Securing Networks

Which of the following is a common vector for data loss?

What is the primary function of a worm in the context of network security threats?

In the context of network security, what does 'mitigation' refer to?

Which of the following roles is primarily responsible for overseeing an organization's information security?

What is the primary goal of reconnaissance attacks?

Which security measure is most effective in rendering packet sniffer attacks useless?

Which of the following is a characteristic of a 'script kiddie'?

Which of the following describes the purpose of 'Control Plane Policing' (CoPP)?

What is the primary difference between a virus and a Trojan horse?

In the context of network security, what does the acronym 'CIA' stand for?

Which type of network is typically used to connect multiple sites across large geographical distances?

Which of the following network security domains involves ensuring that vendors meet security requirements?

Which type of attack involves an attacker impersonating a legitimate user to gain unauthorized access to a system or network?

Among password, port redirection, man-in-the-middle, buffer overflow, IP, MAC and DHCP spoofing, which of the following isn't a type of Access Attack?

What mechanism is used to guarantee the 'integrity' aspect of the CIA triad?

What is the purpose of inoculating the network?

Which security measure is most effective in defending networks against distributed denial-of-service(DDOS) attacks?

Which of the following methods/resources is LEAST effective for protecting networks?

If threat 'A' has a CVSS score of 7.5/5.5 and threat 'B' has a CVSS score of 5.0/3.7, what is the primary key difference between the two?

Which of the following is the underlying action of both "authorizing actions" and "presenting legal notification"?

According to the slides, explaining network security is a chapter objective.

In data center perimeter security, electronic motion detectors are generally used for outside perimeter security.

According to the course material, 'Risk' is not considered a common network security term.

A network of infected hosts is called a botnet.

According to the course material, continuous video surveillance only applies to inside perimeter security.

An internal threat always originates from within the local network; external threats, from the Internet.

A wireless router is commonly found in Campus Area Networks.

In a Wide Area Network (WAN), a branch site connects directly to individual mobile workers.

According to the slides, a denial-of-service attack attempts to disrupt services.

A primary goal of access attacks is often to escalate access privileges.

According to the material, 'Spearshading' is a type of social engineering attack.

In the context of network security, 'tailgating' refers to the unauthorized following of someone into a restricted area.

According to the slides, an example of 'something for something' is a type of social engineering.

Black Hat hackers are generally known for disclosing vulnerabilities to vendors to patch them.

According to the presentation slides, 'cyber terrorists' are an outdated category of hackers and are no longer relevant in the modern threat landscape.

Exploiting a known vulnerability in an operating system would be categorized as 'hacking an operating system'.

According to the material, data modification is NOT classified as a network hacking attack.

The primary purpose of a Trojan horse is to replicate itself across a network.

According to the slides, implementing a non-switched infrastructure is a reconnaissance attack mitigation technique.

A rootkit is a self-replicating type of malware that spreads across the network and leverages system vulnerabilities to infect other devices.