Name:     ID: 
 
Email: 

Chapter12

True/False
Indicate whether the statement is true or false.
 

 1. 

Human errors, ignorance, and omissions cause more than half of all security breaches sustained by networks.
 

 2. 

Network security is more often compromised “from the inside” than from external sources.
 

 3. 

A security policy should state exactly which hardware, software, architecture, or protocols will be used to ensure security.
 

 4. 

Encryption is the last means of defense against data theft.
 

 5. 

By default, the 802.11 standard offers substantial security.
 

Multiple Choice
Identify the choice that best completes the statement or answers the question.
 

 6. 

____ is a social engineering practice in which a person attempts to glean access or authentication information by posing as someone who needs that information.
a.
Cracking
c.
War driving
b.
Hacking
d.
Phishing
 

 7. 

In a ____ attack, a person redirects or captures secure transmissions as they occur.
a.
denial-of service
c.
war driving
b.
man-in-the-middle
d.
phishing
 

 8. 

____ software searches a node for open ports.
a.
Phishing
c.
Authentication
b.
Sniffing
d.
Port scanner
 

 9. 

A router that is not configured to drop packets that match certain suspicious characteristics is an example of a risk associated with ____.
a.
people
c.
protocols and software
b.
transmission and hardware
d.
Internet access
 

 10. 

An NOS that contains a “back door”is an example of a risk associated with ____.
a.
people
c.
protocols and software
b.
transmission and hardware
d.
Internet access
 

 11. 

A ____ attack occurs when an Internet chat user sends commands to a victim’s machine that cause the screen to fill with garbage characters and requires the victim to terminate their chat sessions.
a.
flashing
c.
war driving
b.
denial-of-service
d.
phishing
 

 12. 

A ____ attack occurs when a system becomes unable to function because it has been deluged with data transmissions or otherwise disrupted.
a.
flashing
c.
war driving
b.
denial-of-service
d.
phishing
 

 13. 

A ____ main function is to examine packets and determine where to direct them based on their Network layer addressing information.
a.
switch’s
c.
router’s
b.
gateway’s
d.
proxy server’s
 

 14. 

A ____ firewall is a router (or a computer installed with software that enables it to act as a router) that examines the header of every packet of data it receives to determine whether that type of packet is authorized to continue to its destination.
a.
packet-filtering
c.
proxy
b.
gateway
d.
selective
 

 15. 

A ____ attack occurs when a hacker uses programs that try a combination of a user ID and every word in a dictionary to gain access to the network.
a.
flashing
c.
dictionary
b.
denial-of-service
d.
brute force
 

 16. 

A ____ attack occurs when a hacker tries numerous possible character combinations to find the key that will decrypt encrypted data.
a.
flashing
c.
dictionary
b.
denial-of-service
d.
brute force
 

 17. 

The combination of a public key and a private key is known as a ____.
a.
key lock
c.
key pair
b.
key frame
d.
key set
 

 18. 

A(n) ____ is a password-protected and encrypted file that holds an individual’s identification information, including a public key.
a.
digital certificate
c.
access control list
b.
authentication file
d.
authentication certificate
 

 19. 

The use of certificate authorities to associate public keys with certain users is known as ____.
a.
PGP
c.
IPSec
b.
PKI
d.
SSL
 

 20. 

____ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.
a.
PGP
c.
IPSec
b.
SSH
d.
SSL
 

 21. 

____ is a method of encrypting TCP/IP transmissions.
a.
PGP
c.
PAP
b.
IPSec
d.
SSL
 

 22. 

In ____ , a hacker forges name server records to falsify his host’s identity.
a.
IP spoofing
c.
ID spoofing
b.
DNS spoofing
d.
DHCP spoofing
 

 23. 

A VPN ____ authenticates VPN clients and establishes tunnels for VPN connections.
a.
router
c.
concentrator
b.
service
d.
certificate authority
 

 24. 

____ protocols are the rules that computers follow to accomplish authentication.
a.
Access
c.
Authority
b.
Availability
d.
Authentication
 

 25. 

RADIUS and TACACS belong to a category of protocols known as AAA (____).
a.
access, authorization, and accounting
b.
authentication, authorization, and accounting
c.
authentication, authorization, and authority
d.
authentication, authorization, and access
 

 26. 

In ____, both computers verify the credentials of the other.
a.
mutual authorization
c.
mutual authentication
b.
mutual access
d.
mutual verification
 



 
         Start Over