IT Security Management
Final Exam Questions
Course Introduction
IT Security Management explores the principles, practices, and frameworks necessary to protect information assets within an organization. The course covers risk assessment, policy development, compliance standards, and security governance, equipping students to recognize, mitigate, and respond to various cyber threats. Topics include incident response planning, business continuity, and legal/ethical considerations, preparing learners to implement effective security controls and lead organizational efforts in maintaining confidentiality, integrity, and availability of information systems.
Recommended Textbook
CWSP Guide to Wireless Security 1st Edition by Mark Ciampa
Available Study Resources on Quizplus
12 Chapters
504 Verified Questions
504 Flashcards
Source URL: https://quizplus.com/study-set/1118 Page 2
Chapter 1: Foundations of Wireless Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21967
Sample Questions
Q1) The radio frequency spectrum is divided into over 450 different sections or ____.
A) bands
B) amplitudes
C) wavelengths
D) heights
Answer: A
Q2) ____ protects the integrity, confidentiality, and availability of information on the devices that store, manipulate, and transmit the information through products, people, and procedures.
A) Information security
B) VoWLAN
C) FCC
D) FDA
Answer: A
Q3) For computer networking and wireless communications the most widely known and influential organization is the ____________________.
Answer: Institute of Electrical and Electronics Engineers (IEEE)
Institute of Electrical and Electronics Engineers
IEEE
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Wireless LAN Vulnerabilities
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21968
Sample Questions
Q1) Wireless access control through MAC address filtering is the same as access restrictions.
A)True
B)False
Answer: False
Q2) With ____ scanning a wireless device simply listens for a beacon frame for a set period of time.
A) active
B) passive
C) interactive
D) moving
Answer: B
Q3) The SSID can be easily discovered even when it is not contained in beacon frames. A)True
B)False
Answer: True
Q4) A wireless device is set to look for beacon frames from the AP. This is known as ____________________.
Answer: scanning
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Passive Wireless Discovery
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21969
Sample Questions
Q1) Instead of asking the user to visit a fraudulent Web site, ____ automatically redirects the user to the fake site.
A) spear phishing
B) phishing
C) pharming
D) Google phishing
Answer: C
Q2) The informal expression used more often for searching for RF signals is ____.
A) phishing
B) pharming
C) beaconing
D) wardriving
Answer: D
Q3) A(n) ____ antenna focuses the energy in one direction.
A) cyclic directional
B) omni-directional
C) semi-directional
D) highly directional
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Active Wireless Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21970
Sample Questions
Q1) What are the security problems related to supporting remote access in wireless gateways?
Q2) Briefly explain the password paradox.
Q3) The Anti-Spyware Coalition defines ____________________ as technologies that are implemented in ways that impair a user's control over the use of system resources.
Q4) With explicit ____, an acknowledgment frame (abbreviated ACK) is sent by the receiving device back to the sending device to confirm that the data frame arrived intact.
A) packet generator
B) slot time
C) CRC
D) frame acknowledgment
Q5) What are the problems with using default passwords?
Q6) A ____ bypasses all of the network security and opens the entire network and all users to direct attacks.
A) wireless router
B) firewall
C) rogue access point
D) wireless gateway
Page 6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Wireless Security Models
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21971
Sample Questions
Q1) PSK keys are automatically changed (called ____).
A) MIC
B) key mixing
C) IV sequence
D) rekeying
Q2) ____ prevents an unauthenticated device, either wired or wireless, from receiving any network traffic until its identity can be verified.
A) AES
B) RC4
C) Block cipher
D) Port security
Q3) It is recommended that AES encryption and decryption be performed in hardware because of the computationally intensive nature of AES.
A)True
B)False
Q4) Briefly describe the history of AES.
Q5) What are some of the PSK key management weaknesses?
Q6) What are the steps involved in the 802.1x authentication procedure?
Q7) What are the main characteristics of the Temporal Key Integrity Protocol (TKIP)?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Enterprise Wireless Hardware Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21972
Sample Questions
Q1) What are the four operational mode supported by remote wireless bridges?
Q2) An advantage to backhaul wireless mesh networks is that they can be quickly deployed in an emergency.
A)True
B)False
Q3) What are the two basic functions of an access point?
Q4) In the ____ access control, an administrator can assign permissions to a position and assign users and other objects to that position.
A) mandatory
B) discretionary
C) role based
D) temporal
Q5) A(n) ____ wireless mesh network connects special access points, known as wireless mesh routers, in a mesh configuration.
