Security Tools and Solutions in Software

Generator Data Matrix ECC200 in Software Security Tools and Solutions

6 You are installing a large WLAN What security solution should be used A WPA2-Enterprise B WPA-PSK C WEP D WPA2-PSK 7 You are installing a small WLAN, and a RADIUS server is not available What security solution should you use A WPA-PSK B WPA2-Enterprise C WPA-Enterprise D WEP 8 What process is used to validate the identity of a user A Authorization B Accounting C Authentication D Auditing 9 What process is used to document actions in relation to resources and services A Authorization B Accounting C Authentication D Confidentiality 10 What is provided by encryption A Integrity B Accounting C Confidentiality D Auditing 11 What kind of server is used to authenticate WLAN clients in an 8021X security implementation A IPSec B PPTP C RADIUS D VPN

12 What is the algorithm used to provide integrity in data communications A Encryption B Hashing C Redundancy D Authorization

13 What regulation applies to credit card processing A PCI DSS B HIPAA C IETF D FCC 14 You have placed the WLAN that your users use to browse the Internet behind a firewall separating it from the rest of your wired network You also have a network segment where credit card processing occurs What regulation has driven you to set up the WLAN in this way A PCI DSS B HIPAA C IEEE D WPA 15 Which of the following are included in the five security solutions required to meet HIPAA regulations when implementing a WLAN (Choose all that apply) A Authentication B Accounting C Nonrepudiation D Attack surface reduction 16 Which of the following describes organizations that must comply with HIPAA regulations A Any healthcare provider who transmits health information in electronic form B Any organization that deals with patients C Only hospitals D Only health insurance providers

10:

You are installing a WLAN that consists of three APs and thirteen wireless clients The organization has informed you that the budget is limited Currently, no RADIUS servers are installed in the organization The IT director is concerned about his users connecting to public hotspots as well What primary security solution will you recommend to the organization What solution will you recommend for use when connecting to public hotspots

1 Which one of the following security techniques may actually cause your wireless clients to be more vulnerable when powered on in public spaces A MAC filtering B SSID hiding C WPA D WPA2

B is correct Hiding the SSID requires the client to store the SSID and probe for it in some cases continually when the WLAN NIC is powered on A, C, and D are incorrect MAC filtering is not considered secure, but it does not make the clients more vulnerable WPA and WPA2, when implemented properly, are considered very secure

2 What attack method is used in order to circumvent MAC filtering A SSID hiding B MAC spoofing C Man-in-the-middle D Hijacking

B is correct MAC spoofing is used to circumvent MAC filtering A, C, and D are incorrect SSID hiding is an attempt at security that is feeble at best, but it does not provide a method for circumventing MAC filtering Man-in-the-middle attacks have nothing to do with MAC filtering, and neither do hijacking attacks

C is correct The WEP initialization vector is 24 bits A, B, and D are incorrect These answers are simply incorrect

10:

4 What WEP vulnerability is related to the IV A Weak IV attacks B Corrupt IV attacks C Data flooding D Brute-force cracking

A is correct A weak IV attack is an attack where the frames are analyzed in search of specially formed IVs that are more vulnerable to attack B, C, and D are incorrect There is no such attack as a corrupt IV attack Data flooding is a DoS attack, and brute-force cracking is a potential WEP attack that does not depend on or utilize the IV in the attack process

5 Which WEP key length is considered too short for today s environments A 40-bit B 104-bit C 128-bit D 24-bit

A is correct A 40-bit key is considered too short Brute-force attacks against a 40-bit key, particularly with distributed computing, can be processed within days or weeks B, C, and D are incorrect A 104- or 128-bit key length is sufficiently long for most scenarios WEP does not support a 24-bit key length The IV is 24 bits in length

6 You are installing a large WLAN What security solution should be used A WPA2-Enterprise B WPA-PSK C WEP D WPA2-PSK

A is correct Of those listed, only WPA2-Enterprise should be used in a large WLAN WPA2-Enterprise provides the strong security and automation of administration needed B, C, and D are incorrect WPA-PSK and WPA2-PSK would be too difficult to manage in a large network, since no automatic key rotation is provided WEP should not be used regardless of the network size

7 You are installing a small WLAN, and a RADIUS server is not available What security solution should you use A WPA-PSK B WPA2-Enterprise