Network Security Final
Test Solutions
Course Introduction
Network Security is a comprehensive course that explores the principles, techniques, and practices used to protect data, devices, and systems within computer networks. Students learn about common threats such as malware, phishing, denial-of-service attacks, and insider threats, as well as the mechanisms used to defend against them, including firewalls, intrusion detection systems, encryption, and secure protocols. The course covers authentication, access control, risk management, and incident response, while also addressing emerging issues in wireless, cloud, and IoT security. Through hands-on exercises and case studies, learners develop the skills needed to assess vulnerabilities and implement effective security measures in real-world network environments.
Recommended Textbook
Security+ Guide to Network Security Fundamentals 4th Edition by Mark Ciampa
Available Study Resources on Quizplus
14 Chapters
588 Verified Questions
588 Flashcards
Source URL: https://quizplus.com/study-set/1054
Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20875
Sample Questions
Q1) ____ attacks are responsible for half of all malware delivered by Web advertising.
A) "Canadian Pharmacy"
B) Fake antivirus
C) Melissa
D) Slammer
Answer: B
Q2) ____ ensures that only authorized parties can view information.
A) Security
B) Availability
C) Integrity
D) Confidentiality
Answer: D
Q3) A study by Foote Partners showed that security certifications earn employees ____ percent more pay than their uncertified counterparts.
A) 10 to 14
B) 12 to 15
C) 13 to 14
D) 14 to 16
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20876
Sample Questions
Q1) ____ involves horizontally separating words, although it is still readable by the human eye.
A) Word splitting
B) GIF layering
C) Geometric variance
D) Layer variance
Answer: A
Q2) What are some of the functions performed by viruses?
Answer: Viruses have performed the following functions:
Caused a computer to crash repeatedly
Erased files from a hard drive
Made multiple copies of itself and consumed all of the free space in a hard drive
Turned off the computer's security settings
Reformatted the hard disk drive
Q3) A(n) ____________________ is either a small hardware device or a program that monitors each keystroke a user types on the computer's keyboard.
Answer: keylogger
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Application and Network Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20877
Sample Questions
Q1) The default root directory of the Microsoft Internet Information Services (IIS) Web server is ____.
A) /var/www
B) C:\Inetpub\ wwwroot
C) /var/html
D) /etc/var/www
Answer: B
Q2) A(n) ____________________ is a method for adding annotations to the text so that the additions can be distinguished from the text itself.
Answer: markup language
Q3) The ____________________ directory is a specific directory on a Web server's file system.
Answer: root
Q4) The expression ____ up one directory level.
A) ;/traverses
B)./traverses
C) %20/traverses
D)../ traverses
Answer: D
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Vulnerability Assessment and Mitigating Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20878
Sample Questions
Q1) A(n) ____ examines the current security in a passive method.
A) application scan
B) system scan
C) threat scan
D) vulnerability scan
Q2) List and describe the three categories that TCP/IP divides port numbers into.
Q3) A(n) ____________________ scan uses various techniques to avoid detection.
Q4) A(n) ____ is hardware or software that captures packets to decode and analyze its contents.
A) application analyzer
B) protocol analyzer
C) threat profiler
D) system analyzer
Q5) If port 20 is available, then an attacker can assume that FTP is being used.
A)True
B)False
Q6) Describe the purpose of a honeypot.
Q7) List four things that a vulnerability scanner can do.
Page 6
Q8) List two types of hardening techniques.
Q9) Discuss the purpose of OVAL.
To view all questions and flashcards with answers, click on the resource link above.
Page 7
Chapter 5: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20879
Sample Questions
Q1) In Microsoft Windows, a ____ is a collection of security configuration settings.
A) security baseline
B) security reference
C) security summary
D) security template
Q2) What are the three most important elements to secure in any information technology setting?
Q3) ____________________ security is the physical security that specifically involves protecting the hardware of the host system, particularly portable laptops, netbooks, and tablet computers that can easily be stolen.
Q4) ____ use multiple infrared beams that are aimed across a doorway and positioned so that as a person walks through the doorway some beams are activated.
A) Lockout sensors
B) Engineering sensors
C) Tailgate sensors
D) Proximity sensors
Q5) A(n) ____________________ is a record or list of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 6: Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20880
Sample Questions
Q1) Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.
A)True
B)False
Q2) A(n) ____ does not serve clients, but instead routes incoming requests to the correct server.
A) forward proxy
B) application proxy
C) system proxy
D) reverse proxy
Q3) List and describe three advantages to subnetting.
Q4) A(n) ____ is the end of the tunnel between VPN devices.
A) endpoint
B) client
C) server
D) proxy
Q5) Workgroup switches must work faster than core switches.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20881
Sample Questions
Q1) A ____ is a feature that controls a device's tolerance for unanswered service requests and helps to prevent a DoS attack.
A) flood guard
B) protocol guard
C) link guard
D) frame guard
Q2) TCP is the main ____ protocol that is responsible for establishing connections and the reliable data transport between devices.
A) Application Layer
B) Presentation Layer
C) Network Layer
D) Transport Layer
Q3) ____________________ servers are intermediate hosts through which Web sites are accessed.
Q4) ____________________ computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.
Q5) List and describe the three fields that each ICMP message contains.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20882
Sample Questions
Q1) ____ is the encryption protocol standard for WPA2.
A) AES-CCMP
B) AES-CTR
C) AES-TKIP
D) AES-SCMP
Q2) Discuss how to prevent bluesnarfing.
Q3) APs use antennas that radiate a signal in all directions.
A)True
B)False
Q4) Bluetooth devices are not backward compatible with previous versions.
A)True
B)False
Q5) ____________________ technology enables users to connect wirelessly to a wide range of computing and telecommunications devices.
Q6) ____ requires mutual authentication used for WLAN encryption using Cisco client software.
A) LEAP
B) TKIP
C) EAP
D) PEAP
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 9: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20883
Sample Questions
Q1) ____ is often used for managing user access to one or more systems.
A) Role Based Access Control
B) Mandatory Access Control
C) Rule Based Access Control
D) Discretionary Access Control
Q2) Describe the Bell-LaPadula model.
Q3) A computer user may be authorized or granted permission to log on to a system by presenting valid credentials, yet that authorization does not mean that the user can then access any and all resources.
A)True
B)False
Q4) The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.
A)True
B)False
Q5) ____ indicates when an account is no longer active.
A) Password expiration
B) Account expiration
C) Last login
D) Account last used
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 10: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20884
Sample Questions
Q1) ____ holds the promise of reducing the number of usernames and passwords that users must memorize.
A) ISO
B) SSO
C) SSL
D) IAM
Q2) Windows Live ID was originally designed as a ____ system that would be used by a wide variety of Web servers.
A) federated identity management
B) liberated identity management
C) central identity management
D) distributed identity management
Q3) ____ permits users to share resources stored on one site with a second site without forwarding their authentication credentials to the other site.
A) OpenAuth
B) OAuth
C) SAML
D) Kerberos
Q4) Describe how rainbow tables work.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 11: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20885
Sample Questions
Q1) DES is a(n) ____________________ cipher.
Q2) Discuss how HMAC works.
Q3) ____ attempts to use the unusual and unique behavior of microscopic objects to enable users to securely develop and share keys as well as to detect eavesdropping.
A) Reactive cryptography
B) Symmetric cryptography
C) Analog cryptography
D) Quantum cryptography
Q4) ____ was first proposed in the mid-1980s and it uses sloping curves.
A) FCC
B) RSA
C) ECC
D) IKE
Q5) List and describe the characteristics a hashing algorithm must have to be considered secure.
Q6) Cleartext data that is to be encrypted is called ____________________.
Q7) Describe the purpose and composition of Suite B.
Q8) A(n) ____________________ is a method used by operating systems to store, retrieve, and organize files.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 12: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20886
Sample Questions
Q1) List two requirements for verification of an EV SSL.
Q2) ____________________ may be defined as confidence in or reliance on another person or entity.
Q3) A(n) ____ serves as the trusted third-party agency that is responsible for issuing the digital certificates.
A) RA
B) DA
C) CA
D) PA
Q4) Identify the general duties of an RA.
Q5) ____ can protect the confidentiality of an e-mail message by ensuring that no one has read it.
A) Public encryption
B) Standard encryption
C) Asymmetric encryption
D) Symmetric encryption
Q6) Explain the difference between key revocation versus key suspension.
Q7) List the three PKI trust models that use a CA.
Q8) List and describe the entities for which IPsec is transparent.
Q9) List three pieces of information a digital certificate typically contains. Page 15
To view all questions and flashcards with answers, click on the resource link above.
Page 16
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20887
Sample Questions
Q1) ____________________ is data about data.
Q2) In a(n) ____ cluster, every server in the cluster performs useful work.
A) symmetric network
B) asymmetric network, C) symmetric server
D) symmetric network.
Q3) According to the Federal Bureau of Investigation (FBI), almost ____ percent of crimes committed today leave behind digital evidence that can be retrieved through computer forensics.
A) 65
B) 75
C) 85
D) 95
Q4) Describe what happens when the response team arrives and secures the crime scene.
Q5) RAID 0 technology is based on ____________________.
Q6) RAM slack can contain any information that has been created, viewed, modified, downloaded, or copied since the computer was last booted.
A)True
B)False
Page 17
To view all questions and flashcards with answers, click on the resource link above.
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20888
Sample Questions
Q1) ____________________ seeks to approach changes systematically and provide the necessary documentation of the changes.
Q2) A ____ is a document that outlines specific requirements or rules that must be met.
A) procedure
B) standard
C) guideline
D) policy
Q3) List and describe two risk categories.
Q4) A(n) ____ policy is designed to produce a standardized framework for classifying information assets.
A) VPN
B) acceptable use
C) privacy
D) classification of information
Q5) A due process policy is a policy that defines the actions users may perform while accessing systems and networking equipment.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 18