Final

The use of key cards to control physical access to a work facility is a form of:

A security manager is concerned that lost key cards can be used by an intruder to gain entrance to a facility. What measure can be used to prevent this?

Common biometric solutions that are suitable for building entrance control include:

A building access mechanism where only one person at a time may pass is called a:

An organization needs to build a wall or fence to keep out the most determined intruders. What should the organization build?

What controls can be used in combination with fences and walls to detect intruders?

An organization that wishes to conduct covert video surveillance should consider using:

Which of the following is NOT a deterrent control:

What is the minimum amount of lighting required to illuminate critical areas?

A security manager wants to implement barriers that will block the passage of vehicles but freely allow foot traffic. The control that should be implemented is:

A secure facility needs to control incoming vehicle traffic and be able to stop determined attacks. What control should be implemented:

A security-minded organization is relocating its business office into a shared-tenant building. How should the entrance of personnel be controlled?

Which type of fire extinguisher is effective against flammable liquids:

The type of smoke detector that is designed to detect smoke before it is visible is:

Provided it is permitted by local fire codes, which type of fire sprinkler system is most preferred for computer rooms?

The advantage of a gaseous fire suppression system is:

The risks of excessive humidity in a computing facility include all of the following EXCEPT:

Blackouts, brownouts, surges, and noise can all be remedied with:

A computing facility experiences frequent brownouts but few, if any, blackouts. What should be implemented to mitigate this condition:

The term “N+1” means:

An organization is located in an area that experiences frequent power blackouts. What will the effect of an electric generator be in this circumstance?

Which of the following statements is TRUE about electric generators?

The purpose of a fire extinguisher is:

Controls to detect threats to equipment include:

The purpose of “secure siting” is:

The owners of files and directories on a file server are able to control which personnel may access those files and directories. The access control model that most closely resembles this is:

A resource server contains an access control system. When a user requests access to an object, the system examines the permission settings for the object and the permission settings for the user, and then makes a decision whether the user may access the object. The access control model that most closely resembles this is:

A security manager is setting up resource permissions in an application. The security manager has discovered that he can establish objects that contain access permissions, and then assign individual users to those objects. The access control model that most closely resembles this is:

An information system has multiple levels of security implemented, for both resources as well as users. In this system, a user cannot access resources below his level, and a user cannot create resources above his level. The access control model that most closely resembles this is:

A security analyst has a system evaluation criteria manual called the “Orange Book”. This is a part of:

The Common Criteria supersedes which evaluation frameworks:

The TCSEC system evaluation criteria is used to address:

The TCSEC system evaluation criteria is used to evaluate systems of what type:

A security manager wishes to objectively measure the maturity of security processes in his organization. Which model should be used for this evaluation?

What is the purpose of the Software Engineering Institute Capability Maturity Model Integration (SEI CMMI)?

A security officer has declared that a new information system must be certified before it can be used. This means:

An application has been certified against established evaluation criteria. This means:

DoD Information Assurance Certification and Accreditation Process (DIACAP):

The component in a computer where program instructions are executed is called the:

The purpose of the CPU’s Program Counter is:

The purpose of a CPU fetch operation is:

The component in a computer used for long-term storage is called:

A source code review uncovered the existence of instructions that permit the user to bypass security controls. What was discovered in the code review?

A security manager needs to be able to regularly determine when operating system files change. What kind of tool is needed for this task?

A hidden means of communication between two systems has been discovered. This is known as:

Process management, resource management, access management, and event management are examples of:

The innermost portion of an operating system is known as:

A security manager wishes all new laptops purchased by his organization to include a security cryptoprocessor. What hardware should be required?

Where is firmware primarily stored on a computer system?

A computer running the Windows operating system has nearly exhausted available physical memory for active processes. In order to avoid exhausting all available memory, what should the operating system begin doing?

A network engineer who is examining telecommunications circuits has found one that is labeled as a DS-1. What is the maximum throughput that may be expected from this circuit?

The size of packets in an ATM networks is:

Digital subscriber line (DSL) service:

An IT manager wishes to connect several branch offices to the headquarters office for voice and data communications. What packet switched service should the IT manager consider?

A building facilities manager is overseeing the construction of a new office building for the organization. What type of cabling should be used for voice and data communication:

Which of the following statements about Ethernet MAC addresses is TRUE:

A systems engineer is designing a system that consists of a central computer and attached peripherals. For fastest throughput, which of the following technologies should be used for communication with peripheral devices:

An Ethernet network that consists of a central Ethernet switch with cabling running to each station is best described as a:

The practical range for Bluetooth is:

€�Please do not touch Steve’s pet alligator” is:

An organization is about to occupy an existing office building. The network manager has examined all of the network cabling and has observed that most of it has been labeled “Category 3”. What is the fastest network technology that can be used on this cabling?

All of the following statements about the OSI network model are true EXCEPT:

Examples of TCP/IP link layer technologies include:

. On a TCP/IP network, a station’s IP address is 10.0.25.200, the subnet mask is 255.255.252.0, and the default gateway is 10.0.25.1. How will the station send a packet to another station whose IP address is 10.0.24.10?

How many Class C networks can be created in a Class B network:

The layers in the OSI model are:

A computer has just been rebooted. An application program has started, and the application program needs to send an FTP packet to a server at IP address 10.14.250.200. What is the first packet that the computer will send on the network to accomplish this:

Two computers are communicating on a wide area network over a UDP port. One computer is sending the contents of a large file to the other computer. Network congestion has caused some packets to be delayed. What will the TCP/IP network drivers do about the packet delay?

A station on a network is sending hundreds of SYN packets to a destination computer. What is the sending computer doing?

The purpose of the NTP protocol is:

. A systems engineer has discovered that a web server supports only 56- bit SSL connections. What can the systems engineer deduce from this?

A network manager wishes to simplify management of all of the network devices in the organization through centralized authentication. Which of the following available authentication protocols should the network manager choose:

A stateful packet filtering firewall protects a web server. Which of the following is true:

Someone is sending ICMP echo requests to a network’s broadcast address. What is this person doing?

All of the following statements about the TCP protocol are true EXCEPT: