NDE Final Exam with all Correct & 100% Verified
Answers |Actual Complete Update |Already Graded
A+ (Just Released)
James, a network specialist joined an organization. He was provided with administrator
privileges, through which he can access the files and servers and perform administrative
activities.
Which of the following information assurance principles authorizes James to access the server
or system files? ✔Correct Answer-Authentication
Which of the following information assurance principles ensures that the information is not
modified or tampered by any unauthorized parties? ✔Correct Answer-Integrity
Which of the following information assurance principles ensures that a party in a
communication cannot deny sending the message? ✔Correct Answer-Nonrepudiation
Which of the following network defense techniques examines the causes for attacks in networks
by using fault-finding mechanisms, security forensics techniques, and post-mortem analysis?
✔Correct Answer-Reactive approach
Danny, a security professional, wants to safeguard his organization's network from hacking
attempts and virus attacks. For this reason, he follows a network defense approach that
examines the causes for attacks in the network and includes fault finding, security forensics, and
post-mortem analysis techniques.
Which of the following network defense approaches was followed by Danny in the above
scenario? ✔Correct Answer-Retrospective approach
Clark, a network security specialist, was assigned to secure an organization's network. Clark
implemented a network defense approach that can tackle network attacks such as DoS and
DDoS and includes security monitoring methods such as IDS, SIMS, TRS, and IPS.
Which of the following network defense approaches did Clark implement in the above scenario?
✔Correct Answer-Reactive approach
Which of the following components of technical security controls protects the information
passing through the network and preserves the privacy and reliability of the data? ✔Correct
Answer-Encryption and protocols
Which of the following components of technical network security controls examines the
network devices and identifies weaknesses in the network? ✔Correct Answer-Auditing
,James, a certified hacker, was appointed by an agency to perform a cyberattack against the rival
company's servers with the intention of making the services unavailable to their customers.
James performed a DoS attack on the servers but he could not make the services unavailable.
Which of the following components of technical security controls protected the servers from
the DoS attack? ✔Correct Answer-Network security devices
Bob has recently purchased a new laptop and enabled all the required security controls. The
next day while verifying whether all the security mechanisms were enabled on his system or
not, he found that the "firewall" was disabled. He immediately enabled the firewall option on
his laptop.
Identify the component of technical security controls that Bob enabled to protect his laptop
from network-related threats. ✔Correct Answer-Network security devices
Which of the following protocols provides centralized authentication, authorization, and
accounting (AAA) for remote access servers to communicate with a central server? ✔Correct
Answer-RADIUS
Which of the following protocols is an application layer protocol that provides cryptographic
privacy and authentication for network communication and enhances the security of emails?
✔Correct Answer-Pretty Good Privacy (PGP) protocol
Which of the following protocols is an application layer protocol used for sending digitally
signed and encrypted email messages? ✔Correct Answer-S/MIME
Sally, a security professional, implemented a protocol for authenticating requests in computer
networks. The protocol implemented by Sally is based on the client-server model, and uses
encryption technology and a "ticket" mechanism to prove the identity of a user on a non-secure
network.
Identify the protocol implemented by Sally in the above scenario. ✔Correct Answer-Kerberos
Margaret, a system administrator, regularly administers the devices connected to the
organizational network. She found that certain devices are vulnerable to sniffing attacks. To
protect the device from such attacks, Margaret employed a protocol that encrypts the entire
communication between the client and the server, including the user's password, which
protects it from sniffing attacks.
Identify the protocol employed by Margaret in the above scenario. ✔Correct Answer-TACACS+
TACACS+ authentication involves the following steps:
1. The router and the user exchange authentication parameters
2. The server responds with the REPLY message based on the provided information
3. A user initiates the connection for authentication
4. The router sends the parameters to the server for authentication ✔Correct Answer-3 -> 1 -
> 4 -> 2
,James, a software engineer, is working from a remote location and connects his laptop to the
company's server through a VPN. The company has implemented a security protocol that
provides authentication as well as encryption of the data passing through the VPN tunnels.
Identify the network security protocol implemented by the company for secure communication.
✔Correct Answer-Internet Protocol Security (IPsec)
Benson, a security professional plans to implement more stringent security practices in his
organization. For this reason, he uses a protocol that provides cryptographic security by
encrypting the email messages and digitally signing them to ensure confidentiality, integrity, and
nonrepudiation of messages.
Which of the following protocols was employed by Benson in the above scenario? ✔Correct
Answer-S/MIME
Identify the access control terminology that is referred to as an explicit resource on which an
access restriction is imposed. ✔Correct Answer-Object
Given below are the steps involved in the access control mechanism.
1. Once the identification is successful, the system provides the user access to use the system
2. A user provides their credentials while logging into the system
3. The system then allows the user to perform only those operations for which the user has
been authorized
4. The system validates the user with the database on the basis of the provided credentials
✔Correct Answer-2 -> 4 -> 1 -> 3
James, a network administrator, was assigned a task to create a standard access control model
for the organization's confidential data. He implemented an access control model that
determines the usage and access policies for the users. After its implementation, only users
with appropriate access rights can access the resource.
Which of the following access control models James has implemented in the above scenario?
✔Correct Answer-Mandatory access control (MAC)
Which of the following access control models can be termed as need-to-know access model
where the decision can be taken by an owner to provide or deny access to specific user or a
group of users? ✔Correct Answer-Discretionary access control
Identify the access control model in which the access permissions are beyond the user control,
which implies that users cannot amend the access policies created by the system. ✔Correct
Answer-Role Based Access Controls
Benila, a security professional, implemented cryptography-based authentication to ensure
strong authentication in her organization. She employed an authentication mechanism that
needs a device embedded with a small computer chip that stores personal information of the
employee for identification.
, Identify the type of authentication employed by Benila in the above scenario. ✔Correct
Answer-Smart card authentication
Ronnie, a security professional got many tickets stating that certain miscreants have been
accessing the files with the credentials of the employees and they are creating havoc in the
organization. To prevent such incidents, Ronnie implemented an authentication mechanism that
identifies human characteristics for authenticating people.
Which of the following types of authentication did Ronnie implement in the above scenario?
✔Correct Answer-Biometric authentication
Rachel, a security professional plans to implement an added layer of defense to protect critical
assets from sophisticated cyberattacks. She implemented an authentication technique that uses
a physical entity such as a security token as one of the credentials and the other credential can
include security codes.
Identify the type of authentication implemented by Rachel in the above scenario. ✔Correct
Answer-Two-factor authentication
In an organization, employees' incoming and outgoing status is being tracked and monitored via
a small computer chip implanted on their ID card, which stores their personal information for
identification.
Which of the following authentication methods the organization has implemented in the above
scenario? ✔Correct Answer-Smart card authentication
Jack, a security specialist was appointed by an organization to implement a highly secured
authentication method at the entrance of their science and research center. To accomplish the
responsibility, Jack created an authentication method that identifies a person based on the
facial features from an image or a video source.
Which of the following authentication methods Jack has implemented in the above scenario?
✔Correct Answer-Biometric authentication
Smith, a developer in a software company, has designed a banking application. For security
reasons, he created an authentication mechanism that requires logging-in with user credentials
as well as an OTP, which is sent to the user's mobile number.
Which of the following authentication methods Smith has implemented in the above scenario?
✔Correct Answer-Two-factor authentication
Williams, a programmer, has developed an authentication mechanism for his eCommerce
application by using Google services. This allows the application users to access the website
through their Google account.
Which of the following authentication methods Williams has implemented in the above
scenario? ✔Correct Answer-Single sign-on authentication
Answers |Actual Complete Update |Already Graded
A+ (Just Released)
James, a network specialist joined an organization. He was provided with administrator
privileges, through which he can access the files and servers and perform administrative
activities.
Which of the following information assurance principles authorizes James to access the server
or system files? ✔Correct Answer-Authentication
Which of the following information assurance principles ensures that the information is not
modified or tampered by any unauthorized parties? ✔Correct Answer-Integrity
Which of the following information assurance principles ensures that a party in a
communication cannot deny sending the message? ✔Correct Answer-Nonrepudiation
Which of the following network defense techniques examines the causes for attacks in networks
by using fault-finding mechanisms, security forensics techniques, and post-mortem analysis?
✔Correct Answer-Reactive approach
Danny, a security professional, wants to safeguard his organization's network from hacking
attempts and virus attacks. For this reason, he follows a network defense approach that
examines the causes for attacks in the network and includes fault finding, security forensics, and
post-mortem analysis techniques.
Which of the following network defense approaches was followed by Danny in the above
scenario? ✔Correct Answer-Retrospective approach
Clark, a network security specialist, was assigned to secure an organization's network. Clark
implemented a network defense approach that can tackle network attacks such as DoS and
DDoS and includes security monitoring methods such as IDS, SIMS, TRS, and IPS.
Which of the following network defense approaches did Clark implement in the above scenario?
✔Correct Answer-Reactive approach
Which of the following components of technical security controls protects the information
passing through the network and preserves the privacy and reliability of the data? ✔Correct
Answer-Encryption and protocols
Which of the following components of technical network security controls examines the
network devices and identifies weaknesses in the network? ✔Correct Answer-Auditing
,James, a certified hacker, was appointed by an agency to perform a cyberattack against the rival
company's servers with the intention of making the services unavailable to their customers.
James performed a DoS attack on the servers but he could not make the services unavailable.
Which of the following components of technical security controls protected the servers from
the DoS attack? ✔Correct Answer-Network security devices
Bob has recently purchased a new laptop and enabled all the required security controls. The
next day while verifying whether all the security mechanisms were enabled on his system or
not, he found that the "firewall" was disabled. He immediately enabled the firewall option on
his laptop.
Identify the component of technical security controls that Bob enabled to protect his laptop
from network-related threats. ✔Correct Answer-Network security devices
Which of the following protocols provides centralized authentication, authorization, and
accounting (AAA) for remote access servers to communicate with a central server? ✔Correct
Answer-RADIUS
Which of the following protocols is an application layer protocol that provides cryptographic
privacy and authentication for network communication and enhances the security of emails?
