Information Security Exam Review
Course Introduction
Information Security is a comprehensive course that explores the principles, practices, and technologies used to protect information systems from unauthorized access, disruption, or destruction. Topics include the fundamentals of confidentiality, integrity, and availability, risk management, cryptography, network and application security, threat assessment, and security policies. Through real-world case studies and practical exercises, students develop an understanding of security vulnerabilities, defense mechanisms, ethical considerations, and compliance with legal and regulatory requirements in the context of securing digital information across various platforms.
Recommended Textbook Guide to Network Defense and Countermeasures 3rd Edition by Randy Weaver
Available Study Resources on Quizplus
14 Chapters
699 Verified Questions
699 Flashcards
Source URL: https://quizplus.com/study-set/2179
Page 2
Chapter 1: Network Security Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43421
Sample Questions
Q1) An attack in which many computers are hijacked and used to flood the target with so many false requests that the server cannot process them all,and normal traffic is blocked
A)auditing
B)biometrics
C)DMZ
D)DDoS attack
E)packet filters
F)port
G)RBAC
H)signatures
I)socket
J)worm
Answer: D
Q2) What is a VPN typically used for?
A) secure remote access
B) detection of security threats
C) block open ports
D) filter harmful scripts
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: TCP-IP
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43422
Sample Questions
Q1) Briefly describe Network Address Translation and how it makes a network more secure.
Answer: IP addresses are valuable commodities.If attackers can find a computer's IP address,they can run a port scan to look for open ports they can xploit.By hiding IP addresses,you can prevent certain attacks.To hide the addresses of computers on your network,you can use Network Address Translation (NAT)to translate your private network's internal addresses into the address of the NAT server's external interface connected to the Internet.A private network's internal addresses are not routable on the Internet.
Q2) List the seven layers of the OSI model.
Answer: Application Presentation Session Transport Network Data Link Physical
Q3) The ____________ command shows current sessions with associated port numbers.
Answer: netstat netstat -n
Page 4
To view all questions and flashcards with answers, click on the resource link above.
Chapter 3: Network Traffic Signatures
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43423
Sample Questions
Q1) The signature of a normal FTP connection includes a three-way handshake.
A)True
B)False
Answer: True
Q2) Which of the following is NOT among the items of information that a CVE reference reports?
A) attack signature
B) name of the vulnerability
C) description of vulnerability
D) reference in other databases
Answer: A
Q3) In the three-way handshake,the first packet in the sequence has the ________ flag set.
Answer: SYN
Q4) What is the difference between a vanilla port scan and a strobe port scan?
Answer: In a vanilla scan,all ports from 0 to 65,535 are probed one after another.In a strobe scan,an attacker scans only ports that are commonly used by specific programs in an attempt to see whether the program is present and can be used.
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Routing Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43424
Sample Questions
Q1) Cisco routers support both numbered and named ACLs,starting with IOS version 11.2.
A)True
B)False
Q2) a router that connects a stub network to the larger network
A)ACE
B)ARP table
C)banner
D)console port
E)convergence
F)inverse mask
G)metrics
H)routing
I)stub router
j.virtual terminal
Q3) During the routing process,the router strips off ______________________ layer header information and then examines the Network layer address.
Q4) ____________ routes are manually configured routes that direct all packets not specifically configured in the routing table.
To view all questions and flashcards with answers, click on the resource link above.
Page 6
Chapter 5: Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43425
Sample Questions
Q1) The standardization of cryptographic protocols discourages attackers from trying to break them.
A)True
B)False
Q2) Which of the following is NOT a critical goal of information security?
A) confidentiality
B) scalability
C) authentication
D) nonrepudiation
Q3) What is a downside to using Triple DES?
A) uses only a 56-bit key
B) goes through three rounds of encryption
C) using three keys decreases security
D) requires more processing time
Q4) Which of the following is the first step in the digital signature process where Mike sends a message to Sophie?
A) a message digest of Mike's message is calculated using a hashing algorithm
B) Sophie compares the message digest she calculated to Mikes's message
C) Sophie encrypts Mike's message with Mike's public key
D) the message digest is encrypted by Mike's private key
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Wireless Network Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43426
Sample Questions
Q1) Which of the following is defined as the positive difference in amplitude between two signals?
A) fading
B) gain
C) reflection
D) attenuation
Q2) What is a Basic Service Set?
A) a group of wireless devices served by a single AP
B) multiple APs are set up to provide some overlap
C) a wireless network that does not use an AP
D) wireless devices set up as a basic ad-hoc network
Q3) Which of the following is defined as the maximum departure of a wave from the undisturbed state?
A) amplitude
B) spectrum
C) frequency
D) wavelength
Q4) A _________________ IR transmission relies on reflected light that can bounce off walls and other objects.
Q5) Why should you use caution when using multiple APs?
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Understanding Wireless Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43427
Sample Questions
Q1) Which of the following is NOT a suggested practice before using a newly configured wireless network?
A) change the administrator password
B) change the manufacturer's default key
C) use the default encryption method
D) alter the default channel
Q2) In which type of wireless attack does the attacker cause valid users to lose their connections by sending a forged deauthentication frame to their stations?
