Computer Networks and Security Test Preparation
Course Introduction
This course provides an in-depth exploration of the fundamental principles of computer networks and network security. Topics include network architecture, protocols, and standards; data transmission techniques; local area and wide area network technologies; and network management. The course also covers essential security concepts such as cryptography, authentication, access control, firewalls, intrusion detection, and secure communication protocols. Through theoretical study and practical exercises, students will develop the knowledge and skills required to design, implement, and protect networked systems in both enterprise and cloud environments.
Recommended Textbook
CompTIA Security+ Guide to Network Security Fundamentals 5th Edition by Mark Ciampa
Available Study Resources on Quizplus
15 Chapters
750 Verified Questions
750 Flashcards
Source URL: https://quizplus.com/study-set/3831
Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76425
Sample Questions
Q1) An _______________ is a type of threat that can come from employees, contractors, and business partners, such as a disgruntled worker.
Answer: insider
Q2) The demand for certified IT professionals who know how to secure networks and computers is at an all-time low.
A)True
B)False
Answer: False
Q3) Describe script kiddies.
Answer: Script kiddies are individuals who want to break into computers to create damage yet lack the advanced knowledge of computers and networks needed to do so. Instead, script kiddies do their work by downloading automated attack software (scripts) from Web sites and using it to perform malicious acts.
Q4) A security administrator has both technical knowledge and managerial skills.
A)True
B)False
Answer: True
Q5) ____________________ provides tracking of events.
Answer: Accounting
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76418
Sample Questions
Q1) Because of how a rootkit replaces operating system files, it can be difficult to remove a rootkit from a system.
A)True
B)False
Answer: True
Q2) A phishing attack that uses telephone calls instead of e-mails.
A)Adware
B)Backdoor
C)Botnet
D)Computer virus
E)Hoax
F)Keylogger
G)Logic bomb
H)Macro virus
I)Spear phishing
J)Vishing
Answer: J
Q3) Malicious software, or ____________________, silently infiltrate computers with the intent to do harm.
Answer: malware
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Application and Networking-Based Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76417
Sample Questions
Q1) Choose the SQL injection statement example below that could be used to find specific users:
A)whatever' OR full_name = '%Mia%'
B)whatever' OR full_name IS '%Mia%'
C)whatever' OR full_name LIKE '%Mia%'
D)whatever' OR full_name equals '%Mia%'
Answer: C
Q2) Injecting and executing commands to execute on a server
A)Address Resolution Protocol (ARP)
B)ARP Poisoning
C)Buffer overflow attack
D)Command injection
E)Cross-site scripting (XSS)
F)DNS poisoning
G)Flash cookie
H)Ping flood
I) Session token
J) Smurf attack
Answer: D
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76416
Sample Questions
Q1) Securing the host involves protecting the physical device itself, securing the operating system software on the system, using security-based software applications, and monitoring logs.
A)True
B)False
Q2) How does an RFID tag embedded into an ID badge function without a power supply?
Q3) How can an area be made secure from a non-secured area via two interlocking doors to a small room?
A)Using a lockout
B)Using a mantrap
C)Using a closet
D)Using a pit
Q4) A(n) ____________________ is a record or list of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area.
Q5) What is the maximum effective range of a typical passive RFID tag?
A)12
B)15
C)19
D)25
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76415
Sample Questions
Q1) A key exchange that requires all parties to agree upon a large prime number and related integer so that the same key can be separately created.
A)Advanced Encryption Standard (AES)
B)Block cipher
C)Ciphertext
D)Data Encryption Standard (DES)
E)Diffie-Hellman (DH)
F)Elliptic curve cryptography (ECC)
G)Ephemeral key
H)Private key
I)Public key
J)Stream cipher
Q2) Describe the RIPEMD hash.
Q3) What cryptographic method, first proposed in the mid-1980s, makes use of sloping curves instead of large prime numbers?
A)FCC
B)RSA
C)ECC
D)IKE
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76414
Sample Questions
Q1) Public keys can be stored by embedding them within digital certificates, while private keys can be stored on the user's local system.
A)True
B)False
Q2) Why is IPsec considered to be a transparent security protocol?
A)IPsec packets can be viewed by anyone
B)IPsec is designed to not require modifications of programs, or additional training, or additional client setup
C)IPsec's design and packet header contents are open sourced technologies
D)IPsec uses the Transparent Encryption (TE) algorithm
Q3) What protocol below supports two encryption modes: transport and tunnel?
A)HTTPS
B)IPSec
C)SSL
D)TLS
Q4) Digital certificates cannot be used to identify objects other than users.
A)True
B)False
Q5) Identify the general duties of an RA.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76413
Sample Questions
Q1) What technology enables authorized users to use an unsecured public network, such as the Internet, as if were a secure private network?
A)IKE tunnel
B)VPN
C)endpoint
D)router
Q2) Defense in depth, or layered security, involves the use of multiple types of network hardware within a network.
A)True
B)False
Q3) An administrator has two servers that host the same web content, but only one server is utilized at a given time. What can be configured to make use of both servers in a manner that is transparent to the end users?
