Network Security 1

Which of the following are terms for an area of an enterprise network, separated by firewalls, which contains servers that must be accessible both from the Internet and from the internal network? (Choose all that apply.)

• Intranet

• DMZ

• EGP

• Screened subnet

• Perimeter network

Which of the following authentication protocols do Windows networks use for Active Directory Domain Services (AD DS) authentication of internal clients?

• RADIUS

• WPA2

• Kerberos

• EAP-TLS

Which of the following are examples of multifactor authentication? (Choose all that apply.)

• A system that uses an external RADIUS server for authentication

• A system that requires two passwords for authentication

• A system that requires a smartcard and a PIN for authentication

• A system that requires a password and a retinal scan for authentication

Which of the following protocols can you use to authenticate Windows remote access users with smartcards?

• EAP

• MS-CHAPv2

• CHAP

• PAP

Which of the following statements best defines multifactor user authentication?

• Verification of a user's identity on all of a network's resources using a single sign-on

• Verification of a user's identity using two or more types of credentials

• Verification of a user's identity on two devices at once

• Verification of a user's membership in two or more security groups

Which of the following services are methods of tracking a user's activities on a network? (Choose all that apply.)

• Authentication

• Authorization

• Accounting

• Auditing

When a user supplies a password to log on to a server, which of the following actions is the user performing?

• Authentication

• Authorization

• Accounting

• Auditing

When a user swipes a finger across a fingerprint scanner to log on to a laptop computer, which of the following actions is the user performing?

• Authentication

• Authorization

• Accounting

• Auditing

Which of the following security protocols can authenticate users without transmitting their passwords over the network?

• Kerberos

• 802.1X

• TKIP

• LDAP

Which of the following statements about authentication auditing are not true?

• Auditing can disclose attempts to compromise passwords.

• Auditing can detect authentications that occur after hours.

• Auditing can identify the guess patterns used by password cracking software.

• Auditing can record unsuccessful as well as successful authentications.