Question 1

Overall for firms, which is more time consuming to patch?

Accepted Answer

A)   Applications
B)   Operating systems
C)   Both are about equally time consuming to patch
D)   None of the above

Question 2

In VoIP, firewalls are a problem because they tend to ________.

Accepted Answer

A)   reduce throughput
B)   increase jitter
C)   increase latency
D)   make traffic unreadable

Question 3

The first task in security is to understand the environment to be protected.

Accepted Answer

A) True 
 B)False

Question 4

NAT adds latency to VoIP packets.

Accepted Answer

A) True 
 B)False

Question 5

SIP Identity protocols ________.

Accepted Answer

A)   ensure that traffic is authenticated between two companies holding public/private keys
B)   are uncommon on IP telephones
C)   Both A and B
D)   Neither A nor B

Question 6

Signaling is the carriage of voice between two parties.

Accepted Answer

A) True 
 B)False

Question 7

Skype's security protocols have been publicly studied and approved.

Accepted Answer

A) True 
 B)False

Question 8

VoIP security can easily be implemented even if the company's basic security is weak.

Accepted Answer

A) True 
 B)False

Question 9

To take advantage of user typing errors, attackers register site names that are similar to those of legitimate domain names.

Accepted Answer

A) True 
 B)False

Question 10

With Active-X controls, active scripting is enabled by default.

Accepted Answer

A) True 
 B)False

Question 11

SIP identity protocols are common on IP telephones.

Accepted Answer

A) True 
 B)False

Question 12

DoS attacks against VoIP can be successful even if they increase latency only slightly.

Accepted Answer

A) True 
 B)False

Question 13

In a SQL injection attack, attackers may use lookup commands to obtain unauthorized information.

Accepted Answer

A) True 
 B)False

Question 14

In VoIP, encryption may ________.

Accepted Answer

A)   reduce throughput
B)   increase jitter
C)   increase latency
D)   make traffic unreadable

Question 15

Experts advise firms to turn on most or all applications and then harden them.

Accepted Answer

A) True 
 B)False

Question 16

In a stack overflow attack, to where does the return address point?

Accepted Answer

A)   To the beginning of the stack entry's data area
B)   To the end of the stack entry's data area
C)   To the next command in the program being hacked
D)   To the return address entry in the stack entry

Question 17

Baselines are used to go beyond default installation configurations for high-value targets.

Accepted Answer

A) True 
 B)False

Question 18

Cookies can used to track users at a website.

Accepted Answer

A) True 
 B)False

Question 19

Signaling does not consist of communication to manage the network.

Accepted Answer

A) True 
 B)False

Question 20

Encryption is heavily used in commercial e-mail.

Accepted Answer

A) True 
 B)False

Exam 8: Application Security

NAT adds latency to VoIP packets.

Correct AnswerverifiedShow Answer

The first task in security is to understand the environment to be protected.

Correct AnswerverifiedShow Answer

VoIP security can easily be implemented even if the company's basic security is weak.

Correct AnswerverifiedShow Answer

In a SQL injection attack, attackers may use lookup commands to obtain unauthorized information.

Correct AnswerverifiedShow Answer

With Active-X controls, active scripting is enabled by default.

Correct AnswerverifiedShow Answer

To take advantage of user typing errors, attackers register site names that are similar to those of legitimate domain names.

Correct AnswerverifiedShow Answer

Signaling is the carriage of voice between two parties.

Correct AnswerverifiedShow Answer

Baselines are used to go beyond default installation configurations for high-value targets.

Correct AnswerverifiedShow Answer

Signaling does not consist of communication to manage the network.

Correct AnswerverifiedShow Answer

SIP Identity protocols ________.

Correct AnswerverifiedShow Answer

Cookies can used to track users at a website.

Correct AnswerverifiedShow Answer

Encryption is heavily used in commercial e-mail.

Correct AnswerverifiedShow Answer

In a stack overflow attack, to where does the return address point?

Correct AnswerverifiedShow Answer

In VoIP, firewalls are a problem because they tend to ________.

Correct AnswerverifiedShow Answer

SIP identity protocols are common on IP telephones.

Correct AnswerverifiedShow Answer

In VoIP, encryption may ________.

Correct AnswerverifiedShow Answer

Skype's security protocols have been publicly studied and approved.

Correct AnswerverifiedShow Answer

Experts advise firms to turn on most or all applications and then harden them.

Correct AnswerverifiedShow Answer

DoS attacks against VoIP can be successful even if they increase latency only slightly.

Correct AnswerverifiedShow Answer

Overall for firms, which is more time consuming to patch?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified