Deck 3: Security Through Authentication and Encryption

Question 1

When an SSL communication session begins between two computers, the computers first exchange certificates to authenticate the receiver and sender.

Answer 1

False

Question 2

Session authentication works by giving each frame or packet an identification or sequence number.

Answer 2

True

Question 3

In stream cipher, a specific key size is used for encryption.

Answer 3

False

Question 4

The original version of DES used a 56-bit encryption key combined with 8-bit parity.

Question 5

Triple DES is a standard adopted by the U.S. government to replace AES.

Question 6

A random generator starts with a base or seed number and generates the same sequence of random numbers time after time.

Question 7

Today, Kerberos is the most commonly used form of security for communications and transactions over the Web.

Question 8

Message Digest 4 takes the original data and adds padded spaces until the length of the data section is 456 bytes.

Question 9

The purpose of EFS is to protect folder and file contents on a hard disk, in case a hard disk is stolen from a server or workstation, or a portable computer is lost or stolen.

Question 10

Sniffer software turns the NIC on its host computer into a virtual listening ear, capturing the network traffic that goes across that NIC on a particular network segment.

Question 11

Secret key encryption uses a public key and a private key.

Question 12

When a network consists of Windows 2000 or later operating systems, Kerberos is the preferred logon authentication method.

Question 13

The ethereal sniffer software only functions on Linux/UNIX computers.

Question 14

The public key/private key method uses an encryption algorithm developed by Joan Daemen and Vincent Rijmen.

Question 15

A secret key is used to both encrypt and decrypt data.

Question 16

TLS uses private-key symmetric data encryption and the TLS Handshake Protocol for secure communications.

Question 17

In TCP/IP communications using IPv4 , the authentication header is placed after the traditional IP header field in a packet and before the TCP (or UDP) field.

Question 18

Authentication makes data unintelligible to everyone except its intended recipients.

Question 19

When the hashing method of encryption is used, each password has a unique digital signature.

Question 20

CFS can be used for remote file access through the NFS used by Netware systems.

Question 21

Which of the following cipher command-line parameters decrypts the contents of the specified folder and sets the folder so that any files added to the folder are not encrypted?

A) /?
B) /e
C) /d
D) /n

Question 22

What type of encryption is used for remote connections into Windows 2000 Server and Windows Server 2003?

A) DES
B) PPP
C) PPTP
D) MPPE

Question 23

What needs to be installed in order for Windows 95 and Windows 98 to use NTLM v2?

A) Service pack 1
B) Directory Service Client
C) NTLM v2 client install
D) Nothing

Question 24

Which version of hashing algorithm takes 8-bit (one-byte) chunks and creates an encrypted message that is padded until its length can be divided by 16?

A) MD2
B) MD4
C) MD5
D) SHA-1

Question 25

When was the RSA encryption method created?

A) 1967
B) 1977
C) 1987
D) 1997

Question 26

Which of the following sniffer application can be used in Windows-based operating systems?

A) The Sniffer
B) windump
C) Sniffit
D) Both a and b
E) a, b, and c

Question 27

Which of the following cipher command-line parameters provides the account employing cipher with a new encryption key?

A) /n
B) /u
C) /k
D) /x

Question 28

Which of the following encryption algorithms is considered to be the most secure?

A) MD5
B) DES
C) RSA
D) 3DES

Question 29

Which of the following cipher command-line parameters copies encryption key and certificate data to a file that is encrypted for use by the cipher user?

A) /?
B) /k
C) /e
D) /x

Question 30

_____ is an authenticating server for EAP.

A) IAS
B) IIS
C) ISA
D) RADIUS

Question 31

What encryption method does Red Hat Linux use by default?

A) RSA
B) DES
C) DES3
D) PAM

Question 32

_____ is the use of a secret code or other means to disguise data that is stored on a computer or transported across a network.

A) Encryption
B) Authentication
C) Hashing
D) Ciphering

Question 33

What command can be used from the command prompt window to configure EFS?

A) hash
B) efsconfig
C) msconfig
D) cipher

Question 34

Which of the following operating systems recognizes the original NTLM logon authentication?

A) Windows 3.11
B) Windows 95
C) Windows Server 2003
D) Both a and b
E) a, b, and c

Question 35

What is the RSA key size used by MPPE when it is configured for strongest encryption?

A) 40 bits
B) 54 bits
C) 128 bits
D) 254 bits

Question 36

Which of the following encryption techniques is employed in UNIX/Linux systems to enable encryption in file systems, using DES, 3DES, and other encryption techniques?

A) RSA
B) PAM
C) CFS
D) AES

Question 37

When following the ISO _____ format, a digital certificate includes a basic set of encrypted information.

A) X10
B) X.502
C) X.509
D) X 802.3

Question 38

Which version of hashing algorithm uses a mathematical formula to reduce a message to 160 bits and then hashes a digital signature to go with the message?

A) MD2
B) MD4
C) MD5
D) SHA-1

Question 39

_____ authentication works by giving each frame or packet an identification or sequence number. This ensures the accuracy of ongoing communications and the authenticity of the communications source.

A) Network
B) Session
C) System
D) Frame

Question 40

What encryption method is often used to create a digital signature?

