Question 1

In ____, both computers verify the credentials of the other.

Accepted Answer

Mutual authentication involves both parties verifying the credentials of each other, ensuring that communication can only occur between trusted parties. Mutual authorization involves granting access to resources based on the authenticated credentials, which is a separate step after mutual authentication. Mutual access is not a term typically used in the context of authentication and authorization. Mutual verification is a vague term and does not specifically refer to the process of verifying authentication credentials between two parties.

Question 2

Define SSH (secure shell) and explain the threats it guards against. Include an explanation of the encryption algorithms that may be used with it.

Accepted Answer

The answer of Define SSH (secure shell) and explain the...

Question 3

RADIUS and TACACS belong to a category of protocols known as AAA (____).

Accepted Answer

RADIUS and TACACS are both used for AAA, which stands for authentication, authorization, and accounting. The primary purpose of these protocols is to provide secure access to network resources by verifying the identity of users, controlling their level of access to various resources, and tracking their activity for auditing and billing purposes. Thus, the correct answer is B, which includes all three components of AAA. A, C, and D are incorrect because they either omit one of the AAA components or use a different set of terms.

Question 4

____ is a method of encrypting TCP/IP transmissions above the network layer.

Accepted Answer

SSL (Secure Sockets Layer) is specifically designed to encrypt data at a level above the network layer, ensuring secure transmissions over the internet, such as in web browsing, email, and other data transfers.

Question 5

____________________ is the use of an algorithm to scramble data into a format that can be read only by reversing the algorithm.

Accepted Answer

The answer of ____________________ is the use of an algorithm...

Question 6

Describe who should conduct a security audit and the advantages of doing so, if any.

Accepted Answer

The answer of Describe who should conduct a security audit...

Question 7

Describe one potential flaw in CHAP and MS-CHAP authentication and explain how it is resolved.

Accepted Answer

The answer of Describe one potential flaw in CHAP and...

Question 8

A(n) ____________________ identifies an organization's security risks, levels of authority, designated security coordinator and team members, responsibilities for each team member, and responsibilities for each employee.

Accepted Answer

The answer of A(n) ____________________ identifies an organization's security risks,...

Question 9

Explain how to block traffic attempting to exit a LAN and discuss why an administrator would want to do this.

Accepted Answer

The answer of Explain how to block traffic attempting to...

Question 10

Describe the SCP (Secure CoPy) utility.

Accepted Answer

The answer of Describe the SCP (Secure CoPy) utility....

Question 11

Describe the two phases IPSec use to accomplish authentication.

Accepted Answer

The answer of Describe the two phases IPSec use to...

Question 12

A(n) ____________________ is a software application on a network host that acts as an intermediary between the external and internal networks, screening all incoming and outgoing traffic.

Accepted Answer

The answer of A(n) ____________________ is a software application on...

Question 13

Describe the three-way handshake used in CHAP.

Accepted Answer

The answer of Describe the three-way handshake used in CHAP....

Question 14

A VPN ____ authenticates VPN clients and establishes tunnels for VPN connections.

Accepted Answer

A VPN concentrator is specifically designed to manage and authenticate VPN connections, establishing tunnels for secure communication between remote clients and a private network. Routers can be used for VPN connectivity, but do not specifically authenticate clients or focus on establishing VPN tunnels. A VPN service may provide the infrastructure necessary for VPN connections, but may not provide the same level of authentication and tunneling capabilities as a dedicated concentrator. Certificate authorities are used to issue digital certificates, but are not directly involved in establishing VPN connections.

Question 15

In ____, a hacker forges name server records to falsify his host's identity.

Accepted Answer

DNS spoofing involves forging name server records to misdirect a user to a counterfeit website where their personal information can be stolen.

Question 16

A(n) ____________________ is a thorough examination of each aspect of the network to determine how it might be compromised.

Accepted Answer

The answer of A(n) ____________________ is a thorough examination of...

Question 17

In general, information is ____________________ if it could be used by other parties to impair an organization's functioning, decrease customers' confidence, cause a financial loss, damage an organization's status, or give a significant advantage to a competitor.

Accepted Answer

The answer of In general, information is ____________________ if it...

Question 18

Define and describe PAP.

Accepted Answer

The answer of Define and describe PAP....

Question 19

____ protocols are the rules that computers follow to accomplish authentication.

Accepted Answer

The word "authentication" in the question indicates that the answer is related to the process of verifying the identity of a user or system. Therefore, the correct option is D, authentication protocols. Options A, B, and C are also important in network security, but they do not specifically address the method of verifying identity.

Question 20

Describe what distinguishes 802.1x from other authentication standards.

Accepted Answer

The answer of Describe what distinguishes 802.1x from other authentication...

Quiz 11: Network Security