MOD 17

Question 1

What are safeguards to avoid, detect, and counteract security risks?

Answer 1

security controls

Question 2

What are the 3 types of security controls?

Answer 2

Managerial, Operational, Technical

Question 3

What is the product of all the company’s controls combined?

Answer 3

Information Security Mangement System (ISMS)

Question 4

What are the 3 threats?

Answer 4

Natural, Human, Environmental

Question 5

Which threat has storms, earthquakes, rain, and critters?

Answer 5

natural threat

Question 6

Which threat is both malicious and non-maliciious?

Answer 6

human threat

Question 7

Which threat is caused by humans that affects the environment?

Answer 7

Environmental threat

Question 8

What are the 3 Controls?

Answer 8

Common, System Specific, Hybrid

Question 9

Which Control manages whose protection is inherited by one or more systems?

Answer 9

Common controls

Question 10

Which Control manages something unique to a specific system?

Answer 10

System Specific controls

Question 11

Which Control is adjusted to provide more security to a subset of systems?

Answer 11

Hybrid controls

Question 12

What helps to prevent data loss? (Failover mode, network mapping)

Answer 12

Redundancy

Question 13

What is a way to store the same data in different places?

Answer 13

Raid arrays

Question 14

Which encryption protects a message in transit from host to host?

Answer 14

Link encryption

Question 15

Is there link encryption protection while on the host?

Answer 15

NO

Question 16

How many keys does link encryption require per host pair?

Answer 16

1

Question 17

Which encryption encrypts at the highest OSI layers and is protected at each host?

Answer 17

End-to-End encryption

Question 18

Which network uses link encryption between the client and a firewall?

Answer 18

Virtual Private Network (VPN)

Question 19

Sender and receiver addresses are _______, payload isn’t unless encrypted

Answer 19

hidden

Question 20

What is an error detection method that adds extra bits to each data units?

Answer 20

Parity check

Question 21

In a parity check, if they sum to an even number it’s _____.

Answer 21

0

Question 22

In a parity check, if they sum to an odd number it’s ______.

Answer 22

1

Question 23

What is a physical device that frequently generates a new, random password?

Answer 23

Password token

Question 24

What is similar to a password token except you also input your PIN?

Answer 24

Challenge-Response System

Question 25

What is the network name of the access point?

Answer 25

SSID (Service Set Identifier)

Question 26

What is 64 or 128 bit encyption that can be easily broken?

Answer 26

WEP (Wired Equivalent Privacy

Question 27

Which wireless security protocol uses TKIP which changes the encryption for each packet?

Answer 27

WPA

Question 28

Which wireless security protocol uses stronger than WPA, uses AES and is the current standard?

Answer 28

WPA2

Question 29

Which wireless security protocol was approved by the WiFi Alliance and is still being rolled out?

Answer 29

WPA3

Question 30

Which firewall can’t see inside the packet but can block input and output?

Answer 30

Packet Filter Firewall

Question 31

Which firewall tracks packets and puts them together, and stops attacks that hide in small packets?

Answer 31

Stateful Inspection Firewall

Question 32

Which proxy runs pseuoapplications?

Answer 32

Application Proxy

Question 33

What is like an application proxy with lots of rules

Answer 33

Guard

Question 34

Which detection system looks for patterns matching a known attack?

Answer 34

Signature-based

Question 35

Which detection system looks for anomalies/odd behavior?

Answer 35

Heuristic

Question 36

Which detection system runs on a single client or host?

Answer 36

Host-Based

Question 37

Which detection system is based on a computer network that acts like an IDS?

Answer 37

Network-based

Question 38

Most IDS run in ______ mode to prevent from being attacked.

Answer 38

stealth

Question 39

Vulnerability Management System is also known as __________

Answer 39

Patch Management