Security+ Ch 7

Which of the following TCP/IP protocols do not relate to security?

• IP

• SNMP

• HTTPS

• FTP

Aideen sent an email to her supervisor explaining the Domain Name System Security Extensions (DNSSEC). Which of the following statements would Aideen have NOT included in her email?

• It is fully supported in BIND9
• It adds additional resource records
• It adds message header information
• It can prevent a DNS transfer attack

What is the recommended secure protocol for voice and video applications?

• Secure Real-time Transport Protocol (SRTP)
• Hypertext Transport Protocol Secure (HTTPS)
• Network Time Protocol (NTP)
• Secure/Multipurpose Internet Mail Extensions (S/MIME)

Which type of log can provide details regarding requests for specific files on a system?

• Audit log
• Access log
• Event log
• SysFile log

Which type of device log contains the most beneficial security data?

• Firewall log
• Email log
• Switch log
• Router log

Which type of cloud is offered to specific organizations that have common concerns?

• Public cloud
• Hybrid cloud
• Private cloud
• Community cloud

Which of these is NOT correct about an SSL accelerator?

• It is a separate hardware card that inserts into a webserver
• It contains one or more co-processors to handle SSL/TLS processing
• It can be installed as a "virtual SSL/TLS server" alongside a forward proxy server
• It replaces FTP using Secure Sockets Layer (FTPS) as a file transport layer resting "on top" of SSL/TLS

Catriona needed to monitor network traffic. She did not have the resources to install an additional device on the network. Which of the following solutions would meet her needs?

• Network tap
• Port mirroring
• Aggregation switch
• Correlation engine

Which version of SNMP is considered the most secure?

• SNMPv2

• SNMPv3

• SNMPv4

• SNMPv5

Which Domain Name System (DNS) attack replaces a fraudulent IP address for a symbolic name?

• DNS replay
• DNS masking
• DNS poisoning
• DNS forwarding