Question 1

What statement best describes the way to prevent a key generating algorithm from create the same keys, weak keys, or a batch of keys that have a lot in common?
A) A different algorithm should be used each time to confuse the cryptanalyst
B) The algorithm should be salted with a one-time random value before each key is made
C) Only one time keys should be used, it is impossible to prevent a computer from repeating a process
D) Keys should always be created offline, by a dedicated system

Accepted Answer

Computers are ideal for repeating a process with great accuracy of steps. If a one-time random value is made part of the calculation, the same steps can be repeated but with different results each time.

Question 2

Caden is considering an email encryption technology. It must be available for multiple types of systems. Which one is his best choice?
A) S/MIME
B) SSH
C) PGP
D) Yahoo

Accepted Answer

S/MIME is built into the Microsoft Outlook/Exchange products, and in a domain is the easiest to implement. PGP however is a better choice is supporting other operating systems and email clients is necessary.

Question 3

One of the disadvantages of symmetric key encryption is key management. For instance, if there are 10 people that wish to exchange data with each other, but maintain confidentiality at the same time, how many keys must be issued?
A) 1000
B) 10
C) 1
D) 45

Accepted Answer

The formula n (n-1)/2 is used for this calculation. In this case n = 10. Therefore 10 x 9 = 90 then divided by 2 = 45.

Question 4

Which of the true is not correct in regards to one-time pads?
A) There are the same or greater length than the message being encrypted
B) The pad itself must be exchanged out of band
C) A truly random pad is considered unbreakable
D) If the pad is generated the same way by each party, they don't need to exchange it, therefore it is never exposed to risk

Accepted Answer

One-time pads are generated once only.

Question 5

A method for verifying that a message is being exchanged only by two members with a prior association and that its integrity has also been maintained is called:
A) Diffie Hellman
B) Message Digest Fingerprint
C) Message Authentication Code
D) Digital Watermarking

Accepted Answer

A message such as an email, can have a symmetric key (pre shared or exchanged with the other party) added to the email before it is hashed. Only someone that has that same key would be able to append the email and check the hash for integrity. MACs are also used in authentication systems such as challenge response.

Question 6

A one time, unique value that is added to an algorithm to ensure a truly random output is called ______?
A) Nonce
B) IV
C) Salt
D) Seed

Accepted Answer

A nonce is a onetime value that can be used to seed or salt and algorithm. An IV might also be a nonce, but is used during the encryption process to ensure stronger characteristics of the key.

Question 7

Using the HTTP/S Connect(), an attacker can create a:
A) Covert tunnel
B) E-Commerce site
C) SQL Connection
D) Send Email

Accepted Answer

The most common methods found the submitting of web forms are GET and POST and all server must implement them. The HTTP protocol supports other methods as well including: PUT, DELETE, TRACE, OPTIONS, and CONNECT, which is used to create a tunnel for SSL.

Question 8

Viruses can be described as having three parts: Replicator, Concealer, and Payload. In the payload portion, there is a trigger mechanism and destructive code. When the trigger is based on events such as keystrokes, what class of malware is that considered:
A) Hoax
B) Timed Destruction
C) Keystroke Bomb
D) Logic Bomb

Accepted Answer

Logic bombs are triggered by events such as a keystroke combination, time and date of day, or file access. Inside attackers can plant logic bombs that can be disabled for use during extortion attacks.

Question 9

Which of the following is not a valid mobile phone technology?
A) GSM
B) GPRS
C) GPS
D) CDMA

Accepted Answer

GPS is Global Positioning System

Question 10

The ITU Protocol for sending audio-visual data across any packet based network is called:
A) H.323
B) H.636
C) X.500
D) X.509

Accepted Answer

H.323 is designed to provide telephony over TCP/IP networks and is used by many teleconferencing products.

Question 11

The act of stealing information from a victims magnetic strip is called:
A) Sniffing
B) Carding
C) Skimming
D) Bump and Run

Accepted Answer

Credit card skimmers are easy to obtain and is a risk from dishonest merchants. With a writing device and blanks, these cards can be reproduced (carding). Visa and MasterCard have systems that conduct the payment process without it being necessary for the merchant to retain any of this data. RFID devices that customers use for payment are also vulnerable to skimming.

Question 12

A mechanism that RFID devices use to be rendered inoperative is called:
A) Kill switch
B) Denial of Service
C) Tracking disable
D) The cannot be disabled

Accepted Answer

Customers should be given the choice to disable the RFID devices used in theft prevention, otherwise, "tracking" attacks would be possible against customer, for example in shopping malls if the vendor want to collect data on what stores shoppers go to after making purchases.

Question 13

USB Hacksaw is a tool that can be used to:
A) Automatically download files and email them to the attacker
B) Disable the USB drivers preventing over devices to work
C) Log the USB mouse movements and clicks, then combine them with screenshots
D) Prevent unauthorized access to a PC by acting as a dongle

Accepted Answer

USB Hacksaw is an extension to the USB dumper tool that can automatically retrieve system files such as the SAM.

Question 14

Programs such as NetNanny can be installed to monitor and control the Internet use on a computer, including keeping logs of chats. To prevent the sites themselves from knowing who visited them, a different tool is used.
Which of the following will accomplish this purpose?
A) GoToMyPC
B) Free Agent Pro
C) NetSeive
D) Anonymizer

Accepted Answer

Their products also protect against advanced attacks such as "evil twins" (Attackers posing as legitimate Wifi spots).

