WorksheetsPre-Test NS123
Total questions: 47
Worksheet time: 23mins
Identify which security model would describe the protected assets are minimal, user are trusted and threats are minimal. (CLO1, C1)
Open access
Hybrid access
Closed access
Restrictive access
Name the elements or goals of information security. (CLO1, C1)
Vulnerability, integrity and availability
Confidentiality, integrity and availability
Confidentiality, usability and integrity
Reliability, integrity and accountability
Identify which assessment that would suit with the statement, “Actions by adversaries who try to exploit vulnerabilities to damage events”. (CLO1, C2)
Risk assessment
Assets identification
Threat assessment
Vulnerability assessment
Assets have to be identified and valued. Select the data that has the less value if the data falls into the wrong hands. (CLO1, C1)
Telephone number
Birth date
Full name
Identification number
Choose the BEST statement that defines social engineering. (CLO1, C1)
Gathering information from discarded manuals and printouts
Illegal copying of software
Using people skills to obtain proprietary information
Destroying or altering data
Some attacks, take advantage of human shortcomings to gain access that should otherwise be denied. Identify the term use to describe this type of attacks. (CLO1, C2)
IDS system
Social engineering
Perimeter security
Biometrics
How configuration weakness is exploited?
Default settings
Firewall holes
Unwritten policy
Lack of continuity
Which security weakness that can create unforeseen security threats?
Technology
Administration
Configuration
Security policy
Determine the threats that occur when someone has authorized access to the network with either an account on a server or physical access to the network.
Data disclosure
Internal
Structured
Information theft
Which of the following can be used to ask the user to enter sensitive information in a commonly trusted screen.
Trust exploitation
E-mail bombs
Social engineering
Trojan Horse
Choose the key element that distinguishes a computer worm from a computer virus.
Execute arbitrary code and installs copies of itself in the memory of infected computer
Use a variety of tools, scripts and program to launch attacks
Written to look like something else that in fact is an attack tool
Require human interaction to facilitate the spread of malicious code
Define the type of program exists primarily to propagate and spread itself to other systems. (CLO1, C1)
Virus
Worm
Trojan horse
Logic bomb
Interpret an active response in an Intrusion Detection System (IDS). (CLO1, C2)
Sending an alert to a console
Shunning attackers
Reconfiguring a router to block an IP address
Making an entry in the security audit file
Identify the device use to monitors network traffic in a passive manner. (CLO1, C1)
Web Browser
Firewall
Sniffer
IDS
Choose the BEST functions will a packet filter performs as a firewall. (CLO1, C1)
Prevents unauthorized packets from entering the network
Allows all packets to leave the network
Allows all packets to enter the network
Eliminates collisions in the network
Which of the following does packet filtering based on permit or deny rule including examining the packet content?
Stateless
Stateful
Hybrid
Special
Identify which categories of weaknesses that have those issues; hardware issue, operating system issue.
Configuration Weaknesses
Technology Weaknesses
Application Weaknesses
Security policy Weaknesses
A group of black hat hackers sets up devices that enables to review logs from computers located on the Internet. The information gathered is used to find out about new malware attacks. What have the implemented?
Research Honeypot
Protocol analyzer
Firewall
Honeynet
Name this diagram.
One box firewall
Non-routing Dual-home Host firewall
Victim Machines
External bastion host
Interpret the term “tunneling”.
An optional feature that increases network performance when turned on.
A marketing strategy to sell VPN products cheaply in return for expensive service contracts.
The encapsulation of packets inside packets of a different protocol to create and maintain the virtual circuit.
The method used by system administrator to detect hackers on the network.
Choose the CORRECT statement regarding the difference between Virtual Private Network (VPNs) and firewall.
Firewalls are user-configurable; VPNs cannot be configured
Firewalls are new type of VPN
Firewalls block messages; VPNs open pathways for messages
No difference between firewall and VPNs exists
Interpret types of bastion host that has multiple network connections but does not pass traffic between networks.
Victim machines
Internal bastion host
One-box firewall
Non-routing dual-homed hosts
Choose the CORRECT protocol that will provides authentication and encryption across the Internet.
L2TP (Layer 2 Tunneling Protocol)
PPTP (Point-to-Point Protocol)
IPSec (Internet Protocol Security)
L2F (Layer 2 Forwarding)
