Question Results

Score 0 of 1

Question:

Which of the following would be the least useful in attempting to crack a password?

Response:

	Packet sniffing
	brute force/dictionary attack
	MAC the Knife
	LophtCrack
	John the Ripper

Score 1 of 1

Question:

Motion detectors, video cameras, fences, locked doors, guards and dogs are all examples of

Response:

	Technical controls
	Administrative controls
	Both Technical and Administrative controls
	Physical controls

Score 1 of 1

Question:

Match the following control types to their purposes

Response:

Match	User answer	Feedback
Reducing Risk	Preventative
Correcting violations and incidents	Detective	Corrective controls also help improve existing preventative and detective controls
Discouraging violations	Deterrent
Providing alternate ways of accomplishing a task	Compensating
Restoring systems and information	Recovery

Score 1 of 1

Question:

Work factor is defined as:

Response:

	the amount of effort/time required by an administrator to establish a reasonable system security plan
	the amount of effort/time required by an algorithm to fully encrypt or decrypt a message
	the amount of effort/time required to maintain an established security plan once it has been implemented
	the amount of effort/time required by an attacker to overcome a protective measure

Score 1 of 1

Question:

Match the following terms to definitions

Response:

Match	User answer	Feedback
Training, configuration management of documentation, risk management	Administrative controls
Firewalls, IDS, encryption	Technical controls
Lighting, Fencing, guard patrols	Physical Controls

Score 1 of 1

Question:

Which classification of fuel type is gasoline given?

Response:

	A
	D
	B
	C

Score 1 of 1

Question:

Which access control includes training?

Response:

	Organizational
	Technical
	Physical
	Administrative

Score 1 of 1

Question:

Which of the following have the best CER?

Response:

	Iris Scanning
	Hand scanning
	Finger scanning
	Badge Scanning

Score 1 of 1

Question:

Owner-set permissions are an example of:

Response:

	mandatory access control
	Discretionary access control
	Clark-Wilson
	role-based access control

Score 0 of 1

Question:

"The strength of the cryptosystem is a function of the keys, not the algorithm" is also known as

Response:

	Moore's Law
	Rijndael's Challenge
	Kerckhoff's Principle
	Diffe-Hillman's Axiom

Score 1 of 1

Question:

Which of the following is primarily focused on identifying violations and incidents?

Response:

	Compensating
	Preventative
	Detective
	Corrective
	Recovery

Score 1 of 1

Question:

Which of the following is immediately above the Transport Layer in the OSI model:

Response:

	Datalink
	Presentation
	Session
	Network

Score 1 of 1

Question:

Which of the following is NOT a RAW authentication protocol?

Response:

	EAP
	PAP
	LDAP
	CHAP

Score 1 of 1

Question:

Which classification of fuel type are electrical fires given?

Response:

	B
	A
	C
	D

Score 1 of 1

Question:

Which access control includes locked doors?

Response:

	Technical
	Physical
	Organizational
	Administrative
	Owner