Exam 3: Security Part I: Auditing Operating Systems and Networks

A) is the basic protocol that permits communication between Internet sites.
B) controls Web browsers that access the WWW.
C) is the file format used to produce Web pages.
D) is a low-level encryption scheme used to secure transmissions in HTTP format.

Correct Answer

verified

Show Answer

A) is the document format used to produce Web pages.
B) controls Web browsers that access the Web.
C) is used to connect to Usenet groups on the Internet.
D) is used to transfer text files, programs, spreadsheets, and databases across the Internet.
E) is a low-level encryption scheme used to secure transmissions in higher-level () format.

Correct Answer

verified

Show Answer

Correct Answer

verified

A LAN is a local area network covering a...

View Answer

Show Answer

A) is more intensive that a Dos attack because it emanates from single source
B) may take the form of either a SYN flood or smurf attack
C) is so named because it effects many victims simultaneously, which are distributed across the internet
D) turns the target victim's computers into zombies that are unable to access the Internet
E) none of the above is correct

Correct Answer

verified

Show Answer

A) a hacker gaining access to the system because of a security flaw
B) a hardware flaw that causes the system to crash
C) a virus that formats the hard drive
D) the systems programmer accessing individual user files

Correct Answer

verified

Show Answer

A) combines the messages of multiple users into a "spoofing packet" where the IP addresses are interchanged and the messages are then distributes randomly among the targeted users.
B) is a form of masquerading to gain unauthorized access to a web server.
C) is used to establish temporary connections between network devices with different IP addresses for the duration of a communication session.
D) is a temporary phenomenon that disrupts transaction processing. It will resolve itself when the primary computer completes processing its transaction and releases the IP address needed by other users.

Correct Answer

verified

Show Answer

Correct Answer

verified

Show Answer

A) is best suited to the token-ring topology because the random-access method used by this model detects data collisions.
B) distributes both data and processing tasks to the server's node.
C) is most effective used with a bus topology.
D) is more efficient than the bus or ring topologies.

Correct Answer

verified

Show Answer

A) logic bomb
B) Trojan horse
C) worm
D) back door

Correct Answer

verified

Show Answer

Correct Answer

verified

Show Answer

Correct Answer

verified

Show Answer

A) firewalls
B) one-time passwords
C) field interrogation
D) data encryption

Correct Answer

verified

Show Answer

A) a smurf attack.
B) IP Spoofing.
C) an ACK echo attack
D) a ping attack.
E) none of the above

Correct Answer

verified

Show Answer

A) the network consists of a central computer which manages all communications between nodes
B) has a host computer connected to several levels of subordinate computers
C) all nodes are of equal status; responsibility for managing communications is distributed among the nodes
D) information processing units rarely communicate with each other

Correct Answer

verified

Show Answer

A) Deep Packet Inspection uses a variety of analytical and statistical techniques to evaluate the contents of message packets.
B) An Intrusion prevention system works in parallel with a firewall at the perimeter of the network to act as a filer that removes malicious packets from the flow before they can affect servers and networks.
C) A distributed denial of service attack is so named because it is capable of attacking many victims simultaneously who are distributed across the internet.
D) None of the above are true statements.

Correct Answer

verified

Show Answer

A) the encrypted mathematical value of the message sender's name
B) derived from the digest of a document that has been encrypted with the sender's private key
C) the computed digest of the sender's digital certificate
D) allows digital messages to be sent over analog telephone lines

Correct Answer

verified

Show Answer

A) value added networks can compare passwords to a valid customer file before message transmission
B) prior to converting the message, the translation software of the receiving company can compare the password against a validation file in the firm's database
C) the recipient's application software can validate the password prior to processing
D) the recipient's application software can validate the password after the transaction has been processed

Correct Answer

verified

Show Answer

Correct Answer

verified

A denial of service attacks (DoS)is an a...

View Answer

Show Answer