Coursera 3 Risk mit

Security through abecurity iplies which af the folowing?

• Open source software is secure

• Proprietary sofware right be best kept secret

• Designers should hide functions behind frewals

• All of the above

• Crypla is net strang enougth

The information that comprises a TCP/IP five-tuple include which of the following?

• Five source and destination IP addresses

• Three source IP addresses and two destination IP addresses

• Two source IP addresses and three destination IP addresses

• One source IP address, one destination IP address, two ports, and one protocol OAll of the above

Which of the following is a false statement?

• A five-tuple firewall makes packet decisions

• lnbound packets from an internal source IP are suspicious

• Outbound packets from an external source IP are suspicious

• UDP packets with ACK bit set to 1 are suspicious

• All of the above

Why is the ACK packet so useful in establishing access decisions in a TCP/IP gateway?

• lt is 1 when the packet is too large

• lt is only 1 when it is the first packet in a UDP session

• It is 0 when it is the first packet in a TCP session

• lt is 1 when it is the first packet in a TCP or UDP session OAll of the above

IP spoofing is intended to produce which of the following consequences?

• Deceptive sender

• Deceptive receiver

• Deceptive content

• Deceptive sender and receiver

• None of the above

Firewalls separate:

• Networks from protocols OPackets from filters

• Networks from networks

• Software from data

• All of the above

Which of the following is a true statement?

• TCP/IP interoperability makes firewalls work, so it makes us more secure

• TCP/IP crypto is better than analog crypto

• TCP/IP interoperability is starting to wane

• Security designers are wise to avoid TCP/IP

• None of the above

TCP sequence numbers are protected by which of the following means?

• Encryption

• Data leakage prevention

• Randomness

• Complicated selection

• All of the above

Which threats result directly from packet floods?

• Disclosure

• Disclosure, Integrity, and Fraud

• Fraud and Theft

• None of the above

Which of the following is a true statement?

• Stateful firewalls might be stateless

• Stateful firewalls are only managed from the cloud

• Stateless firewalls handle three different services

• Stateless firewalls forget context

• All of the above