BCSE317L - Information Security Quiz-2

What are the two main types of firewall used in network security?

• Packet-filter firewall and proxy-based firewall

• Hardware firewall and software firewall

• Firewall 1 and Firewall 2

• Firewall A and Firewall B

What distinguishes a packet-filter firewall from a proxy firewall in a corporate network?

• A packet-filter firewall is more expensive than a proxy firewall

• A packet-filter firewall is designed for remote offices, while a proxy firewall is for headquarters

• A packet-filter firewall is software-based, while a proxy firewall is hardware-based

• A packet-filter firewall filters based on network and transport layer headers, while a proxy firewall filters based on the application layer

In a deauthentication attack, which device is typically the first target?

• Router firewall
• Access point
• End-user device
• Ethernet switch

What is true about data security?

• Data security is the protection of programs and data in computers and communication systems against unauthorized access

• It refers to the right of individuals or organizations to deny or restrict the collection and use of information

• Data security requires system managers to reduce unauthorized access to the systems by building physical arrangements and software checks.

• All of the above

Which of the following is a common database security attack that exploits vulnerabilities in web applications to manipulate database queries?

• Phishing

• SQL Injection

• Brute-force attack

• Denial of Service (DoS)

What type of attack involves an attacker gaining unauthorized access to a database by impersonating a legitimate user or by exploiting weak authentication mechanisms?

• Cross-Site Scripting (XSS)

• Man-in-the-Middle (MitM)

• Brute-force attack

• Denial of Service (DoS)

• None

What is the purpose of database auditing in database security?

• To encrypt sensitive data

• To prevent unauthorized access to data

• To monitor database activity

• To hide sensitive data from authorized users

How does an Intrusion Prevention System (IPS) differ from an IDS?

• • By focusing on server performance

• • By actively blocking malicious traffic in real-time

• • By improving website aesthetics

• • Granting unrestricted access to all users

If an IDS and IPS were security personnel, how would you describe their responsibilities?

• IDS is the detective, investigating incidents; IPS is the security guard, actively preventing threats

• • IDS is the gatekeeper, allowing only trusted access; IPS is the crime investigator, analyzing incidents.

• • IDS is the artist, enhancing the visual appeal; IPS is the traffic controller, managing the flow.

• • IDS is the superhero, granting unrestricted access; IPS is the vigilant watchman, monitoring activity.

How does a host-based IDS differ from a network-based IDS in terms of monitoring scope

• • Improving website aesthetics

• • Host-based IDS monitors activities on a specific system; network-based IDS monitors network traffic.

• • Enhancing server performance

• • Granting unrestricted access to all users