IS5403 Week 4 All Quizw

4

Question

Both DNS poisoning and ARP poisoning involves:

Eavedropping

Spoofing

Distributed DoS

DoS

Replaying

Correct

 

4 of 7

5

Question

Which of the following statements are true about client-side DNS? (Choose all that apply).

The Root Hints file has the IP addresses of the 13 root DNS servers

Check out DNS settings using the NSLookup command

Check out DNS settings using the DIG command

The cache.dns file has the IP addresses of the 13 root DNS servers

If an APIPA address is assigned, then DNS is the problem

Client-side DNS should be configured to point towards the DNS server that is authoritative for the domain that client wants to join

If a web site can be reached by IP address and not by host name, then DNS or the Hosts file would be the problem

Correct

 

5 of 7

6

Question

A security administrator wants to empty the DNS cache after a suspected attack that may have corrupted the DNS server. The server has been repaired, however it is feared that DNS entries may remain in client computer caches. Which of the following tools can be used to flush the DNS cache on a Windows client?

NET

IPCONFIG

NSLOOKUP

PING

Correct

 

6 of 7

7

Question

Which command is used in testing and troubleshooting DNS servers?

netdom

netsh

nslookup

netstat

Correct

4

Question

Which of the following are available protocols for security purposes? (Choose all that apply.)

TLS

SSH

IPSec

NetBIOS

SSL

Correct

 

4 of 6

5

Question

Which of the following services only requires a single port be opened on the firewall?

SNMP

RDP

DNS

FTP

HTTP

DHCP

SSH

Correct

 

5 of 6

6

Question

SNMP uses which port by default?

110

53

80

22

161

139

Correct

4

Question

To make a firewall effective you need to define/edit _______________

Firewall rules

Signatures

Attack patterns

Definitions

Correct

 

4 of 6

5

Question

Which of the following network profiles is available on Windows Firewall?

Domain networks

Group networks

Home or work (private) networks

Public networks

Correct

 

5 of 6

6

Question

What happens when you execute the following command:

netsh advfirewall set allprofiles state off

Switch off Windows Firewall for all network profiles

Switch off Windows Firewall for private network profile

Switch off Windows Firewall for domain network profile

Switch off Windows Firewall for public network profile

Correct

Aideen sent an email to her supervisor explaining the Domain Name System Security Extensions (DNSSEC). Which of the following statements would Aideen have NOT included in her email?

• It adds message header information.
• It is fully supported in BIND9.
• It can prevent a DNS transfer attack.
• It adds additional resource records.

CORRECT

Which of the following is NOT a service model in cloud computing?

• Infrastructure as a Service (IaaS)
• Hardware as a Service (HaaS)
• Software as a Service (SaaS)
• Platform as a Service (PaaS)

CORRECT

Which of these is the most secure protocol for transferring files?

• FTP
• SFTP
• TCP
• FTPS

CORRECT

DNSSEC adds additional _____ and message header information, which can be used to verify that the requested data has not been altered in transmission.

• hash sequences
• zone transfers
• resource records
• field flags

CORRECT

Catriona needed to monitor network traffic. She did not have the resources to install an additional device on the network. Which of the following solutions would meet her needs?

• Port mirroring
• Aggregation switch
• Network tap
• Correlation engine

CORRECT

Kyle asked his supervisor which type of computing model was used when the enterprise first started. She explained that the organization purchased all the hardware and software necessary to run the company. What type of model was she describing to Kyle?

• On-premises
• Hosted services
• Virtual services
• Off-premises

CORRECT

Which of the following is NOT a security concern of virtualized environments?

• Virtual machines must be protected from both the outside world and from other virtual machines on the same physical computer.
• Virtual servers are less expensive than their physical counterparts.
• Physical security appliances are not always designed to protect virtual systems.
• Live migration can immediately move one virtualized server to another hypervisor.

CORRECT

Which of the following can be used to prevent a buffer overflow attack?

• DNS
• FIM
• VPN
• DEP

CORRECT

Which of these is NOT correct about an SSL/TLS accelerator?

• It replaces FTP using Secure Sockets Layer (FTPS) as a file transport layer resting “on top” of SSL/TLS.
• It contains one or more co-processors to handle SSL/TLS processing.
• It is a separate hardware card that inserts into a web server.
• It can be installed as a “virtual SSL/TLS server” alongside a forward proxy server.

CORRECT

Which version of Simple Network Management Protocol (SNMP) is considered the most secure?

• SNMPv4
• SNMPv2
• SNMPv3
• SNMPv5

CORRECT

Which type of device log contains the most beneficial security data?

• router log
• firewall log
• switch log
• email log

CORRECT

Which of the following TCP/IP protocols do not relate to security?

• FTP
• IP
• HTTPS
• SNMP

CORRECT

Which Domain Name System (DNS) attack replaces a fraudulent IP address for a symbolic name?

• DNS replay
• DNS poisoning
• DNS forwarding
• DNS masking

CORRECT

Eachna is showing a new security intern the log file from a firewall. Which of the following entries would she tell him do not need to be investigated?

• successful logins
• suspicious outbound connections
• IP addresses that are being rejected and dropped
• Probes to obscure port numbers

CORRECT

Which type of hypervisor does not run on an underlying operating system?

• Type I
• Type II
• Type III
• Type IV

CORRECT

What functions of a switch does a software defined network separate?

• RAM and hard drive
• Host and virtual
• Network level and resource level
• Control plane and physical plane

CORRECT

Which type of cloud is offered to specific organizations that have common concerns?

