CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CISA—Certified Information Systems Auditor - Part 282
1. Use of asymmetric encryption in an internet e-commerce site, where there is one private key for the hosting server and the public key is widely distributed to the customers, is MOST likely to provide comfort to the:
A) customer over the authenticity of the hosting organization.
B) hosting organization over the authenticity of the customer.
C) customer over the confidentiality of messages from the hosting organization.
D) hosting organization over the confidentiality of messages passed to the customer.
2. E-mail message authenticity and confidentiality is BEST achieved by signing the message using the:
A) sender's private key and encrypting the message using the receiver's public key.
B) sender's public key and encrypting the message using the receiver's private key.
C) receiver's private key and encrypting the message using the sender's public key.
D) receiver's public key and encrypting the message using the sender's private key.
3. An organization is considering connecting a critical PC-based system to the Internet. Which of the following would provide the BEST protection against hacking?
A) An application-level gateway
B) A remote access server
C) A proxy server
D) Port scanning
4. Which of the following is the MOST secure and economical method for connecting a private network over the Internet in a small- to medium-sized organization?
A) Virtual private network
B) Dedicated line
C) Leased line
D) integrated services digital network
5. The potential for unauthorized system access by way of terminals or workstations within an organization's facility is increased when:
A) connecting points are available in the facility to connect laptops to the network.
B) users take precautions to keep their passwords confidential.
C) terminals with password protection are located in insecure locations.
D) terminals are located within the facility in small clusters under the supervision of an administrator.
A) customer over the authenticity of the hosting organization.
B) hosting organization over the authenticity of the customer.
C) customer over the confidentiality of messages from the hosting organization.
D) hosting organization over the confidentiality of messages passed to the customer.
2. E-mail message authenticity and confidentiality is BEST achieved by signing the message using the:
A) sender's private key and encrypting the message using the receiver's public key.
B) sender's public key and encrypting the message using the receiver's private key.
C) receiver's private key and encrypting the message using the sender's public key.
D) receiver's public key and encrypting the message using the sender's private key.
3. An organization is considering connecting a critical PC-based system to the Internet. Which of the following would provide the BEST protection against hacking?
A) An application-level gateway
B) A remote access server
C) A proxy server
D) Port scanning
4. Which of the following is the MOST secure and economical method for connecting a private network over the Internet in a small- to medium-sized organization?
A) Virtual private network
B) Dedicated line
C) Leased line
D) integrated services digital network
5. The potential for unauthorized system access by way of terminals or workstations within an organization's facility is increased when:
A) connecting points are available in the facility to connect laptops to the network.
B) users take precautions to keep their passwords confidential.
C) terminals with password protection are located in insecure locations.
D) terminals are located within the facility in small clusters under the supervision of an administrator.
1. Right Answer: A
Explanation: Any false site will not be able to encrypt using the private key of the real site, so the customer would not be able to decrypt the message using the public key.Many customers have access to the same public key so the host cannot use this mechanism to ensure the authenticity of the customer. The customer cannot be assured of the confidentiality of messages from the host as many people have access to the public key and can decrypt the messages from the host. The host cannot be assured of the confidentiality of messages sent out, as many people have access to the public key and can decrypt it.
2. Right Answer: A
Explanation: By signing the message with the sender's private key, the receiver can verify its authenticity using the sender's public key. By encrypting the message with the receiver's public key, only the receiver can decrypt the message using their own private key. The receiver's private key is confidential and, therefore, unknown to the sender. Messages encrypted using the sender's private key can be read by anyone with the sender's public key.
3. Right Answer: A
Explanation: An application-level gateway is the best way to protect against hacking because it can define with detail rules that describe the type of user or connection that is or is not permitted, it analyzes in detail each package, not only in layers one through four of the OSI model but also layers five through seven, which means that it reviews the commands of each higher-level protocol (HTTP, FTP, SNMP, etc.). For a remote access server, there is a device (server) that asks for a username and password before entering the network. This is good when accessing private networks, but it can be mapped or scanned from the Internet creating security exposure. Proxy servers can provide protection based on the IP address and ports. However, an individual is needed who really knows how to do this, and applications can use different ports for the different sections of the program. Port scanning works when there is a very specific task to complete, but not when trying to control what comes from the Internet, or when all the ports available need to be controlled. For example, the port for Ping (echo request) could be blocked and the IP addresses would be available for the application and browsing, but would not respond to Ping.
4. Right Answer: A
Explanation: The most secure method is a virtual private network (VPN), using encryption, authentication and tunneling to allow data to travel securely from a private network to the internet. Choices B, C and D are network connectivity options that are normally too expensive to be practical for small- to medium-sized organizations.
5. Right Answer: A
Explanation: Any person with wrongful intentions can connect a laptop to the network. The insecure connecting points, make unauthorized access possible if the individual has knowledge of a valid user ID and password. The other choices are controls for preventing unauthorized network access. If system passwords are not readily available for intruders to use, they must guess, introducing an additional factor and requires time. System passwords provide protection against unauthorized use of terminals located in insecure locations. Supervision is a very effective control when used to monitor access to a small operating unit or production resources.
Explanation: Any false site will not be able to encrypt using the private key of the real site, so the customer would not be able to decrypt the message using the public key.Many customers have access to the same public key so the host cannot use this mechanism to ensure the authenticity of the customer. The customer cannot be assured of the confidentiality of messages from the host as many people have access to the public key and can decrypt the messages from the host. The host cannot be assured of the confidentiality of messages sent out, as many people have access to the public key and can decrypt it.
2. Right Answer: A
Explanation: By signing the message with the sender's private key, the receiver can verify its authenticity using the sender's public key. By encrypting the message with the receiver's public key, only the receiver can decrypt the message using their own private key. The receiver's private key is confidential and, therefore, unknown to the sender. Messages encrypted using the sender's private key can be read by anyone with the sender's public key.
3. Right Answer: A
Explanation: An application-level gateway is the best way to protect against hacking because it can define with detail rules that describe the type of user or connection that is or is not permitted, it analyzes in detail each package, not only in layers one through four of the OSI model but also layers five through seven, which means that it reviews the commands of each higher-level protocol (HTTP, FTP, SNMP, etc.). For a remote access server, there is a device (server) that asks for a username and password before entering the network. This is good when accessing private networks, but it can be mapped or scanned from the Internet creating security exposure. Proxy servers can provide protection based on the IP address and ports. However, an individual is needed who really knows how to do this, and applications can use different ports for the different sections of the program. Port scanning works when there is a very specific task to complete, but not when trying to control what comes from the Internet, or when all the ports available need to be controlled. For example, the port for Ping (echo request) could be blocked and the IP addresses would be available for the application and browsing, but would not respond to Ping.
4. Right Answer: A
Explanation: The most secure method is a virtual private network (VPN), using encryption, authentication and tunneling to allow data to travel securely from a private network to the internet. Choices B, C and D are network connectivity options that are normally too expensive to be practical for small- to medium-sized organizations.
5. Right Answer: A
Explanation: Any person with wrongful intentions can connect a laptop to the network. The insecure connecting points, make unauthorized access possible if the individual has knowledge of a valid user ID and password. The other choices are controls for preventing unauthorized network access. If system passwords are not readily available for intruders to use, they must guess, introducing an additional factor and requires time. System passwords provide protection against unauthorized use of terminals located in insecure locations. Supervision is a very effective control when used to monitor access to a small operating unit or production resources.
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment