Introduction to Cyber Defense Question
Bank
Course Introduction
Introduction to Cyber Defense provides a comprehensive overview of the foundational concepts, strategies, and tools essential for protecting digital assets and networks from threats and vulnerabilities. The course explores the principles of cybersecurity, including threat intelligence, risk management, access control, and incident response. Students will learn about common types of cyberattacks, defense mechanisms, and legal and ethical considerations related to cyber defense. Through practical exercises and case studies, learners develop skills in identifying potential threats, designing secure systems, and responding to security breaches, preparing them for further study or roles in the cybersecurity field.
Recommended Textbook Guide to Network Defense and Countermeasures 3rd Edition by Randy Weaver
Available Study Resources on Quizplus
14 Chapters
699 Verified Questions
699 Flashcards
Source URL: https://quizplus.com/study-set/2179 Page 2
Chapter 1: Network Security Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43421
Sample Questions
Q1) A ______________ is reserved for a program that runs in the background to listen for requests for the service it offers.
Answer: port
Q2) A network connection consisting of a port number combined with a computer's IP address
A)auditing
B)biometrics
C)DMZ
D)DDoS attack
E)packet filters
F)port
G)RBAC
H)signatures
I)socket
J)worm
Answer: I
Q3) __________________ are spread by several methods,including running executable code,sharing disks or memory sticks,opening e-mail attachments,and viewing infected or malicious Web pages.
Answer: Viruses
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: TCP-IP
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43422
Sample Questions
Q1) the division of packets into smaller sizes to accommodate routers with frame size limitations
A)broadcast
B)datagram
C)fragmentation
D)multicast
E)scopes
F)unicast
G)stateless autoconfiguration
H)network identifier
I)Multicast Listener Discovery
J)Network Address Translation
Answer: C
Q2) How large is the IPv6 address space?
A) 32 bits
B) 128 bits
C) 64 bits
D) 168 bits
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Network Traffic Signatures
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43423
Sample Questions
Q1) Under which suspicious traffic signature category would a port scan fall?
A) informational
B) reconnaissance
C) denial of service
D) unauthorized access
Answer: B
Q2) What is the packet called where a Web browser sends a request to the Web server for Web page data?
A) HTML SEND
B) HTTP XFER
C) HTTP GET
D) HTML RELAY
Answer: C
Q3) Which TCP flag can be the default response to a probe on a closed port?
A) RST
B) URG
C) PSH
D) SYN
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Routing Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43424
Sample Questions
Q1) What Cisco router command encrypts all passwords on the router?
A) enable secret password
B) secure passwords enable
C) crypto key passwords
D) service password-encryption
Q2) a state in which all routers on a network have up-to-date routing tables
A)ACE
B)ARP table
C)banner
D)console port
E)convergence
F)inverse mask
G)metrics
H)routing
I)stub router
j.virtual terminal
Q3) Rather than using classful routing,________________ subnet masks allow you to divide your network into different sizes to make better use of available addresses.
Q4) Describe antispoofing logging and how you can prevent it with ACLs.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43425
Sample Questions
Q1) Compare and contrast block cipher with stream cipher.
Q2) Which of the following is true about encryption algorithms?
A) their strength is tied to their key length
B) not vulnerable to brute force attacks
C) block ciphers encrypt one bit at a time
D) asymmetric algorithms use a single key
Q3) At which layer of the OSI model does IPsec work?
A) Two
B) Three
C) Four
D) Six
Q4) Which of the following is NOT a critical goal of information security?
A) confidentiality
B) scalability
C) authentication
D) nonrepudiation
Q5) ______________ cryptanalysis is applicable to block ciphers that use a substitution-permutation network including Rijndael,Twofish,and IDEA.
Q6) What is a MAC tag and how does it work?
Q7) How does the key size affect the strength of an encryption algorithm?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Wireless Network Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43426
Sample Questions
Q1) an area in which you can determine RF signal strength,identify potential obstacles,and determine the potential for multipath distortion
A)absorption
B)amplitude
C)antenna
D)chipping code
E)diffraction
F)fading
G)free space path loss
H)Fresnel zone
I)hopping code
J)polarization
Q2) Which digital signal modulation method is a binary modulation technique in which the carrier signal's frequency is changed to represent a 1 or 0 bit?
A) ASK
B) FSK
C) PSK
D) FDM
Q3) Describe two of the three methods of analog modulation.
To view all questions and flashcards with answers, click on the resource link above.
Page 8
Chapter 7: Understanding Wireless Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43427
Sample Questions
Q1) Which popular wireless sniffer is an IDS that is passive and undetectable in operation?
A) Kismet
B) NetStumbler
C) AirSnort
D) Aircrack-ng
Q2) a two-step process of being accepted into a wireless network
A)active attacks
B)association
C)clear to send
D)pairwise keys
E)penetration testing
F)request to send
G)site survey
H)sniffing
I)TKIP
J)WPA2
Q3) Describe forged deauthentication.
