INFA 620 NETWORK AND INTERNET SECURITY Final Exam

Part 1:  Multiple Choice Questions.  Unless specified otherwise all multiple choice questions have only one correct answer.  Each question is worth 5 points.  PROBLEM 1 – Wireless Network Security (20 points)(5 pts each)a) What is the protocol developed for the wireless network communications? Explain.A) Wireless Encryption Protocol (WEP)B) Wireless Application Protocol (WAP) C) Wired Equivalent Privacy (WEP) D) Wireless Session Protocol (WSP)b) Consider 802.11 shared key authentication. Which of the following statements is false? Explain.A) If a device with the key is lost then the security for the entire WLAN is compromised.B) 802.1X requires shared key authentication.C) Real users and attackers with a shared WEP key have the same rights.D) Users cannot determine whether the access point is an imposter.c) The term used for certified 802.11b products is ___________ . A) WAP B) Wi-Fi C) WiMAXD) WPAd) Which of the following is not a reason why WEP may be considered vulnerable? Explain. (Select all that apply.)A) Shared WEP keys among all clientsB) 20-bit initialization vectorC) An RC4 engine not properly initializedD) 48-bit WEP key PROBLEM 2 – IPSec and VPN (20 points)(5 pts each)a) Select the term that refers to the data recipient’s ability to ensure that the data was not altered in any fashion as the data was sent across the VPN: A) Encryption.B) Integrity.C) Authentication.D) Tunneling. b) Tunneling is a technique in which the IP datagram is first _______ and then _______.A) Encapsulated in another datagram; encrypted.B) Encrypted; encapsulated in another datagram.C) Authenticated; encrypted.D) Encrypted; authenticated.c) What is the relationship between a VPN and an extranet? Explain.A) Some extranets are VPNs; some VPNs are extranets. B) Some extranets are VPNs; all VPNs are extranets. C) VPNs and extranets are the same type of network. D) VPNs are unrelated to extranets.d) Which one is the best approach to VPNs? Explain.A) VPN-specific gateway device. B) Router-based. C) Firewall-based. D) Software only. E) All of the above.PROBLEM 3 – Firewalls (20 points)(5 pts each)  a) What governs the type of traffic that is and is not allowed through a firewall? Explain.A) TCP/IP headers.B) Gateway.C) Rule base.D) Access control list.E) Network protocol in use.b) Firewalls can be implemented in different ways. Consider a dedicated firewall device. What is its major advantage when the target is throughput and security? Explain.A) The management console is easily installed.B) The device contains proprietary operating systems.C) The connection to the device is monitored by security personnel.D) A thorough packet inspection capability.E) The hackers know most router-based firewall code.c) Choose the best answer from the following options about the description of a firewall: A) Firewalls statefully inspect reply packets to determine whether they match the expected state of a connection in the state table.B) Firewalls statically inspect packets in both directions and filter on layer 3and layer 4 information.C) A firewall is any device that blocks access to a protected network. D) A firewall is a system or a group of systems that enforce an access control policy between two networks.E) None of the aboved) For a stateful packet-inspection firewall, which information is stored in the connection flow table? A) TCP control header and trailer information associated with a particular session.B) Inside private IP address and the translated inside global IP address. C) Outbound and inbound access rules (ACL entries). D) Source and destination IP addresses, and port numbers and sequencing information associated with a particular session. E) TCP SYN packets and the associated return ACK packets. PROBLEM 4 – Web and Transport Layer Security (20 points)(5 pts each)a) Which of the following are not methods for minimizing a threat to a Web server? Indicate the two best answers from the following list, and explain your choice:A) Disable all non-Web services.B) Ensure telnet is running.C) Disable nonessential services.D) Enable logging. b) SSL is used toA) Encrypt specific elements of data for application-specific purposes.B) Encrypt files located on a Web server.C) Encrypt data as it travels over a network.D) Encrypt digital certificates used to authenticate a Web site.E) Encrypt passwords for storage in a database. c) What kind of attacks does SSL prevent? Select the best answer. Explain.A) SQL Injection.B) Sniffing.C) Variable Manipulation.D) Phishing Attacks. d) _________ provides secure, remote logon and other secure client/server facilities. A) SLPB) HTTPSC) TLS D) SSH    [Delete everything above this prior to submission]    Name:_____________________________________________________                    First                    LastINFA 620 FINALPlease put your answers in the following tables.Multiple Choice Questions    Answer1a    1b    1c    1d    2a    2b    2c    2d    3a    3b    3c    3d    4a    4b    4c    4d     Multiple Choice Questions    Brief ExplanationsIf necessary1a    1b    1c    1d    2a    2b    2c    2d    3a    3b    3c    3d    4a    4b    4c    4d    Part 2: Short Answers.  Please answer briefly and completely, and you must cite all sources of information. (20 points) 1. Describe a method for protecting users against URL obfuscation attacks. (10 points)2.  A common management requirement is that “all external Web traffic must flow via the organization’s Web’s proxy.” However, that requirement is easier stated than implemented. Discuss the various problems and issues, possible solutions, and limitations with supporting this requirement. In particular, consider issues such as identifying exactly what constitutes “Web traffic” and how it may be monitored, given the large range of ports and various protocols used by Web browsers and servers. (10 points)

Looking for this or a Similar Assignment? Click below to Place your Order

Open chat
%d bloggers like this: