Introduction to Network Security

Network security is best defined as the protection of the networking infrastructure from:

Which CIA goal ensures data is real, accurate, and not altered, with a genuine source?

A breach with a 'severe or catastrophic adverse effect' is rated as which impact level?

In the OSI Security Architecture, a process designed to detect, prevent, or recover from an attack is a:

Which statement defines a PASSIVE attack?

Capturing a data unit and later retransmitting it to produce an unauthorized effect is called:

Which X.800 authentication service verifies the identity of a peer in an ongoing connection?

Protecting the source, destination, frequency, and length of traffic from observation is called:

Which integrity form assures a stream of messages has no duplication, insertion, modification, reordering, or replay?

The availability service primarily addresses the concerns raised by which attack?

Confidentiality means making sure essential information reaches the right people and is kept from the wrong people.

Accountability requires that an entity's actions can be traced uniquely to that entity.

A passive attack alters system resources.

Traffic analysis can extract useful information even when message contents are encrypted.

A masquerade attack usually includes one of the other forms of active attack.

For active attacks, the practical goal is detection and recovery rather than total prevention.

Authentication decides what permissions a user has on a resource.

Connectionless integrity generally protects only against message modification.

Nonrepudiation lets the receiver prove the alleged sender actually sent the message.

Security is best added at the end of a project, since it rarely affects design.

Match each CIA goal with its definition.

Match each active attack with its description.

Match each OSI concept with its definition.

Match each X.800 service with what it provides.

Match each concept with its category.