A)Stateful packet filtering
B)Load balancing
C)DNS caching
D)DNS poisoning
Q4) A ______________ is a worker who work occasionally or regularly from a home office.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76412
Sample Questions
Q1) What protocol suite below is the most commonly used protocol for local area network (LAN) communication?
A)UDP
B)IPX/SPX
C)TCP/IP
D)Appletalk
Q2) Which layer of the OSI model contains TCP protocol, which is used for establishing connections and reliable data transport between devices?
A)Application Layer
B)Presentation Layer
C)Network Layer
D)Transport Layer
Q3) DNS poisoning can be prevented using the latest edition of what software below?
A)BIND
B)DHCP
C)WINS
D)finger
Q4) Why is the Physical Layer omitted in the TCP/IP model?
Q5) What are the two types of community strings?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76411
Sample Questions
Q1) A set of standards primarily for smartphones and smart cards that can be used to establish communication between devices in close proximity
A)Bluejacking
B)Bluesnarfing
C)Initialization vector (IV)
D)Near field communication (NFC)
E)Preshared key (PSK)
F)RF Jamming
G)War driving
H)Wi-Fi Protected Setup (WPS)
I)Wi-Fi Protected Access 2 (WPA 2)
J)Wired Equivalent Privacy (WEP)
Q2) A Bluetooth attack in which the attacker accesses unauthorized information from a wireless device using a Bluetooth connection, is known as?
A)Bluejacking
B)Bluecracking
C)Bluesnarfing
D)Bluetalking
Q3) Describe a piconet.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Mobile Device Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76424
Sample Questions
Q1) Mobile devices use _____________ for storage, which is a nonvolatile solid state electronic storage that can be electrically erased and reused.
Q2) Select below the option that is not one of the SD format card families:
A)Standard capacity (SDSC)
B)High capacity (SDHC)
C)Extreme Capacity (SDXC)
D)Secure Digital Input Output (SDIO)
Q3) An ultrabook is an example of what type of a portable computer?
A)Laptop
B)Netbook
C)Subnotebook
D)Tablet
Q4) What PIN is considered to be the most commonly used PIN?
A)1234
B)4321
C)0000
D)7777
Q5) How might an attacker misuse a QR code?
Q6) What is the difference between a feature phone and a smartphone?
Q7) How does BYOD increase employee performance?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76423
Sample Questions
Q1) Describe the Bell-LaPadula model.
Q2) The least restrictive access control model in which the owner of the object has total control over it.
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction
Q3) Which access control model is considered to be the least restrictive?
A)Role Based Access Control
B)Mandatory Access Control
C)Rule Based Access Control
D)Discretionary Access Control
Q4) List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.
13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 12: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76422
Sample Questions
Q1) OpenID is an example of a web-based federated identity management (FIM) system.
A)True
B)False
Q2) ____________________ is a decentralized open source FIM that does not require specific software to be installed on the desktop.
Q3) Select below the decentralized open-source FIM that does not require specific software to be installed on the desktop:
A)OAuth
B)OpenID
C)Windows Live ID
D)OpenPass
Q4) What kind of biometrics utilizes a person's unique physical characteristics for authentication, such as fingerprints or unique characteristics of a person's face?
A)Cognitive biometrics
B)Reactive biometrics
C)Standard biometrics
D)Affective biometrics
Q5) Explain how an attacker can use a resetting attack.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76421
Sample Questions
Q1) A duplicate of the production site that has all the equipment needed for an organization to continue running, including office space and furniture, telephone jacks, computer equipment, and a live telecommunications link.
A)Business continuity
B)Chain of custody
C)Clustering
D)Computer forensics
E)Continuity of operations
F)Faraday cage
G)Hot site
H)Mean time between failures (MTBF)
I)Recovery point objective
J)Risk assessment
Q2) A snapshot of the current state of a computer that contains all current settings and data is known as what option below:
A)system standard
B)system view
C)system image
D)system baseline
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76420
Sample Questions
Q1) What kind of learners learn from taking notes, being at the front of the class, and watching presentations?
A)Kinesthetic
B)Auditory
C)Spatial
D)Visual
Q2) Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability.
A)True
B)False
Q3) What may be defined as the components required to identify, analyze, and contain an incident?
A)Vulnerability response
B)Incident response
C)Risk response
D)Threat response
Q4) List two characteristics of a policy.
Q5) Identify two opportunities for security education and training.
Q6) What are the duties of the CMT?
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: Vulnerability Assessment and Third Party Integration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76419
Sample Questions
Q1) ____________________ for organizations are intended to identify vulnerabilities and alert network administrators to these problems.
Matching
a.Architectural design
b.Attack surface
c.Baseline reporting
d.Code review
e.Gray box
Q2) The first step in a vulnerability assessment is to determine the assets that need to be protected.
A)True
B)False
Q3) List and describe the elements that make up a security posture.
Q4) In a __________ test, the tester has no prior knowledge of the network infrastructure that is being tested.
Q5) A port scanner can be used to search a system for port vulnerabilities. The RADMIN port scanner is an example of this type of software.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 17