Isaca CISA Quiz 155 Topic 4 Questions 771-775

Question: 1

To prevent IP spoofing attacks, a firewall should be configured to drop a packet if:

Athe source routing field is enabled.

Bit has a broadcast address in the destination field.

Ca reset flag (RST) is turned on for the TCP connection.

Ddynamic routing is used instead of static routing.

Show Answer

Question: 2

An IS auditor reviewing the implementation of an intrusion detection system (IDS) should be MOST concerned if:

AIDS sensors are placed outside of the firewall.

Ba behavior-based IDS is causing many false alarms.

Ca signature-based IDS is weak against new types of attacks.

Dthe IDS is used to detect encrypted traffic.

Show Answer

Question: 3

Which of the following BEST describes the role of a directory server in a public key infrastructure (PKI)?

AEncrypts the information transmitted over the network

BMakes other users' certificates available to applications

CFacilitates the implementation of a password policy

DStores certificate revocation lists (CRLs)

Show Answer

Question: 4

An organization is using symmetric encryption. Which of the following would be a valid reason for moving to asymmetric encryption? Symmetric encryption:

Aprovides authenticity.

Bis faster than asymmetric encryption.

Ccan cause key management to be difficult.

Drequires a relatively simple algorithm.

Show Answer

Question: 5

Which of the following would provide the BEST protection against the hacking of a computer connected to the Internet?

AA remote access server

BA proxy server

CA personal firewall

DA password-generating token

Show Answer

Isaca CISA Quiz:155 Topic:4 Questions:771-775