A. Asymmetric encryption protocol
B. Secret key encryption protocol
C. Public key encryption protocol
D. Shared key encryption protocol
Item number 132
Chapter 11: Cryptography
Section: The Secure/Multipurpose Internet Mail Extension Protocol
Item type: Multiple Choice
Question: S/MIME is used for which of the following?
Options:
A. Encrypt Internet transactions
B. Encrypt credit card numbers
C. Encrypt email communications
D. Encrypt digital certificates
Explanation: S/MIME is a standard for email encryption and digital signatures.
Item number 133
Chapter 11: Cryptography
Section: Pretty Good Privacy Protocol
Item type: Multiple Choice
Question: In PGP digital certificates are issued by which of the following?
Options:
A. Registration authority
B. Certificate authority
C. Other users
D. All the above
Item number 134
Chapter 11: Cryptography
Section: The Role of Keys in Cryptosystems
Item type: Multiple Choice
Question: Bob sends Alice an encrypted message using AES. What key would Alice
need to use to decrypt the message?
Options:
A. Bob’s public key
B. Bob’s private key
C. Alice’s public key
D. The same key that Bob used to encrypt the message
Item number 135
Chapter 11: Cryptography
Section: The Role of Keys in Cryptosystems
Item type: Multiple Choice
Question: Bob sends Alice an encrypted message using RSA. What key would Alice
need to use to decrypt the message?
Options:
A. Public key
B. Private key
C. Shared key
D. The same key that Bob used to encrypt the message
Item number 136
Chapter 12: Telecommunications, Network, and Internet Security
Section: The Protocol Stack
Item type: Multiple Choice
Question: Which of the following layer of the OSI model is responsible for addressing of
the packets?
Options:
A. Presentation
B. Session
C. Network
D. Transport
Item number 137
Chapter 12: Telecommunications, Network, and Internet Security
Section: The OSI Reference Model and TCP/IP
Item type: Multiple Choice
Question: Which of the following protocols operates at the network layers of the OSI
model?
Options:
A. UDP
B. TCP
C. PPP
D. IP
Item number 138
Chapter 12: Telecommunications, Network, and Internet Security
Section: The OSI Reference Model and TCP/IP
Item type: Multiple Choice
Question: Which of the following protocols operates at the application layer of the OSI
model?
Options:
A. UDP
B. FTP
C. PPP
D. IP
Item number 139
Chapter 12: Telecommunications, Network, and Internet Security
Section: The OSI Reference Model and TCP/IP
Item type: Multiple Choice
Question: Which of the following protocols is used to establish a remote login
connection to another computer?
Options:
A. ICMP
B. ARP
C. Telnet
D. SMTP
Item number 140
Chapter 12: Telecommunications, Network, and Internet Security
Section: The OSI Reference Model and TCP/IP
Item type: Multiple Choice
Question: The ping utility uses which of the following protocols?
Options:
A. ARP
B. ICMP
C. SMTP
D. FTP
Item number 141
Chapter 12: Telecommunications, Network, and Internet Security
Section: The OSI Reference Model and TCP/IP
Item type: Multiple Choice
Question: Which of the following protocols is used send emails?
Options:
A. FTP
B. TCP
C. SMPT
D. SNTP
Item number 142
Chapter 12: Telecommunications, Network, and Internet Security
Section: Intrusion Detection Systems
Item type: Multiple Choice
Question: Which of the following best describes a false negative result from and IDS?
Options:
A. An IDS incorrectly identifies a legitimate traffic as an intrusion
B. An IDS correctly identifies an intrusion as such
C. An IDS correctly identifies legitimate traffic as such
D. An IDS incorrectly identifies an intrusion as legitimate traffic
Item number 143
Chapter 12: Telecommunications, Network, and Internet Security
Section: Virtual Private Networks
Item type: Multiple Choice
Question: Which of the following allows you to establish a secure connection to a
corporate network?
Options:
A. IDS
B. VPN
C. IPS
D. DMZ
Item number 144
Chapter 12: Telecommunications, Network, and Internet Security
Section: Virtual Private Networks
Item type: Multiple Choice
Question: Which of the following statements best describes a VPN?
Options:
A. It allows users to establish a secure connection over a public network.
B. It filters incoming and outgoing traffics based on a set of rules.
C. It is a specially configured network that sits between the public and the internal
network.
D. It translates the internal private IP addresses to a public IP address.
Item number 145
Chapter 12: Telecommunications, Network, and Internet Security
Section: Demilitarized Zone or Screened – Subnet Firewall
Item type: Multiple Choice
Question: Which of the following statements best describes a DMZ?
Options:
A. It allows users to establish a secure connection over a public network.
B. It filters incoming and outgoing traffics based on a set of rules.
C. It is a specially configured network that sits between the public and the internal
network.
D. It translates the internal private IP addresses to a public IP address.
Item number 146
Chapter 12: Telecommunications, Network, and Internet Security
Section: The Protocol Stack
Item type: Multiple Choice
Question: Which of the following best describes the goal of the presentation layer of the
OSI model?
Options:
A. It is responsible for addressing of the packets.
B. It is responsible for formatting of packets including encryption and encryption.
C. It is responsible for establishing connections and terminations between the
computers.
D. It is responsible for the transfer of data.
Item number 147
Chapter 12: Telecommunications, Network, and Internet Security
Section: The OSI Reference Model and TCP/IP
Item type: Multiple Choice
Question: The FTP protocol operates at which of the following layers of the OSI model?
Options:
A. Session
B. Presentation
C. Network
D. Application
Item number 148
Chapter 12: Telecommunications, Network, and Internet Security
Section: The Protocol Stack
Item type: Multiple Choice
Question: Which of the following best describes the goal of the network layer of the OSI
model?
Options:
A. It is responsible for addressing of the packets.
B. It defines the characteristics of the network hardware.
C. It is responsible for establishing connections and terminations between the
computers.
D. It is responsible for the transfer of data.
Item number 149
Chapter 12: Telecommunications, Network, and Internet Security
Section: Routers
Item type: Multiple Choice
Question: Which of the following keeps track of the state of the connection?
Options:
A. Packet filters firewalls
B. Routers
C. Stateful inspection firewalls
D. All the above
Item number 150
Chapter 12: Telecommunications, Network, and Internet Security
Section: Routers
Item type: Multiple Choice
Question: Which of the following statements about packet filter firewalls is not true?
Options:
A. They can filter traffic based on the port number.
B. They can filter traffic based on the protocol type.
C. They can filter traffic based on the state of the connection.
D. They can filter traffic based on the source and destination address.
Item number 151
Chapter 12: Telecommunications, Network, and Internet Security
Section: The Protocol Stack
Item type: Multiple Choice
Question: Which of the following statements best describes the goal of the physical
layer of the OSI model?
Options:
A. It is responsible for addressing of the packets.
B. It defines the characteristics of the network hardware.
C. It is responsible for establishing connections and terminations between the
computers.
D. It is responsible for the transfer of data.
Item number 152
Chapter 13: Software Development Security
Section: Development (Coding) Phase
Item type: Multiple Choice
Question: Static analysis and peer review are key activities within which of the following
stages of the SDLC?
Options:
A. Requirements
B. Design
C. Development
D. Test
E. Deployment
Item number 153
Chapter 13: Software Development Security
Section: Software Development Life Cycles
Item type: Multiple Choice
Question: Which of the following agile SDLC methodology divides the project into
explicit work cycles known as sprints.
Options:
A. Extreme programming
B. Scrum
C. Crystal Clear
D. Dynamic systems development method
Item number 154
Chapter 13: Software Development Security
Section: System Design and Detailed Design
Item type: Multiple Choice
Question: Threat modeling is conducted during which of the following phases of the
SDLC?
Options:
A. Requirements
B. Design
C. Development
D. Testing
E. Deployment
Item number 155
Chapter 13: Software Development Security
Section: Requirements Gathering and Analysis
Item type: Multiple Choice
Question: Identifying HIPAA, PCI, and SOX requirements is done during which of the
following phases of the SDLC?
Options:
A. Requirements
B. Design
C. Development
D. Testing
E. Deployment
Item number 156
Chapter 13: Software Development Security
Section: Testing
Item type: Multiple Choice
Question: Which of the following is a key activity performed during the testing phase of
the SDLC?
Options:
A. Map security and privacy requirements
B. Threat modeling and design review
C. Final security review and application security monitoring
D. Security test cases and dynamic analysis
Item number 157
Chapter 13: Software Development Security
Section: Deployment
Item type: Multiple Choice
Question: Which of the following is the final phase of the SDLC?
Options:
A. Testing
B. Deployment
C. Development
D. Design
Item number 158
Chapter 13: Software Development Security
Section: Deployment
Item type: Multiple Choice
Question: Which of the following are key activities performed during the deployment
phase of the SDLC?
Options:
A. Map security and privacy requirements
B. Threat modeling and design review
C. Final security review and application security monitoring
D. Security test cases and dynamic analysis
Item number 159
Chapter 13: Software Development Security
Section: Testing
Item type: Multiple Choice
Question: Which of the following is a key input to the testing phase of the SDLC?
Options:
A. Systems requirements documentation
B. Finalized application
C. Data flow diagrams
D. Source code
Item number 160
Chapter 13: Software Development Security
Section: Design Reviews
Item type: Multiple Choice
Question: Security design review is part of which of the following phases of the SDLC?
Options:
A. Design
B. Development
C. Testing
D. Deployment
Item number 161
Chapter 13: Software Development Security
Section: Measuring the Secure Development Program
Item type: Multiple Choice
Question: Which of the following statements best describes OpenSAMM?
Options:
A. Lists the top ten most critical application flaws.
B. It is designed to help organizations understand, measure, and plan a software
security initiative.
C. It is an open framework that helps organizations formulate and implement a
strategy for software security.
D. It is designed to help organizations identify risks to software development.
Item number 162
Chapter 13: Software Development Security
Section: Measuring the Secure Development Program
Item type: Multiple Choice
Question: Which of the following statements best describes BSIMM?
Options:
A. Lists the top ten most critical application flaws.
B. It is designed to help organizations understand, measure, and plan a software
security initiative.
C. It is an open framework that helps organizations formulate and implement a
strategy for software security.
D. It is designed to help organizations identify risks to software development.
Item number 163
Chapter 13: Software Development Security
Section: Security Training
Item type: Multiple Choice
Question: Which of the following is not one of the major phases of the SDLC?
Options:
A. Design
B. Development
C. Security training
D. Deployment
Item number 164
Chapter 14: Securing the Future
Section: Carders, Account Takeovers, and Identity Theft
Item type: Multiple Choice
Question: Which if the following best describes an account takeover attack?
Options:
A. Web sites that sell credit cards numbers, PINS, Social Security numbers and
other personality identifiable information
B. Using stolen credit card data to transact
C. Using stolen log-in credentials to access private bank or credit card account
D. An email that appears to be from a legitimate bank asking the user to click a link
to confirm their log in credentials
Item number 165
Chapter 14: Securing the Future
Section: Carders, Account Takeovers, and Identity Theft
Item type: Multiple Choice
Question: Which if the following best describes credit card fraud?
Options:
A. Using stolen personally identifiable information to open a credit card account
B. Using stolen credit card data to perform transactions
C. Using stolen log-in credentials to access private bank or credit card account
D. An email that appears to be from a legitimate bank asking the user to click a link
to confirm their log in credentials
Item number 166
Chapter 14: Securing the Future
Section: Carders, Account Takeovers, and Identity Theft
Item type: Multiple Choice
Question: Which if the following best describes credit card fraud?
Options:
A. Using stolen personally identifiable information to open a credit card account
B. Using stolen credit card data to perform transactions
C. Using stolen log-in credentials to access a private bank or credit card account
D. An email that appears to be from a legitimate bank asking the user to click a link
to confirm their log in credentials
Item number 167
Chapter 12: Telecommunications, Network, and Internet Security
Section: IPSec
Item type: Multiple Choice
Question: IPsec operates at which of the following layers of the OSI model?
Options:
A. Session
B. Application