SSCP Exam Dumps | Which of the following rules appearing in an Internet firewall policy is inappropriate?

<< Prev Question Next Question >>

Question 299/410

Which of the following rules appearing in an Internet firewall policy is inappropriate?

A. Source routing shall be disabled on all firewalls and external routers.

B. Firewalls shall be configured to transparently allow all outbound and inbound services.

C. Firewalls should fail to a configuration that denies all services, and require a firewall administrator to re-enable services after a firewall has failed.

D. Firewalls shall not accept traffic on its external interfaces that appear to be coming from internal network addresses.

Question List (410q): Question 1: Similar to Secure Shell (SSH-2), Secure Sockets Layer (SSL) ...; Question 2: What is called an automated means of identifying or authenti...; Question 3: Which device acting as a translator is used to connect two n...; Question 4: A code, as is pertains to cryptography:...; Question 5: Which of the concepts best describes Availability in relatio...; Question 6: What is the main problem of the renewal of a root CA certifi...; Question 7: What is the main objective of proper separation of duties?...; Question 8: A group of independent servers, which are managed as a singl...; Question 9: What is called an automated means of identifying or authenti...; Question 10: Secure Sockets Layer (SSL) is very heavily used for protecti...; Question 11: Which xDSL flavour delivers both downstream and upstream spe...; Question 12: Which of the following is less likely to be used today in cr...; Question 13: A timely review of system access audit records would be an e...; Question 14: Which of the following was developed as a simple mechanism f...; Question 15: When gathering digital evidence it is very important to do t...; Question 16: Which of the following is an example of a connectionless com...; Question 17: MD5 is a ___________ algorithm; Question 18: In discretionary access environments, which of the following...; Question 19: While using IPsec, the ESP and AH protocols both provides in...; Question 20: A proxy is considered a:; Question 21: What is the most secure way to dispose of information on a C...; Question 22: Which of the following security models does NOT concern itse...; Question 23: Which OSI/ISO layers are TCP and UDP implemented at?...; Question 24: Integrity = ______________; Question 25: Which security model introduces access to objects only throu...; Question 26: Which of the following could be BEST defined as the likeliho...; Question 27: Business Continuity and Disaster Recovery Planning (Primaril...; Question 28: In what type of attack does an attacker try, from several en...; Question 29: Which of the following is NOT a defined ISO basic task relat...; Question 30: What can best be defined as a strongly protected computer th...; Question 31: Which type of attack involves the alteration of a packet at ...; Question 32: Which of the following prevents, detects, and corrects error...; Question 33: What is the framing specification used for transmitting digi...; Question 34: A program that intentionally leaves a security hole or cover...; Question 35: What can best be defined as high-level statements, beliefs, ...; Question 36: Which of the following would be best suited to oversee the d...; Question 37: Detective/Technical measures:; Question 38: An Architecture where there are more than two execution doma...; Question 39: Who is responsible for providing reports to the senior manag...; Question 40: A momentary power outage is a:; Question 41: Sensitivity labels are an example of what application contro...; Question 42: Which of the following is the best reason for the use of an ...; Question 43: What is called the percentage of valid subjects that are fal...; Question 44: ________, _________, and __________ are required to successf...; Question 45: Which of the following would best describe certificate path ...; Question 46: In biometrics, "one-to-many" search against database of stor...; Question 47: Which of the following is NOT a defined ISO basic task relat...; Question 48: Under United States law, an investigator's notebook may be u...; Question 49: Domain Name Service is a distributed database system that is...; Question 50: Considerations of privacy, invasiveness, and psychological a...; Question 51: Sensitivity labels are an example of what application contro...; Question 52: Which of the following would be used to detect and correct e...; Question 53: CORRECT TEXT __________ is a tool used by network administra...; Question 54: In a Public Key Infrastructure, how are public keys publishe...; Question 55: When a biometric system is used, which error type deals with...; Question 56: When an outgoing request is made on a port number greater th...; Question 57: In regards to information classification what is the main re...; Question 58: The first step in the implementation of the contingency plan...; Question 59: What is the act of obtaining information of a higher sensiti...; Question 60: Attributable data should be:; Question 61: Which of the following statements pertaining to Asynchronous...; Question 62: Which of the following biometric devices has the lowest user...; Question 63: Which of the following