BSI_PPT

1 / 33

True or False: Even if a user uses an IPsec VPN in transport mode, an eavesdropper can glean connection information (to whom, when, how often, how much) about the user to their IPsec destination

True

False

2 / 33

An act of verifying and validating the system against a set of specified security requirements is called?

A security audit

Penetration test

A vulnerability assessment

System test

3 / 33

Why do vendors publish MD5 hash values when they provide software patches for their customers to download from the Internet?

Recipients can request future updates to the software by using the assigned hash value

Recipients need the hash value to successfully activate the new software

Recipients can confirm the authenticity of the site from which they are downloading the patch

Recipients can verify the software’s integrity after downloading.

4 / 33

Which items is the responsibility of key management?

Access control, user authentication and authorization

Key length and algorithm propriety

Key generation and destruction

Access controls and encryption

5 / 33

1. Tokens, smart cards, and one-time password are using in what type of authentication?

Something the subject has

None of the above

Something the subject knew

Something the subject is

6 / 33

Company X would like to place an in-line control devices that actively monitors the network traffic for anomalies and enforces access control to prevent distributed denial of service (DDoS) attacks in real-time. What type of device is this?

Router ACL

Intrusion Prevention System (IPS)

Firewall

Intrusion Detection System (IDS)

7 / 33

Which is the best defense against network sniffing?

Use of wired networks (not wireless)

Encryption

Use of gateway

Use of switches (over hubs)

8 / 33

Which has the flags used for a TCP 3-way handshake?

Syn ->: Syn-Fin

Ack->:Syn-Ack

Syn->:Syn-Ack

Syn ->: Ack

9 / 33

Cryptography does not concern itself with:

Authenticity

Confidentiality

Integrity

Availability

10 / 33

Which of the following mail standards relies on a "Web of Trust"?

MIME Object Security Services(MOSS)

Secure Multipurpose Internet Mail Extensions (S/MIME)

Pretty Good Privacy (PGP)

Privacy Enhanced Mail (PEM)

11 / 33

In terms of access control, separation of duties means...

A process is designed so that separate steps must be performed by different people

The critical task requires two people to complete

A policy that limits both the system’s user and processes to access only those resources necessary to perform assigned functions

A business process that forces employees to take mandatory vacation

12 / 33

The followingterm isusedto representthe likelihoodof a threatsourcetakingadvantageof a vulnerability:

Vulnerability

Exposure

Risk

Threat

13 / 33

What type of access control allows owners to specify who can access their files?

Mandatory

Relational

Administrative

Discretionary

14 / 33

Which best describes the process of a secure socket layer (SSL) connection?

The server creates a session key and encrypts it with a private key

The client creates a session key and encrypts it with a private key

The server creates a session key and encrypts it with a public key

The client creates a session key and encrypts it with a public key

15 / 33

Which of the following is not related to a Public key infrastructure (PKI)?

A X.509 certificate

A Ticket Granting Service

A Registration authority

A Certificate authority

16 / 33

Which Transport Layer protocol is “reliable”?

ICMP

BGP

UDP

TCP

17 / 33

A cipher that scrambles letters into different positions is referred to as what?

Transposition

Running key

Stream

Substitution

18 / 33

Public key algorithms are:

Two times faster than secret key algorithms

Two times slower than secret key algorithms

1,000 to 10,000 times faster than secret key algorithms

1,000 to 10,000 times slower than secret key algorithms

19 / 33

What is the effective key length for Data Encryption Standard (DES)?

64-bit

56-bit

32-bit

16-bit

20 / 33

Which of the following encryption methods is unbreakable?

Symmetric ciphers

Elliptic-curve cryptography

DES codebooks

One-timepads

21 / 33

Which of the following statements is most accurate of digital signature?

It allows the recipient of data to prove the source and integrity of data.

It can be used as a signature system and a cryptosystem.

It is the art of transferring handwritten signature to electronic media.

It is a method used to encrypt confidential data.

22 / 33

The three primary methods for authentication of a user to a system or network are?

Authorization, identification, and tokens

Passwords, encryption, and identification

Passwords, tokens, and biometrics.

Identification, encryption, and authorization

23 / 33

The Diffie-Hellman algorithm is primarily used to provide which of the following?

Key exchange

Integrity

Non-repudiation

Confidentiality

24 / 33

A Smurf attack takes advantage of which of the following?

SYN buffers on a host

Overlapping IP fragments

ICMP messages to a network’s broadcast address

Oversized ICMP packets

25 / 33

Which of the following protects Kerberos against replay attacks?

Passwords

Timestamps

Cryptography

Tokens

26 / 33

Why does a digital signature contain a message digest?

To indicate the encryption algorithm

To enable transmission in a digital format

To detect any alteration of the message

To confirm the identity of the sender

27 / 33

Which of the followingis the correct calculation?

Assetvalue($) x exposurefactor(%) = single lossexpectancy($)

Assetvalue($) x exposurefactor($) = single lossexpectancy($)

Assetvalue(%) x exposurefactor(%) = single lossexpectancy(%)

Assetvalue(%) x exposurefactor($) = single lossexpectancy($)

28 / 33

What would be the Annualized Rate of Occurrence (ARO) where a company employs 100 data entry clerks each of whom averages one input error per month?

100

120 1,200

1,000

If every one of the 100 clerks makes 1 error 12 times per year, it makes a total of 1200 errors. The Annnualized Rate of Occurence (ARO) is a value that represents the estimated frequency in which a threat is expected to occur. The range can be from 0.0 to a large number. Having an average of 1200 errors per year means an ARO of 1200

Dalej

29 / 33