Q4) Each access point has a(n)______________ that essentially functions as the name of the network.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Intrusion Detection and Prevention Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43428
Sample Questions
Q1) sets of characteristics that describe network services and resources a user or group normally accesses
A)accountability
B)escalated
C)event horizon
D)inline sensor
E)intrusion
F)passive sensor
G)profiles
H)sensor
I)stateful protocol analysis
J)true positive
Q2) List four types of information that an NIDPS typically logs.
Q3) Which of the following is a sensor type that uses bandwidth throttling and alters malicious content?
A) passive only
B) inline only
C) active only
D) online only
Q4) What are the four typical components of an IDPS?
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43429
Sample Questions
Q1) Describe a firewall policy for application traffic.
Q2) A primary objective of a rule base is to ______________ communications based on complex rules.
Q3) At what layer of the OSI model do proxy servers generally operate?
A) Application
B) Session
C) Transport
D) Network
Q4) The rule base should permit access to public servers in the _________ and enable users to access the Internet.
Q5) What is stateful packet filtering?
Q6) What happens when a packet hits a firewall? Discuss the possible actions that are taken.
Q7) What type of ICMP packet can an attacker use to send traffic to a computer they control outside the protected network?
A) Source Quench
B) Echo Request
C) Destination Unreachable
D) Redirect
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Firewall Design and Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43430
Sample Questions
Q1) Which type of NAT is typically used on devices in the DMZ?
A) one-to-one NAT
B) port address translation
C) one-to-many NAT
D) many-to-one NAT
Q2) Which network device works at the Application layer by reconstructing packets and forwarding them to Web servers?
A) Layer 7 switch
B) translating gateway
C) proxy server
D) ICMP redirector
Q3) Which of the following is true about a screening router?
A) it examines the data in the packet to make filtering decisions
B) it can stop attacks from spoofed addresses
C) it maintains a state table to determine connection information
D) it should be combined with a firewall for better security
Q4) A DMZ is a subnet of _____________ accessible servers placed outside the internal network.
Q5) What is a bastion host and how is one typically configured?
Q6) What is a reverse firewall and why would you use one?
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: VPN Concepts
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43431
Sample Questions
Q1) a digital token sent from the Authentication Server to the client
A)AH
B)ESP
C)GRE
D)IKE
E)IPsec
F)ISAKMP
G)Kerberos
H)KDC
I)SSL
J)TGT
Q2) Describe a mesh VPN topology.What are advantages and disadvantages?
Q3) Which IPsec component is software that handles the tasks of encrypting,authenticating, decrypting,and checking packets?
A) ISAKMP
B) IKE
C) IPsec driver
D) Oakley protocol
Q4) List four standard VPN protocols.
Q5) List two advantages and two disadvantages of VPNs.
Page 13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 12: Internet and World Wide Web Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43432
Sample Questions
Q1) a network architecture that uses a single DNS domain with a DNS server on the organization's DMZ for Internet services and a DNS server on the internal network for service to internal hosts
A)anycast addressing
B)DNSSEC
C)network access points
D)pharming
E)POP ISPs
F)security-aware resolver
G)spear phishing
H)slit DNS architecture
I)split brain DNS architecture
J)zone transfer
Q2) A critical buffer component is the function _________ and buffer overflows are usually aimed at this component.
Q3) ___________ direct network traffic to its destination on the Internet using tables and protocols.
Q4) What are the characteristics of a corporate phishing e-mail? List three of them.
Q5) The _______________ Web Server is the most widely used Web server application.
Q6) How can you provide data confidentiality for your IIS Web server?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Security Policy Design and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43433
Sample Questions
Q1) The first step in SNA is the survivability analysis.
A)True
B)False
Q2) The process of reviewing records of network computer activity is called which of the following?
A) monitoring
B) archiving
C) auditing
D) recording
Q3) Search warrants and subpoenas were developed in response to the _____________ Amendment which protects U.S.residents against illegal search and seizure.
Q4) Which of the following requires you to assist police by appearing in court or producing evidence?
A) subpoena
B) search warrant
C) the 4th amendment
D) de facto agent
Q5) What are the three levels of escalation of threat or security incidents? Describe them.
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: On-Going Security Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43434
Sample Questions
Q1) Which type of change does NOT typically require the use of change management procedures?
A) new VPN gateways
B) changes to ACLs
C) changing a manager's permissions to a file
D) new password systems or procedures
Q2) The ________________ command reviews the current connections and reports which ports a server is listening to.
Q3) How much space is typically needed to store IDPS data?
A) a few hundred Kilobytes
B) a gigabyte or more
C) a megabyte or two
D) at least a terabyte
Q4) With ___________________ data collection,data from security devices goes to a management console on its own local network.
Q5) List the advantages of centralized data collection.
Q6) A(n)____________________ audit should look for accounts assigned to employees who have left the company or user group.
Q7) What is security auditing and what type of information should be analyzed?
Page 16
To view all questions and flashcards with answers, click on the resource link above.