is the core of fiber optic cables mad...; Question 64: What is the primary goal of setting up a honeypot?...; Question 65: Which of the following reviews system and event logs to dete...; Question 66: FTP, TFTP, SNMP, and SMTP are provided at what level of the ...; Question 67: What does the directive of the European Union on Electronic ...; Question 68: Which of the following was developed by the National Compute...; Question 69: PGP & PEM are programs that allow users to send encrypte...; Question 70: Which of the following is covered under Crime Insurance Poli...; Question 71: Recovery Site Strategies for the technology environment depe...; Question 72: Physically securing backup tapes from unauthorized access is...; Question 73: Packet Filtering Firewalls examines both the source and dest...; Question 74: Which of the following is a disadvantage of a statistical an...; Question 75: Which of the following is best defined as an administrative ...; Question 76: Which of the following can be best defined as computing tech...; Question 77: Which of the following embodies all the detailed actions tha...; Question 78: A confidential number used as an authentication factor to ve...; Question 79: A timely review of system access audit records would be an e...; Question 80: What Orange Book security rating is reserved for systems tha...; Question 81: Which is the last line of defense in a physical security sen...; Question 82: A security policy is a rigid set of rules that must be follo...; Question 83: Which of the following is unlike the other three choices pre...; Question 84: _____________ states that users should only be given enough ...; Question 85: ___________________ is ultimately responsible for security a...; Question 86: Public Key Infrastructure (PKI) uses asymmetric key encrypti...; Question 87: Which of the following layers provides end-to-end data trans...; Question 88: What refers to legitimate users accessing networked services...; Question 89: Which of the following is an example of One-Time Password te...; Question 90: How would nonrepudiation be best classified as?...; Question 91: Which of the following choice is NOT normally part of the qu...; Question 92: Which of the following test makes sure the modified or new s...; Question 93: Smart cards are an example of which type of control?...; Question 94: Which of the following should be emphasized during the Busin...; Question 95: The IP header contains a protocol field. If this field conta...; Question 96: Which method of password cracking takes the most time and ef...; Question 97: Which of the following is the WEAKEST authentication mechani...; Question 98: Which of the following best allows risk management results t...; Question 99: In Discretionary Access Control the subject has authority, w...; Question 100: Which of the following IEEE standards defines the token ring...; Question 101: Which of the following is the most secure firewall implement...; Question 102: What are the three performance measurements used in biometri...; Question 103: Which disaster recovery plan test involves functional repres...; Question 104: Which integrity model defines a constrained data item, an in...; Question 105: What level of assurance for a digital certificate verifies a...; Question 106: What is defined as the hardware, firmware and software eleme...; Question 107: Cryptography does NOT help in:; Question 108: EDI (Electronic Data Interchange) differs from e-Commerce in...; Question 109: Which of the following is a method of multiplexing data wher...; Question 110: Of the reasons why a Disaster Recovery plan gets outdated, w...; Question 111: Of the reasons why a Disaster Recovery plan gets outdated, w...; Question 112: Which of the following cannot be undertaken in conjunction o...; Question 113: A proxy is considered a:; Question 114: Which of the following should NOT be performed by an operato...; Question 115: How should a risk be HANDLED when the cost of the countermea...; Question 116: Which one of the following is used to provide authentication...; Question 117: If any server in the cluster crashes, processing continues t...; Question 118: CORRECT TEXT Accounting, __________, and ____________ are th...; Question 119: The throughput rate is the rate at which individuals, once e...; Question 120: In order to be able to successfully prosecute an intruder:...; Question 121: Identification and authentication are the keystones of most ...; Question 122: Which type of firewall can be used to track connectionless p...; Question 123: The three classic ways of authenticating yourself to the com...; Question 124: Secure Shell (SSH-2) provides all the following services exc...; Question 125: Which of the following best corresponds to the type of memor...; Question 126: What can be defined as a data structure that enumerates digi...; Question 127: Which of the following is NOT a technique used to perform a ...; Question 128: Network-based Intrusion Detection systems:...; Question 129: Which of the following would be the best reason for separati...; Question 130: What is the framing specification used for transmitting digi...; Question 131: In order to ensure the privacy and integrity of the data, co...; Question 132: In a SSL session between a client and a server, who is respo...; Question 133: Which of the following best corresponds to the type of memor...; Question 134: What can best be defined as high-level statements, beliefs, ...; Question 135: While there are many different models for IT system life cyc...; Question 136: What is the name for a substitution cipher that shifts the a...; Question 137: As per the Orange Book, what are two types of system assuran...; Question 138: Which of the following statements pertaining to link encrypt...; Question 139: Which of the following answers is described as a random valu...; Question 140: Crime Prevention Through Environmental Design (CPTED) is a d...; Question 141: What is called the percentage of valid subjects that are fal...; Question 142: Which type of encryption is considered to be unbreakable if ...; Question 143: Failure of a contingency plan is usually:...; Question 144: Which of the following is less likely to be used today in cr...; Question 145: Which of the following would be the MOST serious risk where ...; Question 146: Organizations should not view disaster recovery as which of ...; Question 147: Related to information security, the guarantee that the mess...; Question 148: Which expert system operating mode allows determining if a g...; Question 149: Under the Business Exemption Rule to the hearsay evidence, w...; Question 150: Which of the following would be true about Static password t...; Question 151: Contracts and agreements are often times unenforceable or ha...; Question 152: What is a hot-site facility?; Question 153: Which type of attack consists of modifying the length and fr...; Question 154: Which of the following would be an example of the best passw...; Question 155: Because all the secret keys are held and authentication is p...; Question 156: Which of the following statements pertaining to disaster rec...; Question 157: Which of the following statements pertaining to quantitative...; Question 158: Which of the following is less likely to be included in the ...; Question 159: Which of the following is an advantage in using a bottom-up ...; Question 160: Which of the following devices enables more than one signal ...; Question 161: Which of the following is the most important consideration i...; Question 162: What is it called when a computer uses more than one CPU in ...; Question 163: Rule-Based Access Control (RuBAC) access is determined by ru...; Question 164: Which of the following BEST describes a function relying on ...; Question 165: What is Kerberos?; Question 166: Which of the following is the most reliable, secure means of...; Question 167: Step-by-step instructions used to satisfy control requiremen...; Question 168: Which of the following is needed for System Accountability?...; Question 169: Which of the following assertions is NOT true about pattern ...; Question 170: What can be defined as a list of subjects along with their a...; Question 171: Which of the following groups represents the leading source ...; Question 172: Which of the following protocols does not operate at the dat...; Question 173: Which of the following teams should NOT be included in an or...; Question 174: Who first described the DoD multilevel military security pol...; Question 175: Which of the following best describes the purpose of debuggi...; Question 176: The standard server port number for HTTP is which of the fol...; Question 177: :Which of the following is considered the LEAST secure?...; Question 178: Which of the following statements pertaining to Secure Socke...; Question 179: Which of the following protection devices is used for spot p...; Question 180: CORRECT TEXT A type of virus that resides in a Word or Excel...; Question 181: Physical security is accomplished through proper facility co...; Question 182: Which of the following would best define a digital envelope?...; Question 183: Configuration Management controls what?...; Question 184: What can be defined as a digital certificate that binds a se...; Question 185: A proxy can control which services (FTP and so on) are used ...; Question 186: Which of the following elements of telecommunications is not...; Question 187: Which of the following protocols is designed to send individ...; Question 188: Which of the following is NOT a characteristic or shortcomin...; Question 189: Which of the following is an issue with signature-based intr...; Question 190: CORRECT TEXT NIPC stands for _____ _____ _____ ______ and is...; Question 191: Asynchronous Communication transfers data by sending:...; Question 192: In biometric identification systems, the parts of the body c...; Question 193: Which of the following access control models requires securi...; Question 194: Which of the following is BEST defined as a physical control...; Question 195: Which of the following is true about Kerberos?...; Question 196: Which of the following is less likely to accompany a conting...; Question 197: Which access control model provides upper and lower bounds o...; Question 198: The Orange Book is founded upon which security policy model?...; Question 199: Which access control model would a lattice-based access cont...; Question 200: Out of the steps listed below, which one is not one of the s...; Question 201: Which of the following is not a preventive operational contr...; Question 202: Of the following, which is