This is a self-grading exam. Answers are entered by selecting the checkbox corresponding to your answer
choice(s) or by typing-in your answers in the case of fill-in test items (if applicable). The examination is scored by clicking the 'Grade Test' button at the bottom of the form. Correct answers and explanations are found through hyperlinks at the bottom of the page. This test requires that your browser be JavaScript enabled. Please verify that JavaScript is activated if you encounter any problems. NOTE: Fill-in/Essay test items (if any) cannot be graded and thus are ignored. However, you may view these test items for their correct answers in the 'Correct Answers' section below (if provided by your instructor).
(A) As it is used to externally name an internal LAN address, spurious packets can be appended to Internet traffic and allow hackers to gain entry to your network.
(B) It must be publicly registered with the DNS system, so it can be utilized by Phreakers to determine LAN entry points.
(C) Both A & B.
(D) Anyone that has physical access to a network can gain IP addresses, access the common DNS table, and then launch an attack with that information.
(A) A key exchange protocol used with CISCO routers only.
(B) A message integrity system commonly used in
conjunction with Microsoft Exchange, or other popular email systems. It optionally
provides 40-128 bits of encryption.
(C) A system where hackers can gain access to your system(s), and install privileges for unauthorized accounts.
(D) A virtual private networking protocol that was the predecessor to Internet Key Exchange (IKE).
(E) A networking protocol that can be used to route non-IP traffic over an IP network. Can be combined with Internet Protocol Security (IPSEC) for additional security.
(A) A website registration process that involves registration of a World Wide Web location to a tradename. Requires a payment to a registry authority
(e.g. NetworkSolutions, GoDaddy, etc.)
(B) A collection of special purpose servers in an IP-based network that is used in translating noun names to specific IP addresses. An example would be www.mydogsandcats.com to 192.168.0.5.
(C) A Microsoft invention that is used to identify network Domain Controllers. Used to deconflict the names of Primary, and Backup Domain controllers.
(D) A process used to name a given website. Many special servers are set up on the Internet to provide this functionality. It is a fee-based system.
(E) A system of cooperative standards organizations dedicated to uniquely naming web sites on the Internet.
(A) NAT is a system for network analysis and testing.
(B) NAT is a networking protocol similar to NETBEUI that can be utilized for transferring large files across the Internet. It is specifically designed for TCP/IP networks.
(C) NAT is used by Novell Netware for analysis and testing.
(D) NAT is used to hide an internal network through IP translation of traffic within and exiting a private LAN. Most commonly utilized by Firewalls, or Routers.
(A) An electronic equivalent to a handwritten signatory element. Usually a hashed value that has been calculated for a message that has been encrypted with a private key.
(B) A TIFF based
facsimile of a handwritten signature. Universally accepted by financial institutions and the IEEE as the method of choice for network identification.
(C) Part of the Advanced Encryption Standard (AES).
(D) The trailer of an IPSec transmission, that is utilized exclusively for VPN authentication.
(A) Breaking into perimeter defenses of suspected industrial spies when they have attacked your company.
(B) Applying encryption to data to prevent unauthorized viewing.
(C) Leaving key-loggers on company computers to monitor the activity of employees in an attempt to prevent theft of company trade secrets.
(D) Using Internet security devices to monitor incoming/outgoing traffic from your LAN.
(E) Detecting/Identifying system vulnerabilities by having an internal or external entity attempt to penetrate a given network. The details of which are then reported to network security personnel.
2. (100) What is one of the main vulnerabilities of Dynamic Host Configuration Protocol (DHCP)?
Answer: (D) Anyone that has physical access to a network can gain IP addresses, access the common DNS table, and then launch an attack with that information.
3. (40) Layer 2 Tunneling Protocol (L2TP) is defined as what?
Answer: (E) A networking protocol that can be used to route non-IP traffic over an IP network. Can be combined with Internet Protocol Security (IPSEC) for additional security.
4. (70) The Domain Name System (DNS) is best described as what?
Answer: (B) A collection of special purpose servers in an IP-based network that is used in translating noun names to specific IP addresses. An example would be www.mydogsandcats.com to 192.168.0.5.
Answer: (D) NAT is used to hide an internal network through IP translation of traffic within and exiting a private LAN. Most commonly utilized by Firewalls, or Routers.
Answer: (A) An electronic equivalent to a handwritten signatory element. Usually a hashed value that has been calculated for a message that has been encrypted with a private key.
14. (20) The term "Ethical Hacking" refers to what activity?
Answer: (E) Detecting/Identifying system vulnerabilities by having an internal or external entity attempt to penetrate a given network. The details of which are then reported to network security personnel.
