ssd2_203-100

168. The dictionary attack against a computer system involves

(a) using complicated words to trick users into providing information

(b) trying to guess a password by using various alphanumeric combinations

(c) infecting the spell-checker dictionary with macro viruses

(d) trying to guess a password by using every word in the dictionary 100%

169. An intruder pretending to be an employee of a company asking the company's network administrator for sensitive information is an example of a _____ attack.

(a) spoofing

(b) cracking

(c) brute force

(d) social engineering 100%

170. Modification of network packets by intruders to make the packets appear to be coming from inside a private network is an example of a _____ attack.

(a) cracking

(b) social engineering

(c) brute force

(d) spoofing 100%

171. An intruder sending email messages that appear to be coming from a system administrator is an example of a _____ attack.

(a) brute force

(b) cracking

(c) packet sniffing

(d) spoofing 100%

172. Which of the following means of providing password information to Internet Service Providers is (are) considered safe?

1. Phone

2. Email

(a) I only

(b) II only

(c) I and II

(d) None 100%

173. Unencrypted information is referred to as

(a) ciphertext

(b) key

(c) keyspace

(d) plaintext 100%

174. The set of all possible keys for an encryption algorithm is known as its

(a) cryptography factor

(b) cipher count

(c) brute force

(d) keyspace 100%

175. Which of the following is (are) true regarding smart card chips used for authentication?

1. They contain a tiny microprocessor.

2. They can retain state even without power.

3. They are susceptible to attacks via network.

(a) I, II, and III

(b) II and III only

(c) I and III only

(d) I and II only 100%

176. The identification of individuals based on their physiological or behavioral characteristics is known as _____ identification.

(a) digital-signature

(b) SSL

(c) digital-identifier

(d) biometric 100%

177. Which of the following is (are) true regarding biometrics?

1. It is a more secure method of authorization than traditional password-based methods.

2. The person to be identified has to be physically present at the point of identification.

(a) I only

(b) II only

(c) None

(d) I and II 100%

178. Which of the following is (are) true regarding digital signatures?

1. Digitally signing a message automatically encrypts the message.

2. Senders use their private key to create the digital signature, while receivers use the sender's public key to decrypt the digital signature.

(a) I and II

(b) I only

(c) None

(d) II only 100%

179. The set of standards and services that govern the use of public-key cryptography and the system of certificates is called

(a) SSL protocols

(b) the digital certificate

(c) the certificate authority

(d) PKI 100%

180. Issues governed by the SSL protocol include which of the following?

1. Server authentication

2. Client authentication

3. Encrypted communication between clients and servers

(a) I and II only

(b) II and III only

(c) I and III only

(d) I, II, and III 100%

181. Features used for identification in biometrics include which of the following?

1. Fingerprints

2. Name

3. Voice

(a) I and II only

(b) II and III only

(c) I, II, and III

(d) I and III only 100%

182. Which of the following URLs make(s) use of the SSL protocol?

1. http://abc.com/ssl/def.htm

2. https://ghi.com/jkl.html

3. https://mno.co.in/pqr/stu.jsp

(a) I, II, and III

(b) II only

(c) I and III only

(d) II and III only 100%

183. A backup that makes a fresh copy of every file that exists in the folder specified for backup is known as a(n)

(a) complete backup

(b) total backup

(c) entire backup

(d) full backup 100%

184. A backup that makes a fresh copy of only those files that were added or changed since the last full backup is known as a(n)

(a) change backup

(b) incremental backup

(c) complementary backup

(d) differential backup 100%

185. A backup that makes a fresh copy of only those files that were added or changed since the last backup of any kind is known as a(n)

(a) change backup

(b) differential backup

(c) complementary backup

(d) incremental backup 100%

186. Assume that a full backup is taken on Saturdays and a differential backup is taken on all other days of the week. If a disk crash occurs on Thursday, which of the following backup disks would be needed for restoration?

1. The full backup disk taken the last Saturday before the crash

2. The differential backup disk taken on Wednesday (the day before the crash)

3. The differential backup disks taken on Sunday, Monday, and Tuesday

(a) I, II, and III

(b) I only

(c) II only

(d) I and II only 100%

187. Assume that a full backup is taken on Saturdays and an incremental backup is taken on all other days of the week. If a disk crash occurs on Thursday, which of the following backup disks would be needed for restoration?

