SSCP Exam Dumps | Which of the following is the most secure firewall implementation?

<< Prev Question Next Question >>

Question 101/410

Which of the following is the most secure firewall implementation?

A. Dual-homed host firewalls

B. Screened-subnet firewalls

C. Screened-host firewalls

D. Packet-filtering firewalls

Question List (410q): Question 1: Similar to Secure Shell (SSH-2), Secure Sockets Layer (SSL) ...; Question 2: What is called an automated means of identifying or authenti...; Question 3: Which device acting as a translator is used to connect two n...; Question 4: A code, as is pertains to cryptography:...; Question 5: Which of the concepts best describes Availability in relatio...; Question 6: What is the main problem of the renewal of a root CA certifi...; Question 7: What is the main objective of proper separation of duties?...; Question 8: A group of independent servers, which are managed as a singl...; Question 9: What is called an automated means of identifying or authenti...; Question 10: Secure Sockets Layer (SSL) is very heavily used for protecti...; Question 11: Which xDSL flavour delivers both downstream and upstream spe...; Question 12: Which of the following is less likely to be used today in cr...; Question 13: A timely review of system access audit records would be an e...; Question 14: Which of the following was developed as a simple mechanism f...; Question 15: When gathering digital evidence it is very important to do t...; Question 16: Which of the following is an example of a connectionless com...; Question 17: MD5 is a ___________ algorithm; Question 18: In discretionary access environments, which of the following...; Question 19: While using IPsec, the ESP and AH protocols both provides in...; Question 20: A proxy is considered a:; Question 21: What is the most secure way to dispose of information on a C...; Question 22: Which of the following security models does NOT concern itse...; Question 23: Which OSI/ISO layers are TCP and UDP implemented at?...; Question 24: Integrity = ______________; Question 25: Which security model introduces access to objects only throu...; Question 26: Which of the following could be BEST defined as the likeliho...; Question 27: Business Continuity and Disaster Recovery Planning (Primaril...; Question 28: In what type of attack does an attacker try, from several en...; Question 29: Which of the following is NOT a defined ISO basic task relat...; Question 30: What can best be defined as a strongly protected computer th...; Question 31: Which type of attack involves the alteration of a packet at ...; Question 32: Which of the following prevents, detects, and corrects error...; Question 33: What is the framing specification used for transmitting digi...; Question 34: A program that intentionally leaves a security hole or cover...; Question 35: What can best be defined as high-level statements, beliefs, ...; Question 36: Which of the following would be best suited to oversee the d...; Question 37: Detective/Technical measures:; Question 38: An Architecture where there are more than two execution doma...; Question 39: Who is responsible for providing reports to the senior manag...; Question 40: A momentary power outage is a:; Question 41: Sensitivity labels are an example of what application contro...; Question 42: Which of the following is the best reason for the use of an ...; Question 43: What is called the percentage of valid subjects that are fal...; Question 44: ________, _________, and __________ are required to successf...; Question 45: Which of the following would best describe certificate path ...; Question 46: In biometrics, "one-to-many" search against database of stor...; Question 47: Which of the following is NOT a defined ISO basic task relat...; Question 48: Under United States law, an investigator's notebook may be u...; Question 49: Domain Name Service is a distributed database system that is...; Question 50: Considerations of privacy, invasiveness, and psychological a...; Question 51: Sensitivity labels are an example of what application contro...; Question 52: Which of the following would be used to detect and correct e...; Question 53: CORRECT TEXT __________ is a tool used by network administra...; Question 54: In a Public Key Infrastructure, how are public keys publishe...; Question 55: When a biometric system is used, which error type deals with...; Question 56: When an outgoing request is made on a port number greater th...; Question 57: In regards to information classification what is the main re...; Question 58: The first step in the implementation of the contingency plan...; Question 59: What is the act of obtaining information of a higher sensiti...; Question 60: Attributable data should be:; Question 61: Which of the following statements pertaining to Asynchronous...; Question 62: Which of the following biometric devices has the lowest user...; Question 63: Which of the following is the core of fiber optic cables mad...; Question 64: What is the primary goal of setting up a honeypot?...; Question 65: Which of the following reviews system and event logs to dete...; Question 66: FTP, TFTP, SNMP, and SMTP are provided at what level of the ...; Question 67: What does the directive of