NEW YORK STATE FBLA

CYBER SECURITY

2012

PLEASE DO NOT OPEN THIS TEST UNTIL DIRECTED TO DO SO

Test Directions

1.	Complete the information requested on the answer sheet.

PRINT YOUR NAME on the “Name” line.
PRINT the name of the event, CYBER SECURITY on the “Subject” line.
PRINT the name of your CHAPTER on the “DATE” line.

2.	All answers will be recorded on the answer sheet.
Please do not write on the test booklet.
Scrap paper will be provided.

3.	Read each question completely before answering.  With a NO. 2 pencil, blacken in your choices completely on the answer sheet.  Do not make any other marks on the answer sheet, or the scoring machine will reject it.

4.	You will be given 60 minutes for the test.  You will be given a starting signal and a signal after 50 minutes have elapsed.

Tie will be broken using the last 10 questions of the test.

1.	The vast industry involving the gathering and selling of personal data is  
A. 	
direct marketing.	

B. 	
fund-raising.	

C. 	
information reselling.	

D. 	
government agencies.	

 
2.	One proposed law requiring employers to alert employees during monitoring with some sort of audible or visual signals was passed to prevent the abuse of which program?  
A. 	
Spyware	

B. 	
Freeware	

C. 	
Snoopware	

D. 	
Cookies	

 
3.	Programs that are deposited on a user's hard drive when they visit a Web site are called  
A. 	
cookies.	

B. 	
codes.	

C. 	
cache.	

D. 	
proxies.	

 
4.	Information about how often you visit a Web site can be stored in a _____ on your hard drive.  
A. 	
data file	

B. 	
history file	

C. 	
cache	

D. 	
cookie	

 
5.	A wide range of programs used to secretly record an individual's activities on the Internet is called  
A. 	
spyware.	

B. 	
cookies.	

C. 	
sniffer programs.	

D. 	
keystroke loggers.	

 
6.	Which one of the following is the most likely program to be used by investigators having a few leads on potential suspects' internet activities? 
A. 	
Cookies	

B. 	
Global positioning systems	

C. 	
Keystroke loggers	

D. 	
Web bugs	

7.	This group of computer users specifically create and share programs designed to gain unauthorized access to computer systems.  
A. 	
employees	

B. 	
hackers	

C. 	
crackers	

D. 	
organized crime	

8.	Which of the following is not a malware? 
A. 	
Trojan horses	

B. 	
Viruses	

C. 	
Worms	

D. 	
Spy Doctor	

 

9.	A program that fills a computer system with self-replicating information thus clogging the system is called a  
A. 	
virus.	

B. 	
worm.	

C. 	
denial-of-service attack.	

D. 	
damage.	

 
10.	Free computer games and free screen saver programs are typical carriers of  
A. 	
DoS.	

B. 	
worms.	

C. 	
viruses.	

D. 	
Trojan horses.	

 
11.	Which among the following is the most effective way to ensure the shutting down of an ISP or a Web site? 
A. 	
Denial of service attack	

B. 	
Viruses	

C. 	
Trojan horses	

D. 	
Worms	

 
12.	Which among the following is a fraudulent or deceptive act designed to trick individuals into spending time or money for little or no return?  
A. 	
Malicious programs	

B. 	
Internet scams	

C. 	
Theft	

D. 	
Data manipulation	

 
13.	Theft can take many forms – of hardware, of software, of data, of computer time. White-collar computer crime frequently involves the theft of  
A. 	
applications.	

B. 	
company's computer time.	

C. 	
data.	

D. 	
property.	

 
14.	According to which of the following laws is it illegal for an owner of a program to make backup copies for their personal use and resell or give them away?  
A. 	
Digital Millenium Copyright Act	

B. 	
Computer Abuse Amendments Act	

C. 	
The Gramm-Leach-Bliley Act	

D. 	
Computer Fraud and Abuse Act	

 
15.	The incidence of pirated software usage is the highest in  
A. 	
United States	

B. 	
Norway	

C. 	
Thailand	

D. 	
Italy	

 
16.	A device that protects against a sudden increase in electrical power is a(n)  
A. 	
anti-spiker.	

B. 	
voltage regulator.	

C. 	
network terminator.	

D. 	
surge protector.	

 
17.	Saving an important document under a file name which is unrecognizable by others is an example of  
A. 	
a worm.	

B. 	
a technological failure.	

C. 	
a virus.	

D. 	
a human error.	

 
18.	A common way to protect information being sent over a network, when long distance is involved, is 
A. 	
restricting access.	

