Question 1

An attacker types more data in a field than the programmer expected. This is a(n)  ________ attack.

Accepted Answer

A)   denial-of-service
B)   directory traversal
C)   buffer overflow
D)   XSSE) None of the above
F) A) and D)

Question 2

In IM, ________ servers allow two users to locate each other.

Accepted Answer

A)   index
B)   relay
C)   presence
D)   All of the aboveE) B) and C)
F) A) and B)

Question 3

________ introduced community strings for security, in which a shared secret was used to authenticate messages.

Accepted Answer

A)   SNMP V1
B)   SNMP V2
C)   SNMP V3
D)   None of the aboveE) None of the above
F) C) and D)

Question 4

E-mail filtering can be done at which of the following?

Accepted Answer

A)   The user's PC
B)   The corporate e-mail servers
C)   E-mail managed service providers
D)   All of the aboveE) All of the above
F) A) and D)

Question 5

Transport consists of communication to manage the network.

Accepted Answer

A) True 
 B)False

Question 6

RTP is used in ________.

Accepted Answer

A)   signaling
B)   transport
C)   Both A and B
D)   Neither A nor BE) A) and B)
F) None of the above

Question 7

Which of the following are reasons to ensure WWW Service and E-Commerce security?

Accepted Answer

A)   Cost of disruptions
B)   Customer fraud
C)   Exposure of sensitive private information
D)   All of the aboveE) C) and D)
F) B) and D)

Question 8

Which of the following is not a signaling protocol?

Accepted Answer

A)   RTP
B)   SIP
C)   H.323
D)   All of the above ARE signaling protocols.E) A) and B)
F) A) and D)

Question 9

Spammers use sticky spam, which presents their message as a graphical image.

Accepted Answer

A) True 
 B)False

Question 10

In a(n)  ________ attack, the user enters part of a database query instead of giving the expected input.

Accepted Answer

A)   login screen bypass
B)   buffer overflow
C)   XSS
D)   SQL injection attackE) B) and C)
F) None of the above

Question 11

If a hacker takes over an application program, he or she receives the permissions with which the program runs.

Accepted Answer

A) True 
 B)False

Question 12

Most firms do a satisfactory job overseeing the deployment of custom programs used to supplement packaged software.

Accepted Answer

A) True 
 B)False

Question 13

Under what Internet Options tabs are cookies controlled?

Accepted Answer

A)   Privacy
B)   Security
C)   Protection
D)   AdvancedE) All of the above
F) C) and D)

Question 14

Compared to full programming languages, scripts are ________ in what they can do.

Accepted Answer

A)   more limited
B)   less limited
C)   about as limited (but easier to use) 
D)   not limited at allE) B) and D)
F) All of the above

Question 15

A PSTN gateway translates between a VoIP network's ________ protocols and those of the public switched telephone network.

Accepted Answer

A)   signaling
B)   transport
C)   Both A and B
D)   Neither A nor BE) A) and C)
F) All of the above

Question 16

Testers have permissions on the ________.

Accepted Answer

A)   development server
B)   testing server
C)   production server
D)   Both A and BE) A) and C)
F) B) and D)

Question 17

The most popular way for hackers to take over hosts today is ________.

Accepted Answer

A)   by taking over the operating system
B)   by taking over an application
C)   by guessing the root password
D)   by taking over the user interfaceE) A) and D)
F) C) and D)

Question 18

Spammers are one reason that some companies have outsourced e-mail filtering.

Accepted Answer

A) True 
 B)False

Question 19

VoIP traffic and data traffic tend to be segregated from each other on a network for added security.

Accepted Answer

A)   True.
B)   False. This would increase costs too much.
C)   False. This would negate the benefits of convergence.D) All of the above
E) B) and C)

Question 20

Which of the following uses a PKI?

Accepted Answer

A)   S/MIME
B)   PGP
C)   Both A and B
D)   Neither A nor BE) B) and D)
F) B) and C)

Exam 8: Application Security

The most popular way for hackers to take over hosts today is ________.

Correct AnswerverifiedShow Answer

Transport consists of communication to manage the network.

Correct AnswerverifiedShow Answer

Which of the following is not a signaling protocol?

Correct AnswerverifiedShow Answer

An attacker types more data in a field than the programmer expected. This is a(n) ________ attack.

Correct AnswerverifiedShow Answer

Spammers use sticky spam, which presents their message as a graphical image.

Correct AnswerverifiedShow Answer

Spammers are one reason that some companies have outsourced e-mail filtering.

Correct AnswerverifiedShow Answer

Under what Internet Options tabs are cookies controlled?

Correct AnswerverifiedShow Answer

If a hacker takes over an application program, he or she receives the permissions with which the program runs.

Correct AnswerverifiedShow Answer

In IM, ________ servers allow two users to locate each other.

Correct AnswerverifiedShow Answer

In a(n) ________ attack, the user enters part of a database query instead of giving the expected input.

Correct AnswerverifiedShow Answer

Testers have permissions on the ________.

Correct AnswerverifiedShow Answer

A PSTN gateway translates between a VoIP network's ________ protocols and those of the public switched telephone network.

Correct AnswerverifiedShow Answer

Most firms do a satisfactory job overseeing the deployment of custom programs used to supplement packaged software.

Correct AnswerverifiedShow Answer

________ introduced community strings for security, in which a shared secret was used to authenticate messages.

Correct AnswerverifiedShow Answer

E-mail filtering can be done at which of the following?

Correct AnswerverifiedShow Answer

RTP is used in ________.

Correct AnswerverifiedShow Answer

Which of the following uses a PKI?

Correct AnswerverifiedShow Answer

Compared to full programming languages, scripts are ________ in what they can do.

Correct AnswerverifiedShow Answer

Which of the following are reasons to ensure WWW Service and E-Commerce security?

Correct AnswerverifiedShow Answer

VoIP traffic and data traffic tend to be segregated from each other on a network for added security.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified