Information Security Exam Solutions
Course Introduction
Information Security is a comprehensive course that explores the principles, practices, and technologies used to protect information assets from unauthorized access, use, disclosure, disruption, modification, or destruction. Students will examine topics such as risk management, cryptography, network security, security policies, ethical and legal issues, and methods for identifying and mitigating threats and vulnerabilities. Through case studies and practical exercises, the course aims to develop students understanding of defense strategies and equip them with essential skills to design, implement, and maintain secure information systems in various organizational environments.
Recommended Textbook Guide to Network Defense and Countermeasures 3rd Edition by Randy Weaver
Available Study Resources on Quizplus
14 Chapters
699 Verified Questions
699 Flashcards
Source URL: https://quizplus.com/study-set/2179
Page 2
Chapter 1: Network Security Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43421
Sample Questions
Q1) Which security tool works by recognizing signs of a possible attack and sending notification to an administrator?
A) DiD
B) DMZ
C) VPN
D) IDPS
Answer: D
Q2) ______________ do not require user intervention to be launched; they are self-propagating.
Answer: Worms
Q3) Defense in depth can best be described as which of the following?
A) a firewall that protects the network and the servers
B) a layered approach to security
C) antivirus software and firewalls
D) authentication and encryption
Answer: B
Q4) A ______________ is reserved for a program that runs in the background to listen for requests for the service it offers.
Answer: port
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: TCP-IP
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43422
Sample Questions
Q1) What does a sliding window do in a TCP packet?
A) ensures all packets are delivered
B) provides packet security
C) provides flow control
D) ensures transmission reliability
Answer: C
Q2) List three reasons an administrator would want to use subnetting.
Answer: Mirroring the organization's physical layout
Mirroring the organization's administrative structure
Planning for future growth
Reducing and controlling network traffic
Increasing network security
Logically segment a network
Q3) The TCP protocol uses a three-way handshake to create a connection.
A)True
B)False
Answer: True
Q4) ________________ IPv6 addresses are used for one-to-one or one-to-many communication.
Answer: Anycast
Page 4
To view all questions and flashcards with answers, click on the resource link above.
Chapter 3: Network Traffic Signatures
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43423
Sample Questions
Q1) Under which attack category does a UNIX Sendmail exploitation fall?
A) bad header information
B) single-packet attack
C) multiple-packet attack
D) suspicious data payload
Answer: D
Q2) Of what category of attack is a DoS attack an example?
A) bad header information
B) single-packet attack
C) multiple-packet attack
D) suspicious data payload
Answer: C
Q3) What type of attack does a remote-access Trojan attempt to perpetrate?
A) worm
B) back door
C) remote denial of service
D) composite attack
Answer: B
Q4) A TCP packet with no flags set is referred to as a _________ packet.
Answer: null
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Routing Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43424
Sample Questions
Q1) What remote shell program should you use if security is a consideration?
A) rlogin
B) ssh
C) rcp
D) rsh
Q2) cost values that help routers assess the desirability of a link
A)ACE
B)ARP table
C)banner
D)console port
E)convergence
F)inverse mask
G)metrics
H)routing
I)stub router
j.virtual terminal
Q3) List the five types of Cisco router passwords.
Q4) Describe antispoofing logging and how you can prevent it with ACLs.
Q5) Where in an internetwork should extended ACLs be applied?
Q6) What is a stub router and where would you find one?
Page 6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43425
Sample Questions
Q1) unreadable text,programs that do not execute,and graphics you cannot view
A)AES
B)block cipher
C)ciphertext
D)cryptanalysis
E)DES
F)XOR function
G)IPsec
H)key management
I)plaintext
J)stream cipher
Q2) Which of the following was developed as a way of enabling Web servers and browsers to exchange encrypted information and uses a hashed message authentication code to increase security?
A) SSH
B) SSL
C) TLS
D) IPsec
Q3) Compare and contrast block cipher with stream cipher.
Q4) How does an asymmetric algorithm differ from a symmetric algorithm?
Page 7
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Wireless Network Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43426
Sample Questions
Q1) What is the difference between directed IR transmission and diffused IR transmission?
Q2) the loss of signal strength resulting from the dispersion of the signal over distance
A)absorption
B)amplitude
C)antenna
D)chipping code
E)diffraction
F)fading
G)free space path loss
H)Fresnel zone
I)hopping code
J)polarization
Q3) Which type of analog modulation changes the number of waves representing one cycle?
A) amplitude modulation
B) frequency modulation
C) phase modulation
D) relative modulation
To view all questions and flashcards with answers, click on the resource link above.
Page 8
Chapter 7: Understanding Wireless Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43427
Sample Questions
Q1) Which of the following is true about the association process?
A) it is a three-step process
B) a station first listens for beacons
C) a station first send an association request
D) the AP transmits an invitation to associate
Q2) What is the purpose of MAC address filtering and how can attackers defeat it?
Q3) Which of the following is NOT part of a wireless MAC frame?
A) 802.11 protocol version
B) source MAC address
C) FCS
D) TTL
Q4) Describe forged deauthentication.
Q5) Which management frame type is sent by a station wanting to terminate the connection?
