Chapter 10: Protection Mechanisms
TRUE/FALSE
1. Technical controls alone, when properly configured, can secure an IT environment.
2. The “something you have” authentication mechanism takes advantage of something inherent in the
user that is evaluated using biometrics.
3. The ability to restrict specific services is a common practice in most modern routers, and is invisible to
the user.
4. Secure Shell (SSH) provides security for remote access connections over public networks by creating a
secure and persistent connection..
5. The KDC component of Kerberos knows the secret keys of all clients and servers on the network.
MULTIPLE CHOICE
1. Which of the following access control processes confirms the identity of the entity seeking access to a
logical or physical area?
a.
identification
c.
authorization
b.
authentication
d.
accountability
2. Which of the following is NOT among the four types of authentication mechanisms?
a.
something you know
c.
something you see
b.
something you have
d.
something you produce
3. Which of the following characteristics currently used today for authentication purposes is NOT
considered truly unique?
a.
fingerprints
c.
retina
b.
iris
d.
face representation
4. Which of the following is a criteria used to compare and evaluate biometric technologies?
a.
valid reject rate
c.
false reject rate
b.
crossover correction rate
d.
valid accept rate
5. Which of the following biometric authentication systems is considered to be the most secure?
a.
fingerprint recognition
c.
voice pattern recognition
b.
signature recognition
d.
retina pattern recognition
6. Which of the following biometric authentication systems is the most accepted by users?
a.
keystroke pattern recognition
c.
signature recognition
b.
fingerprint recognition
d.
retina pattern recognition
7. Which type of firewall keeps track of each network connection established between internal and
external systems?
a.
packet filtering
c.
application-level
b.
stateful inspection
d.
cache server
8. The intermediate area between trusted and untrusted networks is referred to as which of the following?
a.
unfiltered area
c.
demilitarized zone
b.
semi-trusted area
d.
proxy zone
9. Which type of device allows only specific packets with a particular source, destination, and port
address to pass through it.
a.
dynamic packet filtering firewalls
c.
intrusion detection systems
b.
proxy servers
d.
application-level firewalls
10. Which technology employs sockets to map internal private network addresses to a public address using
a one-to-many mapping?
a.
network-address translation
c.
port-address translation
b.
screened subnet firewall
d.
private address mapping
11. Which of the following is true about firewalls and their ability to adapt in a network?
a.
Firewalls can interpret human actions and make decisions outside their programming
b.
Because firewalls are not programmed like a computer, they are less error prone
c.
Firewalls are flexible and can adapt to new threats
d.
Firewalls deal strictly with defined patterns of measured observation
12. Which of the following is NOT a method employed by IDPSs to prevent an attack from succeeding?
a.
sending DoS packets to the source
c.
reconfiguring network devices
b.
terminating the network connection
d.
changing the attack’s content
13. Which type of IDPS is also known as a behavior-based intrusion detection system?
a.
network-based
c.
host-based
b.
anomaly-based
d.
signature-based
14. Which tool can identify active computers on a network?
a.
packet sniffer
b.
port scanner
c.
trap and trace
d.
honey pot
15. What is the next phase of the preattack data gathering process after the attacker has collected all of an
organization’s Internet addresses?
a.
footprinting
c.
deciphering
b.
content filtering
d.
fingerprinting
16. What is the range of the well-known ports used by TCP and UDP?
a.
1024-65,536
c.
0-65,536
b.
0-1023
d.
20, 21, 25, 53, 80
17. Which port number is commonly used for the Hypertext Transfer Protocol service.
a.
25
c.
80
b.
53
d.
8080
18. Which port number is commonly used for the Simple Mail Transfer Protocol service?
a.
25
c.
68
b.
53
d.
443
19. What tool would you use if you want to collect information as it is being transmitted on the network
and analyze the contents for the purpose of solving network problems?
a.
port scanner
c.
vulnerability scanner
b.
packet sniffer
d.
content filter
20. Which of the following is used in conjunction with an algorithm to make computer data secure from
anybody except the intended recipient of the data?
a.
key
c.
cipher
b.
plaintext
d.
cryptosystem
21. In which cipher method are values rearranged within a block to create the ciphertext?
a.
permutation
c.
substitution
b.
Vernam
d.
monoalphabetic
22. Which of the following is true about symmetric encryption?
a.
uses a secret key to encrypt and decrypt
c.
it is also known as public key encryption
b.
uses a private and public key
d.
it requires four keys to hold a conversation
23. Which technology has two modes of operation: transport and tunnel?
a.
Secure Hypertext Transfer Protocol
c.
IP Security
b.
Secure Shell
d.
Secure Sockets Layer
24. Which of the following provides an identification card of sorts to clients who request services in a
Kerberos system?
a.
Ticket Granting Service
c.
Authentication Client
b.
Authentication Server
d.
Key Distribution Center
25. Which of the following is a Kerberos service that initially exchanges information with the client and
server by using secret keys?
a.
Authentication Server
c.
Key Distribution Center
b.
Authentication Client
d.
Ticket Granting Service
26. What is most commonly used for the goal of nonrepudiation in cryptography?
a.
block cipher
c.
PKI
b.
secret key
d.
digital signature
COMPLETION
1. ____________________ is the determination of actions that an entity can perform in a physical or
logical area.
2. A(n) ____________________ is a secret word or combination of characters known only by the user.
3. ________ recognition authentication captures the analog waveforms of human speech.
4. A(n) ____________________ token uses a challenge-response system in which the server challenges
the user with a number, that when entered into the token provides a response that provides access.
5. A(n) ____________________ is any device that prevents a specific type of information from moving
between an untrusted network and a trusted network.
6. You might put a proxy server in the __________________, which is exposed to the outside world,
neither in the trusted nor untrusted network.
7. ____________________ converts external IP addresses to internal IP addresses on a one-to-one basis.
8. ____________________ presents a threat to wireless communications, a practice that makes it prudent
to use a wireless encryption protocol to prevent unauthorized use of your Wi-Fi network.
9. The ___________ wireless security protocol was replaced by stronger protocols due to several
vulnerabilities found in the early 2000s.
10. ____________________ Ticket Granting Service (TGS) provides tickets to clients who request
services.
MATCHING
a.
VPN
f.
asymmetric encryption
b.
transport mode
g.
Vernam cipher
c.
SSL
h.
transposition cipher
d.
PKI
i.
content filter
e.
digital certificate
j.
footprinting
1. include digital certificates and certificate authorities
2. most valuable when one of the keys is private and the other is public
3. the organized research of the Internet addresses owned or controlled by a target organization
4. only the data is encrypted – not the headers
5. uses a set of characters for encryption operations only one time and then discards it
6. provides security for online e-commerce transactions
7. a software program or a hardware/software appliance that allows administrators to restrict content that
comes into a network
8. a private, secure network operated over a public and insecure network
9. simply rearranges the values within a block to create the ciphertext
10. block of data attached to a file certifying that the file is from the organization
it claims to be from
SHORT ANSWER
1. Describe and provide an example for each of the four types of authentication mechanisms.
2. Briefly describe how biometric technologies are generally evaluated.
3. What should you look for when selecting a firewall for your network?
PTS: 1 REF: 364
4. List the four most common firewall architectures.
5. What are NAT and PAT? Describe these technologies.
6. There are six recommended best practices for firewall use according to Laura Taylor. List three of
them.
7. Describe in basic terms what an IDPS is.
8. What is WEP and why is it no longer in favor?
9. What is a packet sniffer and how can it be used for good or nefarious purposes?
10. What is asymmetric encryption?