B. 	
putting up a firewall.	

C. 	
providing passwords.	

D. 	
encrypting.	

 
19.	A _____ acts as a security buffer between a company's private network and all external networks. 
A. 	
firewall	

B. 	
password	

C. 	
disaster recovery plan	

D. 	
virus checker	

 
20.	In a scenario where the city power shuts down, and backup supplies of electricity are insufficient, the most beneficial tool for a large firm involved in the completion of several important deadlines in such a situation would be a/an 
A. 	
firewall protection scheme.	

B. 	
encryption coding process.	

C. 	
disaster recovery plan.	

D. 	
virus encryption programs.	

 
21.	The most important procedure to protect software and data is to  
A. 	
screen applicants to be sure they have no previous records.	

B. 	
guard passwords and frequently changing them.	

C. 	
make frequent backups of data and store them in remote locations.	

D. 	
audit data and programs once a year.	

 
22.	What is biometrics?  
A. 	
Identifying a person through others recognizing them.	

B. 	
The art of reconstructing a person’s identification through DNA samples.	

C. 	
Identifying persons by physical characteristics.	

D. 	
Identifying a person through their computer usage habits.	

 
23.	In which of the following types of crimes can computer forensics be used?  
A. 	
Terrorism.	

B. 	
destruction of data.	

C. 	
murder.	

D. 	
all of the above.	

 
24.	How does Cache Storage work inside of a computer?  
A. 	
It is the high speed temporary are that the computer uses to process data.	

B. 	
It is the long term larger memory area of the computers.	

C. 	
It is a group of temporary files that the computer uses to help swap data from the RAM.into the mass storage area.	

D. 	
It is the area of the computer that lets the system know what it's systems are when it is.booting up.	

 
25.	What does a packet sniffer do?  
A. 	
It replicates data being transmitted across the network to increase network speed.	

B. 	
It copies certain types of data packets and stores them for later use.	

C. 	
It finds E-mail programs and forces it to replicate false e-mails from a specific user.	

D. 	
It manipulates a computer into spreading viruses.	

 
26.	If a computer that needs to be investigated is currently turned off, what should be done? 
A. 	
It should be turned on and investigative work should begin immediately.	

B. 	
It should be dismantled and the hard drive should be installed in a separate machine.	

C. 	
It should not be turned back on.	

D. 	
The main user of the computer should be made to turn it back on.	

 
27.	What is the wipe standard for the Department of Defense?  
A. 	
It states that media must be written over 7 times before it is considered erased.	

B. 	
It states that only a 7X power magnet can wipe out a hard drives contents.	

C. 	
A surface wipe with an ionic scope must be conducted prior to opening and removing.any components.	

D. 	
The process of gathering the data stored in a computer's RAM.	

 
28.	How can a user fake their IP address?  
A. 	
Through Spoofing.	

B. 	
By using a packet sniffer .	

C. 	
Through Spamming.	

D. 	
all of the above.	

 
29.	   When a person uses a computer to organize illegal businesses such as prostitution rings, narcotics or organized crime, what type of computer crime is committed?   
A. 	
 Telecommunications Fraud 	

B. 	
 Espionage 	

C. 	
   Support of a Criminal Enterprise 	

D. 	
 Computer Contaminate 	

 
30.	   Which of the following is usually not a method used by hackers to access a computer and obtain information illegally?   
A. 	
 Internet Searches 	

B. 	
 Dumpster Diving 	

C. 	
 Power Generators to boost electrical power in the building   	

D. 	
 Social Networking Sites 	

 
31.	   Ralph is working for Key Bank as a computer specialist.  During his workday, he has access to people’s account numbers.  One day, he did not have enough money to pay his rent and decided to take money from another person’s account.  Which crime was committed?  
A. 	
 Malicious Hacking        	

