MoIS4 CH 10 Review Questions
1. What is the difference between authentication and authorization? Can a system permit
authorization without authentication? Why or why not?
Authentication is confirming the identity of the entity accessing a logical or physical area,
2. What is the most widely accepted biometric authorization technology? Why?
The most widely accepted biometric authorization technology is photo identification
3. What is the most effective biometric authorization technology? Why?
4. What is the typical relationship between the untrusted network, the firewall, and the
trusted network?
The untrusted network is “the outside world”—for example, the Internet. The trusted
5. How is an application layer firewall different from a packet filtering firewall? Why is an
application layer firewall sometimes called a proxy server?
An application layer firewall is a dedicated computer distinct from the first filtering
6. What special function does a cache server perform? Why does this function have value
for larger organizations?
A cache server stores the most recently accessed pages in an internal cache. This is
7. How does screened-host firewall architecture differ from screened-subnet firewall
architecture? Which offers more security for the information assets that remain on the
trusted network?
Screened-host firewall architecture allows only a single line of defense against possible
8. What is a DMZ? Is this really a good name for the function that this type of subnet
performs?
A demilitarized zone (DMZ) is an intermediate area between a trusted network and an
9. What is RADIUS? What advantage does it have over TACACS?
RADIUS is a Remote Authentication Dial-In User Service. In this method, users dial up a
10. How does a network-based IDPS differ from a host-based IDPS?
A network-based IDS monitors network traffic in order to provide early warning of
11. What is network footprinting? What is network fingerprinting? How are they related?
Network fingerprinting yields a network analysis of a set of Internet addresses that can
12. Why do many organizations ban port scanning activities on their internal networks? Why
would ISPs ban outbound port scanning by their customers?
Many organizations ban port scanning on their internal networks because this could be an
13. Why is TCP port 80 always of critical importance when securing an organization’s
network?
TCP port 80 is almost always associated with Web services, which could contain critical
14. What kind of data and information can be found using a packet sniffer?
A packet sniffer can be used to collect and view all packets on a network or a certain set
15. What are the main components of cryptology?
Cryptology has two components: cryptography and cryptanalysis. Cryptography—from
16. Explain the relationship between plaintext and ciphertext.
Plaintext and ciphertext have the same semantic content, but plaintext is plainly visible
17. Define asymmetric encryption. Why would it be of interest to information security
professionals?
Asymmetric encryption uses a pair of related keys, one to encrypt and the other to
18. One tenet of cryptography is that increasing the work factor to break a code increases the
security of that code. Why is that true?
Increasing the work factor can make your encrypted content very secure because it will
19. Explain the key differences between symmetric and asymmetric encryption. Which can
the computer process faster? Which lowers the costs associated with key management?
Asymmetric encryption uses a public key system with a private key, whereas symmetric
20. What is a VPN? Why are VPNs widely used?
A VPN is a private, secure network operated over a public and insecure network. It keeps
[A Hd] Exercises
1. Create a spreadsheet that takes eight values that a user inputs into eight different cells.
Then create a row that transposes the cells to simulate a transposition cipher, using the
example transposition cipher from the text. Remember to work from right to left, with the
pattern 1 > 3, 2 > 6, 3 > 8, 4 > 1, 5 > 4, 6 > 7, 7 > 5, 8 > 2 where 1 is the rightmost of the
eight cells. Input the text ABCDEFGH as single characters into the first row of cells.
What is displayed?
