CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CISA—Certified Information Systems Auditor - Part 294
1. To prevent IP spoofing attacks, a firewall should be configured to drop a packet if:
A) the source routing field is enabled.
B) it has a broadcast address in the destination field.
C) a reset flag (RST) is turned on for the TCP connection.
D) dynamic routing is used instead of static routing.
2. An IS auditor reviewing the implementation of an intrusion detection system (IDS) should be MOST concerned if:
A) IDS sensors are placed outside of the firewall.
B) a behavior-based IDS is causing many false alarms.
C) a signature-based IDS is weak against new types of attacks.
D) the IDS is used to detect encrypted traffic.
3. Which of the following BEST describes the role of a directory server in a public key infrastructure (PKI)?
A) Encrypts the information transmitted over the network
B) Makes other users' certificates available to applications
C) Facilitates the implementation of a password policy
D) Stores certificate revocation lists (CRLs)
4. An organization is using symmetric encryption. Which of the following would be a valid reason for moving to asymmetric encryption? Symmetric encryption:
A) provides authenticity.
B) is faster than asymmetric encryption.
C) can cause key management to be difficult.
D) requires a relatively simple algorithm.
5. Which of the following would provide the BEST protection against the hacking of a computer connected to the Internet?
A) A remote access server
B) A proxy server
C) A personal firewall
D) A password-generating token
A) the source routing field is enabled.
B) it has a broadcast address in the destination field.
C) a reset flag (RST) is turned on for the TCP connection.
D) dynamic routing is used instead of static routing.
2. An IS auditor reviewing the implementation of an intrusion detection system (IDS) should be MOST concerned if:
A) IDS sensors are placed outside of the firewall.
B) a behavior-based IDS is causing many false alarms.
C) a signature-based IDS is weak against new types of attacks.
D) the IDS is used to detect encrypted traffic.
3. Which of the following BEST describes the role of a directory server in a public key infrastructure (PKI)?
A) Encrypts the information transmitted over the network
B) Makes other users' certificates available to applications
C) Facilitates the implementation of a password policy
D) Stores certificate revocation lists (CRLs)
4. An organization is using symmetric encryption. Which of the following would be a valid reason for moving to asymmetric encryption? Symmetric encryption:
A) provides authenticity.
B) is faster than asymmetric encryption.
C) can cause key management to be difficult.
D) requires a relatively simple algorithm.
5. Which of the following would provide the BEST protection against the hacking of a computer connected to the Internet?
A) A remote access server
B) A proxy server
C) A personal firewall
D) A password-generating token
1. Right Answer: A
Explanation: IP spoofing takes advantage of the source-routing option in the IP protocol. With this option enabled, an attacker can insert a spoofed source IP address. The packet will travel the network according to the information within the source-routing field, bypassing the logic in each router, including dynamic and static routing(choice D). Choices B and C do not have any relation to IP spoofing attacks. If a packet has a broadcast destination address (choice B), it will be sent to all addresses in the subnet. Turning on the reset flag (RST) (choice C) is part of the normal procedure to end a TCP connection.
2. Right Answer: D
Explanation: An intrusion detection system (IDS) cannot detect attacks within encrypted traffic, and it would be a concern if someone was misinformed and thought that the IDS could detect attacks in encrypted traffic. An organization can place sensors outside of the firewall to detect attacks.These sensors are placed in highly sensitive areas and on extranets. Causing many false alarms is normal for a behavior-based IDS, and should not be a matter of concern. Being weak against new types of attacks is also expected from a signature- based IDS, because it can only recognize attacks that have been previously identified.
3. Right Answer: B
Explanation: A directory server makes other users' certificates available to applications. Encrypting the information transmitted over the network and storing certificate revocation lists (CRLs) are roles performed by a security server. Facilitating the implementation of a password policy is not relevant to public key infrastructure(PKl).
4. Right Answer: C
Explanation: In a symmetric algorithm, each pair of users' needs a unique pair of keys, so the number of keys grows and key management can become overwhelming.Symmetric algorithms do not provide authenticity, and symmetric encryption is faster than asymmetric encryption. Symmetric algorithms require mathematical calculations, but they are not as complex as asymmetric algorithms.
5. Right Answer: C
Explanation: A personal firewall is the best way to protect against hacking, because it can be defined with rules that describe the type of user or connection that is or is not permitted. A remote access server can be mapped or scanned from the Internet, creating security exposures. Proxy servers can provide protection based on theIP address and ports; however, an individual would need to have in-depth knowledge to do this, and applications can use different ports for the different sections of their program. A password-generating token may help to encrypt the session but does not protect a computer against hacking.
Explanation: IP spoofing takes advantage of the source-routing option in the IP protocol. With this option enabled, an attacker can insert a spoofed source IP address. The packet will travel the network according to the information within the source-routing field, bypassing the logic in each router, including dynamic and static routing(choice D). Choices B and C do not have any relation to IP spoofing attacks. If a packet has a broadcast destination address (choice B), it will be sent to all addresses in the subnet. Turning on the reset flag (RST) (choice C) is part of the normal procedure to end a TCP connection.
2. Right Answer: D
Explanation: An intrusion detection system (IDS) cannot detect attacks within encrypted traffic, and it would be a concern if someone was misinformed and thought that the IDS could detect attacks in encrypted traffic. An organization can place sensors outside of the firewall to detect attacks.These sensors are placed in highly sensitive areas and on extranets. Causing many false alarms is normal for a behavior-based IDS, and should not be a matter of concern. Being weak against new types of attacks is also expected from a signature- based IDS, because it can only recognize attacks that have been previously identified.
3. Right Answer: B
Explanation: A directory server makes other users' certificates available to applications. Encrypting the information transmitted over the network and storing certificate revocation lists (CRLs) are roles performed by a security server. Facilitating the implementation of a password policy is not relevant to public key infrastructure(PKl).
4. Right Answer: C
Explanation: In a symmetric algorithm, each pair of users' needs a unique pair of keys, so the number of keys grows and key management can become overwhelming.Symmetric algorithms do not provide authenticity, and symmetric encryption is faster than asymmetric encryption. Symmetric algorithms require mathematical calculations, but they are not as complex as asymmetric algorithms.
5. Right Answer: C
Explanation: A personal firewall is the best way to protect against hacking, because it can be defined with rules that describe the type of user or connection that is or is not permitted. A remote access server can be mapped or scanned from the Internet, creating security exposures. Proxy servers can provide protection based on theIP address and ports; however, an individual would need to have in-depth knowledge to do this, and applications can use different ports for the different sections of their program. A password-generating token may help to encrypt the session but does not protect a computer against hacking.
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment