Security Management — Test 1

Correct Answer: B. B. Diffie-hellman
Explanation: The Diffie-Hellman public key algorithm is the oldest public key algorithm. It is a hybrid of the secret and public key.

Correct Answer: C. C. Accounting
Explanation: Accounting management is probably the least developed function of the network management application. Accounting management could also include the use of individual hosts, administrative segments, and external traffic. Accounting of individual hosts is useful for identifying some hidden costs.

Correct Answer: A. A. Technical, administrative
Explanation: Security management is both a technical and administrative issue in information management. It involves securing access to the network and information flowing in the network, access to data stored in the network, and manipulating the data that are stored and flowing across the network.

Correct Answer: A. A. True
Explanation: An application-level gateway is used to overcome some of the problems identified in packet filtering. Firewalls F1 and F2 will only forward if data are to or from the application gateway. Thus, the secured LAN is a gateway LAN. The application gateway behaves differently for each application, and filtering is handled by the proxy services in the application gateway.

Correct Answer: C. C. Packet filtering
Explanation: The main purpose of a firewall is to protect a network from external attacks. It monitors and controls traffic into and out of a secure network. h can be implemented in a router, or a gateway or a special host. A firewall is normally located at the gateway to a network, but it may also be implemented at host access points. Firewalls use packet filtering or application-level gateways as the two primary techniques of controlling undesired traffic.

Correct Answer: B. B. False
Explanation: Security management is both a technical and administrative issue in information management. It involves securing access to the network and information flowing in the network, access to data stored in the network, and manipulating the data that are stored and flowing across the network. The scope of network and access to it not only covers enterprise intranet network but also the Internet that it is connected to.

Correct Answer: B. B. Des
Explanation: There are two standard algorithms implement secret key cryptography. They are Data Encryption Standard (DES) and International Data Encryption Algorithm (IDEA). DES is designed for efficient hardware implementation and consequently has a poor performance if implemented in software. In contrast to that, IDEA functions efficiently in software implementation.

Correct Answer: A. A. Signature generation
Explanation: Pretty Good Privacy (PGP) defines a clever procedure that utilizes various available modules to perform the functions needed to transmit a secure message, such as email. The signature generation module uses MD5 to generate a hash code of the message and encrypts it with the sender’s private key using an RSA algorithm.

Correct Answer: B. B. False
Explanation: In Secret Key Cryptography, each letter is replaced by another letter n letters later in the alphabet. It is the same key that is used for encryption and decryption and is called secret key cryptography. The encryption and decryption modules can be implemented in either hardware or software.

Correct Answer: A. A. It makes sure that the information has not tampered as it traverses between the source and the destination
Explanation: For secure communication, we need to ensure integrity protection and authentication validation. Integrity protection makes sure that the information has not been tampered with as it traverses between the source and the destination.