CYBR 3200 Exam 2

Point-to-Point Protocol (PPP) over Secure Sockets Layer (SSL) and Point-to-Point Protocol (PPP) over Secure Shell (SSH) are two Unix-based methods for creating VPNs

A(n) Access Control List (ACL) is a list of authorization rights attached to an object - in other words, who can access that device or application and what can they do with it.

The access control principle that restricts users to having access appropriate to the level required for their assigned duties.

IPSec concentrators use a complex set of security protocols to protect information, including Internet Key Exchange (IKE), which provides for the exchange of security keys between the machines in the VPN.

The access control process that documents the activities of the authenticated individual and systems.

A control model in which the computer system enforces the controls without the input or intervention of the system or data owner.

An automatic phone-dialing program that dials every phone number in a configured range and checks if a person, answering machine, or modem answers.

A term referring to two connections over a VPN line.

Client authentication is similar to user authentication but with the addition of usage limits.

False

The tcpdump tool will output both the header and packet contents into hex format.

In application protocol verification, the higher-order protocols are examined for unexpected packet behavior or improper use.

Because of its ubiquity in UNIX/Linux systems, tcpdump has become the de facto standard in network sniffing.

When the measured activity is outside baseline parameters, exceeding the clipping level, the IDPS sends an alert to the administrator.

Applications that use a combination of techniques to detect an intrusion and trace it back to its source.

Blacklists and whitelists are most commonly used in signature-based detection and stateful protocol analysis.

The tcpdump option that specifies the number of packets to capture.

A signature-based IDPS examines network traffic in search of patterns that match known signatures.

A collection of honeypots connected together on a subnet.

Provides an organization with overall situational awareness of network activities.

True

The primary drawback associated with ad hoc networks is that they are inherently unreliable.

The branding name for interoperable equipment that supports IEEE 802.11i requirements.

A notable Bluetooth attack that allows a nearby attacker to issue commands to an unsuspecting target phone.

Bluetooth networks are referred to as piconets.

The largest area of concern with regard to security in ZigBee.

A wireless modulation technique that combines digital and analog signaling to encode data into radio signals.

In the mesh wireless topology, there may be no dominant WAP.

The primary advantage of the hierarchal wireless topology configuration is the increased number of connections among stations.

True

The best way to secure Telnet.

The HTTP response code that indicates an error has occurred on the client side.

HTML is a key component of the Web, working in conjunction with HTTP to move content from servers to clients.

In passive mode, a trusted internal FTP client makes an outgoing request to the FTP server.

The best way to secure FTP or TFTP.

False

True

A simple method of transferring files between computer systems.

One of the biggest strengths of Perl is its text-manipulation abilities.

Refers to a new use of existing technologies.

Originally developed as a client-side language.

True

A simple message providing status information about the monitored device.

The best way to restrict URL access.

DNS zones provide a mechanism to divide ownership responsibility among various DNS servers.

Collections of IP addresses of known spam sources that can be integrated into SMTP server configurations.

To provide monitoring, an SNMP agent must be installed on a desired host or network device.

True

HTML is the basis for Web communication.

False

The best way to make sure data is properly encrypted while in transit.

A major problem with FTP is that data is transferred in plaintext.

In 2010, OWASP determined that injection attacks were the top risk to Web applications.

The HTTP request method that retrieves meta-information only from the resource signified in the URI.

Designed to translate information sent from a particular agent or class of agents.

The best way to direct visitors to a new location or page.

The latest and strongest version of a set of authentication protocols developed by Cisco Systems.

The centralized authentication method that uses UDP.

A bank’s ATM that limits users to certain transactions is an example of constrained user interface access control.

Biometrics are mainly used for authentication by security-minded entities.

A brute-force attack is time-intensive and rarely aimed at the target system in general.

Describes everything in the protected network behind a VPN gateway.

The access control principle most frequently associated with data classifications.

VPNs protect packets by performing IP encapsulation.

False

True

Used when a client should be authenticated for each session.

Encryption-based solutions that enable private communication over public networks.

Applies to information that could cause damage to national security if disclosed.

A control system where enforcement is handled by the computer system itself.

False

True

Hardware or software modules that perform encryption, authentication, and encapsulation in a VPN.

False

Intrusion prevention consists of activities that deter an intrusion.

By default, tcpdump prints packet header information.

Wireless sensors are most effective when their footprints overlap.

A tool that provides active intrusion prevention.

Captures only traffic originating from and destined to 192.168.1.100.

Valid packets exploit poorly configured DNS servers to inject false information.

False

True

True

Monitors network traffic on a segment to detect attacks.

When an admin hacks back into an attacker’s system to gather info.

A list of discrete entities known to be benign.

Most NBA sensors can be deployed in passive mode only.

SNMP contains trap functions that alert management consoles when thresholds are crossed.

False

The primary advantage of mesh wireless topology is its flexibility.

QPSK uses four signal states that are 90 degrees out of phase.

The area the wireless network’s radio signal reaches.

Connectivity model using one access point serving multiple clients.

Required for RSN compliance.

Bluetooth attack allowing remote command execution on a target phone.

A collection of BSSs connected by DSs is an extended service set (ESS).

Technology that transmits data bits across multiple frequency channels simultaneously.

Wireless modulation technique for encoding data onto a radio signal.

True

Bluetooth 2.0 increased the data rate to around 3 Mbps.

802.11n has a maximum data rate of 600 Mbps.

Group created to certify interoperability of 802.11b products.

Ad hoc wireless models rely on multiple stations for connectivity.

False

Wireless security protocol considered too weak for most network settings.