Question 1) (TCO A) During the _____ phase of the attack process, the attacker attempts to look for an easy way in

Question 1)

(TCO A) During the _____ phase of the attack process, the attacker attempts to look for an easy way in.

Question 2

(TCO A) Which is the biggest cause of data loss for most organizations?

Question 3

(TCO B) When and under what circumstances should you reveal your password to someone?

Question 4

(TCO B) An extranet provides access to _____.

Question 5

(TCO C) The 3DES algorithm uses _____ separate keys.

Question 6

(TCO C) A message-digest algorithm such as MD5 is designed to _____.

Question 7

(TCO D) A DMZ is used to isolate

Question 8

(TCO E) With split tunneling, a VPN can connect _____ and _____ in order to not have to place the traffic in the tunnel first.

Question 9

(TCO F) To achieve better security, WPA is an improvement on _____.

Question 10

(TCO G) The three basic attack vectors are internal, external, and _____.

1. (TCO A) Discuss the following.

(a) How does a man-in-the middle attack objective differ from a distributed denial-of-service (DDoS) attack objective?

 (b) What are the similarities?

 (c) How are each of the attacks mitigated?

2. (TCO A) What is the purpose of footprinting?

(TCO B) Explain how a TCP/SYN attack works and what can be done about it.

3. (TCO B) What are three things you should keep in mind when writing or reviewing a security policy?

(TCO C) When a device performs a stateful packet inspection, what characteristics in a packet’s header are inspected, and why are they important?

 (TCO D) What is a DMZ? What is it used for?

(TCO E) What are the three types of VPNs? Describe the characteristics of each one.

(TCO F) What is a rogue access point and what is it used for?

(TCO G) Define firewalking.

(TCO B) Discuss the security problems faced by TJX Companies.