Which of the following should risk assessments be based upon as a best practice?
A. A quantitative measurement of risk and impact and asset value
B. An absolute measurement of threats
C. A qualitative measurement of risk and impact
D. A survey of annual loss and potential threats and asset value - ANSWER A.
A quantitative measurement of risk and impact and asset value
A risk management concept where operations resume at some capacity, despite the
presence of a failure, is known as:
A. Capacity building
B. Risk adverse
C. Risk redundancy
D. Fault tolerance - ANSWER D. Fault tolerance
Which type of intrusion detection may terminate processes or redirect traffic upon detection
of a possible intrusion?
A. Active
1
,B. Passive
C. Adaptive
D. Redirective - ANSWER A.
Active
At what layer of the TCP/IP model do devices such as ATM, switches, and bridges operate, as
well as protocols PPP and ARP?
A. Physical
B. Data-link
C. Network
D. Transport - ANSWER B.
Data-link
Which of the following would explain the difference between a public key and a private key?
A. The private key is commonly used in symmetric key decryption while the public key is
used in asymmetric key decryption.
B. The private key is only used by the client and kept secret while the public key is available
to all.
C. The private key only decrypts the data while the public key only encrypts the data. Both
keys are mathematically related.
2
,D. The public key is only used by the client while the private key is available to all. Both keys
are mathematically related. - ANSWER B. The private key is only used by the client and
kept secret while the public key is available to all.
Which of the following creates separate logical networks?
A. Subnetting
B. NAC
C. NAT
D. DMZ - ANSWER A. Subnetting
Which layer of the TCP/IP model is equivalent to the Session, Presentation, and Application
layers of the OSI model?
A. Physical
B. Network
C. Transport
D. Application - ANSWER D. Application
Which of the following intrusion detection systems uses statistical analysis to detect
intrusions?
A. Knowledge
B. Signature
3
, C. Honeynet
D. Anomaly - ANSWER D. Anomaly
Which of the following encryption algorithms relies on the inability to factor large prime
numbers?
A. SHA 1
B. Elliptic curve
C. AES256
D. RSA - ANSWER D. RSA
When would it be appropriate to use time of day restrictions on an account?
A. As an added security measure when employees work set schedules
B. To eliminate attack attempts of the network during peak hours
C. In order to ensure false positives are not received during baseline testing
D. To ensure the DMZ is not overloaded during server maintenance - ANSWER A. As
an added security measure when employees work set schedules
Which of the following is the MOST proficient for encrypting large amounts of data?
A. ECC algorithms
4
A. A quantitative measurement of risk and impact and asset value
B. An absolute measurement of threats
C. A qualitative measurement of risk and impact
D. A survey of annual loss and potential threats and asset value - ANSWER A.
A quantitative measurement of risk and impact and asset value
A risk management concept where operations resume at some capacity, despite the
presence of a failure, is known as:
A. Capacity building
B. Risk adverse
C. Risk redundancy
D. Fault tolerance - ANSWER D. Fault tolerance
Which type of intrusion detection may terminate processes or redirect traffic upon detection
of a possible intrusion?
A. Active
1
,B. Passive
C. Adaptive
D. Redirective - ANSWER A.
Active
At what layer of the TCP/IP model do devices such as ATM, switches, and bridges operate, as
well as protocols PPP and ARP?
A. Physical
B. Data-link
C. Network
D. Transport - ANSWER B.
Data-link
Which of the following would explain the difference between a public key and a private key?
A. The private key is commonly used in symmetric key decryption while the public key is
used in asymmetric key decryption.
B. The private key is only used by the client and kept secret while the public key is available
to all.
C. The private key only decrypts the data while the public key only encrypts the data. Both
keys are mathematically related.
2
,D. The public key is only used by the client while the private key is available to all. Both keys
are mathematically related. - ANSWER B. The private key is only used by the client and
kept secret while the public key is available to all.
Which of the following creates separate logical networks?
A. Subnetting
B. NAC
C. NAT
D. DMZ - ANSWER A. Subnetting
Which layer of the TCP/IP model is equivalent to the Session, Presentation, and Application
layers of the OSI model?
A. Physical
B. Network
C. Transport
D. Application - ANSWER D. Application
Which of the following intrusion detection systems uses statistical analysis to detect
intrusions?
A. Knowledge
B. Signature
3
, C. Honeynet
D. Anomaly - ANSWER D. Anomaly
Which of the following encryption algorithms relies on the inability to factor large prime
numbers?
A. SHA 1
B. Elliptic curve
C. AES256
D. RSA - ANSWER D. RSA
When would it be appropriate to use time of day restrictions on an account?
A. As an added security measure when employees work set schedules
B. To eliminate attack attempts of the network during peak hours
C. In order to ensure false positives are not received during baseline testing
D. To ensure the DMZ is not overloaded during server maintenance - ANSWER A. As
an added security measure when employees work set schedules
Which of the following is the MOST proficient for encrypting large amounts of data?
A. ECC algorithms
4