the European Union on Electronic ...; Question 68: Which of the following was developed by the National Compute...; Question 69: PGP & PEM are programs that allow users to send encrypte...; Question 70: Which of the following is covered under Crime Insurance Poli...; Question 71: Recovery Site Strategies for the technology environment depe...; Question 72: Physically securing backup tapes from unauthorized access is...; Question 73: Packet Filtering Firewalls examines both the source and dest...; Question 74: Which of the following is a disadvantage of a statistical an...; Question 75: Which of the following is best defined as an administrative ...; Question 76: Which of the following can be best defined as computing tech...; Question 77: Which of the following embodies all the detailed actions tha...; Question 78: A confidential number used as an authentication factor to ve...; Question 79: A timely review of system access audit records would be an e...; Question 80: What Orange Book security rating is reserved for systems tha...; Question 81: Which is the last line of defense in a physical security sen...; Question 82: A security policy is a rigid set of rules that must be follo...; Question 83: Which of the following is unlike the other three choices pre...; Question 84: _____________ states that users should only be given enough ...; Question 85: ___________________ is ultimately responsible for security a...; Question 86: Public Key Infrastructure (PKI) uses asymmetric key encrypti...; Question 87: Which of the following layers provides end-to-end data trans...; Question 88: What refers to legitimate users accessing networked services...; Question 89: Which of the following is an example of One-Time Password te...; Question 90: How would nonrepudiation be best classified as?...; Question 91: Which of the following choice is NOT normally part of the qu...; Question 92: Which of the following test makes sure the modified or new s...; Question 93: Smart cards are an example of which type of control?...; Question 94: Which of the following should be emphasized during the Busin...; Question 95: The IP header contains a protocol field. If this field conta...; Question 96: Which method of password cracking takes the most time and ef...; Question 97: Which of the following is the WEAKEST authentication mechani...; Question 98: Which of the following best allows risk management results t...; Question 99: In Discretionary Access Control the subject has authority, w...; Question 100: Which of the following IEEE standards defines the token ring...; Question 101: Which of the following is the most secure firewall implement...; Question 102: What are the three performance measurements used in biometri...; Question 103: Which disaster recovery plan test involves functional repres...; Question 104: Which integrity model defines a constrained data item, an in...; Question 105: What level of assurance for a digital certificate verifies a...; Question 106: What is defined as the hardware, firmware and software eleme...; Question 107: Cryptography does NOT help in:; Question 108: EDI (Electronic Data Interchange) differs from e-Commerce in...; Question 109: Which of the following is a method of multiplexing data wher...; Question 110: Of the reasons why a Disaster Recovery plan gets outdated, w...; Question 111: Of the reasons why a Disaster Recovery plan gets outdated, w...; Question 112: Which of the following cannot be undertaken in conjunction o...; Question 113: A proxy is considered a:; Question 114: Which of the following should NOT be performed by an operato...; Question 115: How should a risk be HANDLED when the cost of the countermea...; Question 116: Which one of the following is used to provide authentication...; Question 117: If any server in the cluster crashes, processing continues t...; Question 118: CORRECT TEXT Accounting, __________, and ____________ are th...; Question 119: The throughput rate is the rate at which individuals, once e...; Question 120: In order to be able to successfully prosecute an intruder:...; Question 121: Identification and authentication are the keystones of most ...; Question 122: Which type of firewall can be used to track connectionless p...; Question 123: The three classic ways of authenticating yourself to the com...; Question 124: Secure Shell (SSH-2) provides all the following services exc...; Question 125: Which of the following best corresponds to the type of memor...; Question 126: What can be defined as a data structure that enumerates digi...; Question 127: Which of the following is NOT a technique used to perform a ...; Question 128: Network-based Intrusion Detection systems:...; Question 129: Which of the following would be the best reason for separati...; Question 130: What is the framing specification used for transmitting digi...; Question 131: In order to ensure the privacy and integrity of the data, co...; Question 132: In a SSL session between a client and a server, who is respo...; Question 133: Which of the following best corresponds to the type of memor...; Question 134: What can best be defined as high-level statements, beliefs, ...; Question 135: While there are many different models for IT system life cyc...; Question 136: What