NOT a specific loss criteria that...; Question 203: When it comes to magnetic media sanitization, what differenc...; Question 204: Only law enforcement personnel are qualified to do computer ...; Question 205: Which of the following statements pertaining to biometrics i...; Question 206: Making sure that the data is accessible when and where it is...; Question 207: Which of the following specifically addresses cyber attacks ...; Question 208: Which of the following elements of telecommunications is not...; Question 209: What is the maximum length of cable that can be used for a t...; Question 210: Secure Shell (SSH-2) supports authentication, compression, c...; Question 211: What is the appropriate role of the security analyst in the ...; Question 212: The IP header contains a protocol field. If this field conta...; Question 213: Who should measure the effectiveness of Information System s...; Question 214: Network-based Intrusion Detection systems:...; Question 215: Which access control model is best suited in an environment ...; Question 216: Access Control techniques do not include which of the follow...; Question 217: Which of the following services relies on UDP?...; Question 218: Which of the following is best at defeating frequency analys...; Question 219: Which of the following best defines source routing?...; Question 220: The control of communications test equipment should be clear...; Question 221: Which of the following is not a responsibility of an informa...; Question 222: Technical controls such as encryption and access control can...; Question 223: Which of the following statements pertaining to Kerberos is ...; Question 224: The DES algorithm is an example of what type of cryptography...; Question 225: What is called an automated means of identifying or authenti...; Question 226: Which of the following protocols is designed to send individ...; Question 227: Which of the following is an example of an active attack?...; Question 228: _______ and ________ are the primary controls of most access...; Question 229: Which of the following is true about link encryption?...; Question 230: Which of the following is the BEST way to detect software li...; Question 231: Which of the following is not a logical control when impleme...; Question 232: Which of the following attacks could capture network user pa...; Question 233: Complete the blanks. When using PKI, I digitally sign a mess...; Question 234: Which of the following monitors network traffic in real time...; Question 235: A deviation from an organization-wide security policy requir...; Question 236: The Orange Book states that "Hardware and software features ...; Question 237: Which of the following is not a DES mode of operation?...; Question 238: An area of the Telecommunications and Network Security domai...; Question 239: Which of the following service is a distributed database tha...; Question 240: Organizations should consider which of the following first b...; Question 241: Which of the following statements pertaining to disk mirrori...; Question 242: Which type of control is concerned with restoring controls?...; Question 243: What is NOT true about a one-way hashing function?...; Question 244: What is the essential difference between a self-audit and an...; Question 245: Which of the following refers to the data left on the media ...; Question 246: Which of the following is the simplest type of firewall ?...; Question 247: Another name for a VPN is a:; Question 248: What does "residual risk" mean?...; Question 249: What is the primary role of smartcards in a PKI?...; Question 250: Which of the following is the primary security feature of a ...; Question 251: Which of the following control pairing places emphasis on "s...; Question 252: Which of the following transmission media would NOT be affec...; Question 253: The end result of implementing the principle of least privil...; Question 254: The IP header contains a protocol field. If this field conta...; Question 255: Within the OSI model, at what layer are some of the SLIP, CS...; Question 256: Which of the following protocols that provide integrity and ...; Question 257: What ensures that the control mechanisms correctly implement...; Question 258: Which encryption algorithm is BEST suited for communication ...; Question 259: Physically securing backup tapes from unauthorized access is...; Question 260: The ability to adjust access control to the exact amount of ...; Question 261: An Architecture where there are more than two execution doma...; Question 262: Which of the following tape formats can be used to backup da...; Question 263: Which IPSec operational mode encrypts the entire data packet...; Question 264: Which of the following is NOT a proper component of Media Vi...; Question 265: The Diffie-Hellman algorithm is used for:...; Question 266: Which one of the following represents an ALE calculation?...; Question 267: Which of the following statements pertaining to message dige...; Question 268: Which of the following is NOT true of the Kerberos protocol?...; Question 269: Which of the following is less likely to accompany a conting...; Question 270: Which of the following would assist the most in Host Based i...; Question 271: Which of the following control pairing places emphasis on "s...; Question 272: In