General Security Concepts

Question 1

Kerberos is client and server from MIT

Accepted Answer

True

Question 2

A Trojan horse brings in backdoors

Accepted Answer

True

Question 3

Replay is a symmetric key sniffed and then used

Accepted Answer

True

Question 4

Virus, propagates through user action (usually email)

Accepted Answer

True

Question 5

A worm self-propagates and uses exploits

Accepted Answer

True

Question 6

Open-source method of authentication

Accepted Answer

Kerberos

Question 7

BCP: RISK AND ANALYSIS, BIA, STRATEGIC PLANNING&MITIATION, TRANNING&AWARNESS, MACITENCE&AUDITS+

Accepted Answer

DOCUMENTATION AND SECURITY LABELING

Question 8

Kerberos is associated with SSO technology

Accepted Answer

True

Question 9

Sending a malformed packet that overflows a memory add. to deny availability & gainprivileges

Accepted Answer

Buffer Overflow

Question 10

Integrity is the counter concept of the Denial of Service attack

Accepted Answer

False

Question 11

The idea that a user should not be able to repudiate that he/she is responsible for something

Accepted Answer

Non-repudiation

Question 12

VIRUS : REPLICATION MECHANSIM, ACTIVATOIN MECHINSM, OBJECTIVE

Accepted Answer

TRUE

Question 13

Social engineering is a low-tech attack on people who don’t understand security

Accepted Answer

True

Question 14

OSPF

Accepted Answer

Open Shortest Path First

Question 15

The idea that a user should be accountable to actions performed under his/her name

Accepted Answer

Accountability

Question 16

Internet is a secure medium

Accepted Answer

False

Question 17

SQL are actions, objects, and users

Accepted Answer

True

Question 18

What you have: Items, like lock-and-key or cardsType

Accepted Answer

True

Question 19

Hiding or disguising an address to make it appear that the requests come from another source

Accepted Answer

Spoofing

Question 20

Refers to transmitting a packet that will be received by every device on the network.

Accepted Answer

broadcasting

Question 21

The idea that information should remain only accessible to those who are meant to access it

Accepted Answer

Confidentiality

Question 22

X.509 is an important standard for a public key infrastructure (PKI)

Accepted Answer

TRUE

Question 23

Time stamps mitigate the threat of replay attacks and provide a small measure of integrity

Accepted Answer

True

Question 24

Smurf: A special ICMP Flood attack that broadcasts ICMP requests

Accepted Answer

True

Question 25

DUN/RAS (NAS) : RADIUS, TACACS, TACACS+, SSL, PLA VIA IPSEC NETWORK

Accepted Answer

TRUE

Question 26

Birthday attack is probability-based

Accepted Answer

True

Question 27

You access a server on another computer by sending a Telnet or similar login request

Accepted Answer

True

Question 28

A file may say to have been edited by John, but how do we know John actually edited it?

Accepted Answer

Non-repudiation

Question 29

A Man-in-the-Middle denies confidentiality and integrity

Accepted Answer

True

Question 30

Kerberos also uses time stamps in order to “time out” communications for integrity

Accepted Answer

True

Question 31

Ticket authenticator that can then be used to request a particular service from a server

Accepted Answer

Kerberos

Question 32

X.509 certificate binds a name to a public key value

Accepted Answer

TRURE

Question 33

UDP Flood: Sending UDP packets to deny availability

Accepted Answer

True

Question 34

SSO : user is authenticated once to be provided authorization to multiple services

Accepted Answer

True

Question 35

If Kerberos is still secure, information confidentiality and integrity may be breached

Accepted Answer

False

Question 36

The idea that a user should be accountable to actions performed under his/her name.

Accepted Answer

Accountability

Question 37

A broadcast domain is a logical division of a computer network

Accepted Answer

True

Question 38

Diffie-Hellman is a secret key exchange over an insecure medium without any prior secrets

Accepted Answer

True

Question 39

Authentication factors: What you know, What you have, What you are

Accepted Answer

False

Question 40

SSL HAS TWO PARTS: 1. 6 STEPS 2 A ESTABLISHES SECURE CHANNEL 2. EXCHANGES DATA OVER THE CHANNEL

Accepted Answer

SSL HANDSHAKE PROTOCOL AND SSL APPLICATION DATA PROTOCOL

Question 41

What you are (Most secure): Biometrics, like the way you walk

Accepted Answer

False

Question 42

Information that is not maliciously changed is

Accepted Answer

Integrity

Question 43

Sniffing is to read information off the network

Accepted Answer

True

Question 44

Buffer overflow destroy's confidentiality and integrity

Accepted Answer

True

Question 45

Bell and LaPadula (BLM) for enforcing access control in government and military applications

Accepted Answer

TRUE

Question 46

Advertise routing updates only when they occur which uses bandwidth more effectively.

Accepted Answer

Link state routing protocols

Question 47

The concept that information should remain in the same form as it was originally intended

Accepted Answer

Integrity

Question 48

ICMP Flood: Sending ICMP (usually ping) packets to deny availability

Accepted Answer

True

Question 49

Access controls protect the confidentiality of information via controlling a user’s access to

Accepted Answer

that information

Question 50

WIRELESS INCLUDE WAP MODEL BASED ON WWW MODEL CLIENT GATEWAY & ORGINAL SERVER/ WEP

Accepted Answer

TRUE

Question 51

A ___domain can be within the same LAN segment or it can be bridged to other LAN segments

Accepted Answer

braodcast

Question 52

Remote access are VPNs, laptops, and cell phones ?

Accepted Answer

False

Question 53

Access Controls

Accepted Answer

DAC, MAC, RBAC (Rule or Role)

Question 54

Kerberos is an authentication server, security data base, and privilege server

Accepted Answer

True

Question 55

Availability refers to the idea that information should be accessible

Accepted Answer

True

Question 56

Advertise their routing table to all directly connected neighbors at regular frequent intervals

Accepted Answer

Distance vector protocols for Routers

Question 57

IGRP

Accepted Answer

Interior Gateway Routing Protocol

Question 58

ROUTER FORWARDS PACKETS BETWEEN SUBNETS PROTOCOLS

Accepted Answer

RIP. IGRP, EIGRP, OSPF, BGP. EGP,IS-IS

Question 59

Authentication protocol that uses username and password combinations that authenticate users

Accepted Answer

CHAP

Question 60

TGT is a "session key"

Accepted Answer

True

Question 61

CIA triangle is the acronym for confidentiality, integrity, and authentication in cybersecurity

Accepted Answer

False

Question 62

Kerberos is an AS server that connects with RAS(NAS) who is connected to a client

Accepted Answer

True

Question 63

On TCP/IP networks, subnets are defined as all devices whose IP addresses have the same prefix.

Accepted Answer

True

Question 64

EIGRP

Accepted Answer

Enhanced Interior Gateway Routing Protocol

General Security Concepts

Questions 76

General Security Concepts

Questions 76