CCSP SelfStudy CCSP CSI: Exam Certification Guide, Second Edition [Electronic resources] نسخه متنی

The SAFE blueprint calls for the deployment of security throughout the network. What is the term used to describe this concept?

1. Inclusive defense

2. Defensive coverage

3. Defense in depth

4. Exhaustive security

5. Total security

What term is used to describe a network that is solely for management traffic and is separate from the main network that is carrying user traffic?

1. Management network

2. In-band network

3. Secure network

4. Out-of-band network

5. Control network

What is user authentication based on?

1. The proper credentials to access a system

2. The right to access a system

3. The need to access a system

4. The desire to access a system

5. All of the above

What does authorization ensure?

1. That the user can communicate with the device

2. That the user is allowed to send traffic through the device

3. That the user can access the system

4. That the user has sufficient privileges to execute a command or a process

5. That the user can exit the system

What is critical to maximizing the success of network intrusion detection?

1. Processor speed

2. Deployment

3. Brand of IDS

4. Type of IDS

5. All of the above

According to the security policy, which of the following does the network administrator need to implement?

1. Suggestions

2. Procedures

3. Rules

4. Axioms

5. Guidelines

Which of the following are considered "IDS attack mitigation"?

1. Patches

2. Blocking/shunning

3. Route changes

4. TCP resets

5. All of the above

Authorization allows for what kind of control in determining accountability in the network?

1. High-level

2. None

3. Granular

4. Low

5. Defined

What is a determined, technically competent attack against a network called?

1. Hacking attempt

2. Break-in

3. Intrusion

4. Structured threat

5. Unstructured threat

What is a "script kiddie" most likely considered?

1. Structured threat

2. Determined hacker

3. Unstructured threat

4. Skilled attacker

5. None of the above

Which of the following can be considered an internal threat?

1. Disgruntled employee

2. Former employee

3. Contractor

4. Consultant

5. All of the above

What is the primary focus of internal attackers?

1. Access to the Internet

2. Cracking into other desktop systems

3. Privilege escalation

4. Denial of service attacks

5. Deleting data