stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Security Plus 2 Flashcards | StudBud
Explore
/
Security Plus 2
Security Plus 2
50 terms
·
StudBud Administration
·
465 plays
Security plus review
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
Using one authentication credential to access multiple accounts or applications is known as ___
single sign-on
credentialization
federal login
identification authentication
2
RADIUS is an acronym for
Remote Algorithms for Dial In User Service
Remote Accounting Dial In User Service
Remote Authorization Dial In User Service
Remote Authentication Dial In User Service
3
In the _____ model, the end user cannot change any security settings.
Security Access Control
Mandatory Access Control
Restricted Access Control
Discretionary Access Control
4
Which of the following DNS attacks replaces a fraudulent IP address for a symbolic name?
DNS poisoning
DNS masking
DNS replay
DNS forwarding
5
The ______ party trust model supports CA.
second
third
fourth
first
6
Which is another name for a packet filter?
proxy server
reverse proxy server
firewall
DMZ
7
process functioning on behalf of the user that attempts to access a file is known as a(n) _____
operation check
resource
object
subject
8
The primary design of a(n) is to capture the transmissions from legitimate users
rogue access point
WEP
evil twin
Bluetooth grabber
9
Creating a pattern of when & from where a user accesses a remote Web acct is an example of ____
computer footprinting
cognitive biometrics
keystroke dynamics
Time-Location Resource Monitoring (TLRM)
10
What prevents a mobile device from being used until the user enters the correctpasscode?
keyboard
touch pad
swipe identifier (SW-ID)
lock screen
11
A digital certificate associates ________.
a private key with a digital signature
a user’s public key with their private key
the user’s identity with their public key
a user’s private key with the public key
12
A(n) _____ intercepts internal user requests & then processes that request on behalf of user.
content filter
host detection server
proxy server
intrusion prevention device
13
_____ in access control means that if a condition isn't explicitly met then access is rejected.
Prevention control
Explicit rejection
Denial of duties
Implicit deny
14
Which of the following is not an advantage of a load balancer?
DoS attacks can be detected and stopped.
The risk of overloading a desktop client is reduced.
Network hosts can benefit from having optimized bandwidth.
Network downtime can be reduced.
15
The address space in an IPv6 header is _____ bits in length.
128
32
64
256
16
A digital certificate that turns the address bar green is a(n) ________.
Personal Web-Client Certificate
Advanced Web Server Certificate (AWSC)
X.509 Certificate
Extended Validation SSL Certificate
17
Which technology is predominately used for contactless payment systems?
Temporal Key Integrity Protocol (TKIP)
wireless local area network (WLAN)
near field communication (NFC)
Bluetooth
18
Which of these technologies is NOT found in a wireless broadband router?
wireless probe
access point
firewall
router
19
a decentralized open source FIM that does not require software to be installed on the desktop
Windows CardSpace
SSO Login Resource (SSO-LR)
Windows Live ID
OpenID
20
Bluetooth falls under the category of .
paired-device network (PDN)
local area network (LAN)
personal area network (PAN)
short area network (SAN)
21
AES-CCMP is the encryption protocol standard used in .
Bluetooth
WPA
WPA2
IEEE 802.11
22
A disadvantage of biometric readers is _______.
speed
standards
size
cost
23
The version of the X.500 standard that runs on a personal computer over TCP/IP is_____.
LDAP
Lite RDAP
DAP
IEEE X.501
24
Each of the following make up the AAA elements in network security except _______.
auditing usage (accounting)
determining user need (analyzing)
controlling access to network resources (authentication)
enforcing security policies (authorization)
25
Which of these IEEE WLANs has the highest data rate?
802.11n
802.11ac
802.11b
802.11g
26
Which of the following is the most secure protocol for transferring files?
SFTP
SCP
FTPS
FTP
27
Which of the following would not be a valid ICMP error message?
Network Unreachable
Host Unreachable
Router Delay
Destination Network Unknown
28
A(n) _____ is a set of permissions that is attached to an object.
Subject Access Entity (SAE)
access control list (ACL)
object modifier
security entry designator
29
Each of the following attacks use Internet Control Message Protocol (ICMP) except _______.
Ping of Death
ICMP poisoning
ICMP Redirect attack
Smurf DoS attack
30
Public-Key Cryptography Standards (PKCS) ________.
define how hashing algorithms are created
are used to create public keys only
have been replaced by PKI
are widely accepted in the industry
31
Digital certificates can be used for each of the following except ________.
to verify the authenticity of the Registration Authorizer
to verify the identity of clients and servers on the Web
encrypt channels provide secure coms between clients & SVRs
to encrypt messages for secure e-mail communications
32
Which technology is NOT a characteristic of a mobile device?
small form factor
physical keyboard
local nonremovable data storage
data synchronization capabilities
33
One of the first mobile devices was a _______.
smartphone
tablet
notebook
personal digital assistant (PDA)
34
A user entering her username would correspond to the _____ action in access control.
identification
authorization
authentication
access
35
Each optional feature is found on most mobile devices EXCEPT .
digital camera
operating system
removable storage media
microphone
36
A RADIUS authentication server requires that the _____ be authenticated first.
supplicant
authentication server
authenticator
user
37
Keystroke dynamics is an example of _____ biometrics.
adaptive
resource
behavioral
cognitive
38
Which of the following is true regarding a flood guard?
It protects a router from password intrusions.
can be used on either local host systems or network devices.
separate hardware appliance that is located inside the DMZ.
It prevents DoS or DDoS attacks.
39
unauthorized access of information from a wireless device through Bluetooth connection called?
Bluetooth snatching
bluejacking
Bluetooth spoofing
bluesnarfing
40
Each of the following is a technique for securing a router except _______.
secure all ports
set a strong administrator password
make all configuration changes remotely
use a meaningful router name
41
_____ biometrics is related to the perception, thought processes, and understanding of the user
Standard
Behavioral
Cognitive
Intelligent
42
Which is not a practice for implementing access control?
Least privilege
Job rotation
Mandatory classes
Separation of duties
43
A variation of NAT that is commonly found on home routers is _______.
Subnet transformation (ST)
Network address IP transformation (NAIPT)
Network proxy translation (NPT)
Port address translation (PAT)
44
Which version of Simple Network Management Protocol (SNMP) is considered the most secure?
SNMPv2
SNMPv4
SNMPv3
SNMPv5
45
individual who periodically reviews security settings & maintains records of access by users is
custodian
owner
supervisor
manager
46
Which of the following human characteristics cannot be used for biometric identification?
face
retina
fingerprint
weight
47
Tablet computers are designed for
hardware upgrades
processing capabilities
ease of use
wireless connection speed
48
Which of the following is true about network address translation (NAT)?
It can be stateful or stateless.
It substitutes MAC addresses for IP addresses.
It can only be found on core routers
It removes private addresses when packet leaves the network.
49
Rule Based Access Control _____.
requires that a custodian set all rules
dynamically assigns roles to subjects based on rules
a realworld approach linking a user job function security
is considered obsolete today
50
An entity that issues digital certificates is a(n) ________.
Digital Signer (DS)
Signature Authority (SA)
Certificate Authority (CA)
Certificate Signatory (CS)
