Terms

Question 1

Data classification

Answer 1

Civil: CPSP

Confidential / Private / Sensitive & Proprietary / Public

Military: TSC

Top Secret / Secret / Confidential / Sensitive But Unclassified / Unclassified

Question 2

Outsource code development to 3rd party.

A. Code from 3rd party will need to be manually reviewed for function and security.
B. If 3rd party goes out of business, existing code may need to be abandoned.
C. Third-party code development is always more expensive
D. A software escrow agreement should be established.

Answer 2

A,B

Question 3

A VPN can be a significant security improvement for many communication links. A VPN can be established over which of the following?

A. Wireless LAN connection
B. Remote access dial-up connection
C. WAN link
D. All of the above

Answer 3

D

Question 4

WPA3. The policy also states that ENT authentication will not be implemented. What authentication mechanism can be implemented in this situation?

A. IEEE 802.1X
B. IEEE 802.1q
C. SAE
D. EAP-FAST

Answer 4

WPA3 supports ENT (aka IEEE 802.1X) and SAE authentication. SAE still uses a password, but it no longer encrypts and sends that password across the connection to perform authentication. Instead, SAE performs a zero-knowledge proof process known as Dragonfly Key Exchange, which is itself a derivative of Diffie-Hellman.

IEEE 802.1X defines port-based network access control that ensures clients can’t communicate with a resource until proper authentication. It is based on EAP from PPP.

IEEE 802.1q defines the use of VLAN tags and is not relevant to Wi-FI authentication.

EAP-FAST is a Cisco protocol to replace LEAP. Not supported in WPA3.

Question 5

SW-CMM, which phrase is used to gain a detailed understanding of the software development process?

Answer 5

Managed.

Repeatable: basic lifecycle.
Defined: formal, documented development process.
Optimizing: continous improvement.

Question 6

AAA services. Accountability contains

Answer 6

Logging / Identification verification / Authorization

Question 7

Social Engineering. Trick user to install.

Answer 7

Trojan horse. Viruses and logic bombs do not typically use social engineering.

Question 8

Ring protection. Which layer Not implemented

Answer 8

Layer1 and 2

Question 9

X XOR Y

Answer 9

If both values are false / true, output is false.

Question 10

BIA 第一步

Answer 10

Identification of priorites

Question 11

Stateful inspection firewalls

Answer 11

Layer3 & Layer4.

adjust filtering rules based on the content and context of traffic of existing sessions.