Peer-to-peer Networking Test With Answers

Section Quiz  Question 1:  Correct Which common design feature among instant messaging clients make them less secure than other means of communicating over the internet? Peer-to-peer networking Real-time communication Transfer of text and files Freely available for use EXPLANATION The common design feature among instant messaging clients that makes them less secure than other means of communicating over the internet is their use of peer-to-peer networking. Peer-to-peer networking is inherently less secure than traditional client/server communication or networking mechanisms. With peer-to-peer networking, there is no centralized access control authority, so any client on the system can introduce malicious code or perform malicious actions without restriction. The other design features listed here are typically seen as strengths of instant messaging clients rather than as aspects of insecurity or vulnerability.  Question 2:  Correct Which type of application allows users to share and access content without using a centralized server? Peer-to-peer software Instant messaging Real-time communication Group Policy EXPLANATION Peer-to-peer software allows users to share content and access content shared by other users without using centralized servers or centralized access control. Instant messaging provides real-time text messaging communication and supports picture, music, and document exchange. Group Policy defines security options on a Windows operating system. Real-time communication is a strength of instant messaging clients.  Question 3:  Correct Which of the following methods did Microsoft introduce in Windows 10 to help distribute OS updates? Server download Peer-to-peer software File Transfer Protocol Group Policy EXPLANATION Peer-to-peer software allows users to share content and access content shared by other users without using centralized servers or centralized access control. Microsoft introduced a P2P component to help with distributing OS updates in Windows 10. File Transfer Protocol is used to transfer files, but was not introduced in Windows 10 to help with distributing OS updates. Group Policy is used to define security policies on a Windows operating system. Server download is the traditional model of downloading a file or application. It was not introduced in Windows 10 to helpdistribute OS updates.  Question 4:  Correct Which of the following is a benefit of P2P applications? Low-upload bandwidth Strong security Shared resources Real-time communication EXPLANATION Peer-to-peer (P2P) software allows users to share content and access content shared by other users without using centralized servers or centralized access control. Peer-to-peer applications can be a great way to share bandwidth and resources. Strong security is not a benefit of P2P applications. Many of these applications pose high security risks. Real-time communication is a strength of instant messaging clients. Low-upload bandwidth is not a benefit of P2P applications. P2P applications consume large amounts of upload bandwidth.  Question 5:  Correct What do application control solutions use to identify specific applications? Application signatures Whitelists Flags Packet inspection EXPLANATION Application control implementations use application signatures to identify specific applications. Group Policy is used to define security policies on a Windows operating system. Application control systems do not use group policies to identify specific applications. Whitelists are used to define which applications are allowed on network devices. Packet inspection is performed by firewalls, not application control solutions.  Question 6:  Correct Which of the following is susceptible to social engineering exploits? Peer-to-peer software Instant messaging Real-time communication Group Policy EXPLANATION Instant messaging applications can be a vehicle for malware and virus delivery as well as social engineering exploits. Peer-to-peer (P2P) software allows users to share content and access content shared by other users without using centralized servers or centralized access control. Group Policy is used to define security policies on a Windows operating system. Real-time communication is a strength of instant messaging clients.  Question 7:  Correct Which of the following is considered a major problem with instant messaging applications? Real-time communication Transfer of text and files Loss of productivity Freely available for use EXPLANATION While instant messaging applications offer a quick way to communicate, loss of productivity is considered one of the major problems with these applications. The other design features listed here are typically seen as strengths of instant messaging clients rather than as aspects of security or vulnerability.  Question 8:  Correct You are the security analyst for your organization and have recently noticed a large amount of spim on the company mobile devices. Employees rely on the IM app to communicate with each other. Which of the following countermeasures should you implement? Encrypt all IM traffic. Create a blacklist. Use an IM blocker. Disable instant messaging. EXPLANATION Spim is a type of spam that targets users of instant messaging services. Creating a whitelist or using an IM blocker are countermeasures that can be implemented against spim. Creating a blacklist does not help much against spim. Disabling instant messaging would stop the spim, but this would also stop employees from communicating with each other. Encrypting IM traffic would not stop the spim messages.  Question 9:  Correct You have implemented a new application control solution. After monitoring traffic and use for a while, you have noticed an application that continuously circumvents blocking. How should you configure the application control software to handle this application? Drop Flag Tarpit Block EXPLANATION When using tarpit, the connection between hosts is kept alive while the application data itself is silently dropped. This makes it appear to both hosts that the other host is receiving the data but is not responding. Some malicious applications notice they are being blocked and circumvent the issue. Using tarpit prevents the application from realizing it has been blocked and stops it from circumventing security controls. Blocked applications are not allowed and are blocked. The session is dropped if it uses UDP and is reset if it uses TCP. Flagged applications are allowed, but a violation is logged when they are identified. Drop is not a application control software configuration option.  Question 10:  Correct You are implementing a new application control solution. Prior to enforcing your application whitelist, you want to monitor user traffic for a period of time to discover user behaviors and log violations for later review. How should you configure the application control software to handle applications not contained in the whitelist? Tarpit Flag Drop Block EXPLANATION When using an application control solution, an application whitelist is defined centrally and applied to all network devices. Only applications contained in the whitelist are allowed. Applications not whitelisted can have several actions applied: Blocked applications are not allowed. The session is dropped if it uses UDP and reset if it uses TCP. Flagged applications are allowed, but a violation is logged when they are identified. Tarpitted applications are not allowed. However, the connection between hosts is kept alive while the application data itself is silently dropped. This makes it appear to both hosts that the other host is receiving the data but not responding. Not all application control solutions support tarpitting application traffic.