A) managed
B) backhaul
C) ad hoc
D) unmanaged
Q6) What are some of the features of the IEEE 802.11v protocol?
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Designing a Secure Wireless Network
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21973
Sample Questions
Q1) Why is diversity necessary to provide better security?
Q2) A firewall is sometimes called a ____.
A) bridge
B) hub
C) packet filter
D) repeater
Q3) When a sending device on a LAN sends a packet that is intended for a single receiving device it is known as a ____ transmission.
A) multicast
B) unicast
C) broadcast
D) linecast
Q4) ____ is the practice of dividing the network into smaller units.
A) Switching
B) Segmentation
C) VLANs
D) Filtering
Q5) IEEE 802.11 WLANs have more collisions than wired Ethernet networks.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Secure Wireless Authentication
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21974
Sample Questions
Q1) The system of using digital certificates,CAs,and other registration authorities that verify and authenticate the validity of each party involved in a transaction over a public network is known as ____.
A) AAA server
B) AAA infrastructure
C) public cryptography
D) public key infrastructure (PKI)
Q2) What are the advantages and disadvantages of distributed sites with centralized authentication and security deployment?
Q3) What are the advantages and disadvantages of distributed autonomous site deployment?
Q4) Several of the EAP protocols use ____, which creates a ciphertext from cleartext.
A) symmetric encryption
B) hashing
C) asymmetric encryption
D) filtering
Q5) Certificates are issued by a trusted third party called a(n)
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Secure Wireless Transmissions
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21975
Sample Questions
Q1) Hardware devices that have a ____ VPN endpoint handle all the VPN tunnel setup, encapsulation, and encryption in the endpoint.
A) passthrough
B) concentrator
C) built-in
D) PPTP
Q2) Endpoints that provide passthrough VPN capability does not require that a separate VPN client application be installed on each device that connects to a VPN server.
A)True
B)False
Q3) An extension to PPTP is the ____, which establishes, configures, and automatically tests the connection.
A) network access server (NAS)
B) Layer 2 Tunneling Protocol (L2TP)
C) IP Security (IPsec)
D) Link Control Protocol (LCP)
Q4) The Linux operating system comes with a native cryptography system installed.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Managing the Wireless Network
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21976
Sample Questions
Q1) ____ is a diagnostic program that sends a packet to a device and waits for a response to determine if it is properly functioning.
A) MIB
B) SSH
C) SFTP
D) PING
Q2) Global positioning systems (GPS) are widely used in 802.11 WLANs.
A)True
B)False
Q3) A spike in a network's bandwidth or a decrease in the time to respond to a request are signs that the network is running slowly. These events are known as a(n) ____.
A) AP trap
B) CDP trap
C) WLAN trap
D) SNMP trap
Q4) If SNMP is being used, monitoring often focuses upon the performance of the network.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Wireless Security Policy
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21977
Sample Questions
Q1) What are the characteristics of a policy?
Q2) ____ seeks to determine the risks that an organization faces against its information assets.
A) Risk identification
B) Security policy design
C) Security policy evaluation
D) Compliance monitoring and evaluation
Q3) The ____ is the expected monetary loss that can be expected for an asset because of a risk over a one-year period.
A) Exposure Factor (EF)
B) Annualized Rate of Occurrence (ARO)
C) Annualized Loss Expectancy (ALE)
D) Single Loss Expectancy (SLE)
Q4) A ____ is a collection of requirements specific to the system or procedure that must be met by everyone.
A) code of ethics
B) guideline
C) standard
D) policy
Q5) What are the three models of trust?
Page 13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 12: Operational Support and Wireless Convergence
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/21978
Sample Questions
Q1) In a wireless LAN access control is often performed by enterprise ____.
A) wireless gateways
B) wireless probes
C) router probes
D) AP gateways
Q2) A ____ constantly monitors the radio frequency for attacks.
A) WIDS
B) SNMP
C) WLAN management system
D) SFTP system
Q3) A baseline will typically include a(n) ____________________, or a listing of all installed wireless components,configuration settings,and diagrams that document the current state of the wireless LAN.
Q4) At the heart of any secure WLAN is ____.
A) traffic filtering
B) protocol monitoring
C) education and training
D) strong encryption
Page 14
Q5) What are the characteristics of 3G technology for data communications?
Q6) Why is operational support important for a WLAN?
To view all questions and flashcards with answers, click on the resource link above.
Page 15