response to Access-request from a client such as a Networ...; Question 273: Which of following is not a service provided by AAA servers ...; Question 274: Which communication method is characterized by very high spe...; Question 275: This type of supporting evidence is used to help prove an id...; Question 276: Which of the following remote access authentication systems ...; Question 277: Which of the following is an advantage of prototyping?...; Question 278: What attribute is included in a X.509-certificate?...; Question 279: Which of the following statements pertaining to message dige...; Question 280: A Business Continuity Plan should be tested:...; Question 281: All of the following can be considered essential business fu...; Question 282: Which of the following mechanisms was created to overcome th...; Question 283: Which of the following statements pertaining to the security...; Question 284: Which of the following is NOT true concerning Application Co...; Question 285: How should a risk be HANDLED when the cost of the countermea...; Question 286: During which phase of an IT system life cycle are security r...; Question 287: A _________ is an information path that is not normally used...; Question 288: What does the simple security (ss) property mean in the Bell...; Question 289: Which of the following DoD Model layer provides non-repudiat...; Question 290: All hosts on an IP network have a logical ID called a(n):...; Question 291: Which of the following would NOT violate the Due Diligence c...; Question 292: The IP header contains a protocol field. If this field conta...; Question 293: A trusted system does NOT involve which of the following?...; Question 294: Which must bear the primary responsibility for determining t...; Question 295: Which of the following addresses a portion of the primary me...; Question 296: Smart cards are a secure alternative to which weak security ...; Question 297: What is the main characteristic of a multi-homed host?...; Question 298: Contracts and agreements are often times unenforceable or ha...; Question 299: Which of the following rules appearing in an Internet firewa...; Question 300: Which of the following is an Internet IPsec protocol to nego...; Question 301: __________ attacks capitalize on programming errors and can ...; Question 302: Which of the following services relies on UDP?...; Question 303: Similar to Secure Shell (SSH-2), Secure Sockets Layer (SSL) ...; Question 304: Recovery Site Strategies for the technology environment depe...; Question 305: Which access model is most appropriate for companies with a ...; Question 306: Which of the following are NOT a countermeasure to traffic a...; Question 307: Transport Layer Security (TLS) is a two-layered socket layer...; Question 308: What security control provides a method to insure that a tra...; Question 309: The concept of best effort delivery is best associated with?...; Question 310: Making sure that the data has not been changed unintentional...; Question 311: Which division of the Orange Book deals with discretionary p...; Question 312: In the CIA triad, what does the letter A stand for?...; Question 313: Controls are implemented to:; Question 314: How do you distinguish between a bridge and a router?...; Question 315: Digital Certificates use which protocol?...; Question 316: What mechanism automatically causes an alarm originating in ...; Question 317: What mechanism does a system use to compare the security lab...; Question 318: What is called a sequence of characters that is usually long...; Question 319: Which of the following is not an encryption algorithm?...; Question 320: Which of the following is commonly used for retrofitting mul...; Question 321: Which of the following statements pertaining to key manageme...; Question 322: Which of the following forms of authentication would most li...; Question 323: CORRECT TEXT When an employee leaves the company, their netw...; Question 324: Within the legal domain what rule is concerned with the lega...; Question 325: A server cluster looks like a:; Question 326: Which of the following protocols suite does the Internet use...; Question 327: Because all the secret keys are held and authentication is p...; Question 328: Cryptography does not concern itself with which of the follo...; Question 329: Which of the following is most relevant to determining the m...; Question 330: How would an IP spoofing attack be best classified?...; Question 331: Which of the following computer crime is MORE often associat...; Question 332: Which of the following statements pertaining to quantitative...; Question 333: Which of the following best describes what would be expected...; Question 334: Some Unix systems use a very simple cipher called _________....; Question 335: What is called the formal acceptance of the adequacy of a sy...; Question 336: Which of the following is the best reason for the use of an ...; Question 337: Which of the following phases of a system development life-c...; Question 338: Which of the following packets should NOT be dropped at a fi...; Question 339: What is a big difference between Java Applets and Active X c...; Question 340: Organizations should consider which of the following first b...; Question 341: Which of the following countermeasures would be the most app...; Question 