is the name for a substitution cipher that shifts the a...; Question 137: As per the Orange Book, what are two types of system assuran...; Question 138: Which of the following statements pertaining to link encrypt...; Question 139: Which of the following answers is described as a random valu...; Question 140: Crime Prevention Through Environmental Design (CPTED) is a d...; Question 141: What is called the percentage of valid subjects that are fal...; Question 142: Which type of encryption is considered to be unbreakable if ...; Question 143: Failure of a contingency plan is usually:...; Question 144: Which of the following is less likely to be used today in cr...; Question 145: Which of the following would be the MOST serious risk where ...; Question 146: Organizations should not view disaster recovery as which of ...; Question 147: Related to information security, the guarantee that the mess...; Question 148: Which expert system operating mode allows determining if a g...; Question 149: Under the Business Exemption Rule to the hearsay evidence, w...; Question 150: Which of the following would be true about Static password t...; Question 151: Contracts and agreements are often times unenforceable or ha...; Question 152: What is a hot-site facility?; Question 153: Which type of attack consists of modifying the length and fr...; Question 154: Which of the following would be an example of the best passw...; Question 155: Because all the secret keys are held and authentication is p...; Question 156: Which of the following statements pertaining to disaster rec...; Question 157: Which of the following statements pertaining to quantitative...; Question 158: Which of the following is less likely to be included in the ...; Question 159: Which of the following is an advantage in using a bottom-up ...; Question 160: Which of the following devices enables more than one signal ...; Question 161: Which of the following is the most important consideration i...; Question 162: What is it called when a computer uses more than one CPU in ...; Question 163: Rule-Based Access Control (RuBAC) access is determined by ru...; Question 164: Which of the following BEST describes a function relying on ...; Question 165: What is Kerberos?; Question 166: Which of the following is the most reliable, secure means of...; Question 167: Step-by-step instructions used to satisfy control requiremen...; Question 168: Which of the following is needed for System Accountability?...; Question 169: Which of the following assertions is NOT true about pattern ...; Question 170: What can be defined as a list of subjects along with their a...; Question 171: Which of the following groups represents the leading source ...; Question 172: Which of the following protocols does not operate at the dat...; Question 173: Which of the following teams should NOT be included in an or...; Question 174: Who first described the DoD multilevel military security pol...; Question 175: Which of the following best describes the purpose of debuggi...; Question 176: The standard server port number for HTTP is which of the fol...; Question 177: :Which of the following is considered the LEAST secure?...; Question 178: Which of the following statements pertaining to Secure Socke...; Question 179: Which of the following protection devices is used for spot p...; Question 180: CORRECT TEXT A type of virus that resides in a Word or Excel...; Question 181: Physical security is accomplished through proper facility co...; Question 182: Which of the following would best define a digital envelope?...; Question 183: Configuration Management controls what?...; Question 184: What can be defined as a digital certificate that binds a se...; Question 185: A proxy can control which services (FTP and so on) are used ...; Question 186: Which of the following elements of telecommunications is not...; Question 187: Which of the following protocols is designed to send individ...; Question 188: Which of the following is NOT a characteristic or shortcomin...; Question 189: Which of the following is an issue with signature-based intr...; Question 190: CORRECT TEXT NIPC stands for _____ _____ _____ ______ and is...; Question 191: Asynchronous Communication transfers data by sending:...; Question 192: In biometric identification systems, the parts of the body c...; Question 193: Which of the following access control models requires securi...; Question 194: Which of the following is BEST defined as a physical control...; Question 195: Which of the following is true about Kerberos?...; Question 196: Which of the following is less likely to accompany a conting...; Question 197: Which access control model provides upper and lower bounds o...; Question 198: The Orange Book is founded upon which security policy model?...; Question 199: Which access control model would a lattice-based access cont...; Question 200: Out of the steps listed below, which one is not one of the s...; Question 201: Which of the following is not a preventive operational contr...; Question 202: Of the following, which is NOT a specific loss criteria that...; Question 203: When it comes to magnetic media sanitization, what differenc...; Question 204: Only law enforcement personnel are qualified to do