Title: EXAM TWO
Course: CET 2660 Network Security Fundamentals > Section: Module Four - Wireless Network Security

Q: A ____ is designed to separate a nonsecured area from a secured area.
- lockout
- mantrap
- closet
- pit
A: mantrap

Q: A ____ access point is an unauthorized AP that allows an attacker to bypass many of the network security configurations and opens the network and its users to attacks.
- random
- sanctioned
- rogue
- legitimate
A: rogue

Q: A ____ allows scattered users to be logically grouped together even though they may be attached to different switches.
- subnet
- broadcast domain
- DMZ
- VLAN
A: VLAN

Q: A ____ can create entries in a log for all queries that are received.
- network log
- DHCP log
- DNS log
- proxy log
A: DNS log

Q: A ____ is a computer or an application program that intercepts a user request from the internal secure network and then processes that request on behalf of the user.
- proxy server
- DNS server
- VPN server
- telnet server
A: proxy server

Q: A ____ is a network device that can forward packets across computer networks.
- switch
- router
- bridge
- firewall
A: router

Q: A ____ is a standard network device for connecting multiple Ethernet devices together by using twisted-pair copper or fiber-optic cables in order to make them function as a single network segment.
- switch
- router
- firewall
- hub
A: hub

Q: A user under Role Based Access Control can be assigned only one ____.
- role
- group
- label
- access list
A: role

Q: A group of piconets in which connections exist between different piconets is called a ____.
- broadnet
- honeynet
- boundnet
- scatternet
A: scatternet

Q: In order to allow untrusted outside users access to resources such as Web servers, most networks employ a ____.
- bastion
- choke
- DMZ
- reduction point
A: DMZ

Q: A(n) ____ acts as the “base station” for the wireless network.
- AP
- endpoint
- WMM
- ad-hoc peer
A: AP

Q: A(n) ____ is a set of permissions that are attached to an object.
- ACE
- DAC
- entity
- ACL
A: ACL

Q: A(n) ____ is hardware or software that is designed to prevent malicious packets from entering or leaving computers.
- IPS
- scanner
- firewall
- honeypot
A: firewall

Q: A(n) ____ is the end of the tunnel between VPN devices.
- endpoint
- client
- server
- proxy
A: endpoint

Q: A(n) ____ packet contains a field that indicates the function of the packet and an identifier field used to match requests and responses.
- ICMP
- TKIP
- EAP
- RADIUS
A: EAP

Q: An ____ is an AP that is set up by an attacker.
- active twin
- authorized twin
- internal replica
- evil twin
A: evil twin

Q: Bluetooth is a ____ technology designed for data communication over short distances.
- Small Area Network
- Private Area Network
- Personal Area Network
- Limited Area Network
A: Personal Area Network

Q: DNS poisoning can be prevented by using the latest editions of the DNS software known as ____.
- BIND
- DHCP
- WINS
- finger
A: BIND

Q: ID badges that can be detected by a proximity reader are often fitted with tiny radio ____ tags.
- wave
- pulse
- AFID
- RFID
A: RFID

Q: IP addresses are ____-bit addresses.
- 4
- 8
- 16
- 32
A: 32

Q: IP is the protocol that functions primarily at the Open Systems Interconnection (OSI) ____.
- Transport Layer
- Network Layer
- Data link Layer
- Presentation Layer
A: Network Layer

Q: ____ is a technique that allows private IP addresses to be used on the public Internet.
- PAT
- PNAT
- NAPT
- NAT
A: NAT

Q: In the ____ cloud computing model, the customer has the highest level of control.
- Cloud Application as a Service
- Cloud Infrastructure as a Service
- Cloud Software as a Service
- Cloud System as a Service
A: Cloud Infrastructure as a Service

Q: Layer 3 of the OSI model is the ____ layer.
- Network
- Data Link
- Session
- Presentation
A: Network

Q: Layer 5 of the OSI model is the ____ layer.
- Network
- Data Link
- Session
- Presentation
A: Session

Q: Routers operate at the ____ Layer.
- Transport
- Application
- Presentation
- Network
A: Network

Q: Slave devices that are connected to the piconet and are sending transmissions are known as ____ slaves.
- active
- passive
- hybrid
- neutral
A: active

