to a logging device?

______ is the recommended technique for wireless network security.

Injection attacks variants can ...

is an action, device, procedure, or technique that reduces a threat, a vulnerability, or an attack by ...

_________ is a program flaw that ...

__________ will integrate with the operating system ...

Hardware is the most vulnerable to attack and the least susceptible to automated controls.

__________ implements a security policy that specifies who or what may have access to each ...

A packet filtering firewall is typically configured to filter packets going in both directions.

A (n) __________ is a hacker with minimal technical skill who primarily uses existing attack toolkits.

The ________ is responsible for determining if an intrusion has occurred

To be of practical use an IDS should ...

The wireless environment lends itself to a ...

Which statement describes the Software-Optimized Encryption Algorithm (SEAL)?

“Incorrect Calculation of Buffer Size” is in the __________ software error category.

___ is a procedure that allows communicating parties to verify that received or stored messages are authentic.

The ______ accepts the message ...

Which algorithm can ensure data confidentiality?

If the only form of attack that could be made on an encryption algorithm is brute-force, then the way to ...

The most significant source of risk in wireless networks in the underlying communications medium.

In which of the following phases ...

The purpose of a __________ is to produce a “fingerprint” of a file, message, or other block of data.

A _______ is a ....

Depending on the details of the overall authentication system ...

_____ defines a number of content formats, which standardize representations for the support of multimedia e-mail.

An individual’s signature is not unique enough to use in biometric applications.

The smallest building block of a wireless LAN is a ______.

What function is provided by Snort as part of the Security Onion?

_______ is the process in which a CA issues a ...

A constraint is a defined relationship among roles or a condition related to roles.

__________ provide a means of adapting RBAC to the specifics of administrative and security policies in an organization.

The _______ consists of two dates: the first and last on which the certificate is valid.

A __________ is when ...

A ________ is a secret key shared by the AP and a STA and installed in some fashion outside the scope of IEEE 802.11i.

Which of the following statement is correct with regards to Dynamic Application Security Testing (DAST)? 

The principal objective for developing a PKI is to enable secure, convenient, and efficient acquisition of private keys

________ is a process where authentication ...

An institution that issues debit cards to cardholders ...

A __________ is any action that compromises the security of information owned by an organization.

Defensive programming is sometimes referred to as _________.

A(n) __________ is any entity that ...

The ________ function consists of ...

Which statement describes the tcpdump tool?

A(n) _________ is an attempt to learn or make use of information from the system that does not affect system resources.

A(n) ________ is inserted into a network segment so that the traffic that it is monitoring must pass through the sensor.

Which type of server daemon accepts messages sent by network devices to create a collection of log entries?

__________ is verification that the credentials of a user or other system entity are valid.

The advantage of a stream cipher is that you can reuse keys.

The _______ field in the outer IP header indicates whether the association is an AH or ESP security association

A __________ is an entity capable of accessing objects

A traditional packet filter ...

Which tool included in Security Onion is an interactive dashboard interface to Elasticsearch data?

IPsec can assure that _________.