Network Security Exam Review
Course Introduction
Network Security explores the fundamental principles and practices used to protect network systems from security threats and vulnerabilities. The course covers a range of topics, including cryptography, authentication protocols, firewalls, intrusion detection and prevention systems, virtual private networks (VPNs), and security policies. Students will examine various attack techniques and learn how to design and implement effective defense strategies to safeguard communication and data in both wired and wireless networks. Practical laboratory exercises and case studies are integrated to provide hands-on experience with contemporary network security tools and technologies.
Recommended Textbook
Information Security and IT Risk Management 1st Edition by Manish Agrawal
Available Study Resources on Quizplus
14 Chapters
349 Verified Questions
349 Flashcards
Source URL: https://quizplus.com/study-set/3541
Page 2
Chapter 1: Introduction
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70324
Sample Questions
Q1) The Internet is relevant for information security because
A) It exposed computers to attacks from around the world
B) It caused one of the most significant Internet outages ever
C) It led to exploits from weakness is wireless networks
D) It caused falsification of financial records at publicly traded companies
Answer: A
Q2) Confidentiality is
A) Protecting information and information systems from unauthorized use
B) Preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information Choices
C) Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity
D) Ensuring timely and reliable access to and use of information
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: System Administration
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70325
Sample Questions
Q1) Defining the rights of organizational members to information in the organization is called
A) Access control
B) User management
C) Installation
D) Configuration
Answer: B
Q2) Limiting access to information system resources only to authorized users, programs, processes, or other systems is called
A) Access control
B) User management
C) Installation
D) Configuration
Answer: A
Q3) The system administrator is the person responsible for
A) Day-to-day operation of a technology system
B) Writing , enforcing , and reviewing security-operating procedures
C) Developing new technology systems
D) Upgrading existing technology systems
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: System Administration 2
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70326
Sample Questions
Q1) Permissions -rwxr-xr-on a file indicate that
A) Anybody can read the file
B) The root user is the owner of the file
C) The owner can read/ write/ execute, the group and world can read the file
D) The owner can read/ write/ execute, the group can read or execute and the world can read the file
Answer: D
Q2) Permissions -rwxr-xr-on a file can also be written as
A) 755
B) 654
C) 754
D) 655
Answer: C
Q3) An example of a relative path is
A) /temp.txt
B) /usr/temp.txt
C) ~/temp.txt
D) /home/joe/temp.txt
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Basic Information Security Model
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70327
Sample Questions
Q1) A cross-site scripting vulnerability can occur when
A) Files are accepted as input without verifying their specifications
B) Input from other users is supplied as output to other users
C) A program puts more data into a storage location than it can hold
D) User input is used without confirming its validity
Q2) A SQL injection vulnerability is an example of a
A) Unrestricted uploads vulnerability
B) Cross-site scripting vulnerability
C) Buffer overflow vulnerability
D) Lack of input validation vulnerability
Q3) The CVE list is
A) A list of all likely impacts of vulnerabilities
B) A list of all known viruses
C) A list of all known information security firms
D) An inventory of known software vulnerabilities
Q4) An unrestricted uploads vulnerability refers to a situation where
A) Files are accepted as input without verifying their specifications
B) Input from other users is supplied as output to other users
C) A program puts more data into a storage location than it can hold
D) User input is used without confirming its validity
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Asset Identification and Characterization
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70328
Sample Questions
Q1) Methods of hardware asset discovery include
A) Network scanning
B) Asset reviews
C) Purchase reviews
D) All of the above
Q2) The parameters used to characterize assets are
A) Asset sensitivity and asset criticality
B) Asset confidentiality and asset restrictions
C) Restricted and unrestricted assets
D) Essential, required and deferrable assets
Q3) Based on sensitivity, assets are classified as
A) Essential, required, deferrable
B) Restricted, unrestricted
C) Information, personnel, hardware
D) Hardware, software, legal
Q4) Bottom-up and top down approaches are needed to identify
A) Asset priorities
B) General assets
C) Assets
D) Idiosyncratic assets
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Threats and Vulnerabilities
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70329
Sample Questions
Q1) Help desk staff can be a threat due to A) Abuse of privileges
B) Human errors
C) Lack of training
D) All of the above
Q2) Threat agents are
A) Capabilities, intentions and attack methods of adversaries
B) Interactions between relevant agents, actions
C) Activist groups
D) Individuals, organizations or groups that originate a particular threat action
Q3) In the context of information security, cross-site scripting attacks are
A) Activities performed by agents to compromise assets
B) Malicious software that uses operating system or application vulnerabilities for propagation
C) Software that performs simple tasks automatically and repetitively, usually at the direction of another software
D) Malicious content entered by an end user on a web-based system
To view all questions and flashcards with answers, click on the resource link above.
8
Chapter 7: Encryption Controls
Available Study Resources on Quizplus for this Chatper
24 Verified Questions
24 Flashcards
Source URL: https://quizplus.com/quiz/70330
Sample Questions
Q1) Public Key cryptography refers to
A) The use of the same key for both encryption and decryption
B) The use of a secret algorithm for encryption and decryption
C) The use of a secret key only decryption
D) The use of a secret key for encryption
Q2) Secret key cryptography refers to
A) The use of the same key for both encryption and decryption
B) The use of a secret algorithm for encryption and decryption
C) The use of a secret key only for decryption
D) The use of a secret key for encryption
Q3) The current standard for secret key encryption is
A) DES Data Encryption Standard
B) AES Advanced Encryption Standard
C) IDEA International Data Encryption Algorithm
D) SHA Secure Hash Algorithm
Q4) The most common technologies used for secure network communication are
A) VPN and SSL
B) AES and DES
C) PKI and RSA
D) Diffusion and confusion
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Identity and Access Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70331
Sample Questions
Q1) Identity enrichment involves
A) Locating all new and updated identities in the organization
B) Comparing each discovered identity to a master record of all individuals in the organization
C) Collecting data about each individual's relationship to the organization
D) Making decisions about granting users access to resources
Q2) Kerberos has been very useful in securing corporate desktop infrastructures
A)True
B)False
Q3) An individual's affiliation with the organization is called their
A) Access
B) Role
C) Account
D) Password
Q4) Identity reconciliation involves
A) Locating all new and updated identities in the organization
B) Comparing each discovered identity to a master record of all individuals in the organization
C) Collecting data about each individual's relationship to the organization
D) Making decisions about granting users access to resources
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Hardware and Software Controls
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70332
Sample Questions
Q1) End-point protection defends against attacks on
A) Firewalls
B) Offices
C) Vehicles
D) Desktops
Q2) The de-militarized zone in the context of information security refers to
A) The network that hosts external services such as email, web and DNS
B) The Internet
C) The internal corporate network
D) The organization's reception area
Q3) In enterprise networks, power users can facilitate patch management by
A) Administering as much of the patch management themselves as possible
B) Setting automatic updates to as many services and software as possible
C) Using department funds to deploy local patch management systems to as many systems as possible
D) Allowing system administrators to controls as much of the patch management as possible
Q4) PINs are useful in high security systems
A)True
B)False
Page 11
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Shell Scripting
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70333
Sample Questions
Q1) In programming languages, loops are used to
A) Loop through the execution logic and understand the program
B) Collect all comments
C) Mark the beginning and end of the program
D) Repeat a set of commands
Q2) Consider the following script. The output will be: #! /bin/bash guess=2 check=$ $RANDOM \(\left. \left. \div 2 \right) + 1 \right)\) ) if [ $guess -eq $check] then
echo "Correct Guess: The number is $check" else echo "Sorry, wrong guess"
A) Correct Guess: The number is 3
B) Indeterminate
C) Correct Guess: The number is 2
D) Sorry, wrong guess
Q3) An infinite loop a loop that runs forever can sometimes be useful
A)True B)False
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Incident Handling
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70334
Sample Questions
Q1) Log consolidation is useful for
A) Identifying irregularities across multiple systems
B) Lowering hardware costs
C) Eliminating the need for clock-synchronization
D) Serving as a honeypot
Q2) The scope of an incident response policy is
A) A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices
B) The act of following applicable laws, regulations, rules, industry codes and contractual obligations
C) Staff designated to respond to incidents
D) The part of the incident response policy that specifies the targets of the policy
Q3) In the context of monitoring, a false negative is
A) An undetected problem
B) A component that is working intermittently
C) A component that is likely to fail soon
D) An alert that upon further investigation turns out to be not a problem
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Incident Analysis
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70335
Sample Questions
Q1) In IT, BYOD stands for
A) Bring your own drink
B) Buy your own drink
C) Buy your own dress'
D) Bring your own device
Q2) Event criticality in Windows logs is indicated by labels including
A) Urgent, notice
B) Notice, warning
C) Critical, urgent
D) Information, warning
Q3) Syslog facilities include all of the following except
A) auth
B) cron
C) kern
D) debug
Q4) Syslog priorities include all of the following except
A) debug
B) error
C) audit
D) panic
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Policies, Standards and Guidelines
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70336
Sample Questions
Q1) Policy review is usually triggered by all of the following except A) Time lapse since last review
B) Change in vendors for significant technologies
C) Significant technology change
D) Changes in regulatory compliance
Q2) From the perspective of information security, the Sarbanes-Oxley SOX act defines
A) Requirements for financial institutions to protect the privacy of their customers' non-public, personal information
B) Protections for the privacy of student education records
C) The responsibilities of top executives of publicly traded companies for the accuracy and timeliness of financial data
D) Safeguards that covered entities must use to protect the confidentiality, integrity and availability of electronic protected health information
Q3) The sections of a policy are generally written in the sequence
A) Overview, scope, definitions, statement, enforcement
B) Definitions, overview, scope, statement, enforcement
C) Overview, definitions, statement, scope, enforcement
D) Overview, enforcement, scope, definitions, statement
To view all questions and flashcards with answers, click on the resource link above.
15
Chapter 14: It Risk Analysis and Risk Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70337
Sample Questions
Q1) In the NIST 800-39 framework, risk assessment
A) Addresses how organizations respond to risks
B) Identifies and aggregates the risks facing the organization
C) Describes the environment in which risk-based decisions are made
D) Evaluates the effectiveness of the organization's risk-management plan
Q2) If assessed using the NIST 800-39 framework, the risk estimate is an accurate measure of the IT risk facing the organization
A)True
B)False
Q3) The management model that guides the ISO risk management methodology is
A) Toyota's Muda, Kaizen, Jidoka, Muri
B) Juran's planning, control, improvement
C) Shewart's mean, range, standard error
D) Deming's Plan-Do-Check-Act
Q4) Internal controls over financial reporting involve all of the following except
A) A process
B) Supervision of the company's principal executives
C) Profit guidance
D) Maintenance of records
To view all questions and flashcards with answers, click on the resource link above. Page 16