SecurityPro Chapter 5 Quiz

Where should an organization's web server be placed?

• DMZ

• Honeynet

• Extranet

• Intranet

Which of the following is a privately controlled portion of a network that is accessible to some specific external entities?

• MAN

• Extranet

• Intranet

• Internet

A honeypot is used for which purpose?

• To disable an intruder's system

• To entrap intruders

• To delay intruders in order to gather auditing data

• To prevent sensitive data from being accessed

Which of the following devices can apply quality of service and traffic-shaping rules based on what created the network traffic?

• Application-aware devices

• Proxy server

• Network access control

• All-in-one security appliances

You want to create a collection of computers on your network that appear to have valuable data but actually store fake data that could entice a potential intruder. Which features should you implement?

• NIDS

• NIPS

• Honeynet

• Extranet

Which item would provide the BEST security for a small financial credit business that handles personal financial information for clients seeking small loans over the internet?

• Network access control system

• Proxy server with access controls

• All-in-one security appliance

• Firewall on your gateway server to the internet

Which of the following terms describes a network device that is exposed to attacks and has been hardened against those attacks?

• Bastion or sacrificial host

• Multi-homed

• Circuit proxy

• Kernel proxy

Of the following security zones, which one can serve as a buffer network between a private secured network and the untrusted internet?

• Intranet

• Padded cell

• Extranet

• DMZ

Which solution should you implement to control access to the private network through a single server?

• VPN concentrator

• DMZ

• IPS

• IDS

What is the primary purpose of a VPN?

• Support the distribution of public web documents

• Allow remote systems to save on long-distance charges

• Allow the use of network-attached printers

• Support secured communications over an untrusted network