A) Secret key
B) Hashing
C) DES
D) CFS

Question 41

If getting users to log off when they go home at night is a problem, which option should you modify in the figure above?

A) Enforce user logon restrictions
B) Maximum lifetime for a service ticket
C) Maximum lifetime for a user ticket
D) Maximum lifetime for user ticket renewal

Question 42

Which option in the figure above turns Kerberos encryption on and off?

A) Enforce user logon restrictions
B) Maximum lifetime for a service ticket
C) Maximum lifetime for user ticket renewal
D) Maximum tolerance for computer clock synchronization

Question 43

Is MD4 incorporated into Microsoft's MS-CHAP v2 hashing algorithm?

Question 44

What form of encryption is being enabled in the figure above?

A) EFS
B) MPPE
C) DES
D) CFS

Question 45

Which authentication method is a physical device that enables the generation of a unique password each time a user logs on to a server or network?

A) SSH
B) Security token
C) Digital certificate
D) Session

Question 46

Which authentication method is used in Internet and network communications, and employs a handshaking protocol for authentication plus RSA for encryption?

A) EAP
B) TLS
C) SSH
D) SSL

Question 47

Is the maximum size of the private key in AES 256 bits in length?

Question 48

_____ is a set of IP-based secure communications and encryption standards created by the IETF, and was developed to provide secure network communications.

A) SSL
B) IPSec
C) PPTP
D) LDAP

Question 49

Which authentication method is used on networks and in remote communications, typically employing Remote Authentication Dial-in User Servers and is compatible with many encryption methods?

A) SSL
B) Kerberos
C) EAP
D) TLS

Question 50

Are user passwords in Red Hat Linux encrypted using 3DES and stored in the /etc/passwd file?

Question 51

What does SSH use to authenticate a communications session that uses passwords?

A) Digital certificates
B) RSA
C) EAP
D) Both a and b
E) Both a and c

Question 52

What size of keys can be used with SSL authentication?

A) 40 bit only
B) 40 bit and 128 bit
C) 40 bit, 56 bit, and 128 bit
D) 40 bit and 56 bit

Question 53

With which version(s) of IP is IPSec compatible?

A) IPv4
B) IPv5
C) IPv6
D) Both a and c
E) Both a and b

Question 54

Why is SSH particularly suited to UNIX/Linux systems?

A) It uses native code
B) It uses pipes
C) It is based on the UNIX kernel
D) None of the above

Question 55

At what TCP/IP layer does IPSec secure communications?

A) Transport
B) Application
C) Network
D) Physical

Question 56

What authentication method was designed using SSL as a model and is supported by the IETF as an Internet standard for secure communications?

A) EAP
B) SSL+
C) TLS
D) IPSec

Question 57

Which authentication method authenticates by using tickets to verify client and server communications, and employs private-key encryption?

A) Digital certificates
B) Secure Sockets Layer
C) Kerberos
D) Security Token

Question 58

Which authentication method employs a unique set of digital information or a digital signature with a communication or a file as a means to verify the source and uses public-key asymmetrical encryption?

A) SSL
B) TLS
C) Digital certificates
D) Kerberos

Question 59

Did the original version of DES use a 56-bit encryption key combined with 8-bit parity?

Question 60

Was AES originally developed for the U.S. National Security Agency?

Question 61

When following the ISO X.509 format, what basic set of encrypted information does a digital certificate include?

Question 62

Does the Encrypting File System (EFS) employ public- and private-key asymmetrical encryption and a trapdoor function to manipulate prime numbers?

Question 63

List six of the common authentication methods in use today.

Question 64

List the four hashing algorithms typically used.

Question 65

List eight different encryption techniques that are designed to help protect stored or transmitted data.

Question 66

When Windows 2000 Server or Windows Server 2003 is contacted by a client using IPSec configured in the Client (____________________) role, it will respond by using IPSec communication.

Question 67

____________________ encryption can work well on a computer for files that are only accessed by an authorized account, but it is difficult to achieve secrecy over a network using this method.

Question 68

____________________ is the science of creating secret messages.

Question 69

In session authentication, is each packet given a sequence number when it is constructed at the source computer?

Question 70

The DES, AES, and MPPE encryption methods are all forms of the ____________________ encryption method, but use different block sizes, key sizes, and algorithms.

Question 71

The ____________________ field in the ESP is used in the same way as in the AH, to store the Integrity Check Value.

Question 72

The ____________________ field in the AH uses a special counter to activate anti-replay so that the receiver can determine if it has already received a packet.

Question 73

____________________ authentication method is an application-independent form of authentication that is modeled after SSL and uses RSA encryption.

Question 74

____________________ authenticates by using tickets to verify client and server communications, and employs private-key encryption.

Question 75

Deploying _________________________ with NAT can interfere with the security established by IPSec.

Question 76

Does each security token have a unique identification number built into it, so that the authentication server can verify the security token before issuing a password?

Question 77

In a(n) ____________________ attack every character combination is used in an attempt to determine the password of an account.

Question 78

Was SSH developed by Netscape to provide authentication security for TCP/IP applications such as FTP and Telnet?

Question 79

Does Microsoft's MPPE use a 40-bit RSA encryption key for its basic encryption?

Question 80

List and provide the key lengths for the three different flavors of RSA used by MPPE.