B. 	
 Insider Crimes 	

C. 	
 Child Pornography 	

D. 	
 Component Theft 	

 
32.	   In order to confiscate a computer, a police officer must first have which of the following: 
A. 	
 Miranda Warnings 	

B. 	
 Protect person’s privacy 	

C. 	
   Warrant 	

D. 	
 Look for Viruses 	

 
33.	What is the most common name for the first large-scale attack on the Internet that occurred in November of 1988? 
A. 	
The Code Red Worm	

B. 	
The Morris Worm	

C. 	
The Slammer Worm	

D. 	
The Jester Worm	

 
34.	Why is the Morris worm significant?  
A. 	
It placed embarrassing text on people's screens.	

B. 	
This was the first large-scale attack on the Internet.	

C. 	
It was the very first virus on the Internet.	

D. 	
It attacked the Windows operating system.	

 
35.	What is the most common threat to information security in an organization?  
A. 	
Computer viruses	

B. 	
Power surges	

C. 	
Forgotten passwords	

D. 	
SPAM	

 
36.	The term "script kiddies" refers to  
A. 	
A hacker of low-end technical ability	

B. 	
A children's television show	

C. 	
A type of video game	

D. 	
An Internet site for peer-to-peer music sharing	

 
37.	What is an unstructured threat?  
A. 	
An elite hacker who mounts an attack against a specific target	

B. 	
A poorly engineered building	

C. 	
A type of malicious code that formats the hard drive on a computer.	

D. 	
An attack that is uncoordinated, nonspecific, and lasts a short amount of time	

 
38.	What is a structured threat?  
A. 	
An attack that uses coordination, insiders, and lasts for a long period of time	

B. 	
A type of malicious code that formats the hard drive on a computer	

C. 	
An attempt to weaken infrastructure	

D. 	
An official threat from a terrorist organization	

 
39.	Information warfare is  
A. 	
A video game	

B. 	
Warfare conducted against information and information processing equipment	

C. 	
A type of malicious code that "declares war" on a network by formatting the hard drives on computers and copying itself to other computers	

D. 	
A weapon that uses microwaves to destroy enemy vehicles	

 
40.	The term "hacktivist" refers to 
A. 	
A hacker who works for the government	

B. 	
A hacker with low technical ability	

C. 	
A hacker who is motivated by a political agenda	

D. 	
A hacker who can write scripts	

 
41.	What is a port scan?  
A. 	
Identifies what ports can be used to smuggle information across borders	

B. 	
Identifies ports that are open and services that are running	

C. 	
Identifies the USB, parallel, and serial ports that can be used to connect to the system	

D. 	
Identifies the IP addresses of computers on the network	

 
42.	A ping sweep  
A. 	
Is a method of clearing your network	

B. 	
Sends ICMP echo requests to the target machine	

C. 	
Determines what services are running on a system	

D. 	
Is an exploit that creates a denial of service (DoS) using ICMP echo requests	

 
43.	Who is Kevin Mitnick? 
A. 	
He used social engineering, sniffers, and cloned cell phones to gain unauthorized access to networks belonging to Motorola, Novell, Fujitsu, and Sun Microsystems.	

B. 	
He made bank transfers from St. Petersburg using the Citibank cash management system.	

C. 	
He gained access to a loop carrier system operated by NYNEX and cut off FAA control tower and emergency services.	

D. 	
He developed the "Love Bug" love-letter virus that spread to 45 million people.	

 
44.	What is Solar Sunrise?  
A. 	
An attack that was made to look like an attack from Iraq, but was actually made by two teenagers from California who got training in Israel	

B. 	
Electronic interference resulting from solar flares, occurring most commonly in the early morning hours.	

C. 	
A penetration test conducted by the FBI and other government agencies to test the defenses of government networks and critical infrastructure	

D. 	
The name of a virus that would "burn up" your hard drive at 6 AM on the day of the summer solstice	

 
45.	What was the Slammer Worm/Virus?  
A. 	
It was a macro virus that spread by emailing the first 50 people in the victim's address book with the subject: Important message.	