computer ...; Question 205: Which of the following statements pertaining to biometrics i...; Question 206: Making sure that the data is accessible when and where it is...; Question 207: Which of the following specifically addresses cyber attacks ...; Question 208: Which of the following elements of telecommunications is not...; Question 209: What is the maximum length of cable that can be used for a t...; Question 210: Secure Shell (SSH-2) supports authentication, compression, c...; Question 211: What is the appropriate role of the security analyst in the ...; Question 212: The IP header contains a protocol field. If this field conta...; Question 213: Who should measure the effectiveness of Information System s...; Question 214: Network-based Intrusion Detection systems:...; Question 215: Which access control model is best suited in an environment ...; Question 216: Access Control techniques do not include which of the follow...; Question 217: Which of the following services relies on UDP?...; Question 218: Which of the following is best at defeating frequency analys...; Question 219: Which of the following best defines source routing?...; Question 220: The control of communications test equipment should be clear...; Question 221: Which of the following is not a responsibility of an informa...; Question 222: Technical controls such as encryption and access control can...; Question 223: Which of the following statements pertaining to Kerberos is ...; Question 224: The DES algorithm is an example of what type of cryptography...; Question 225: What is called an automated means of identifying or authenti...; Question 226: Which of the following protocols is designed to send individ...; Question 227: Which of the following is an example of an active attack?...; Question 228: _______ and ________ are the primary controls of most access...; Question 229: Which of the following is true about link encryption?...; Question 230: Which of the following is the BEST way to detect software li...; Question 231: Which of the following is not a logical control when impleme...; Question 232: Which of the following attacks could capture network user pa...; Question 233: Complete the blanks. When using PKI, I digitally sign a mess...; Question 234: Which of the following monitors network traffic in real time...; Question 235: A deviation from an organization-wide security policy requir...; Question 236: The Orange Book states that "Hardware and software features ...; Question 237: Which of the following is not a DES mode of operation?...; Question 238: An area of the Telecommunications and Network Security domai...; Question 239: Which of the following service is a distributed database tha...; Question 240: Organizations should consider which of the following first b...; Question 241: Which of the following statements pertaining to disk mirrori...; Question 242: Which type of control is concerned with restoring controls?...; Question 243: What is NOT true about a one-way hashing function?...; Question 244: What is the essential difference between a self-audit and an...; Question 245: Which of the following refers to the data left on the media ...; Question 246: Which of the following is the simplest type of firewall ?...; Question 247: Another name for a VPN is a:; Question 248: What does "residual risk" mean?...; Question 249: What is the primary role of smartcards in a PKI?...; Question 250: Which of the following is the primary security feature of a ...; Question 251: Which of the following control pairing places emphasis on "s...; Question 252: Which of the following transmission media would NOT be affec...; Question 253: The end result of implementing the principle of least privil...; Question 254: The IP header contains a protocol field. If this field conta...; Question 255: Within the OSI model, at what layer are some of the SLIP, CS...; Question 256: Which of the following protocols that provide integrity and ...; Question 257: What ensures that the control mechanisms correctly implement...; Question 258: Which encryption algorithm is BEST suited for communication ...; Question 259: Physically securing backup tapes from unauthorized access is...; Question 260: The ability to adjust access control to the exact amount of ...; Question 261: An Architecture where there are more than two execution doma...; Question 262: Which of the following tape formats can be used to backup da...; Question 263: Which IPSec operational mode encrypts the entire data packet...; Question 264: Which of the following is NOT a proper component of Media Vi...; Question 265: The Diffie-Hellman algorithm is used for:...; Question 266: Which one of the following represents an ALE calculation?...; Question 267: Which of the following statements pertaining to message dige...; Question 268: Which of the following is NOT true of the Kerberos protocol?...; Question 269: Which of the following is less likely to accompany a conting...; Question 270: Which of the following would assist the most in Host Based i...; Question 271: Which of the following control pairing places emphasis on "s...; Question 272: In response to Access-request from a client such as a Networ...; Question 273: Which of following is not a service provided by