Internet Security Exam Bank
Course Introduction
Internet Security explores the principles, technologies, and practices used to protect information and systems on the internet from cyber threats. The course covers topics such as cryptography, authentication, network security protocols, firewalls, intrusion detection systems, malware analysis, and secure application design. Students will learn about common vulnerabilities, attack vectors, and defense mechanisms, along with legal and ethical considerations in cybersecurity. Practical exercises and case studies are integrated to reinforce strategies for safeguarding networks and data in an ever-evolving digital landscape.
Recommended Textbook Guide to Firewalls and VPNs 3rd Edition by Michael E. Whitman
Available Study Resources on Quizplus
10 Chapters
496 Verified Questions
496 Flashcards
Source URL: https://quizplus.com/study-set/2181
Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43454
Sample Questions
Q1) When a computer is the ____ of an attack, it is used as an active tool to conduct the attack.
A) subject
B) victim
C) object
D) direction
Answer: A
Q2) A ____ attempts to protect internal systems from outside threats.
A) security perimeter
B) botnet
C) risk management strategy
D) buffer overflow
Answer: A
Q3) A prolonged increase in power is called a ____.
A) spike
B) surge
C) sag
D) fault
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Security Policies and Standards
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43455
Sample Questions
Q1) Practices, procedures, and guidelines effectively explain how to comply with ____.
A) standards
B) policies
C) vision
D) security blueprints
Answer: B
Q2) The ____ is created by a systems administer to direct practices with many details.
A) EISP
B) ISSP
C) managerial guidance SysSP
D) technical specification SysSP
Answer: D
Q3) Attack profiles should include scenarios depicting a typical attack, with details on the method, the indicators, and the broad consequences of the attack.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Authenticating Users
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43456
Sample Questions
Q1) ____________________ is the act of confirming the identity of a potential user.
Answer: Authentication
Q2) Lattice-based access control is a variation of ____ access control.
A) mandatory
B) discretionary
C) nondiscretionary
D) classification
Answer: A
Q3) ____________________ IP address mappings work best because some TACACS+ systems use the source IP address to create the encryption key.
Answer: Static
Q4) In ____, access to a specific set of information is dependent on the information's content.
A) content-dependent
B) rule-based
C) role-based
D) task-based
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Introduction to Firewalls
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43457
Sample Questions
Q1) Provide an example of a proxy server implementation.
Q2) Determining whether to allow or deny the passage of packets of digital information, based on established security policy rules.
A)PAT and NAT
B)bastion host
C)application proxy
D)extranet
E)header
F)perimeter
G)data
H)port
I)packet filtering
Q3) What is a MAC layer firewall?
Q4) A firewall is designed to prevent all attackers, viruses, and would-be intruders from entering a computer or computer network.
A)True
B)False
Q5) "____________________" refers to the era of technology a firewall evolved in.
Q6) Describe stateless packet-filtering firewalls.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Packet Filtering
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43458
Sample Questions
Q1) The ____ flag tells a host to immediately terminate a connection.
A) RST
B) ACK
C) FIN
D) STP
Q2) How should a firewall process fragmentation flags?
Q3) One of the first IP header criteria you can filter on is the packet's ____.
A) length
B) ACK flag
C) source IP address
D) type of service
Q4) When Web services are offered outside the firewall, ____________________ traffic is prevented from reaching the internal networks via the implementation of some form of proxy access or DMZ architecture.
Q5) TCP/IP includes ____ which are small manageable chucks of network data.
A) Folders
B) Frames
C) Messages
D) Packets
Q6) What are ICMP packets?
Page 7
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Firewall Configuration and Administration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43459
Sample Questions
Q1) ____ is the hub for a large mailing list that features frequent announcements about security flaws.
A) Common Vulnerabilities and Exposures Database
B) CERT Coordination Center
C) SecurityFocus
D) The National Vulnerability Database
Q2) It is good practice to set aside time to perform firewall maintenance ____.
A) daily
B) weekly
C) monthly
D) yearly
Q3) With the ____ approach, the firewall determines the order in which the rules are processed.
A) Deny All
B) In Order
C) Best Fit
D) Last Fit
Q4) What are the GAISP nine Pervasive Principles?
Q5) How should a firewall administrator guard against new risks?
Q6) Describe the Content Vectoring Protocol (CVP).
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Working With Proxy Servers and
Application-Level Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43460
Sample Questions
Q1) Set of protocols that enable proxy server access to applications without an assigned proxy server.
A)dual-homed host
B)URL redirection
C)nontransparent proxies
D)log files
E)parameters
F)SOCKS
G)WinGate
H)proxy servers
I)transparent proxies
Q2) Proxy servers, like packet filters, can filter out content based on rules that contain a variety of ____________________.
Q3) A reverse proxy acts as a stand-in for a ____.
A) packet filter
B) firewall
C) proxy server
D) Web-server
Q4) How do reverse proxy servers work?
Q5) What is the most important benefit of a proxy server?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Implementing the Bastion Host
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43461
Sample Questions
Q1) On a bastion host that is intended to function as a Web server, for instance, you only need to enable traffic on TCP Port 80 and Port ____ for SSL traffic.
A) 79
B) 81
C) 443
D) 450
Q2) Once you have configured and deployed a bastion host, there is no need for further maintenance.
A)True
B)False
Q3) What is a downside of co-location for the bastion host?
A) more complicated for the administrator
B) not as much protection from natural disasters
C) decreased network uptime
D) weaker security
Q4) Discuss the pros and cons of having more than one bastion host.
Q5) Describe the RAM needs of a bastion host.
Q6) Why might it be a good idea to re-install the operating system on a bastion host?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Encryption - The Foundation for the Virtual
Private
Network
Available Study Resources on Quizplus for this Chatper
48 Verified Questions
48 Flashcards
Source URL: https://quizplus.com/quiz/43462
Sample Questions
Q1) Describe asymmetric encryption.
Q2) Firewalls have always performed encryption-related functions.
A)True
B)False
Q3) ____ is the process of deciphering the original message from an encrypted message without knowing the algorithms and keys used to perform the encryption.
A) Nonrepudiation
B) Cryptography
C) Cryptanalysis
D) Cryptology
Q4) In e-commerce, some cryptographic tools can be used to assure that parties to the transaction are authentic, so that they cannot later deny having participated in a transaction, a feature often called ____________________.
Q5) ____ was developed by Netscape in 1994 to provide security for online electronic commerce transactions.
A) Secure Hypertext Transfer Protocol (SHTTP)
B) Secure Shell (SSH)
C) Secure Sockets Layer (SSL)
D) Secure Electronic Transactions (SET)
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Setting up a Virtual Private Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43463
Sample Questions
Q1) In ____ mode, the concentrator acts as a hardware device enabling a secure site-to-site VPN connection.
A) network extension
B) client
C) server
D) mixed
Q2) ____________________ mode of IPSec is used to provide secure communications between hosts over any range of IP addresses.
Q3) VPN endpoints provide ____ and encapsulation of data.
A) encryption
B) authentication
C) routing
D) tunneling
Q4) ____ provides for the exchange of public and private keys.
A) L2TP
B) PPTP
C) IKE
D) PPP over SSH
Q5) Describe the features of IP encapsulation provided by a VPN.
Q6) Describe the hub-and-spoke configuration of a VPN.
To view all questions and flashcards with answers, click on the resource link above. Page 12