B. 	
The first Internet worm that "slammed" the Internet, created by a graduate student at Cornell University in 1988.	

C. 	
Malware that exploited Microsoft SQL Server and spread across the world in just 10 minutes.	

D. 	
Malware that would "slam" shut your computer by not allowing you to log in.	

 
46.	What is an elite hacker? 
A. 	
A hacker with a high level of technical ability	

B. 	
A hacker who has a wealthy background, and who is politically motivated	

C. 	
A hacker who has elitist ideas and hacks for political purposes	

D. 	
A hacker who searches for scripts and ready-made tools to use for attacks	

 
47.	If the system is infected with a time bomb, it means that  
A. 	
It has a virus that will do physical damage to the computer.	

B. 	
It has equipment that is coming close to the end of its life cycle.	

C. 	
It has a piece of malicious code that will be triggered at a certain time.	

D. 	
It has a piece of malicious code that will be triggered by a certain user activity.	

 
48.	A successful attack on a network may adversely impact security in all the following ways EXCEPT:  
A. 	
Loss of confidentiality	

B. 	
Loss of integrity	

C. 	
Loss of functionality	

D. 	
Loss of availability	

 
49.	When information is modified by individuals not authorized to change it you have suffered a  
A. 	
Loss of confidentiality	

B. 	
Loss of integrity	

C. 	
Loss of functionality	

D. 	
Loss of availability	

 
50.	When information is disclosed to individuals not authorized to see it, you have suffered a  
A. 	
Loss of confidentiality	

B. 	
Loss of integrity	

C. 	
Loss of functionality	

D. 	
Loss of availability	

 
51.	As the level of sophistication of attacks has increased,  
A. 	
The level of knowledge necessary to exploit vulnerabilities has increased	

B. 	
The level of knowledge necessary to exploit vulnerabilities has decreased	

C. 	
The level of skill necessary to exploit vulnerabilities has increased	

D. 	
The amount of exploit software available on the Internet has decreased	

 
52.	According to the Computer Crime and Security Survey, the four types of attacks that increased from 2007 to 2008 were  
A. 	
Viruses, insider abuse, laptop theft, and unauthorized access	

B. 	
Unauthorized access, theft/loss of proprietary information, misuse of web applications, and DNS attacks	

C. 	
Viruses, insider abuse, misuse of web applications, and DNS attacks	

D. 	
Laptop theft, unauthorized access, and theft/loss of proprietary information	

 
53.	In April 2009, Homeland Security Secretary Janet Napolitano told reporters  
A. 	
Organized crime made attempts to break into the US electric power grid	

B. 	
Hacktivists made attempts to break into the US electric power grid	

C. 	
Terrorists made attempts to break into the US electric power grid	

D. 	
China and Russia made attempts to break into the US electric power grid	

 
54.	The first step an administrator can take to reduce possible attacks is to 
A. 	
Ensure all patches for the operating system and applications are installed	

B. 	
Install a firewall	

C. 	
Install anti-spyware software	

D. 	
Configure an intrusion detection system	

 
55.	The message "Hacked by Chinese," was left by the  
A. 	
Melissa virus	

B. 	
Love Letter virus	

C. 	
Slammer Worm	

D. 	
Code Red Worm	

 
56.	When users are unable to access information or the systems processing information, you may have suffered a  
A. 	
Loss of confidentiality	

B. 	
Loss of integrity	

C. 	
Loss of authentication	

D. 	
Loss of availability	

 
57.	Each of the infected systems became part of what is known as a bot network, which could be used to cause a DoS attack on a target or to forward spam e-mail to millions of users, as a result of the  
A. 	
Slammer Worm	

B. 	
Morris Worm	

C. 	
Conficker	

D. 	
Melissa Worm	

 
58.	The term which refers to the attempt to gain unauthorized access to systems and computers used by a telephone company to operate its telephone network is a _______.  
A. 	
phone hacker	

B. 	
hacktivist	

C. 	
commh@ck3r	

D. 	
phreaker	

 
59.	The network engineer suggests purchasing two firewalls from different companies so that a vulnerability affecting one type of firewall will not leave the entire network vulnerable. This is an example of which principle?  
A. 	
Layered defense	

