Mixed Deck 2

Question 1

Which of the following would assist most in HOST based intrusion detection?
a. audit trails
b. access control lists
c. security clearances
d. host based authentication

Answer 1

a. audit trails

Question 2

Controls to keep password sniffing attacks from compromising computer systems include which of the following.
a. static and recurring passwords
b. encryption and recurring passwords
c. one time passwords and encryption
d. static and one-time passwords

Answer 2

c. one time passwords and encryption

Question 3

Kerberos can prevent which of the following attacks.
a. tunneling attack
b. playback (replay) attack
c. destructive attack
d. process attack

Answer 3

b. playback attack

Question 4

In discretionary access environments, which of the following entities is authorized to grant information access to other people?
a. manager
b. group leader
c. security manager
d. data owner

Answer 4

d. data owner

Question 5

What is the main concern with single sign-on.
a. maximum unauthorized access would be possible if a password is disclosed.
b. the security admin workload would increase.
c. the users password would be to hard to remember.
d. users access rights would be increased.

Answer 5

a. maximum unauthorized access

Question 6

who developed one of the first mathematical models of a multi-level security computer system.
a. diffie and hellman
b. clark and wilson
c. bell and lapadula
d. gasser and lipner

Answer 6

c. bell and lapadula

Question 7

which of the following attacks could capture network user passwords.
a. data diddling
b. sniffing
c. IP spoofing
d. smurfing

Answer 7

sniffing

Question 8

which of the following would constitute the best example of a password to use for access to a system by a network administrator.
holiday
Christmas12
Jenny
Gyn19Za!

Answer 8

the last one

Question 9

the number of violations that will be accepted or forgiven before a violation record is produced is called which of the following?
a clipping level
b. acceptance level
c. forgiveness level
d. logging level

Answer 9

a. clipping level

Question 10

Guards are appropriate whenever the function required by the security program involves which of the following
a. use of the discriminating judgment
b. use of physical force
c. the operation of the access control device
d. the need to detect unauthorized access

Answer 10

a. use of discriminating judgment

Question 11

what physical characteristic does a retinal scan biometric device measure

Answer 11

the pattern of blood vessels at the back of eye