Course Introduction
Network Security Exam Materials
Network Security explores the principles and practices used to secure computer networks and protect data from breaches, attacks, and other cyber threats. The course covers fundamental concepts such as cryptography, authentication, access control, firewalls, intrusion detection systems, and secure network architectures. Students will examine various types of network vulnerabilities, security protocols, and defense mechanisms, and analyze real-world case studies involving security incidents. The objective is to provide a solid foundation in identifying potential risks and implementing effective strategies to safeguard networked information systems against evolving security challenges.
Recommended Textbook
Corporate Computer Security 4th Edition by
Randy J. Boyle
Available Study Resources on Quizplus
11 Chapters
1198 Verified Questions
1198 Flashcards
Source URL: https://quizplus.com/study-set/1400
Page 2
Chapter 1: The Threat Environment
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/27878
Sample Questions
Q1) In hacking, the perpetrator tries to obtain money or other goods by threatening to take actions that would be against the victim's interest.
A)True
B)False
Answer: False
Q2) In response to a chain of attack, victims can often trace the attack back to the final attack computer.
A)True
B)False
Answer: True
Q3) You receive an e-mail that seems to come from your bank. Clicking on a link in the message takes you to a website that seems to be your bank's website. However, the website is fake. This is called a ________ attack. (Pick the most precise answer.)
A) social engineering
B) a hoax
C) phishing
D) spear fishing
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: Planning and Policy
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27880
Sample Questions
Q1) ________ audits are done by an organization on itself.
A) Internal
B) External
C) Both A and B
D) Neither A nor B Answer: A
Q2) It is a good idea to view the security function as a police force or military organization.
A)True
B)False Answer: False
Q3) Exceptions in policies and procedures should be forbidden.
A)True
B)False Answer: False
Q4) Planning, protection, and response follow a fairly strict sequence from one stage to another.
A)True
B)False Answer: False
Page 4
To view all questions and flashcards with answers, click on the resource link above.
Chapter 3: Cryptography
Available Study Resources on Quizplus for this Chatper
122 Verified Questions
122 Flashcards
Source URL: https://quizplus.com/quiz/27881
Sample Questions
Q1) Nearly all encryption for confidentiality uses symmetric key encryption ciphers.
A)True
B)False
Answer: True
Q2) When a hashing algorithm is applied, the hash will ALWAYS have a fixed length.
A)True
B)False
Answer: True
Q3) In public key encryption, "signing" is the act of ________.
A) adding the password to the challenge message and hashing the two
B) hashing the plain text message
C) encrypting the message digest with its own private key
D) encrypting the message digest with its own public key
Answer: C
Q4) A commonly SSL/TLS-aware application is ________.
A) webservice
B) database
C) Both A and B
D) Neither A nor B
Answer: A
Page 5
To view all questions and flashcards with answers, click on the resource link above.
Chapter 4: Secure Networks
Available Study Resources on Quizplus for this Chatper
119 Verified Questions
119 Flashcards
Source URL: https://quizplus.com/quiz/27882
Sample Questions
Q1) DoS network attacks are fairly uncommon.
A)True
B)False
Q2) In normal ARP traffic, every host can make ARP requests.
A)True
B)False
Q3) DoS attacks can cause harm by ________.
A) stopping a critical service
B) slowly degrading services over a period of time
C) Both A and B
D) Neither A nor B
Q4) Many companies continue to use WEP to avoid the cost of reconfiguring all of their access points and clients to 802.11i and because WEP has not been fully cracked yet.
A)True
B)False
Q5) Focusing electronic attacks on specific high-value targets is known as whaling.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Access Control
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27883
Sample Questions
Q1) The major promise of biometrics is to replace reusable passwords.
A)True
B)False
Q2) On loading docks, outgoing shipments should be separated from incoming shipments ________.
A) to ensure the segregation of duties
B) to avoid confusion
C) to reduce the risk of theft
D) All of the above
Q3) For computer access, a false ________ means that a legitimate user is denied access to a resource.
A) rejection
B) acceptance
C) Both A and B
D) Neither A nor B
Q4) Placing sensitive equipment in secure areas to minimize potential threats and damage is called siting.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewalls
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27884
Sample Questions
Q1) Attacks other than application level attacks usually fail to get through SPI firewalls.
A)True
B)False
Q2) What type of filtering do IDSs do?
A) Deep packet inspection
B) SPI filtering
C) Both A and B
D) Neither A nor B
Q3) If an IPS identifies an attack, it can ________.
A) drop the attack packet(s)
B) limit suspicious traffic to a certain percentage of the total bandwidth
C) Both A and B
D) Neither A nor B
Q4) It is better to have an ACL that permits access to a single internal webserver than one that allows access to all internal webservers.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Host Hardening
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27885
Sample Questions
Q1) The cost of ________ LINUX is definitely far less than the cost of commercial operating systems such as Windows.
A) purchasing
B) using
C) Both A and B
D) Neither A nor B
Q2) If an attacker takes over a router, he or she will be able to ________.
A) map the entire internal network
B) reroute traffic to cause a local DoS
C) Both A and B
D) Neither A nor B
Q3) Updating should be done on client PCs ________.
A) manually
B) automatically
C) only after careful testing of the update
D) Client PCs should not be updated.
Q4) After access is granted to a network, many NACs continue to monitor network PCs.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Application Security
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27886
Sample Questions
Q1) When executing attack code, if the attacker has skillfully overwritten the return address, the return address will not point back to "data" in the buffer.
A)True
B)False
Q2) Skype can decrypt and read user traffic.
A)True
B)False
Q3) Firewall port openings are required for SIP/H.323 messages.
A)True
B)False
Q4) Which of the following uses a PKI?
A) S/MIME
B) PGP
C) Both A and B
D) Neither A nor B
Q5) Cookies can used to track users at a website.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Data Protection
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/27887
Sample Questions
Q1) Companies address the risk of losing a security key by using ________.
A) encryption key resets
B) key escrow
C) Both A and B
D) Neither A nor B
Q2) Normally, there is no limit on how long shadowing may maintain backed up files.
A)True
B)False
Q3) Image backup is a fast form of backups.
A)True
B)False
Q4) ________ is the process of obscuring data such that it cannot identify a specific person, but remains practically useful.
A) DLP
B) PII
C) Data masking
D) None of the above
Q5) Triggers are damaging code that attackers use to destroy databases.
A)True
B)False
11
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Incident and Disaster Response
Available Study Resources on Quizplus for this Chatper
107 Verified Questions
107 Flashcards
Source URL: https://quizplus.com/quiz/27879
Sample Questions
Q1) The ________ collects event data and stores them in log files on the monitoring devices.
A) manager
B) agent
C) Both A and B
D) Neither A nor B
Q2) When a system runs out of storage space, ________.
A) new events are not saved
B) the IDS will start a new log file
C) Both A and B
D) Neither A nor B
Q3) Federal jurisdiction typically does not extend to computer crimes that are committed entirely within a state and that do not have a bearing on interstate commerce.
A)True
B)False
Q4) A CSIRT should include members from the public relations department.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Module A: Networking Concepts
Available Study Resources on Quizplus for this Chatper
91 Verified Questions
91 Flashcards
Source URL: https://quizplus.com/quiz/27888
Sample Questions
Q1) ________ is a standards architecture.
A) ISO
B) OSI
C) Both A and B
D) Neither A nor B
Q2) TCP messages are called ________.
A) packets
B) frames
C) datagrams
D) segments
Q3) IP addresses are 32 octets long.
A)True
B)False
Q4) When your mobile phone is on a network, it is a host.
A)True
B)False
Q5) Packets are carried inside frames.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 13