• private cloud
• public cloud
• hybrid cloud
• community cloud

CORRECT

Which application stores the user's desktop inside a virtual machine that resides on a server and is accessible from multiple locations?

• VDI
• VDE
• Application cell
• Container

CORRECT

Which type of log can provide details regarding requests for specific files on a system?

• access log
• audit log
• event log
• SysFile log

CORRECT

What is the recommended secure protocol for voice and video applications?

• Secure/Multipurpose Internet Mail Extensions (S/MIME)
• Hypertext Transport Protocol Secure (HTTPS)
• Network Time Protocol (NTP)
• Secure Real-time Transport Protocol (SRTP)

CORRECT

The primary design of a(n) _____ is to capture the transmissions from legitimate users.

• evil twin
• rogue access point
• WEP
• Bluetooth grabber

CORRECT

What is the primary weakness of wired equivalent privacy (WEP)?

• Initialization vectors (IVs) are difficult for users to manage.
• It functions only on specific brands of APs.
• Its usage creates a detectable pattern.
• It slows down a WLAN from 104 Mbps to 16 Mbps.

CORRECT

Which of these is a vulnerability of MAC address filtering?

• MAC addresses are initially exchanged unencrypted.
• Not all operating systems support MACs.
• The user must enter the MAC.
• APs use IP addresses instead of MACs.

CORRECT

Why is a rogue AP a security vulnerability?

• It requires the use of vulnerable wireless probes on all mobile devices.
• It allows an attacker to bypass network security configurations.
• It uses the weaker IEEE 80211i protocol.
• It conflicts with other network firewalls and can cause them to become disabled.

CORRECT

Which technology is predominately used for contactless payment systems?

• Bluetooth
• near field communication (NFC)
• wireless local area network (WLAN)
• Radio Frequency ID (RFID)

CORRECT

Which of these is NOT a type of wireless AP probe?

• AP probe
• wireless device probe
• dedicated probe
• WNIC probe

CORRECT

Which of these Wi-Fi Protected Setup (WPS) methods is vulnerable?

• Push-Button method
• PIN method
• NFC method
• piconet method

CORRECT

Which of these Bluetooth attacks involves accessing unauthorized information through a Bluetooth connection?

• Bluecreeping
• Bluejacking
• Bluesnarfing
• Bluestealing

CORRECT

Which of the following is NOT true of a wireless router?

• It is also called a "residential WLAN gateway".
• It is most commonly used in an enterprise setting .
• It combines multiple features into a single hardware device.
• It often includes features of an access point (AP).

CORRECT

Adabella was asked by her supervisor to adjust the frequency spectrum settings on a new AP. She brought up the configuration page and looked through the different options. Which of the following frequency spectrum settings would she NOT be able to adjust?

• Frequency band
• RFID spectrum
• Channel selection
• Channel width

CORRECT

Which of these is NOT a risk when a home wireless router is not securely configured?

• User names, passwords, credit card numbers, and other information sent over the WLAN could be captured by an attacker.
• Only a small percentage of the total traffic can be encrypted.
• Malware can be injected into a computer connected to the WLAN.
• An attacker can steal data from any folder with file sharing enabled.

CORRECT

Which of these is NOT a limitation of turning off the SSID broadcast from an AP?

• Users can more easily roam from one WLAN to another.
• Turning off the SSID broadcast may prevent users from being able to freely roam from one AP coverage area to another.
• Some versions of operating systems favor a network that broadcasts an SSID over one that does not.
• The SSID can easily be discovered, even when it is not contained in beacon frames, because it still is transmitted in other management frames sent by the AP.

CORRECT

Minh has been asked to recommend an EAP for a system that uses both passwords and tokens with TLS. Which should she recommend?

• EAP-TTLS
• EAP-SSL
• EAP-TLS
• EAP-FAST

CORRECT

What is a difference between NFC and RFID?

• NFC is based on wireless technology while RFID is not.
• RFID is designed for paper-based tags while NFC is not.
• NFC devices cannot pair as quickly as RFID devices.
• RFID is faster than NFC.

CORRECT

Flavio visits a local coffee shop on his way to school and accesses its free Wi-Fi. When he first connects, a screen appears that requires him to first agree to an Acceptable Use Policy (AUP) before continuing. What type of AP has he encountered?

• web-based portal
• authenticated portal
• captive portal
• rogue portal

CORRECT

WPA replaces WEP with _____.

• WPA2
• Temporal Key Integrity Protocol (TKIP)
• Message Integrity Check (MIC)
• Cyclic Redundancy Check (CRC)

CORRECT

A wireless LAN controller (WLC) was recently installed, and now Kelsey needs to purchase several new APs to be managed by it. Which type of AP should he purchase?

• Controller AP
• Standalone AP
• Any type of AP can be managed by a WLC.
• Fat AP

CORRECT

Which of the following is NOT a wireless peripheral protection option?

• Switch to a more fully tested Bluetooth model
• Update or replacing any vulnerable device
• Substitute a wired device
• Install a network sensor to detect an attack

CORRECT

AES-CCMP is the encryption protocol standard used in _____.

• WPA
• NFC
• IEEE 802.11
• WPA2

CORRECT

Elijah was asked by a student intern to explain the Extensible Authentication Protocol (EAP). What would be the best explanation of EAP?

• It is a subset of WPA2
• It is a framework for transporting authentication protocols
• It is a technology used by IEEE 802.11 for encryption
• It is the transport protocol used in TCP/IP for authentication

CORRECT