Title: Review Quiz Module 5
Course: CET 2660 Network Security Fundamentals > Section: Module Five - Security Management

Q: The ____ was approved by the NIST in late 2000 as a replacement for DES.
A: Advanced Encryption Standard (AES) / Advanced Encryption Standard / AES
If wrong: Please refer to page 422 of the textbook

Q: A(n) ____ is a secret combination of letters, numbers, and/or characters that only the user should know.
A: password
If wrong: Please refer to page 368 of the textbook

Q: The ____ attack will slightly alter dictionary words by adding numbers to the end of the password, spelling words backward, slightly misspelling words, or including special characters such as @, $, !, or %.
A: hybrid
If wrong: Please refer to page 371 of the textbook

Q: A token is typically a small device (usually one that can be affixed to a keychain) with a window display.
- true
- false
A: true

Q: Cognitive biometrics is considered to be much more difficult for the user to remember.
- true
- false
A: true

Q: Windows Live ID was originally introduced by Microsoft in 1999 as .NET Passport.
- true
- false
A: false

Q: ____ is a decentralized open source FIM that does not require specific software to be installed on the desktop.
A: OpenID
If wrong: Please refer to page 384 of the textbook

Q: Operating systems that have been reengineered so that they are designed to be secure from the ground up are known as ____ operating systems.
A: trusted
If wrong: Please refer to page 388 of the textbook

Q: ____ is the science of transforming information into an unintelligible form while it is being transmitted or stored so that unauthorized users cannot access it.
A: Cryptography
If wrong: Please refer to page 407 of the textbook

Q: Whereas cryptography scrambles a message so that it cannot be viewed, ____ hides the existence of the data.
A: steganography
If wrong: Please refer to page 407 of the textbook

Q: Changing the original text to a secret message using cryptography is known as ____.
A: encryption
If wrong: Please refer to page 408 of the textbook

Q: A(n) ____ is a mathematical value entered into the algorithm to produce ciphertext, or text that is "scrambled."
A: key
If wrong: Please refer to page 408 of the textbook

Q: ____ cryptographic algorithms use the same single key to encrypt and decrypt a message.
A: Symmetric
If wrong: Please refer to page 417 of the textbook

Q: ____ digital certificates are often issued from a Web server to a client, although they can be distributed by any type of server, such as a mail server.
A: Server
If wrong: Please refer to page 458 of the textbook

Q: Cryptography can also be applied to entire disks. This is known as ____.
A: whole disk encryption
If wrong: Please refer to page 431 of the textbook

Q: ____ is essentially a chip on the motherboard of the computer that provides cryptographic services.
A: Trusted Platform Module (TPM) / Trusted Platform Module / TPM
If wrong: Please refer to page 432 of the textbook

Q: ____ can be used to associate or â bindâ a userâ s identity to a public key.
A: Digital certificates
If wrong: Please refer to page 453 of the textbook

Q: Revoked digital certificates are listed in a(n) ____, which can be accessed to check the certificate status of other users.
A: Certificate Revocation List (CRL) / Certificate Revocation List / CRL
If wrong: Please refer to page 455 of the textbook

Q: A(n) ____ is a published set of rules that govern the operation of a PKI.
A: certificate policy (CP) / certificate policy / CP
If wrong: Please refer to page 468 of the textbook

Q: ____ certificates are certificates in which the functionality is split between two certificates.
A: Dual-sided
If wrong: Please refer to page 461 of the textbook

Q: ____ is a framework for all of the entities involved in digital certificates -including hardware, software, people, policies and procedures- to create, store, distribute, and revoke digital certificates.
A: Public key infrastructure (PKI) / Public key infrastructure / PKI
If wrong: Please refer to page 462 of the textbook

Q: ____ is a numbered set of PKI standards that have been defined by the RSA Corporation.
A: Public-key cryptography standards (PKCS) / Public-key cryptography standards / PKCS
If wrong: Please refer to page 463 of the textbook

Q: A(n) ____ refers to the type of trusting relationship that can exist between individuals or entities.
A: trust model
If wrong: Please refer to page 465 of the textbook