stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Duplicate of Security Plus 2 Flashcards | StudBud
Explore
/
Duplicate of Security Plus 2
Duplicate of Security Plus 2
50 terms
·
StudBud Administration
·
114 plays
Security plus review
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
A RADIUS authentication server requires that the _____ be authenticated first.
authenticator
supplicant
user
authentication server
2
_____ in access control means that if a condition isn't explicitly met then access is rejected.
Explicit rejection
Denial of duties
Prevention control
Implicit deny
3
Which of the following is true regarding a flood guard?
can be used on either local host systems or network devices.
It protects a router from password intrusions.
separate hardware appliance that is located inside the DMZ.
It prevents DoS or DDoS attacks.
4
Which of these IEEE WLANs has the highest data rate?
802.11b
802.11g
802.11n
802.11ac
5
Which technology is predominately used for contactless payment systems?
near field communication (NFC)
Bluetooth
Temporal Key Integrity Protocol (TKIP)
wireless local area network (WLAN)
6
Public-Key Cryptography Standards (PKCS) ________.
are widely accepted in the industry
have been replaced by PKI
define how hashing algorithms are created
are used to create public keys only
7
Bluetooth falls under the category of .
paired-device network (PDN)
short area network (SAN)
local area network (LAN)
personal area network (PAN)
8
process functioning on behalf of the user that attempts to access a file is known as a(n) _____
subject
resource
operation check
object
9
Each of the following attacks use Internet Control Message Protocol (ICMP) except _______.
ICMP Redirect attack
Ping of Death
ICMP poisoning
Smurf DoS attack
10
a decentralized open source FIM that does not require software to be installed on the desktop
Windows Live ID
OpenID
SSO Login Resource (SSO-LR)
Windows CardSpace
11
Rule Based Access Control _____.
dynamically assigns roles to subjects based on rules
requires that a custodian set all rules
is considered obsolete today
a realworld approach linking a user job function security
12
What prevents a mobile device from being used until the user enters the correctpasscode?
touch pad
lock screen
swipe identifier (SW-ID)
keyboard
13
Which is not a practice for implementing access control?
Least privilege
Separation of duties
Mandatory classes
Job rotation
14
Which of the following human characteristics cannot be used for biometric identification?
face
retina
fingerprint
weight
15
RADIUS is an acronym for
Remote Accounting Dial In User Service
Remote Algorithms for Dial In User Service
Remote Authorization Dial In User Service
Remote Authentication Dial In User Service
16
The ______ party trust model supports CA.
second
first
third
fourth
17
A disadvantage of biometric readers is _______.
speed
cost
standards
size
18
Creating a pattern of when & from where a user accesses a remote Web acct is an example of ____
cognitive biometrics
Time-Location Resource Monitoring (TLRM)
computer footprinting
keystroke dynamics
19
A variation of NAT that is commonly found on home routers is _______.
Network address IP transformation (NAIPT)
Network proxy translation (NPT)
Subnet transformation (ST)
Port address translation (PAT)
20
The primary design of a(n) is to capture the transmissions from legitimate users
rogue access point
evil twin
Bluetooth grabber
WEP
21
The version of the X.500 standard that runs on a personal computer over TCP/IP is_____.
DAP
LDAP
Lite RDAP
IEEE X.501
22
Which of these technologies is NOT found in a wireless broadband router?
firewall
wireless probe
router
access point
23
AES-CCMP is the encryption protocol standard used in .
WPA2
WPA
IEEE 802.11
Bluetooth
24
Which is another name for a packet filter?
reverse proxy server
firewall
DMZ
proxy server
25
In the _____ model, the end user cannot change any security settings.
Mandatory Access Control
Security Access Control
Restricted Access Control
Discretionary Access Control
26
A digital certificate that turns the address bar green is a(n) ________.
X.509 Certificate
Advanced Web Server Certificate (AWSC)
Extended Validation SSL Certificate
Personal Web-Client Certificate
27
A(n) _____ intercepts internal user requests & then processes that request on behalf of user.
proxy server
host detection server
content filter
intrusion prevention device
28
Which of the following DNS attacks replaces a fraudulent IP address for a symbolic name?
DNS forwarding
DNS replay
DNS masking
DNS poisoning
29
An entity that issues digital certificates is a(n) ________.
Signature Authority (SA)
Digital Signer (DS)
Certificate Authority (CA)
Certificate Signatory (CS)
30
Which of the following would not be a valid ICMP error message?
Destination Network Unknown
Router Delay
Network Unreachable
Host Unreachable
31
Each optional feature is found on most mobile devices EXCEPT .
digital camera
removable storage media
operating system
microphone
32
Each of the following is a technique for securing a router except _______.
use a meaningful router name
set a strong administrator password
secure all ports
make all configuration changes remotely
33
A user entering her username would correspond to the _____ action in access control.
access
identification
authorization
authentication
34
Keystroke dynamics is an example of _____ biometrics.
cognitive
resource
adaptive
behavioral
35
Which version of Simple Network Management Protocol (SNMP) is considered the most secure?
SNMPv5
SNMPv2
SNMPv4
SNMPv3
36
Using one authentication credential to access multiple accounts or applications is known as ___
identification authentication
federal login
single sign-on
credentialization
37
_____ biometrics is related to the perception, thought processes, and understanding of the user
Standard
Cognitive
Intelligent
Behavioral
38
One of the first mobile devices was a _______.
notebook
personal digital assistant (PDA)
smartphone
tablet
39
Which of the following is true about network address translation (NAT)?
It substitutes MAC addresses for IP addresses.
It can be stateful or stateless.
It removes private addresses when packet leaves the network.
It can only be found on core routers
40
Which of the following is the most secure protocol for transferring files?
SCP
FTPS
SFTP
FTP
41
Which technology is NOT a characteristic of a mobile device?
physical keyboard
local nonremovable data storage
data synchronization capabilities
small form factor
42
unauthorized access of information from a wireless device through Bluetooth connection called?
bluejacking
Bluetooth spoofing
Bluetooth snatching
bluesnarfing
43
A(n) _____ is a set of permissions that is attached to an object.
access control list (ACL)
security entry designator
Subject Access Entity (SAE)
object modifier
44
Tablet computers are designed for
wireless connection speed
ease of use
processing capabilities
hardware upgrades
45
Each of the following make up the AAA elements in network security except _______.
determining user need (analyzing)
controlling access to network resources (authentication)
enforcing security policies (authorization)
auditing usage (accounting)
46
The address space in an IPv6 header is _____ bits in length.
256
128
32
64
47
individual who periodically reviews security settings & maintains records of access by users is
supervisor
manager
owner
custodian
48
Digital certificates can be used for each of the following except ________.
to verify the authenticity of the Registration Authorizer
encrypt channels provide secure coms between clients & SVRs
to encrypt messages for secure e-mail communications
to verify the identity of clients and servers on the Web
49
Which of the following is not an advantage of a load balancer?
The risk of overloading a desktop client is reduced.
Network downtime can be reduced.
DoS attacks can be detected and stopped.
Network hosts can benefit from having optimized bandwidth.
50
A digital certificate associates ________.
a user’s public key with their private key
a private key with a digital signature
the user’s identity with their public key
a user’s private key with the public key