A) association flood
B) jamming
C) session hijacking
D) MAC address spoofing
Q3) What is the purpose of MAC address filtering and how can attackers defeat it?
Q4) Which of the following is true about the SSID?
A) they can be Null
B) they are registered
C) they are not found in beacon frames
D) they are found in control frames
Q5) What is a site survey and why should you conduct one?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Intrusion Detection and Prevention Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43428
Sample Questions
Q1) an attempt to gain unauthorized access to network resources
A)accountability
B)escalated
C)event horizon
D)inline sensor
E)intrusion
F)passive sensor
G)profiles
H)sensor
I)stateful protocol analysis
J)true positive
Q2) Which of the following is true about the steps in setting up and using an IDPS?
A) anomaly-based systems come with a database of attack signatures
B) sensors placed on network segments will always capture every packet
C) alerts are sent when a packet doesn't match a stored signature
D) false positives do not compromise network security
Q3) In a _______________ based detection system,the IDPS can begin working immediately after installation.
Q4) An IDPS __________________ server is the central repository for sensor and agent data.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43429
Sample Questions
Q1) The ACK flag is normally sent at the end of the three-way ______________ to indicate that a connection is established.
Q2) Which of the following is NOT among the common guidelines that should be reflected in the rule base to implement an organization's security policy?
A) only authenticated traffic can access the internal network
B) employees can use instant-messaging only with external network users
C) the public can access the company Web servers
D) employees can have restricted Internet access
Q3) The Cisco PIX line of products is best described as which of the following?
A) software firewall
B) PC with firewall installed
C) firewall appliance
D) VPN gateway
Q4) Which element of a rule base conceals internal names and IP addresses from users outside the network?
A) tracking
B) filtering
C) NAT
D) QoS
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Firewall Design and Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43430
Sample Questions
Q1) In a screened ____________ setup,a router is added between the host and the Internet to carry out IP packet filtering.
Q2) Proxy servers take action based only on IP header information.
A)True
B)False
Q3) What are the 8 general steps for creating a bastion host?
Q4) What is a critical step you should take on the OS you choose for a bastion host?
A) ensure all security patches are installed
B) make sure it is the latest OS version
C) choose an obscure OS with which attackers are unfamiliar
D) customize the OS for bastion operation
Q5) What is a bastion host and how is one typically configured?
Q6) A DMZ is a subnet of _____________ accessible servers placed outside the internal network.
Q7) What is a step you can take to harden a bastion host?
A) enable additional services to serve as honeypots
B) open several ports to confuse attackers
C) configure several extra accounts with complex passwords
D) remove unnecessary services
Page 12
Q8) How can using two firewalls help in protecting your network?
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: VPN Concepts
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43431
Sample Questions
Q1) Another name for a VPN connection is tunnel.
A)True
B)False
Q2) Describe a mesh VPN topology.What are advantages and disadvantages?
Q3) TLS splits the input data in half and recombines it using a(n)___________ function.
Q4) The Internet Key ______________ protocol enables computers to make an SA.
Q5) Kerberos component that holds secret keys for users,applications,services,or resources
A)AH
B)ESP
C)GRE
D)IKE
E)IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT
Q6) Network gateways are ____________ of the VPN connection.
Page 13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 12: Internet and World Wide Web Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43432
Sample Questions
Q1) ISP facilities that provide connectivity to the Internet for business,education,and home users
A)anycast addressing
B)DNSSEC
C)network access points
D)pharming
E)POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer
Q2) What is a buffer overflow attack?
Q3) Windows Basic Authentication requires that users enter a username and password and the password is transmitted using a hashing algorithm.
A)True
B)False
Q4) What is the Internet backbone? Describe how routers work with the Internet backbone.
Q5) The _______________ Web Server is the most widely used Web server application.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Security Policy Design and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43433
Sample Questions
Q1) What are three questions you should ask in deciding how your organization should perform risk analysis?
Q2) Which of the following is considered an asset?
A) hacker
B) unpatched Web server
C) disgruntled employee
D) intellectual property
Q3) What are the four steps of Threat and Risk Assessment?
Q4) By providing _________________ through backup systems,you ensure information remains accessible if primary systems go offline.
Q5) Which of the following is NOT a phase in the system development life cycle?
A) needs assessment
B) security audit
C) system implementation
D) performance monitoring
Q6) Once written,a security policy should not be altered so that you can maintain consistency.
A)True
B)False
Q7) When should you update the security policy?
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: On-Going Security Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43434
Sample Questions
Q1) Which of the following is a benefit of using centralized data collection to manage sensor data?
A) less network traffic
B) less administrative time
C) data stays on the local network
D) must use a VPN to transport data
Q2) Which of the following is NOT a type of event that you would normally monitor?
A) user account creation
B) e-mail attachment handling
C) antivirus scanning
D) access to shared folders
Q3) You should review the logs and alerts created by your security devices,a process called _________ monitoring.
Q4) Change management should be used before making changes to firewall or IDPS rules that affect users.
A)True
B)False
Q5) With ___________________ data collection,data from security devices goes to a management console on its own local network.
To view all questions and flashcards with answers, click on the resource link above. Page 16