Northern Virginia Community College ITN 263 quiz 6 || with
Errorless Answers.
Brianna is an IT technician. She is studying a threat that holds the communication channel open
when a TCP handshake does not conclude. What kind of attack does this involve? correct
answers Denial of service (DoS) attack
Werner is a security manager for a health insurance company. He is examining the organization's
compliance with patient privacy. While investigating how staff handle verbal and email
communications, he discovers that some staff members are lax about how well they protect
details that, when combined, might be used to reveal sensitive details about some customers.
What is the focus of his concern? correct answers Personally identifiable information (PII)
Nina is a corporate attorney for a San Francisco firm. The chief information and security officer
(CISO) told her that the firm's data center had been hacked 24 hours ago. The personal
information of more than 3 million users was accessed, including their full names, addresses, and
login credentials. Nina discusses the company's liability under the law, including the requirement
to implement and maintain reasonable security procedures and practices. If it can be proven that
the firm was negligent, it may need to pay damages. Which of the following regulates this issue?
correct answers California Consumer Privacy Act (CCPA)
Chang is a network engineer. He is revising the company's firewall implementation procedure.
He is reviewing the procedural element requiring placement of network firewalls at chokepoints
and mapping out the network structure to pinpoint the location where firewalls are to be placed.
Which of the following is he focusing on? correct answers Network design
The network infrastructure supervisor is designing a firewall placement strategy that will protect
the organization's Internet-facing web and email servers and the internal network. Which design
will provide the best protection? correct answers Using two firewalls to create a demilitarized
zone (DMZ); one firewall is placed between the Internet and the servers, the other firewall is
located behind the first firewall and the servers protecting the internal network
Demetrice is a network consultant. She has been hired to design security for a network that hosts
25 employees, many of whom need remote access. The client recently opened another small
, office in a neighboring community and wants to be able to routinely establish secure network
connections between the two locations. The client often deals with customer bank information
and requires a particularly secure solution. What is her response to these requirements? correct
answers Small office/home office (SOHO) virtual private network (VPN)
Which of the following is a concern when considering the use of a demilitarized zone (DMZ)
firewall solution to access high-value data on an internal network? correct answers Poorly
constructed firewall rules
Tonya is redesigning her company's network infrastructure to accommodate rapid growth.
Several departments are highly specialized. Tonya needs to allow Network News Transfer
Protocol (NNTP) on some, but not all, subnets. Her budget is limited. Which of the following is
the best solution? correct answers Configure existing routers to filter NNTP packets.
Israel is a network technician who has just deployed a new firewall. Before putting it in
production, he wants to test the firewall's ability to filter traffic according to its rule set, without
risking the internal network. What is the best solution? correct answers Place the firewall in a
virtual network environment and simulate traffic.
Jiang is a network technician. He is programming a web server to provide clients with
dynamically produced web content in real time based on several attributes that the connecting
user enters. This includes any forms the user may fill out. Martha is the cybersecurity chief. She
says that the technology Jiang is using could expose sensitive customer data to hackers if it were
ever accessed. What web server technology is Jiang using? correct answers Common Gateway
Interface (CGI )
Which of the following is closely associated with maintaining data integrity? correct answers
Hash
What does a digital signature provide? correct answers Nonrepudiation
Which of the following is a protocol that allows web servers to complete secure transactions over
the Internet? correct answers Hypertext Transfer Protocol Secure (HTTPS)
Errorless Answers.
Brianna is an IT technician. She is studying a threat that holds the communication channel open
when a TCP handshake does not conclude. What kind of attack does this involve? correct
answers Denial of service (DoS) attack
Werner is a security manager for a health insurance company. He is examining the organization's
compliance with patient privacy. While investigating how staff handle verbal and email
communications, he discovers that some staff members are lax about how well they protect
details that, when combined, might be used to reveal sensitive details about some customers.
What is the focus of his concern? correct answers Personally identifiable information (PII)
Nina is a corporate attorney for a San Francisco firm. The chief information and security officer
(CISO) told her that the firm's data center had been hacked 24 hours ago. The personal
information of more than 3 million users was accessed, including their full names, addresses, and
login credentials. Nina discusses the company's liability under the law, including the requirement
to implement and maintain reasonable security procedures and practices. If it can be proven that
the firm was negligent, it may need to pay damages. Which of the following regulates this issue?
correct answers California Consumer Privacy Act (CCPA)
Chang is a network engineer. He is revising the company's firewall implementation procedure.
He is reviewing the procedural element requiring placement of network firewalls at chokepoints
and mapping out the network structure to pinpoint the location where firewalls are to be placed.
Which of the following is he focusing on? correct answers Network design
The network infrastructure supervisor is designing a firewall placement strategy that will protect
the organization's Internet-facing web and email servers and the internal network. Which design
will provide the best protection? correct answers Using two firewalls to create a demilitarized
zone (DMZ); one firewall is placed between the Internet and the servers, the other firewall is
located behind the first firewall and the servers protecting the internal network
Demetrice is a network consultant. She has been hired to design security for a network that hosts
25 employees, many of whom need remote access. The client recently opened another small
, office in a neighboring community and wants to be able to routinely establish secure network
connections between the two locations. The client often deals with customer bank information
and requires a particularly secure solution. What is her response to these requirements? correct
answers Small office/home office (SOHO) virtual private network (VPN)
Which of the following is a concern when considering the use of a demilitarized zone (DMZ)
firewall solution to access high-value data on an internal network? correct answers Poorly
constructed firewall rules
Tonya is redesigning her company's network infrastructure to accommodate rapid growth.
Several departments are highly specialized. Tonya needs to allow Network News Transfer
Protocol (NNTP) on some, but not all, subnets. Her budget is limited. Which of the following is
the best solution? correct answers Configure existing routers to filter NNTP packets.
Israel is a network technician who has just deployed a new firewall. Before putting it in
production, he wants to test the firewall's ability to filter traffic according to its rule set, without
risking the internal network. What is the best solution? correct answers Place the firewall in a
virtual network environment and simulate traffic.
Jiang is a network technician. He is programming a web server to provide clients with
dynamically produced web content in real time based on several attributes that the connecting
user enters. This includes any forms the user may fill out. Martha is the cybersecurity chief. She
says that the technology Jiang is using could expose sensitive customer data to hackers if it were
ever accessed. What web server technology is Jiang using? correct answers Common Gateway
Interface (CGI )
Which of the following is closely associated with maintaining data integrity? correct answers
Hash
What does a digital signature provide? correct answers Nonrepudiation
Which of the following is a protocol that allows web servers to complete secure transactions over
the Internet? correct answers Hypertext Transfer Protocol Secure (HTTPS)