1. The full backup disk taken the last Saturday before the crash

2. The incremental backup disk taken on Wednesday (the day before the crash)

3. The incremental backup disks taken on Sunday, Monday, and Tuesday

(a) I and II only

(b) I only

(c) II and III only

(d) I, II, and III 100%

188. Which of the following is (are) true regarding the use of tape drives as backup devices?

1. Tape drives are good backup devices for personal computers.

2. Tape drives can be installed in an open drive bay in a desktop computer.

(a) I only

(b) II only

(c) None

(d) I and II 100%

189. Which of the following is (are) true regarding the use of floppy disks as backup devices?

1. Taking backups using floppy disks is very expensive.

2. Floppy disks do not provide enough capacity to store most digital-photograph and music files.

(a) I and II

(b) I only

(c) None

(d) II only 100%

190. Which of the following is (are) true regarding the use of zip disks as backup devices?

1. Zip disks do not provide enough capacity to store most digital-photograph and music files.

2. Among all backup devices, the writing process is slowest with zip disks.

(a) I only

(b) II only

(c) I and II

(d) None 100%

191. Which of the following is (are) true regarding the use of writable optical disks as backup devices?

1. Writable optical disks provide good storage capacities and are quite inexpensive.

2. The speed of writing is very fast for writable optical disks.

(a) I and II

(b) II only

(c) None

(d) I only 100%

192. Which of the following is (are) true regarding the use of a second hard disk as a backup device?

1. If both the hard disks are of equivalent capacity, the backup process can proceed unattended.

2. Backups can occur at very high speeds.

(a) I only

(b) II only

(c) None

(d) I and II 100%

193. Which of the following is (are) true regarding the use of backup software?

1. The type of backup software that is needed depends on the backup plan.

2. Backup software is available that can enable the scheduling of automatic backups of predetermined files and folders at predetermined times.

(a) I only

(b) II only

(c) None

(d) I and II 100%

194. Which of the following activities can help protect a computer system from attacks?

1. Keeping the monitor turned off when it is not in use

2. Disconnecting the computer from the network when the network is not being used

3. Turning off printers when they are not in use

(a) I, II, and III

(b) I and III only

(c) I and II only

(d) II only 100%

195. Secure passwords should have which of the following characteristics?

1. Be at least eight characters long

2. Be a mixture of uppercase and lowercase letters, numbers, and punctuation marks.

3. Be an obscure word chosen from the dictionary

(a) III only

(b) I and III only

(c) I only

(d) I and II only 100%

196. Which of the following precautions can users take to avoid executing malicious code?

1. Avoid opening unexpected email attachments.

2. Generate secure passwords.

3. Expose hidden filename extensions.

(a) I, II, and III

(b) II and III only

(c) I and II only

(d) I and III only 100%

197. Which of the following is (are) true regarding computer security?

1. Extreme computer security measures may adversely affect the functionality of the computer.

2. Using antivirus software and installing a firewall can keep a computer safe from all intrusions.

3. Most intrusions result from virus attacks or known vulnerabilities that could be prevented by keeping the operating system and applications updated.

(a) I, II, and III

(b) II and III only

(c) I and II only

(d) I and III only 100%

198. Which of the following is (are) true regarding computer intrusion detection systems?

1. They are capable of tracing each step of an attack.

2. Their effectiveness depends upon the strength of their signature database.

(a) I only

(b) II only

(c) None

(d) I and II 100%

199. Which of the following is (are) true regarding computer intrusion detection systems?

1. Malicious packets cannot easily circumvent them.

2. Little or no security and configuration knowledge is necessary for setting up an intrusion detection system.

(a) I and II

(b) II only

(c) None

(d) I only 100%

200. Information that can be included in computer intrusion detection signatures includes which of the following?

1. A TCP state

2. Bytes in the IP header

3. A byte stream in a packet

(a) I and II only

(b) II and III only

(c) I and III only

(d) I, II, and III 100%

201. Functions of network monitoring systems include which of the following?

1. Analyzing network packets and decoding the analyzed data

2. Testing the availability of network services

3. Notifying system administrators regarding network problems

(a) I and II only

(b) II and III only

(c) I and III only

(d) I, II, and III 100%

202. Network monitoring tool reactions to suspicious network activity can include which of the following?

1. Blocking the suspect connections

2. Isolating the affected systems

3. Collecting evidence for analysis

(a) II and III only

(b) I and III only

(c) I and II only

(d) I, II, and III 100%

203. Typical functionalities provided by anti-virus software include which of the following?

1. Detecting and removing viruses from files

2. Isolating the files that cannot be cleaned

3. Analyzing network packets

(a) I, II, and III

(b) II and III only

(c) I and III only

(d) I and II only 100%