342: Countermeasures have three main objectives, what are they? (...; Question 343: Which backup method copies only files that have changed sinc...; Question 344: Which OSI/ISO layer is responsible for determining the best ...; Question 345: What is called an event or activity that has the potential t...; Question 346: In which of the following security models is the subject's c...; Question 347: Authentication Headers (AH) and Encapsulating Security Paylo...; Question 348: Once evidence is seized, a law enforcement officer should em...; Question 349: Making sure that the data has not been changed unintentional...; Question 350: Which Network Address Translation (NAT) is the most convenie...; Question 351: Within the context of the CBK, which of the following provid...; Question 352: In the context of network enumeration by an outside attacker...; Question 353: Which of the following terms can be described as the process...; Question 354: Which of the following BEST explains why computerized inform...; Question 355: A central authority determines what subjects can have access...; Question 356: Which of the following does not address Database Management ...; Question 357: Why is traffic across a packet switched network difficult to...; Question 358: An attack initiated by an entity that is authorized to acces...; Question 359: Preservation of confidentiality within information systems r...; Question 360: What does the simple integrity axiom mean in the Biba model?...; Question 361: This baseline sets certain thresholds for specific errors or...; Question 362: Which protocol makes USE of an electronic wallet on a custom...; Question 363: In an online transaction processing system (OLTP), which of ...; Question 364: What is the name of the third party authority that vouches f...; Question 365: What is the role of IKE within the IPsec protocol?...; Question 366: A potential problem related to the physical installation of ...; Question 367: When considering an IT System Development Life-cycle, securi...; Question 368: Access control is the collection of mechanisms that permits ...; Question 369: What type of cable is used with 100Base-TX Fast Ethernet?...; Question 370: Who should measure the effectiveness of Information System s...; Question 371: Which of the following type of traffic can easily be filtere...; Question 372: FTP, TFTP, SNMP, and SMTP are provided at what level of the ...; Question 373: Which one of the following is usually not a benefit resultin...; Question 374: What is called the access protection system that limits conn...; Question 375: A prolonged complete loss of electric power is a:...; Question 376: This type of attack is generally most applicable to public-k...; Question 377: Much like the layers of an onion, ______________ is a compre...; Question 378: Which of the following statements pertaining to stream ciphe...; Question 379: Sensitivity labels are an example of what application contro...; Question 380: The high availability of multiple all-inclusive, easy-to-use...; Question 381: Which security model uses division of operations into differ...; Question 382: What is the MOST critical piece to disaster recovery and con...; Question 383: Which of the following are required for Life-Cycle Assurance...; Question 384: Which of the following packets should NOT be dropped at a fi...; Question 385: Which of the following is NOT a form of detective administra...; Question 386: Which of the following is a CHARACTERISTIC of a decision sup...; Question 387: Which of the following is NOT a VPN communications protocol ...; Question 388: Which of the following is NOT a correct notation for an IPv6...; Question 389: Which of the following is not a component of a Operations Se...; Question 390: What does the (star) property mean in the Bell-LaPadula mode...; Question 391: Who first described the DoD multilevel military security pol...; Question 392: The session layer provides a logical persistent connection b...; Question 393: Which of the following are required for Life-Cycle Assurance...; Question 394: Which of the following best defines add-on security?...; Question 395: In a SSL session between a client and a server, who is respo...; Question 396: A momentary high voltage is a:; Question 397: The major objective of system configuration management is wh...; Question 398: Which of the following statements pertaining to a security p...; Question 399: Which TCSEC class specifies discretionary protection?...; Question 400: The Terminal Access Controller Access Control System (TACACS...; Question 401: Which of the following should NOT be performed by an operato...; Question 402: Which of the following forms of authentication would most li...; Question 403: A public key algorithm that does both encryption and digital...; Question 404: Controls are implemented to:; Question 405: Which of following is not a service provided by AAA servers ...; Question 406: Which of the following is a problem regarding computer inves...; Question 407: Which of the following is true about Kerberos?...; Question 408: Guards are appropriate whenever the function required by the...; Question 409: What is a packet sniffer?; Question 410: What would be considered the biggest drawback of Host-based ...

Question 299/410

LEAVE A REPLY

Download PDF File