AAA servers ...; Question 274: Which communication method is characterized by very high spe...; Question 275: This type of supporting evidence is used to help prove an id...; Question 276: Which of the following remote access authentication systems ...; Question 277: Which of the following is an advantage of prototyping?...; Question 278: What attribute is included in a X.509-certificate?...; Question 279: Which of the following statements pertaining to message dige...; Question 280: A Business Continuity Plan should be tested:...; Question 281: All of the following can be considered essential business fu...; Question 282: Which of the following mechanisms was created to overcome th...; Question 283: Which of the following statements pertaining to the security...; Question 284: Which of the following is NOT true concerning Application Co...; Question 285: How should a risk be HANDLED when the cost of the countermea...; Question 286: During which phase of an IT system life cycle are security r...; Question 287: A _________ is an information path that is not normally used...; Question 288: What does the simple security (ss) property mean in the Bell...; Question 289: Which of the following DoD Model layer provides non-repudiat...; Question 290: All hosts on an IP network have a logical ID called a(n):...; Question 291: Which of the following would NOT violate the Due Diligence c...; Question 292: The IP header contains a protocol field. If this field conta...; Question 293: A trusted system does NOT involve which of the following?...; Question 294: Which must bear the primary responsibility for determining t...; Question 295: Which of the following addresses a portion of the primary me...; Question 296: Smart cards are a secure alternative to which weak security ...; Question 297: What is the main characteristic of a multi-homed host?...; Question 298: Contracts and agreements are often times unenforceable or ha...; Question 299: Which of the following rules appearing in an Internet firewa...; Question 300: Which of the following is an Internet IPsec protocol to nego...; Question 301: __________ attacks capitalize on programming errors and can ...; Question 302: Which of the following services relies on UDP?...; Question 303: Similar to Secure Shell (SSH-2), Secure Sockets Layer (SSL) ...; Question 304: Recovery Site Strategies for the technology environment depe...; Question 305: Which access model is most appropriate for companies with a ...; Question 306: Which of the following are NOT a countermeasure to traffic a...; Question 307: Transport Layer Security (TLS) is a two-layered socket layer...; Question 308: What security control provides a method to insure that a tra...; Question 309: The concept of best effort delivery is best associated with?...; Question 310: Making sure that the data has not been changed unintentional...; Question 311: Which division of the Orange Book deals with discretionary p...; Question 312: In the CIA triad, what does the letter A stand for?...; Question 313: Controls are implemented to:; Question 314: How do you distinguish between a bridge and a router?...; Question 315: Digital Certificates use which protocol?...; Question 316: What mechanism automatically causes an alarm originating in ...; Question 317: What mechanism does a system use to compare the security lab...; Question 318: What is called a sequence of characters that is usually long...; Question 319: Which of the following is not an encryption algorithm?...; Question 320: Which of the following is commonly used for retrofitting mul...; Question 321: Which of the following statements pertaining to key manageme...; Question 322: Which of the following forms of authentication would most li...; Question 323: CORRECT TEXT When an employee leaves the company, their netw...; Question 324: Within the legal domain what rule is concerned with the lega...; Question 325: A server cluster looks like a:; Question 326: Which of the following protocols suite does the Internet use...; Question 327: Because all the secret keys are held and authentication is p...; Question 328: Cryptography does not concern itself with which of the follo...; Question 329: Which of the following is most relevant to determining the m...; Question 330: How would an IP spoofing attack be best classified?...; Question 331: Which of the following computer crime is MORE often associat...; Question 332: Which of the following statements pertaining to quantitative...; Question 333: Which of the following best describes what would be expected...; Question 334: Some Unix systems use a very simple cipher called _________....; Question 335: What is called the formal acceptance of the adequacy of a sy...; Question 336: Which of the following is the best reason for the use of an ...; Question 337: Which of the following phases of a system development life-c...; Question 338: Which of the following packets should NOT be dropped at a fi...; Question 339: What is a big difference between Java Applets and Active X c...; Question 340: Organizations should consider which of the following first b...; Question 341: Which of the following countermeasures would be the most app...; Question 342: Countermeasures have three main objectives, what are