Module 21 Exam

1. These three attributes are the core of the enterprise security policy.

2. The main purpose of a Denial of Service (DoS) attack is to quietly take control of an end device without the user knowing.

3. With a Denial of Service (DoS) attack, the attacker does not try to gain access to a resource; rather, he tries to induce a loss of access to different users or services. These services include?

4. An advanced form of DoS attack is _____, which works by manipulating a large number of systems to launch an attack on a target over the Internet or
over an enterprise network.

5. A ______ attack is the process in which a single host or entity falsely assumes (spoof) the identity of another host.

6. Programs like Telnet and FTP employ user-based authentication but the credentials are sent in clear text (unencrypted) over the wire.

7. There are three major types of viruses, depending on where they act:

8. Another way to categorize viruses is based on their behavior, of which there are two types:

9. _____ programs are basically unauthorized code that is contained in legitimate programs and performs functions that are hidden to the user.

10. Social engineering attacks are difficult to identify because they are not electronically detectable.

11. Some of the most important actions that can be taken against social engineering attacks are:

12. ______ is the process of finding available wireless access points within a certain geographical area by driving around and listening for signals.

13. WPA2-Personal is vulnerable to a series of attacks, including:

14. _______ describes a concept of configuring an external access point to look and behave just like a trusted access point (same SSID and same security settings) so that users connect to the “evil” AP by mistake.

15. DoS and DDoS attacks are meant to compromise the connectivity and availability to or from the network and can be categorized into different types:

16. Trust and identity management has three components.

17. The authentication of identity is based on three attributes that make the connection to access control:

18. Th e Public Key Infrastructure (PKI) is a complex authentication technique that functions by using digital certificates.

19. Kerberos has three main components:

20. AAA offers the following services:

21. RADIUS functions over ___, while TACACS+ uses ___.

22. 802.1X works by authenticating the user before receiving access to the network, and this involves three components:

23. Lightweight EAP (LEAP) was created by Cisco as a proprietary solution for their equipment and systems.