Question 1

Which of the following is NOT a defined ISO basic task related to network management?

Options :

A : Fault management

B : Accounting resources

C : Security management

D : Communications management

Answer: D

Question 2

What attack involves the perpetrator sending spoofed packet(s) wich contains the same

destination and source IP address as the remote host, the same port for the source and

destination, having the SYN flag, and targeting any open ports that are open on the remote

host?

Options :

A : Boink attack

B : Land attack

C : Teardrop attack

D : Smurf attack

Answer: B

Question 3

A variation of the application layer firewall is called a:

Options :

A :

Current Level Firewall.

B : Cache Level Firewall.

C : Session Level Firewall.

D :

Circuit Level Firewall.

Answer: D

Question 4

Which of the following rules pertaining to a Business Continuity Plan/Disaster Recovery

Plan is incorrect?

Options :

A : In order to facilitate recovery, a single plan should cover all locations.

B :

There should be requirements to form a committee to decide a course of action. These

decisions should be made ahead of time and incorporated into the plan.

C : In its procedures and tasks, the plan should refer to functions, not specific individuals.

D :

Critical vendors should be contacted ahead of time to validate equipment can be

obtained in a timely manner.

Answer: A

Question 5

Which security model uses division of operations into different parts and requires different

users to perform each part?

Options :

A : Bell-LaPadula model

B : Biba model

C : Clark-Wilson model

D : Non-interference model

Answer: C