Cybersecurity Fundamentals
Exam Materials
Course Introduction
Cybersecurity Fundamentals introduces students to the essential concepts, principles, and practices of securing digital information and systems. The course explores the core areas of cybersecurity, including threat landscape, risk assessment, cryptography, network security, access control, and incident response. Students will learn about common types of cyber attacks, the importance of security policies, and strategies for protecting system integrity and privacy in both personal and organizational contexts. Through a combination of theoretical knowledge and hands-on activities, students will gain practical experience in identifying vulnerabilities and applying foundational security measures to mitigate cyber threats.
Recommended Textbook Guide to Firewalls and VPNs 3rd Edition by Michael
E. Whitman
Available Study Resources on Quizplus
10 Chapters
496 Verified Questions
496 Flashcards
Source URL: https://quizplus.com/study-set/2181 Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43454
Sample Questions
Q1) Describe a dictionary attack.
Answer: The dictionary attack, which is a variation on the brute force attack, narrows the field by selecting specific target accounts and using a list of commonly used passwords (the dictionary) instead of random combinations.Organizations can use such dictionaries themselves to disallow passwords during the reset process and thus guard against easy to-guess passwords.In addition, rules requiring additional numbers and/or special characters make the dictionary attack less effective.Another variant, called a rainbow attack, makes use of a pre-computed hash using a time-memory tradeoff technique that uses a database of pre-computed hashes from sequentially calculated passwords to look up the hashed password and read out the text version, with no brute force required.
Q2) Describe the difference between direct and indirect attacks.
Answer: A direct attack is when a hacker uses a personal computer to break into a system.An indirect attack is when a system is compromised and used to attack other systems, such as in a botnet (a collection of software programs that operate autonomously to attack systems and steal user information) or other distributed denial-of-service attack.Direct attacks originate from the threat itself.Indirect attacks originate from a system or resource that itself has been attacked and is malfunctioning or working under the control of a threat.
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Security Policies and Standards
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43455
Sample Questions
Q1) A security ____________________ is an outline of the overall information security strategy and a roadmap for planned changes to the organization's information security environment.
Answer: framework
Q2) Explain how access control lists might be implemented.
Answer: A capability table specifies the subjects and objects that users or groups can access; in some systems, capability tables are called user profiles or user policies.These specifications frequently take the form of complex matrices, rather than simple lists or tables.The access control matrix combines capability tables and ACLs, so that organizational assets are listed along the vertical axis while users are listed along the horizontal axis.The resulting matrix contains ACLs in columns for a particular device or asset, while a row contains the capability table for a particular user.
Q3) The identification of critical business functions and the resources needed to support them is the cornerstone of the ____________________ plan.
Answer: business continuity (BC)
To view all questions and flashcards with answers, click on the resource link above.
Chapter 3: Authenticating Users
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43456
Sample Questions
Q1) Describe the differences between local and centralized authentication.
Answer: Local authentication: A server maintains a local file of usernames and passwords that it refers to for matching the username-password pair being supplied by a client.This is the most common form of authentication, the weakness of which is that passwords can be forgotten, stolen, or accidentally revealed.
Centralized authentication service: A centralized server handles identification, authentication, authorization, and accountability.Accountability means tracking who has done what and when.It is most commonly set up as a form of auditing and occurs when a system records the activities of each user and writes details about each activity to a log file.
Q2) What are the general steps a firewall uses to authenticate users?
Answer: 1.The client makes a request to access a resource.
2.The firewall intercepts the request and prompts the user for name and password.
3.The user submits the requested information to the firewall.
4.The user is authenticated.
5.The request is checked against the firewall's rule base.
6.If the request matches an existing allow rule, the user is granted access.
7.The user accesses the desired resources.
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Introduction to Firewalls
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43457
Sample Questions
Q1) Packet-filtering firewalls examine every incoming packet _____ and can selectively filter packets.
A) transport
B) session
C) header
D) data
Q2) Function as an outbound network-level proxy.
A)PAT and NAT
B)bastion host
C)application proxy
D)extranet
E)header
F)perimeter
G)data
H)port
I)packet filtering
Q3) Describe each generation of firewalls.
Q4) What type of packet-filtering rules are typically defined?
Q5) What components are commonly found in a firewall?
Q6) Provide an example of a proxy server implementation.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Packet Filtering
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43458
Sample Questions
Q1) 16-bit value aids in the division of the data stream into packets of information.
A)packet
B)identification header field
C)router
D)ICMP
E)protocol header field
F)firewall appliances
G)stateful packet filtering
H)fragmentation
I)stateless packet filtering
Q2) The proper rule ____________________ ensures that the most resource-intensive actions are performed after the most restrictive ones, thereby reducing the number of packets that undergo intense scrutiny.
Q3) Stateless packet filtering is more secure than stateful packet filtering.
A)True
B)False
Q4) A(n) ____________________ is hardware or software that blocks or allows transmission of information packets based on criteria such as port, IP address, and protocol.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewall Configuration and Administration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43459
Sample Questions
Q1) ____ firewalls are installed at all endpoints of the network, including the remote computers that connect to the network through VPNs.
A) Distributed
B) Remote
C) Integrated
D) Routing
Q2) Many companies use the Internet to enable a(n) ____________________ that connects internal hosts with specific clients in other organizations.
Q3) The cornerstone of most firewalls is the ____, a set of instructions based on organizational policy, configured by the administrator.
A) rule set
B) IP forwarding set
C) packet filter
D) DNS
Q4) What is an intrusion detection and prevention system?
Q5) What is a screen saver password? Why is it important?
Q6) What is IP forwarding?
Q7) List the critical resources for a firewall's successful operation.
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Working With Proxy Servers and
Application-Level Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43460
Sample Questions
Q1) How should organizations cope with proxy server slowdown?
A) Use a different proxy server product.
B) Add multiple proxy servers to the same network connection.
C) Add multiple network connections for the same proxy server.
D) Buy additional hardware.
Q2) Set of protocols that enable proxy server access to applications without an assigned proxy server.
A)dual-homed host
B)URL redirection
C)nontransparent proxies
D)log files
E)parameters
F)SOCKS
G)WinGate
H)proxy servers
I)transparent proxies
Q3) A proxy server rebuilds packets with new ____________________ IP information, which shields internal users from those on the outside.
Q4) How do reverse proxy servers work?
Q5) How can proxy servers affect performance of the network?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Implementing the Bastion Host
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43461
Sample Questions
Q1) On a Windows bastion host, consider creating two ____________________: one for the operating system and one for the Web server, DNS server, or other software you plan to run on the host.
Q2) You can check your computer's system information for the clock speed of your processor, which may be called the ____.
A) Central Processing Unit (CPU)
B) hard drive
C) data cache
D) lookaside buffer
Q3) System specifically designed and implemented to withstand attacks.
A)instruction cache
B)log files
C)translation lookaside buffer
D)data cache
E)Demilitarized Zone
F)bastion host
G)UNIX
H)processor speed
I)syslog daemon
Q4) Discuss the pros and cons of having more than one bastion host.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Encryption - The Foundation for the Virtual
Private
Network
Available Study Resources on Quizplus for this Chatper
48 Verified Questions
48 Flashcards
Source URL: https://quizplus.com/quiz/43462
Sample Questions
Q1) ____ attacks are collections of brute-force methods that attempt to deduce statistical relationships between the structure of the unknown key and the ciphertext that is the output of the cryptosystem.
A) Correlation
B) Man-in-the-middle
C) Dictionary
D) Timing
Q2) The replacement of one alphabet character with another from more than one alphabets is known as
A) polyalphabetic substitution
B) transposition cipher
C) Caesar cipher
D) monoaphabetic substitution
Q3) Asymmetric encryption uses ____ separate keys for each message.
A) one
B) two
C) three
D) four
Q4) What are three commonly used functions used by encryption algorithms?
To view all questions and flashcards with answers, click on the resource link above. Page 11
Q5) Describe symmetric encryption.What is the weakness of this type of encryption?
Chapter 10: Setting up a Virtual Private Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43463
Sample Questions
Q1) Describe software VPN systems.
Q2) How is the encryption of the data payload accomplished on a VPN?
Q3) The problem with mesh VPNs is that the requirement that all communications flow into and out of the central router slows down communications.
A)True
B)False
Q4) A(n) ____________________ tunnel is a communications path that makes use of Internet-based hosts and servers to conduct data from one network station to another, just like any other TCP/IP data transmission.
Q5) List some devices that can form the endpoints of the VPN.
Q6) Describe the drawbacks of VPNs.
Q7) ____________________ mode of IPSec is used to provide secure communications between hosts over any range of IP addresses.
Q8) For fast-growing networks, a ____ configuration is preferable.
A) mesh
B) hub-and-spoke
C) inter-connected
D) client
Q9) What are VPN endpoints?
To view all questions and flashcards with answers, click on the resource link above. Page 12