IT 462 FINAL EXAM PREP QUESTIONS WITH
CORRECT ANSWERS
Ch. 5 Crime Prevention through Environmental Design (CPTED) principles and
strategies (Natural Access Control, Natural Surveillance, Natural Territorial
Reinforcement). Be able to provide or recognize examples of each! - ANSWER
Natural Access Control - Guidance of people entering and leaving a space by
the placement of doors, fences, lighting, and landscaping (i.e. bollards) and
security zones.
Natural Surveillance - Can take place through: organized means (security
guards), mechanical means (CCTV), or natural strategies (lines of sight, low
landscaping)
Natural Territorial Reinforcement - Extends/emphasizes company's physical
sphere of influence so user feel a sense of ownership of that space (i.e. picnic
tables and BBQs).
Target hardening as it applies to physical security controls - ANSWER denying
access through physical and artificial barriers (alarms, locks, fences). Best
approach is to build an environment using CPTED approach, and then apply
target-hardening components where necessary
CCTV consideration and types - ANSWER Two main types of lenses are used -
focal length defines effectiveness in viewing objects from a horizontal and
vertical view
- Fixed focal length (wide, medium, and narrow)
- Zoom
Field of depth (area in focus) and field of view (entire area to be viewed)
Manual iris lenses - manually turned and used in areas with fixed lighting
Auto iris lenses - auto adjusts to lighting - used in outdoor settings
Mounts: Fixed mounting - does not move versus PTZ - can pan, tilt or zoom as
necessary
Physical Security Controls - ANSWER Enforces physical access at all access
points
Site selection
PC locks
Penetration tests to test social engineering
Cable rooms locked
Monitors physical access and visitors
Employs power protection (UPS, generators), emergency lighting, and
emergency power shutoffs
,Lights - why is it both a detective and a deterrent control? - ANSWER Both a
detective and a deterrent control
Should be bright enough to illuminate a field of vision (area to be protected)
Lumen - amount of light one candle creates (one foot-candle = one lumen per
square foot)
Lux - based on metric system - one lux is one lumen per square meter
Locks - recognize by description - ANSWER Mechanical Locks
Warded lock - basic padlock - has wards, metal projections around the keyhole,
that fit the notches in the key - easiest to pick
Tumbler lock - has more pieces
Combination Locks- internal wheels that have to line up to unlock
Cipher locks - programmable locks are keyless and use keypads
Device Locks - protect hardware from theft
Lock circumvention (raking and bumping) - ANSWER Raking - lock pick is
pushed to the back of the lock and quickly slid out while providing upward
pressure
Lock bumping -tumbler pins are forced to open their position by using a special
key called a bump key
Physical Intrusion Detection Systems - ANSWER Electromechanical - detect
changes or breaks to circuits (pressure pads under rungs, foil contacts on
windows)
Photoelectric - detects changes to light beams use only in a windowless room
Passive Infrared Systems (PIR) - changes of heat waves
Acoustical detection system - uses microphones on floor - not used in areas of
storms or traffic
Vibration sensors - detect forced entry
Wave-pattern motion detector - changes to frequencies in microwaves,
ultrasonic, and low frequency
Proximity detector -emits measurable magnetic filed that alarms if disrupted
Media sanitization methods - ANSWER NIST SP-800-88 "Guidelines for Media
Sanitation"
Clear - Overwrite storage with non-sensitive data (Secure Wiping)
Purge - Degaussing - exposes magnetic media to strong magnetic field
Destroy (media must be able to withstand a "laboratory attack"Disintegration,
Pulverization, Melting, and Incineration, Shredding (cross-cut paper shredders)
CH. 6 Know OSI and TCP/IP models - ANSWER -Application- Supports
application end-user processes (HTTP, TFTP, FTP, SNMP, Telnet, SMTP)
-Presentation- Formatting, encryption - tells the receiving system the file type
and how to process it (ASCII to EBCDIC, TIFF, JPEG)
-Session - Establishes and terminates sessions, manages "flow control" (NFS,
SQL, NetBIOS, RPC)
, -Transport- Segmentation and sequencing, end-to-end transfer of data (TCP,
SPX, UDP, SSL/TLS)
-Network- Routing (IP, IPX, ICMP, RIP)
-Data Link- Media Access Control (MAC) and Logical Link Control (LLC)
sublayers, responsible for MAC, data delineation, error detection (Ethernet,
PPP, Token Ring, ARP, RARP, SLIP)
-Physical- Transmission of bits (EIA/TIA-232 and 568A/B, CAT 1-5, ATM, FDDI)
TCP/IP - ANSWER 1. Application - Represents data to the user plus encoding and
dialog control (Application, Presentation, Session)
2. Transport - Supports communications between diverse devices across
diverse networks (Transport)
3. Internetwork - Determines the best path through the network (Network)
4. Data link (Data Link)
5. Physical (physical)
Recognize differences between TCP, UDP, IP - ANSWER -TCP
Full-duplex, connection-oriented, reliable (Transport Layer). Uses ports to
designate the application the packet is destined for
-UDP
Connectionless (Transport Layer)
-Internet Protocol
Connectionless protocol provides addressing and routing, IPv4, IPv6 (Network
Layer)
Common TCP/UDP Ports - ANSWER HTTP - 80
FTP - 21 and 20
Telnet - 23
SMTP - 25
SNMP - 161 and 162
DNS - UDP 53
HTTPS - 443
POP - 110
IMAP - 143
TCP Handshake - ANSWER Client----SYN--->Server
Client<---SYN/ACK---Server
Client---->ACK---Server
IP Address class ranges, network id, host id, default subnet masks - ANSWER A
- 1 to 126 255.0.0.0
B - 128 to 191 255.255.0.0
C - 192 to 223 255.255.255.0
D - 224 to 239
E - 240 to 255
CORRECT ANSWERS
Ch. 5 Crime Prevention through Environmental Design (CPTED) principles and
strategies (Natural Access Control, Natural Surveillance, Natural Territorial
Reinforcement). Be able to provide or recognize examples of each! - ANSWER
Natural Access Control - Guidance of people entering and leaving a space by
the placement of doors, fences, lighting, and landscaping (i.e. bollards) and
security zones.
Natural Surveillance - Can take place through: organized means (security
guards), mechanical means (CCTV), or natural strategies (lines of sight, low
landscaping)
Natural Territorial Reinforcement - Extends/emphasizes company's physical
sphere of influence so user feel a sense of ownership of that space (i.e. picnic
tables and BBQs).
Target hardening as it applies to physical security controls - ANSWER denying
access through physical and artificial barriers (alarms, locks, fences). Best
approach is to build an environment using CPTED approach, and then apply
target-hardening components where necessary
CCTV consideration and types - ANSWER Two main types of lenses are used -
focal length defines effectiveness in viewing objects from a horizontal and
vertical view
- Fixed focal length (wide, medium, and narrow)
- Zoom
Field of depth (area in focus) and field of view (entire area to be viewed)
Manual iris lenses - manually turned and used in areas with fixed lighting
Auto iris lenses - auto adjusts to lighting - used in outdoor settings
Mounts: Fixed mounting - does not move versus PTZ - can pan, tilt or zoom as
necessary
Physical Security Controls - ANSWER Enforces physical access at all access
points
Site selection
PC locks
Penetration tests to test social engineering
Cable rooms locked
Monitors physical access and visitors
Employs power protection (UPS, generators), emergency lighting, and
emergency power shutoffs
,Lights - why is it both a detective and a deterrent control? - ANSWER Both a
detective and a deterrent control
Should be bright enough to illuminate a field of vision (area to be protected)
Lumen - amount of light one candle creates (one foot-candle = one lumen per
square foot)
Lux - based on metric system - one lux is one lumen per square meter
Locks - recognize by description - ANSWER Mechanical Locks
Warded lock - basic padlock - has wards, metal projections around the keyhole,
that fit the notches in the key - easiest to pick
Tumbler lock - has more pieces
Combination Locks- internal wheels that have to line up to unlock
Cipher locks - programmable locks are keyless and use keypads
Device Locks - protect hardware from theft
Lock circumvention (raking and bumping) - ANSWER Raking - lock pick is
pushed to the back of the lock and quickly slid out while providing upward
pressure
Lock bumping -tumbler pins are forced to open their position by using a special
key called a bump key
Physical Intrusion Detection Systems - ANSWER Electromechanical - detect
changes or breaks to circuits (pressure pads under rungs, foil contacts on
windows)
Photoelectric - detects changes to light beams use only in a windowless room
Passive Infrared Systems (PIR) - changes of heat waves
Acoustical detection system - uses microphones on floor - not used in areas of
storms or traffic
Vibration sensors - detect forced entry
Wave-pattern motion detector - changes to frequencies in microwaves,
ultrasonic, and low frequency
Proximity detector -emits measurable magnetic filed that alarms if disrupted
Media sanitization methods - ANSWER NIST SP-800-88 "Guidelines for Media
Sanitation"
Clear - Overwrite storage with non-sensitive data (Secure Wiping)
Purge - Degaussing - exposes magnetic media to strong magnetic field
Destroy (media must be able to withstand a "laboratory attack"Disintegration,
Pulverization, Melting, and Incineration, Shredding (cross-cut paper shredders)
CH. 6 Know OSI and TCP/IP models - ANSWER -Application- Supports
application end-user processes (HTTP, TFTP, FTP, SNMP, Telnet, SMTP)
-Presentation- Formatting, encryption - tells the receiving system the file type
and how to process it (ASCII to EBCDIC, TIFF, JPEG)
-Session - Establishes and terminates sessions, manages "flow control" (NFS,
SQL, NetBIOS, RPC)
, -Transport- Segmentation and sequencing, end-to-end transfer of data (TCP,
SPX, UDP, SSL/TLS)
-Network- Routing (IP, IPX, ICMP, RIP)
-Data Link- Media Access Control (MAC) and Logical Link Control (LLC)
sublayers, responsible for MAC, data delineation, error detection (Ethernet,
PPP, Token Ring, ARP, RARP, SLIP)
-Physical- Transmission of bits (EIA/TIA-232 and 568A/B, CAT 1-5, ATM, FDDI)
TCP/IP - ANSWER 1. Application - Represents data to the user plus encoding and
dialog control (Application, Presentation, Session)
2. Transport - Supports communications between diverse devices across
diverse networks (Transport)
3. Internetwork - Determines the best path through the network (Network)
4. Data link (Data Link)
5. Physical (physical)
Recognize differences between TCP, UDP, IP - ANSWER -TCP
Full-duplex, connection-oriented, reliable (Transport Layer). Uses ports to
designate the application the packet is destined for
-UDP
Connectionless (Transport Layer)
-Internet Protocol
Connectionless protocol provides addressing and routing, IPv4, IPv6 (Network
Layer)
Common TCP/UDP Ports - ANSWER HTTP - 80
FTP - 21 and 20
Telnet - 23
SMTP - 25
SNMP - 161 and 162
DNS - UDP 53
HTTPS - 443
POP - 110
IMAP - 143
TCP Handshake - ANSWER Client----SYN--->Server
Client<---SYN/ACK---Server
Client---->ACK---Server
IP Address class ranges, network id, host id, default subnet masks - ANSWER A
- 1 to 126 255.0.0.0
B - 128 to 191 255.255.0.0
C - 192 to 223 255.255.255.0
D - 224 to 239
E - 240 to 255
