Which of the following concepts represent the three fundamental principles of information security?
Each correct answer represents a complete solution. Choose three.

A. Integrity

B. Privacy

C. Confidentiality

D. Availability

Which of the following protocols work at the Session layer of the OSI model?

A. User Datagram Protocol (UDP)

B. Trivial File Transfer Protocol (TFTP)

C. Border Gateway Multicast Protocol (BGMP)

D. Internet Security Association and Key Management Protocol (ISAKMP)

Which of the following key sizes is used by International Data Encryption Algorithm (IDEA)?

A. 64-bit

B. 16-bit

C. 32-bit

D. 128-bit

Which of the following rated systems of the Orange book has mandatory protection of the TCB?

A. B-rated

B. A-rated

C. D-rated

D. C-rated

Which of the following is NOT a countermeasure against a spoofing attack?

A. Patching operating system

B. Installing Anti-virus software

C. Patching application

D. Employing IDS

In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can help an attacker gather user names, passwords, and other valuable information. To attempt a zone transfer, an attacker must be connected to a DNS server that is the authoritative server for that zone. Besides this, an attacker can launch a Denial of Service attack against the zone's DNS servers by flooding them with a lot of requests. Which of the following tools can an attacker use to perform a DNS zone transfer?
Each correct answer represents a complete solution. Choose all that apply.

A. Dig

B. NSLookup

C. DSniff

D. Host

Which of the following is a program that monitors data packets traveling across a network?

A. Sniffer

B. Smurf

C. Hacker

D. BitLocker

Which of the following protocols are used to provide secure communication between a client and a server over the Internet?
Each correct answer represents a part of the solution. Choose two.

A. HTTP

B. SSL

C. SNMP

D. TLS

Which of the following statements are true about a Gantt chart?
Each correct answer represents a complete solution. Choose all that apply.

A. It displays the duration of a task.

B. It is easier to plan than PERT.

C. It displays dependencies between activities.

D. The impact of slippage is easily determined.

Which of the following methods backs up all changes made since the last full or normal backup?

A. Half backup

B. Incremental backup

C. Differential backup

D. Full backup

What are packet sniffers?

A. Packet sniffers test package security.

B. Packet sniffers capture the packages as they cross the network.

C. Packet sniffers encrypt the packages as they cross the network.

D. Packet sniffers test the packages to verify data integrity.

Which of the following practices come in the category of denial of service attack?
Each correct answer represents a complete solution. Choose three.

A. Sending lots of ICMP packets to an IP address

B. Disrupting services to a specific computer

C. Performing Back door attack on a system

D. Sending thousands of malformed packets to a network for bandwidth consumption

Which of the following terms refers to a steady lower voltage state without a complete loss of power?

A. Sag

B. Brownout

C. Blackout

D. Spike

Which of the following types of firewalls looks deep into packets and makes granular access control decisions?

A. Stateful

B. Application level proxy

C. Packet filtering

D. Circuit level proxy

Which of the following ports is used by the control connection on the FTP server?

A. TCP port 23

B. TCP port 21

C. TCP port 53

D. TCP port 443

Which of the following authentication methods support mutual authentication?
Each correct answer represents a complete solution. Choose two.

A. MS-CHAP v2

B. EAP-TLS

C. EAP-MD5

D. NTLM

?

A. Web caching

B. Hacking

C. Packet filtering

D. Spoofing

Which of the following handles a relatively wide range of frequencies, which may be divided into channels or frequency bins?

A. Broadband transmission

B. Multicast transmission

C. Baseband transmission

D. Unicast transmission

Which of the following terms describes an attempt to transfer DNS zone data?

A. Reconnaissance

B. Dumpster diving

C. Encapsulation

D. Spam

Which of the following are the phases of the Certification and Accreditation (C&A) process?
Each correct answer represents a complete solution. Choose two.

A. Auditing

B. Initiation

C. Detection

D. Continuous Monitoring

Which of the following protocols is used to verify the status of a certificate?

A. CEP

B. HTTP

C. OSPF

D. OCSP

Which of the following types of attacks slows down or stops a server by overloading it with requests?

A. Vulnerability attack

B. Impersonation attack

C. Network attack

D. DoS attack

You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP-based Windows NT network. You are configuring a computer that will be used as a file server on the network. You have to decide the disk configuration for the computer to obtain better performance. levels will you choose to fulfil the requirement?

A. RAID-5

B. RAID-0

C. RAID-4

D. RAID-3

E. RAID-1

Which of the following VPN protocols offer encryption?
Each correct answer represents a complete solution. Choose two.

A. L2F

B. PPTP

C. L2TP

D. IPSec

algorithm?

A. Password

B. Access control entry

C. Key exchange

D. Access control list

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company.
To do so, he takes an image file and simply uses a tool image hide and embeds the secret file within an image file of the famous actress, Jennifer Lopez, and sends it to his Yahoo mail id. Since he is using the image file to send the data, the mail server of his company is unable to filter this mail. Which of the following techniques is he performing to accomplish his task?

A. Email spoofing

B. Social engineering

C. Web ripping

D. Steganography

Which of the following provides protection from attacks at the application layer and prevents unauthorized access and packet spoofing?