A) Deauthentication
B) Disassociation
C) Reassociation request
D) Probe response
Q6) MIBs gather data and report it to a(n)____________________ management station.
9
Q7) What is a site survey and why should you conduct one?
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Intrusion Detection and Prevention Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43428
Sample Questions
Q1) Why might you want to allow extra time for setting up the database in an anomaly-based system?
A) the installation procedure is usually complex and time consuming
B) to add your own custom rule base
C) it requires special hardware that must be custom built
D) to allow a baseline of data to be compiled
Q2) Which of the following is NOT a network defense function found in intrusion detection and prevention systems?
A) prevention
B) response
C) identification
D) detection
Q3) Which type of IDPS can have the problem of getting disparate systems to work in a coordinated fashion?
A) inline
B) host-based
C) hybrid
D) network-based
Q4) Describe two advantages and two disadvantages of an anomaly-based system.
Q5) Describe two advantages and two disadvantages of a signature-based system.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43429
Sample Questions
Q1) At what layer of the OSI model do proxy servers generally operate?
A) Application
B) Session
C) Transport
D) Network
Q2) Which two ports should packet-filtering rules address when establishing rules for Web access?
A) 143, 80
B) 25, 110
C) 80, 443
D) 423, 88
Q3) Stateless packet filtering keeps a record of connections that a host computer has made with other computers.
A)True
B)False
Q4) What type of attack are stateless packet filters particularly vulnerable to?
A) attempts to connect to ports above 1023
B) attempts to connect to the firewall
C) IP spoofing attacks
D) attempts to connect to ports below 1023
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Firewall Design and Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43430
Sample Questions
Q1) software that forwards packets to and from the network being protected and caches Web pages to speed up network performance
A)dual-homed host
B)load-balancing software
C)many-to-one NAT
D)one-to-one NAT
E)proxy server
F)reverse firewall
G)screened host
H)screening router
I)server farm
J)three-pronged firewall
Q2) Describe the setup in which a dual-homed host is used.What are the limitations of this configuration?
Q3) How can using two firewalls help in protecting your network?
Q4) What is a honeypot and how is one used to help protect the network?
Q5) A dual-homed host has a single NIC with two MAC addresses. A)True
B)False
Q6) What is a reverse firewall and why would you use one?
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: VPN Concepts
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43431
Sample Questions
Q1) Which of the following is a type of VPN connection?
A) site-to-server
B) client-to-site
C) server-to-client
D) remote gateway
Q2) Which VPN topology is also known as a hub-and-spoke configuration?
A) bus
B) partial mesh
C) star
D) full mesh
Q3) Which IPsec component is software that handles the tasks of encrypting,authenticating, decrypting,and checking packets?
A) ISAKMP
B) IKE
C) IPsec driver
D) Oakley protocol
Q4) Standards and protocols used in VPNs are in their infancy and seldom used.
A)True
B)False
Q5) List four standard VPN protocols.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Internet and World Wide Web Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43432
Sample Questions
Q1) Which of the following is NOT a step you should take to prevent attackers from exploiting SQL security holes?
A) limit table access
B) use stored procedures
C) use standard naming conventions
D) place the database server in a DMZ
Q2) Which aspect of hardening a Windows Web server allows you to restrict access to the web server based on IP address?
A) authentication
B) NTFS permissions
C) access control
D) data confidentiality
Q3) What type of attack exploits a lack of bounds checking on the size of data stored in an array?
A) buffer overflow
B) SQL injection
C) phishing
D) ActiveX control
Q4) What are the four guidelines for employees to follow to prevent phishing attacks?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Security Policy Design and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43433
Sample Questions
Q1) Which of the following requires you to assist police by appearing in court or producing evidence?
A) subpoena
B) search warrant
C) the 4th amendment
D) de facto agent
Q2) What should you do if a security policy violation involves a criminal offense? Include the Fourth Amendment in your discussion.
Q3) a private network that a company sets up as an extension of its corporate intranet
A)extranet
B)network assets
C)privileged access policy
D)risk management
E)role-based authentication
F)search warrant
G)subpoena
H)tunneling protocols
I)two-factor authentication
J)vulnerabilities
To view all questions and flashcards with answers, click on the resource link above.
Page 15
Chapter 14: On-Going Security Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43434
Sample Questions
Q1) Which of the following is a security-related reason for monitoring and evaluating network traffic?
A) to determine if your IDPS signatures are working well
B) to create substantial data to analyze
C) to optimize your router and switch protocols
D) to see how many files employees download form the Internet
Q2) Which aspect of strengthening the performance of IDPS may involve degaussing?
A) managing memory
B) managing bandwidth
C) managing storage
D) managing processors
Q3) To manage the security information from the devices in a large network,you should establish a security incident _________________ team.
Q4) Nonrepudiation is the use of encryption methods to ensure the confidentiality of data.
A)True
B)False
Q5) List and define the areas for which DiD calls for maintenance.
Q6) What is security auditing and what type of information should be analyzed?
Q7) Discuss the process of IDPS signature evaluation.
To view all questions and flashcards with answers, click on the resource link above. Page 16