they? (...; Question 343: Which backup method copies only files that have changed sinc...; Question 344: Which OSI/ISO layer is responsible for determining the best ...; Question 345: What is called an event or activity that has the potential t...; Question 346: In which of the following security models is the subject's c...; Question 347: Authentication Headers (AH) and Encapsulating Security Paylo...; Question 348: Once evidence is seized, a law enforcement officer should em...; Question 349: Making sure that the data has not been changed unintentional...; Question 350: Which Network Address Translation (NAT) is the most convenie...; Question 351: Within the context of the CBK, which of the following provid...; Question 352: In the context of network enumeration by an outside attacker...; Question 353: Which of the following terms can be described as the process...; Question 354: Which of the following BEST explains why computerized inform...; Question 355: A central authority determines what subjects can have access...; Question 356: Which of the following does not address Database Management ...; Question 357: Why is traffic across a packet switched network difficult to...; Question 358: An attack initiated by an entity that is authorized to acces...; Question 359: Preservation of confidentiality within information systems r...; Question 360: What does the simple integrity axiom mean in the Biba model?...; Question 361: This baseline sets certain thresholds for specific errors or...; Question 362: Which protocol makes USE of an electronic wallet on a custom...; Question 363: In an online transaction processing system (OLTP), which of ...; Question 364: What is the name of the third party authority that vouches f...; Question 365: What is the role of IKE within the IPsec protocol?...; Question 366: A potential problem related to the physical installation of ...; Question 367: When considering an IT System Development Life-cycle, securi...; Question 368: Access control is the collection of mechanisms that permits ...; Question 369: What type of cable is used with 100Base-TX Fast Ethernet?...; Question 370: Who should measure the effectiveness of Information System s...; Question 371: Which of the following type of traffic can easily be filtere...; Question 372: FTP, TFTP, SNMP, and SMTP are provided at what level of the ...; Question 373: Which one of the following is usually not a benefit resultin...; Question 374: What is called the access protection system that limits conn...; Question 375: A prolonged complete loss of electric power is a:...; Question 376: This type of attack is generally most applicable to public-k...; Question 377: Much like the layers of an onion, ______________ is a compre...; Question 378: Which of the following statements pertaining to stream ciphe...; Question 379: Sensitivity labels are an example of what application contro...; Question 380: The high availability of multiple all-inclusive, easy-to-use...; Question 381: Which security model uses division of operations into differ...; Question 382: What is the MOST critical piece to disaster recovery and con...; Question 383: Which of the following are required for Life-Cycle Assurance...; Question 384: Which of the following packets should NOT be dropped at a fi...; Question 385: Which of the following is NOT a form of detective administra...; Question 386: Which of the following is a CHARACTERISTIC of a decision sup...; Question 387: Which of the following is NOT a VPN communications protocol ...; Question 388: Which of the following is NOT a correct notation for an IPv6...; Question 389: Which of the following is not a component of a Operations Se...; Question 390: What does the (star) property mean in the Bell-LaPadula mode...; Question 391: Who first described the DoD multilevel military security pol...; Question 392: The session layer provides a logical persistent connection b...; Question 393: Which of the following are required for Life-Cycle Assurance...; Question 394: Which of the following best defines add-on security?...; Question 395: In a SSL session between a client and a server, who is respo...; Question 396: A momentary high voltage is a:; Question 397: The major objective of system configuration management is wh...; Question 398: Which of the following statements pertaining to a security p...; Question 399: Which TCSEC class specifies discretionary protection?...; Question 400: The Terminal Access Controller Access Control System (TACACS...; Question 401: Which of the following should NOT be performed by an operato...; Question 402: Which of the following forms of authentication would most li...; Question 403: A public key algorithm that does both encryption and digital...; Question 404: Controls are implemented to:; Question 405: Which of following is not a service provided by AAA servers ...; Question 406: Which of the following is a problem regarding computer inves...; Question 407: Which of the following is true about Kerberos?...; Question 408: Guards are appropriate whenever the function required by the...; Question 409: What is a packet sniffer?; Question 410: What would be considered the biggest drawback of Host-based ...

Question 101/410

LEAVE A REPLY

Download PDF File