A. Proxy server

B. IPSec protocol

C. Network address translation (NAT)

D. STP cabling

Which of the following processes removes data from the media so that it is difficult to restore?

A. Overwriting

B. Degaussing

C. Sanitization

D. Declassification

Which of the following methods is a behavior-based IDS detection method?

A. Protocol detection

B. Statistical anomaly detection

C. Pattern matching detection

D. Knowledge-based detection

?

A. It is an authentication server.

B. It is a certification authority.

C. It is an encryption technology.

D. It is a signature verification utility.

John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are-secure.com. He enters a single quote in the input field of the login page of the Weare- secure Web site and receives the following error message:
Microsoft OLE DB Provider for ODBC Drivers error '0x80040E14'
This error message shows that the We-are-secure Website is vulnerable to __________.

A. A Denial-of-Service attack

B. A SQL injection attack

C. An XSS attack

D. A buffer overflow

Which of the following tools or services is used to find the entire IP address range used by an organization?

A. TRACERT

B. Ping Scanner

C. PATHPING

D. Share Scanner

Which of the following is a set of exclusive rights granted by a state to an inventor or his assignee for a fixed period of time in exchange for the disclosure of an invention?

A. Patent

B. Snooping

C. Copyright

D. Utility model

Andrew works as a Network Administrator for Infonet Inc. The company's network has a Web server that hosts the company's Web site. Andrew wants to increase
. Which of the following types of encryption does SSL use?
Each correct answer represents a complete solution. Choose two.

A. Secret

B. Asymmetric

C. Synchronous

D. Symmetric

on client computers?
Each correct answer represents a complete solution. Choose two.

A. Perl

B. DHTML

C. JavaScript

D. HTML

You work as a Network Administrator for Net Soft Inc. You are designing a data backup plan for your company's network. The backup policy of the company requires high security and easy recovery of data. Which of the following options will you choose to accomplish this?

A. Take a full backup daily and use six-tape rotation.

B. Take a full backup on Monday and an incremental backup on each of the following weekdays. Keep Monday’s backup offsite.

C. Take a full backup on Monday and a differential backup on each of the following weekdays. Keep Monday’s backup offsite.

D. Take a full backup daily with the previous night’s tape taken offsite.

E. Take a full backup daily with one tape taken offsite weekly.

F. Take a full backup on alternate days and keep rotating the tapes.

Which authentication method uses retinal scanners for authentication process?

A. Biometrics

B. Challenge Handshake Authentication Protocol (CHAP)

C. Smart cards

D. Kerberos

E. Certifications

F. Multi-factor

Which term best describes an e-mail that contains incorrect and misleading information or warnings about viruses?

A. Hoax

B. Spam

C. Trojan horse

D. Virus

E. Rlogin

F. Blowfish

Which of the following acts as an intermediary between a user on the internal network and a service on the external network such as the Internet?

A. DNS server

B. Firewall

C. Proxy server

D. WINS server

You work as a Network Administrator for McRoberts Inc. The company has a TCP-based network, which is connected to the Internet. Users use their Web browsers to connect to Web servers and to view different Web pages. Which of the following protocols ensures a secure connection between a Web browser and a Web server?

A. L2TP

B. SSL

C. IPSec

D. PPTP

Which of the following are the responsibilities of a custodian with regard to data in an information classification program?
Each correct answer represents a complete solution. Choose three.

A. Running regular backups and routinely testing the validity of the backup data

B. Performing data restoration from the backups when necessary

C. Controlling access, adding and removing privileges for individual users

D. Determining what level of classification the information requires

are true?
Each correct answer represents a complete solution. Choose two.

A. It is the term used by Microsoft for major service pack releases.

B. It is generally related to security problems.

C. It is a collection of files used by Microsoft for software updates released between major service pack releases.

D. It is generally related to the problems of a Web server’s performance.

Which of the following is the best method to stop vulnerability attacks on a Web server?

A. Implementing the latest virus scanner

B. Using strong passwords

C. Configuring a firewall

D. Installing service packs and updates

Which of the following is a program that monitors data packets traveling across a network?

A. Sniffer

B. Smurf

C. Hacker

D. BitLocker

Which of the following layers are the sub layers of the data-link layer?
Each correct answer represents a complete solution. Choose all that apply.

A. Media Access Control (MAC)

B. Logical Link Control (LLC)

C. Reserve Address Resolution Protocol (RARP)

D. Serial Line Internet Protocol (SLIP)

Which of the following is the process of finding weaknesses in cryptographic algorithms and obtaining the plaintext or key from the ciphertext?

A. Cryptanalysis

B. Kerberos

C. Cryptographer

D. Cryptography

Which of the following techniques are used to secure wireless networks?
Each correct answer represents a complete solution. Choose three.

A. MAC address filtering

B. SSID spoofing

C. IP spoofing

D. Closed network

In which of the following attacks does the attacker confuse the switch itself into thinking two ports have the same MAC address?

A. ARP spoofing

B. Replay

C. Brute force

D. MAC duplicating

Which of the following are the centralized administration technologies?
Each correct answer represents a complete solution. Choose all that apply.

A. RADIUS

B. TACACS+

C. Peer-to-Peer

D. Media Access control

Which of the following is a source port forwarder and redirector tool?

A. Fpipe

B. NMAP

C. SuperScan

D. NSLOOKUP