B. 	
Job rotation	

C. 	
Diversity of defense	

D. 	
Security through obscurity	

 
60.	The database administrator falls ill and is not able to come to work for three weeks. No one else in the company knows how to administer the database server. This is a result of not following which principle? 
A. 	
Layered defense	

B. 	
Job rotation	

C. 	
Diversity of defense	

D. 	
Security through obscurity	

 
61.	The hacker was successful in breaching the firewall, the packet filtering router, and the internal firewall, but was quickly detected and unable to get past the workstation personal firewall. This is an example of what principle?  
A. 	
Layered security	

B. 	
Job rotation	

C. 	
Diversity of defense	

D. 	
Security through obscurity	

 
62.	A company doing business online conducted all financial transactions over the Internet without any encryption. As a result, customer information such as credit card numbers, expiration dates, and the security codes found on the back of the credit cards was stolen. This is a violation of which policy? 
A. 	
Due diligence	

B. 	
Due process	

C. 	
Need to know	

D. 	
Acceptable use	

 
63.	Jane spends quite a bit of time on Facebook, and other social networking sites during work hours. This has resulted in reduced productivity. This is likely a violation of which policy?  
A. 	
Due diligence	

B. 	
E-mail policy	

C. 	
Need to know	

D. 	
Acceptable use	

 
64.	Background checks, drug testing, retirement, and termination are elements found in which type of policy? 
A. 	
Due diligence	

B. 	
Human resources	

C. 	
Equal opportunity	

D. 	
Privacy	

 
65.	The term forensics relates to the application of ____________ knowledge to ___________ problems.  
A. 	
legal, computer	

B. 	
complete, software	

C. 	
scientific, legal	

D. 	
familiar, unfamiliar	

 
66.	Which of the following has the least volatile data?  
A. 	
CPU storage	

B. 	
RAM	

C. 	
Hard drive	

D. 	
Kernel tables	

 
67.	A network administrator wants to be sure that when users change their passwords they do not reuse a previous password. What domain password policy will need to be configured?  
A. 	
Enforce password history	

B. 	
Maximum password age	

C. 	
Minimum password age	

D. 	
Minimum password length	

 
68.	Your boss expressed concern about employees working on the network on weekends. She asks if there is something you can do to ensure that they do not have access. What would be the best way to accomplish this?  
A. 	
Publish a memo stating that employees will not be allowed to access the network on weekends.	

B. 	
Set time-of-day restrictions on employee accounts for the weekend.	

C. 	
Keep the building locked.	

D. 	
Set up closed-circuit TV cameras on employee workstations.	

 
69.	How can the purpose of risk management best be described?  
A. 	
A method to improve the performance of the organizations stock portfolio	

B. 	
To take cost effective measures to reduce potential risk to the organization to an acceptable level	

C. 	
A method to inform management of the types of assets the company controls	

D. 	
A means of getting cheaper insurance for the organization	

 
70.	Using the general risk management model, natural disasters, terrorism, fraud, equipment failure, fall under which step?  
A. 	
Asset identification	

B. 	
Threat assessment	

C. 	
Impact determination and quantification	

D. 	
Residual risk management	

 
71.	What is a public key infrastructure?  
A. 	
A structure that enables parties to use communications such as e-mail	

B. 	
A structure that provides all of the components needed for entities to communicate securely and in a predictable manner	

C. 	
A structure that enables secure communications in chat rooms, and when instant messaging and text messaging	

D. 	
Is another name for digital signatures	

 
72.	What is a certificate authority?  
A. 	
An entity that requires proof of identity from the individual requesting a certificate	

B. 	
An entity that generates a digitally signed identification certificate	

C. 	
A centralized directory in which the registered certificate is stored	

D. 	
An entity that generates electronic credentials	

 
73.	What is a certificate repository? 
A. 	
A directory that calculates a message digest for the certificate	

B. 	
An entity that generates electronic credentials	

C. 	
A directory that requires a centralized infrastructure	

D. 	
A centralized directory in which the registered certificate is stored	

 
74.	The difference between centralized and decentralized infrastructures is 
A. 	
The key pairs and certificates do not have a set lifetime in centralized infrastructures.	

