Question 1

Controlling access to a computer network involves deciding and then limiting who can use the system and when the system can be used.

Accepted Answer

Controlling access to a computer network involves deciding and limiting who can use the system and when the system can be used. This is done to ensure the security of the network and protect sensitive information.

Question 2

Both SSL and IPsec may eventually give way to S-HTTP,the newer security standard created by the Internet Engineering Task Force.

Accepted Answer

There is no evidence to suggest that SSL and IPsec will eventually give way to S-HTTP, as these technologies continue to be widely used in the industry. S-HTTP was a proposed standard in the 1990s, but it never gained widespread adoption and has largely been superseded by other security protocols.

Question 3

Because of security concerns,modern network operating systems do not allow network administrators to create workgroups.

Accepted Answer

Modern network operating systems like Windows 10 and Windows Server 2019 still allow network administrators to create workgroups. However, workgroups are less secure than domain-based networks, so domain-based networks are often preferred in enterprise environments.

Question 4

One of the most common ways to control access to a system is to require user IDs and passwords.

Accepted Answer

Requiring user IDs and passwords is one of the most common and widely accepted methods for access control in computer systems. It allows users to authenticate themselves and gain access to the system only if they provide the correct combination of user ID and password.

Question 5

Internet systems are the only systems that experience security problems.

Accepted Answer

Although internet systems are commonly targeted by hackers and experience frequent security problems, other types of systems such as internal corporate networks, mobile devices, and physical infrastructure systems like power grids can also be vulnerable to security threats.

Question 6

Expensive computer systems should always be placed in the basements of buildings.

Accepted Answer

Placing expensive computer systems in basements can increase the risk of water damage, flooding, and humidity. It is recommended to place them in a secure and temperature-controlled room on a higher floor.

Question 7

Some computer systems generate random passwords that are very difficult to guess,but are also hard to remember.

Accepted Answer

This statement is true. Computer systems can generate passwords with a combination of letters, numbers, and symbols that are very complex and difficult to guess, but also hard for a human to remember without writing them down.

Question 8

The physical protection of a computer system or a computer network consists of protecting the equipment from physical damage.

Accepted Answer

Physical protection involves safeguarding the computer equipment from various threats such as power surges, environmental hazards (such as floods or fires), theft, and other physical damage.

Question 9

A worm is a form of computer virus.

Accepted Answer

A worm is a standalone malware program that spreads copies of itself to other computers and networks, while a virus attaches itself to a host file and requires user action to spread.

Question 10

Auditing a computer system is often a good way to deter crime.

Accepted Answer

Auditing a computer system allows for the detection and prevention of unauthorized access, data breaches, and other criminal activities. It can also serve as a deterrent to potential criminals knowing that the system is regularly monitored and audited.

Question 11

Many employees feel surveillance is an intrusion into their privacy.

Accepted Answer

Surveys have shown that many employees feel uncomfortable with the idea of constant surveillance in the workplace, believing that it can be an intrusion into their privacy. This can lead to feelings of mistrust and discomfort between employees and employers, and can negatively impact morale and productivity.

Question 12

Rarely,passwords become known,or "misplaced," and fall into the wrong hands.

Accepted Answer

Passwords can frequently become known or compromised due to various reasons such as data breaches, phishing attacks, or weak password practices.

Question 13

Pings are used most commonly by Unix-based systems.

Accepted Answer

Pings are commonly used by Unix-based systems to test network connectivity. However, they can also be used by other operating systems like Windows.

Question 14

The two leading attack methods for the last few years have exploited known vulnerabilities in operating systems and in application software.

Accepted Answer

This is true, as cyber attackers often target known vulnerabilities in operating systems and application software in order to gain unauthorized access to systems or steal sensitive data.

Question 15

Top-level executives often have access to a narrow range of information within a company.

Accepted Answer

Top-level executives typically have access to a wide range of information within a company, often including confidential and sensitive information.

Question 16

All system attacks need a user to open an e-mail or Web page.

Accepted Answer

While many system attacks can be carried out through email or web pages, not all attacks require a user to perform these actions. Some attacks, such as denial-of-service attacks, can be initiated without any user action. Additionally, vulnerabilities in software can be exploited without the user even knowing they are at risk.

Question 17

One of the inherent problems with protecting a single key is that it means that only one key is used to both encode and decode the message.

Accepted Answer

When only one key is used to encode and decode the message, it becomes vulnerable to attacks such as brute force, where a hacker simply tries all possible combinations of the key until the correct one is found. Using multiple keys, such as in public key cryptography, makes it more difficult for hackers to access the message.

Question 18

Early cryptography algorithms used the same key for both encryption and decryption.

Accepted Answer

Early cryptography algorithms, such as the Caesar cipher, used a simple substitution method with the same key for encryption and decryption.

Question 19

One popular application of IPsec is in the support of virtual private networks.

Accepted Answer

IPsec is commonly used for secure communication over the internet and thus, is extensively used in supporting virtual private networks (VPNs).

Question 20

A popular attack method is to abuse or take advantage of valid user accounts and the permissions associated with those accounts.

Accepted Answer

This is true. Attackers often try to obtain or compromise valid user accounts as a way to gain access to sensitive information or systems within an organization. They may also use social engineering techniques to trick users into giving up their login credentials or use brute force methods to guess passwords. Once they have access to a valid user account, they can exploit the permissions that are associated with that account to carry out further attacks or escalate their privileges within the system.

Quiz 12: Network Security