Q: TCP is the main ____ protocol that is responsible for establishing connections and the reliable data transport between devices.
- Application Layer
- Presentation Layer
- Network Layer
- Transport Layer
A: Transport Layer

Q: The ____ is a database, organized as a hierarchy or tree, of the name of each site on the Internet and its corresponding IP number.
- WINS
- NIS
- TACACS+
- DNS
A: DNS

Q: TCP port ____ is the FTP control port used for passing FTP commands.
- 19
- 20
- 21
- 22
A: 21

Q: The most common protocol suite used today for local area networks (LANs) as well as the Internet is ____.
- UDP
- ASN.1
- TCP/IP
- BER
A: TCP/IP

Q: The most restrictive access control model is ____.
- Mandatory Access Control
- Role Based Access Control
- Discretionary Access Control
- Rule Based Access Control
A: Mandatory Access Control

Q: When a device receives a beacon frame from an AP, the device then sends a frame known as a(n) ____ frame to the AP.
- broadcast SSID
- association request
- disassociation request
- connect request
A: association request

Q: ____ access points are serious threats to network security because they allow attackers to intercept the RF signal and bypass network security to attack the network or capture sensitive data.
- Legitimate
- Rogue
- Sanctioned
- Twin
A: Rogue

Q: ____ accounts are user accounts that remain active after an employee has left an organization.
- Active
- Stale
- Orphaned
- Fragmented
A: Orphaned

Q: ____ can be used to determine whether new IP addresses are attempting to probe the network.
- DNS logs
- Firewall logs
- DHCP logs
- Proxy logs
A: Firewall logs

Q: ____ indicates when an account is no longer active.
- Password expiration
- Account expiration
- Last login
- Account last used
A: Account expiration

Q: ____ is a pay-per-use computing model in which customers pay only for the computing resources they need.
- Cloud computing
- Virtualization
- Cloud Software as a Service
- Infrastructure as a Service
A: Cloud computing

Q: ____ is a means of managing and presenting computer resources by function without regard to their physical layout or location.
- Portability
- Virtualization
- Availability
- Migration assistance
A: Virtualization

Q: ____ requires mutual authentication used for WLAN encryption using Cisco client software.
- LEAP
- TKIP
- EAP
- PEAP
A: LEAP

Q: ____ is a technology that can help to evenly distribute work across a network.
- Stateful packet filtering
- Load balancing
- DNS caching
- DNS poisoning
A: Load balancing

Q: ____ is an attack that accesses unauthorized information from a wireless device through a Bluetooth connection, often between cell phones and laptop computers.
- Bluejacking
- Bluecracking
- Bluesnarfing
- Bluetalking
A: Bluesnarfing

Q: ____ is an authentication system developed by the Massachusetts Institute of Technology (MIT) and used to verify the identity of networked users.
- Aurora
- Kerberos
- CHAP
- TACACS
A: Kerberos

Q: ____ is suitable for what are called “high-volume service control applications” such as dial-in access to a corporate network.
- RADIUS
- ICMP
- FTP
- Telnet
A: RADIUS

Q: ____ is the encryption protocol standard for WPA2.
- AES-CCMP
- AES-CTR
- AES-TKIP
- AES-SCMP
A: AES-CCMP

Q: ____ is typically used on home routers that allow multiple users to share one IP address received from an Internet service provider (ISP).
- PAT
- NAT
- PAN
- PNAT
A: PAT

Q: ____ keeps a record of the state of a connection between an internal computer and an external device and then makes decisions based on the connection as well as the conditions.
- Stateful frame filtering
- Stateless frame filtering
- Stateful packet filtering
- Stateless packet filtering
A: Stateful packet filtering

Q: ____ provides a greater degree of security by implementing port-based authentication.
- IEEE 802.3ad
- IEEE 802.11n
- IEEE 802.1x
- IEEE 802.1z
A: IEEE 802.1x

Q: ____ provides remote users with the same access and functionality as local users through a VPN or dial-up connection.
- Extranet
- Remote access
- Intranet
- Virtual access
A: Remote access

Q: ____ use multiple infrared beams that are aimed across a doorway and positioned so that as a person walks through the doorway some beams are activated.
- Lockout sensors
- Engineering sensors
- Tailgate sensors
- Proximity sensors
A: Tailgate sensors