✔Correct Answer-Pretty Good Privacy (PGP) protocol
Which of the following protocols is an application layer protocol used for sending digitally
signed and encrypted email messages? ✔Correct Answer-S/MIME
Sally, a security professional, implemented a protocol for authenticating requests in computer
networks. The protocol implemented by Sally is based on the client-server model, and uses
encryption technology and a "ticket" mechanism to prove the identity of a user on a non-secure
network.
Identify the protocol implemented by Sally in the above scenario. ✔Correct Answer-Kerberos
Margaret, a system administrator, regularly administers the devices connected to the
organizational network. She found that certain devices are vulnerable to sniffing attacks. To
protect the device from such attacks, Margaret employed a protocol that encrypts the entire
communication between the client and the server, including the user's password, which
protects it from sniffing attacks.
Identify the protocol employed by Margaret in the above scenario. ✔Correct Answer-TACACS+
TACACS+ authentication involves the following steps:
1. The router and the user exchange authentication parameters
2. The server responds with the REPLY message based on the provided information
3. A user initiates the connection for authentication
4. The router sends the parameters to the server for authentication ✔Correct Answer-3 -> 1 -
> 4 -> 2
,James, a software engineer, is working from a remote location and connects his laptop to the
company's server through a VPN. The company has implemented a security protocol that
provides authentication as well as encryption of the data passing through the VPN tunnels.
Identify the network security protocol implemented by the company for secure communication.
✔Correct Answer-Internet Protocol Security (IPsec)
Benson, a security professional plans to implement more stringent security practices in his
organization. For this reason, he uses a protocol that provides cryptographic security by
encrypting the email messages and digitally signing them to ensure confidentiality, integrity, and
nonrepudiation of messages.
Which of the following protocols was employed by Benson in the above scenario? ✔Correct
Answer-S/MIME
Identify the access control terminology that is referred to as an explicit resource on which an
access restriction is imposed. ✔Correct Answer-Object
Given below are the steps involved in the access control mechanism.
1. Once the identification is successful, the system provides the user access to use the system
2. A user provides their credentials while logging into the system
3. The system then allows the user to perform only those operations for which the user has
been authorized
4. The system validates the user with the database on the basis of the provided credentials
✔Correct Answer-2 -> 4 -> 1 -> 3
James, a network administrator, was assigned a task to create a standard access control model
for the organization's confidential data. He implemented an access control model that
determines the usage and access policies for the users. After its implementation, only users
with appropriate access rights can access the resource.
Which of the following access control models James has implemented in the above scenario?
✔Correct Answer-Mandatory access control (MAC)
Which of the following access control models can be termed as need-to-know access model
where the decision can be taken by an owner to provide or deny access to specific user or a
group of users? ✔Correct Answer-Discretionary access control
Identify the access control model in which the access permissions are beyond the user control,
which implies that users cannot amend the access policies created by the system. ✔Correct
Answer-Role Based Access Controls
Benila, a security professional, implemented cryptography-based authentication to ensure
strong authentication in her organization. She employed an authentication mechanism that
needs a device embedded with a small computer chip that stores personal information of the
employee for identification.
, Identify the type of authentication employed by Benila in the above scenario. ✔Correct
Answer-Smart card authentication
Ronnie, a security professional got many tickets stating that certain miscreants have been
accessing the files with the credentials of the employees and they are creating havoc in the
organization. To prevent such incidents, Ronnie implemented an authentication mechanism that
identifies human characteristics for authenticating people.
Which of the following types of authentication did Ronnie implement in the above scenario?
✔Correct Answer-Biometric authentication
Rachel, a security professional plans to implement an added layer of defense to protect critical
assets from sophisticated cyberattacks. She implemented an authentication technique that uses
a physical entity such as a security token as one of the credentials and the other credential can
include security codes.
Identify the type of authentication implemented by Rachel in the above scenario. ✔Correct
Answer-Two-factor authentication
In an organization, employees' incoming and outgoing status is being tracked and monitored via
a small computer chip implanted on their ID card, which stores their personal information for
identification.
Which of the following authentication methods the organization has implemented in the above
scenario? ✔Correct Answer-Smart card authentication
Jack, a security specialist was appointed by an organization to implement a highly secured
authentication method at the entrance of their science and research center. To accomplish the
responsibility, Jack created an authentication method that identifies a person based on the
facial features from an image or a video source.
Which of the following authentication methods Jack has implemented in the above scenario?
✔Correct Answer-Biometric authentication
Smith, a developer in a software company, has designed a banking application. For security
reasons, he created an authentication mechanism that requires logging-in with user credentials
as well as an OTP, which is sent to the user's mobile number.
Which of the following authentication methods Smith has implemented in the above scenario?
✔Correct Answer-Two-factor authentication
Williams, a programmer, has developed an authentication mechanism for his eCommerce
application by using Google services. This allows the application users to access the website
through their Google account.
Which of the following authentication methods Williams has implemented in the above
scenario? ✔Correct Answer-Single sign-on authentication
