Network Security Test Questions
Course Introduction
Network Security is a comprehensive course that explores the principles, technologies, and practices essential to protect networked systems from cyber threats. The course covers topics such as cryptography, authentication, firewalls, intrusion detection systems, secure protocols, and VPNs. Students learn to identify vulnerabilities, assess risks, and implement strategies to defend against various attacks, including malware, denial-of-service, and phishing. Through hands-on labs and real-world case studies, students gain practical skills in configuring and managing secure networks, enabling them to develop robust solutions for safeguarding organizational data and ensuring reliable communication across digital infrastructure.
Recommended Textbook Management of Information Security 5th Edition by Michael E. Whitman
Available Study Resources on Quizplus
12 Chapters
706 Verified Questions
706 Flashcards
Source URL: https://quizplus.com/study-set/2555 Page 2
Chapter 1: Introduction to the Management of Information Security
Available Study Resources on Quizplus for this Chatper
63 Verified Questions
63 Flashcards
Source URL: https://quizplus.com/quiz/50835
Sample Questions
Q1) A short-term interruption in electrical power availability is known as a ____.
A) fault
B) brownout
C) blackout
D) lag
Answer: A
Q2) According to the C.I.A.triad,which of the following is a desirable characteristic for computer security?
A) accountability
B) availability
C) authorization
D) authentication
Answer: B
Q3) A(n)polymorphic threat is one that over time changes the way it appears to antivirus software programs,making it undetectable by techniques that look for pre-configured signatures.
A)True
B)False
Answer: True
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: Compliance: Law and Ethics
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/50836
Sample Questions
Q1) Information ____________ occurs when pieces of non-private data are combined to create information that violates privacy.
Answer: aggregation
Q2) Which of the following is compensation for a wrong committed by an employee acting with or without authorization?
A) liability
B) restitution
C) due diligence
D) jurisdiction
Answer: B
Q3) It is the responsibility of InfoSec professionals to understand state laws and standards.
A)True
B)False Answer: False
Q4) Deterrence is the best method for preventing an illegal or unethical activity.
A)True
B)False Answer: True
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Governance and Strategic Planning for Security
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/50837
Sample Questions
Q1) The individual responsible for the assessment,management,and implementation of information-protection activities in the organization is known as a(n)____________.
A) chief information security officer
B) security technician
C) security manager
D) chief technology officer
Answer: A
Q2) The impetus to begin an SDLC-based project may be ____________________,that is,a response to some activity in the business community,inside the organization,or within the ranks of employees,customers,or other stakeholders.
Answer: event-drivenevent driven
Q3) A set of security tests and evaluations that simulate attacks by a malicious external source is known as ____________.
A) vulnerability assessment
B) penetration testing
C) exploit identification
D) safeguard neutralization
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Information Security Policy
Available Study Resources on Quizplus for this Chatper
56 Verified Questions
56 Flashcards
Source URL: https://quizplus.com/quiz/50838
Sample Questions
Q1) What are the four elements that an EISP document should include?
Q2) The need for effective policy management has led to the emergence of a class of hardware tools that supports policy development,implementation,and maintenance.
A)True
B)False
Q3) Which of the following is NOT one of the basic rules that must be followed when shaping a policy?
A) policy should never conflict with law
B) policy must be able to stand up in court if challenged
C) policy should be agreed upon by all employees and management
D) policy must be properly supported and administered
Q4) Policies must specify penalties for unacceptable behavior and define an appeals process.
A)True
B)False
Q5) Rule-based policies are less specific to the operation of a system than access control lists.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Developing the Security Program
Available Study Resources on Quizplus for this Chatper
65 Verified Questions
65 Flashcards
Source URL: https://quizplus.com/quiz/50839
Sample Questions
Q1) A SETA program consists of three elements: security education,security training,and which of the following?.
A) security accountability
B) security authentication
C) security awareness
D) security authorization
Q2) The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.
Q3) Typically considered the top information security officer in an organization.
A) InfoSec program
B) SETA
C) scope creep
D) security watchstander
E) security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Risk Management: Identifying and Assessing Risk
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/50840
Sample Questions
Q1) What is defined as specific avenues that threat agents can exploit to attack an information asset?
A) Liabilities
B) Defenses
C) Vulnerabilities
D) Weaknesses
Q2) An approach to combining risk identification,risk assessment,and risk appetite into a single strategy.is known as risk protection.
A)True
B)False
Q3) What should the prioritized list of assets and their vulnerabilities and the prioritized list of threats facing the organization be combined to create?
A) Risk exposure report
B) Threats-vulnerabilities-assets worksheet
C) Costs-risks-prevention database
D) Threat assessment catalog
Q4) As each information asset is identified,categorized,and classified,a ________ value must also be assigned to it.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Risk Management: Controlling Risk
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/50841
Sample Questions
Q1) Which of the following is not a step in the FAIR risk management framework?