B. 	
The location where the cryptographic key is generated and stored is different.	

C. 	
The network administrator sets up the distribution points in centralized infrastructures.	

D. 	
In a decentralized infrastructure, the certificate may have an extended lifetime.	

 
75.	What is a digital certificate? 
A. 	
It's a means of establishing the validity of an offer from a person, entity, web site or e-mail.	

B. 	
It's a centralized directory wherein registered keys are created and stored.	

C. 	
It's a means of establishing your credentials electronically when doing business or other transactions on the Web	

D. 	
It's an entity that generates electronic credentials and distributes them upon proving their identity sufficiently.	

 
76.	A trust domain is defined as 
A. 	
The agreed upon, trusted third party	

B. 	
A scenario where one user needs to validate the other's certificate	

C. 	
A construct of systems, personnel, applications, protocols, technologies and policies that work together to provide a certain level of protection	

D. 	
A scenario in which the certificate's issuer and subject fields hold the same information	

 
77.	What are the SSL and TLS used for?  
A. 	
A means of securing application programs on the system	

B. 	
To secure communication over the internet	

C. 	
A method to change from one form of PKI infrastructure to another	

D. 	
A secure way to reduce the amount of SPAM a system receives	

 
78.	What is Wired Equivalent Privacy (WEP)?  
A. 	
A method that is used to encrypt wireless communications in an 802.11 environment	

B. 	
A signal that jams other wireless devices attempting to access the system	

C. 	
A method to change encryption standards during a transmission	

D. 	
An encryption method used to secure bank passwords	

 
79.	What is the ISO 17799?  
A. 	
A standard for creating and implementing security policies	

B. 	
A standard for international encryption of e-mail	

C. 	
A document used to develop physical security for a building	

D. 	
A document describing the details of wireless encryption	

 
80.	Why is wireless problematic from a security standpoint?  
A. 	
There is no control over physical limitations.	

B. 	
Insufficient signal strength	

C. 	
There is no control over the physical layer of traffic.	

D. 	
There is no control over the network.	

 
81.	_____________ means to make certain that no unauthorized individuals read the packets you transmit over the Internet.  
A. 	
Integrity	

B. 	
Confidentiality	

C. 	
Authentication	

D. 	
WTLS	

 
82.	______________ is the process by which each end of the data flow proves that they are who they say they are.  
A. 	
Integrity	

B. 	
Confidentiality	

C. 	
Authentication	

D. 	
WTLS	

 
83.	When an attacker uses Bluetooth to copy e-mails, contact lists, or other files on the device, it is called  
A. 	
Bluejacking	

B. 	
Bluesnarfing	

C. 	
Bluebugging	

D. 	
Bluehacking	

 
84.	A new standard for sending packetized data traffic over radio waves in the unlicensed 2.4 GHz band is  
A. 	
WAP	

B. 	
WTLS	

C. 	
802.11b	

D. 	
804.11b	

 
85.	Security issues associated with WTLS include which of the following?  
A. 	
The specifications do not allow connections without high security.	

B. 	
WTLS cannot cope with small amounts of memory.	

C. 	
WTLS cannot cope with limited processor capacity.	

D. 	
Clients with low memory or CPU capabilities cannot support encryption.	

 
86.	With any wireless protocol, which of the following are true?  
A. 	
Extra care should be taken to ensure that the security of the protocol is not compromised.	

B. 	
A WAP gateway should be created.	

C. 	
Encryption standards should be random.	

D. 	
RSA encryption should be used.	

 
87.	What is WAP? 
A. 	
It is a protocol used by laptop computers for wireless communication.	

B. 	
It is used primarily to encrypt wired communications, but can be used for wireless as well.	

C. 	
It is another name for 802.11g.	

D. 	
It is a protocol used by cellular phones to deliver e-mail and lightweight web services.	

 
88.	802.11 is the IEEE standard for wireless local area networks and includes the following: 
A. 	
a, b, c, g	

B. 	
n, g, c	

C. 	
a, b, g, n	

D. 	
b, g, n	

 
89.	Which of the following protocols was designed for short-range wireless communication typically with mobile phones? 
A. 	
WPA2	