Question 15

There are many products that take a variety of approaches to protecting laptops from being stolen. They range from physically altering the laptop to make it impossible to resell, to biometric controls to complete drive encryption. Which of the following places a tracking device that can help with locating the physical location of the stolen or misplaced laptop?
A) Stop-Lock
B) PAL PC Tracker
C) Inspice Trace
D) ZTrace Gold

Accepted Answer

Stop-lock is the tool that makes the laptop unsellable, removing the motivation for theft if the data was not the target.

Question 16

Using Internet Explorer setting settings, it is possible to set a security level. High security disables Javascript and Active X controls. Which zone are all of the websites that are visited placed unless they are specifically listed in other custom zones?
A) Internet
B) Trusted
C) Custom
D) Default

Accepted Answer

Placing the Internet zone to High is the safest approach but makes many sites virtually unusable.

Question 17

At any given time there are thousands of free proxy servers available on the Internet that can be used to keep certain activities anonymous. What protocol has been designed to allow the chaining together of proxy servers?
A) SOCKS5
B) ProxyChain
C) FreeGate
D) TOR

Accepted Answer

SOCKS is the protocol and the other answers are either proxy tools or networks. Beware that many of the free proxies on the net are actually honeypots that are placed there by either black hats or white hats for research.

Question 18

Onan wants to install a biometric reader to control access to a server room. He knows there will only be about 5 people that will ever need access. In regards to storage of the user account credentials, which of the following systems will be the easiest and most efficient to install?
A) One to one
B) Many to one
C) One to Many
D) The should not be stored in or near the device itself

Accepted Answer

For only a small number of people it is sufficient for the system to find out "who the person is" meaning, the biometric data can be compared with many entries in the database to find out if this person is in the group of authorized users. If there were for example hundreds of possible users, it would be better to ask for a username then compare that biometric to only the template in the database that matches that user.

Question 19

Lucas is an Email administrator. He is extremely sick and tired of spam and convinces his boss to let him focus entirely on the email system for awhile. He puts into place a list of countermeasures that include: Spam prevention software at the edge of his network, DNSBLs (DNS Based Black Lists), and Mail Exchanger Callbacks. Still the SPAM comes in.
He decides the next best thing to try is a system that slows down connections to known SPAM relays to at least reduce the volume of traffic that just gets blasted in. What is this technique known as?
A) SPAM Cannibal
B) Sender Policy Framework
C) Teergrubbing (Tar Pit)
D) SMTP Cannonball

Accepted Answer

Teergrubbing is the German word for Tar pit. This concept relates to the general technique of slowing down connections between hosts to deter abuse. SPAM Cannibal is software that can do this, and the feature is built into Windows 2003 Sp1 (disabled by default). The question did not ask for a specific product, just a technique.

Question 20

Which of the following are best practices when securing a mail relay so it is not "open"? (Choose 2)
A) Disable MX zone transfers
B) Filter VRFY and EXPN commands
C) Filter VRFY and ESPN commands
D) Configure SMTP-AUTH

Accepted Answer

SMTP_AUTH mitigates open relay related SPAM. VRFY and EXPN are SMTP commands that an attacker can use to determine email addresses.

Quiz 4: Operating Systems and Applications

What statement best describes the way to prevent a key generating algorithm from create the same keys, weak keys, or a batch of keys that have a lot in common?

Caden is considering an email encryption technology. It must be available for multiple types of systems. Which one is his best choice?

One of the disadvantages of symmetric key encryption is key management. For instance, if there are 10 people that wish to exchange data with each other, but maintain confidentiality at the same time, how many keys must be issued?

Which of the true is not correct in regards to one-time pads?

A method for verifying that a message is being exchanged only by two members with a prior association and that its integrity has also been maintained is called:

A one time, unique value that is added to an algorithm to ensure a truly random output is called ______?

Using the HTTP/S Connect() , an attacker can create a:

Viruses can be described as having three parts: Replicator, Concealer, and Payload. In the payload portion, there is a trigger mechanism and destructive code. When the trigger is based on events such as keystrokes, what class of malware is that considered:

Which of the following is not a valid mobile phone technology?

The ITU Protocol for sending audio-visual data across any packet based network is called:

The act of stealing information from a victims magnetic strip is called:

A mechanism that RFID devices use to be rendered inoperative is called:

USB Hacksaw is a tool that can be used to:

Programs such as NetNanny can be installed to monitor and control the Internet use on a computer, including keeping logs of chats. To prevent the sites themselves from knowing who visited them, a different tool is used. Which of the following will accomplish this purpose?

Using Internet Explorer setting settings, it is possible to set a security level. High security disables Javascript and Active X controls. Which zone are all of the websites that are visited placed unless they are specifically listed in other custom zones?

At any given time there are thousands of free proxy servers available on the Internet that can be used to keep certain activities anonymous. What protocol has been designed to allow the chaining together of proxy servers?

Onan wants to install a biometric reader to control access to a server room. He knows there will only be about 5 people that will ever need access. In regards to storage of the user account credentials, which of the following systems will be the easiest and most efficient to install?

Which of the following are best practices when securing a mail relay so it is not "open"? (Choose 2)