A) identify scenario components
B) evaluate loss event frequency
C) assess control impact
D) derive and articulate risk
Q2) The formal assessment and presentation of the economic expenditures needed for a particular security control,contrasted with its projected value to the organization.
A) defense risk control strategy
B) mitigation risk control strategy
C) acceptance risk control strategy
D) termination risk control strategy
E) risk appetite
F) cost-benefit analysis
G) cost avoidance
H) asset valuation
I) organizational feasibility
J) single loss expectancy
Q3) What is the OCTAVE method approach to risk management?
Q4) Discuss three alternatives to feasibility analysis.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Security Management Models
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/50842
Sample Questions
Q1) Which type of access controls can be role-based or task-based?
A) constrained
B) content-dependent
C) nondiscretionary
D) discretionary
Q2) Under what circumstances should access controls be centralized vs.decentralized?
Q3) What are the two primary access modes of the Bell-LaPadula model and what do they restrict?
Q4) Which of the following is NOT a change control principle of the Clark-Wilson model?
A) No changes by unauthorized subjects
B) No unauthorized changes by authorized subjects
C) No changes by authorized subjects without external validation
D) The maintenance of internal and external consistency
Q5) What are the five principles that are focused on the governance and management of IT as specified by COBIT 5?
Q6) ____________________ channels are unauthorized or unintended methods of communications hidden inside a computer system,and include storage and timing channels.
Q7) Access controls are build on three key principles. List and briefly define them.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Security Management Practices
Available Study Resources on Quizplus for this Chatper
59 Verified Questions
59 Flashcards
Source URL: https://quizplus.com/quiz/50843
Sample Questions
Q1) Which of the following is NOT a question a CISO should be prepared to answer,about a performance measures program,according to Kovacich?
A) Why should these measurements be collected?
B) Where will these measurements be collected?
C) What affect will measurement collection have on efficiency?
D) Who will collect these measurements?
Q2) Attaining certification in security management is a long and difficult process,but once attained,an organization remains certified for the life of the organization.
A)True
B)False
Q3) Which of the following is a possible result of failure to establish and maintain standards of due care and due diligence?
A) Baselining
B) Legal liability
C) Competitive disadvantage
D) Certification revocation
Q4) Why must you do more than simply list the InfoSec measurements collected when reporting them? Explain.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Planning for Contingencies
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/50844
Sample Questions
Q1) Which type of document grants formal permission for an investigation to occur?
A) Affidavit
B) Search warrant
C) Evidentiary report
D) Forensic concurrence
Q2) Which of the following is a responsibility of the crisis management team?
A) Restoring the data from backups
B) Evaluating monitoring capabilities
C) Keeping the public informed about the event and the actions being taken
D) Restoring the services and processes in use
Q3) If operations at the primary site cannot be quickly restored,the ____________________ occurs concurrently with the DR plan,enabling the business to continue at an alternate site.
Q4) When undertaking the BIA,what should the organization consider?
Q5) When an incident takes place,the disaster recovery (DR)plan is invoked before the incident response (IR)plan.
A)True
B)False
Q6) There are six key elements that the CP team must build into the DR Plan. What are three of them?
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Personnel and Security
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/50845
Sample Questions
Q1) According to Schwartz et al.,employees who create and install security solutions fall under which classification of InfoSec positions?
A) Definers
B) Administers
C) Builders
D) Architects
Q2) Which of the following is NOT among the areas covered as part of the Certified Computer Examiner (CCE)certification process?
A) Server hardware construction and theory
B) General computer hardware used in data collection
C) Ethics in practice
D) Forensics data seizure procedures
Q3) The SSCP certification is more applicable to the security manager than the security technician.
A)True
B)False
Q4) Ultimately,the _______________________ is the spokesperson for the security team and is responsible for the overall InfoSec program.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Protection Mechanisms
Available Study Resources on Quizplus for this Chatper
61 Verified Questions
61 Flashcards
Source URL: https://quizplus.com/quiz/50846
Sample Questions
Q1) Which of the following is NOT a method employed by IDPSs to prevent an attack from succeeding?
A) Sending DoS packets to the source
B) Terminating the network connection
C) Reconfiguring network devices
D) Changing the attack's content
Q2) What are NAT and PAT? Describe these technologies.
Q3) Which of the following is a Kerberos service that initially exchanges information with the client and server by using secret keys?
A) Authentication Server
B) Authentication Client
C) Key Distribution Center
D) Ticket Granting Service
Q4) A(n)____________________ token uses a challenge-response system in which the server challenges the user with a number,that when entered into the token provides a response that provides access.
Q5) The Ticket Granting Service (TGS)is one of three services in the __________ system,and provides tickets to clients who request services.
Q6) What is a packet sniffer and how can it be used for good or nefarious purposes?
Page 14
To view all questions and flashcards with answers, click on the resource link above.