B. 	
Bluetooth	

C. 	
WEP	

D. 	
802.11n	

 
90.	WAP uses ______ for its encryption scheme. 
A. 	
WEP	

B. 	
SSL	

C. 	
WTLS	

D. 	
ElGamal	

 
91.	A ________ is a network typically smaller in terms of size and geographic coverage and consist of two or more connected devices. Home or office networks are typically classified as this type of network.  
A. 	
local area network	

B. 	
office area network	

C. 	
wide area network	

D. 	
internal area network	

 
92.	Which of the following is NOT a network topology?  
A. 	
Star	

B. 	
Ring	

C. 	
Integrated	

D. 	
Mixed	

 
93.	A network protocol is  
A. 	
An agreed upon format for exchanging or transmitting data between systems	

B. 	
A set of rules that employees must follow to accomplish a specific task	

C. 	
One of the layers of the OSI model	

D. 	
One of the headers in an IP packet	

 
94.	The main difference between TCP and UDP packets is  
A. 	
UDP packets are a more widely used protocol.	

B. 	
TCP packets are smaller and thus more efficient to use.	

C. 	
TCP packets are connection oriented, whereas UPD packets are connectionless.	

D. 	
UDP is considered to be more reliable because it performs error checking.	

 
95.	Unfortunately hackers abuse the ICMP protocol by using it to  
A. 	
Send internet worms	

B. 	
Launch denial-of-service (DoS) attacks	

C. 	
Steal passwords and credit card numbers	

D. 	
Send spam	

 
96.	IP addresses are ___ bit numbers  
A. 	
16	

B. 	
32	

C. 	
64	

D. 	
128	

 
97.	A(n) _______ class address supports 65,000 hosts on each of 16,000 networks, and allows three sections of the IP address to be devoted to host addressing. 
A. 	
A	

B. 	
B	

C. 	
C	

D. 	
D	

 
98.	Network Address Translation (NAT) 
A. 	
Translates private (non-routable) IP addresses into public (routable) IP addresses	

B. 	
Translates the IP addresses of one protocol to the IP address of another protocol	

C. 	
Is one of the items in an IP packet header	

D. 	
Translates MAC addresses to IP addresses	

 
99.	Which of the following is a benefit that Network Address Translation (NAT) provides  
A. 	
Compensates for the lack of IP addresses	

B. 	
Allows devices using two different protocols to communicate	

C. 	
It creates a DMZ	

D. 	
Translates MAC addresses to IP addresses	

 
100.	All the network components are connected to a central point in which topology? 
A. 	
Star	

B. 	
Bus	

C. 	
Ring	

D. 	
Hybrid	

 

ANSWER KEY

1.  C
 
2. C
 
3. A
 
4.  D
 
5.  A
 
6. C
 
7. C
 
8. D
 
9.  B
 
10.  D
 
11. A
 
12.  B
 
13. C
 
14. A
 
15. C
 
16.  D
 
17. D
 
18.  D
 
19. A
 
20.  C
 
21.  C
 
22. C
 
23. D
 
24. C
 
25. B
 
26. C
 
27. A
 
28. A
 
29. C
 
30. C
 
31. B
 
32. C
 
33. B
 
34.  B
 
35. A
 
36. A
 
37.  D
 
38. A
 
39.  B
 
40.  C
 
41.  B
 
42.  B
 
43.  A
 
44.  A
 
45.  C
 
46.  A
 
47.  C
 
48.  C
 
49.  B
 
50.  A
 
51.  B
 
52.  B
 
53.  D
 
54.  A
 
55. D
 
56.  D
 
57.  C
 
58.  D
 
59.  C
 
60.  B
 
61.  A
 
62.  A
 
63. D
 
64.  B
 
65. C
 
66.  C
 
67. A
 
68. B
 
69. B
 
70.  B
 
71.B
 
72.   B
 
73.  D
 
74. B
 
75. C
 
76. C
 
77. B
 
78. A
 
79. A
 
80.  C
 
81. B
 
82. C
 
83.  B
 
84. C
 
85. D
 
86. A
 
87. D
 
88. C
 
89.  B
 
90.  C
 
91. A
 
92. C
 
93.  A
 
94. C
 
95. B
 
96. B
 
97. B
 
98. A
 
99.  A
 
100. A