COS2626
ASSIGNMENT 3 SEMESTER 1 2023
SOLUTIONS
, Dashboard Calendar
Dashboard / My courses / COS2626-23-Y / Welcome to COS2626 / Assessment 3
Started on Friday, 23 June 2023, 5:29 PM
State Finished
Completed on Friday, 23 June 2023, 8:59 PM
Time taken 3 hours 29 mins
Grade 51.67 out of 60.00 (86%)
Question 1
Correct
1. Which one of the following is NOT a guideline of a security policy?
Mark 1.00 out of
1.00
a. Easy for users to understand and comply with.
b. Should be enforceable.
c. Uses legal terminology to protect the organization.
d. Clearly states the policy objectives.
The correct answer is: Uses legal terminology to protect the organization.
Question 2
Correct
2. Which of the following questions must be answered before determining what level of security a network requires (More than one question applies)?
Mark 1.00 out of
1.00
a. What tools are used to attack the network?
b. What must be protected?
c. From whom should data be protected?
d. How much data is on the network?
The correct answers are: What must be protected?, From whom should data be protected?
Question 3
Partially correct
3. Which statements regarding authentication protocols are INCORRECT (More than one statement applies)?
Mark 0.67 out of
1.00
a. EAP (EAP) is a self-contained authentication protocol.
b. MS-CHAP v2 (Microsoft Challenge Handshake Authentication Protocol version 2) is simple to crack and does not provide mutual authentication.
c. RADIUS (Remote Authentication Dial-In User Service) centralizes AAAA (Authentication, Authorization, Accounting and Auditing).
d. TACACS+ is more secure than RADIUS because TACACS+ encrypts the entire package exchanged between client and server whereas RADIUS encrypts only the password.
The correct answers are: EAP (EAP) is a self-contained authentication protocol., MS-CHAP v2 (Microsoft Challenge Handshake Authentication Protocol version 2) is simple to crack and does not provide mutual authentication., RADIUS
(Remote Authentication Dial-In User Service) centralizes AAAA (Authentication, Authorization, Accounting and Auditing).
Question 4
Incorrect
4. If the MINIMUM password length on a Windows system is set to ZERO, what does this mean?
Mark 0.00 out of
1.00
a. The user never has to change the password.
b. The user can use a blank password.
c. The user must change the password every day.
d. The user account is disabled.
The correct answer is: The user can use a blank password.
Question 5
Correct
5. The following diagram illustrates ________ authentication.
Mark 1.00 out of
1.00
a. dualfactor
b. multifactor
c. personal
d. token-based
The correct answer is: multifactor
Question 6
Correct
6. IPSec, an extension to the IP (Internet Protocol) works by establishing an association between two communicating devices. An association is formed by two devices authenticating their identities by which methods (More than one
Mark 1.00 out of
method applies)?
1.00
ASSIGNMENT 3 SEMESTER 1 2023
SOLUTIONS
, Dashboard Calendar
Dashboard / My courses / COS2626-23-Y / Welcome to COS2626 / Assessment 3
Started on Friday, 23 June 2023, 5:29 PM
State Finished
Completed on Friday, 23 June 2023, 8:59 PM
Time taken 3 hours 29 mins
Grade 51.67 out of 60.00 (86%)
Question 1
Correct
1. Which one of the following is NOT a guideline of a security policy?
Mark 1.00 out of
1.00
a. Easy for users to understand and comply with.
b. Should be enforceable.
c. Uses legal terminology to protect the organization.
d. Clearly states the policy objectives.
The correct answer is: Uses legal terminology to protect the organization.
Question 2
Correct
2. Which of the following questions must be answered before determining what level of security a network requires (More than one question applies)?
Mark 1.00 out of
1.00
a. What tools are used to attack the network?
b. What must be protected?
c. From whom should data be protected?
d. How much data is on the network?
The correct answers are: What must be protected?, From whom should data be protected?
Question 3
Partially correct
3. Which statements regarding authentication protocols are INCORRECT (More than one statement applies)?
Mark 0.67 out of
1.00
a. EAP (EAP) is a self-contained authentication protocol.
b. MS-CHAP v2 (Microsoft Challenge Handshake Authentication Protocol version 2) is simple to crack and does not provide mutual authentication.
c. RADIUS (Remote Authentication Dial-In User Service) centralizes AAAA (Authentication, Authorization, Accounting and Auditing).
d. TACACS+ is more secure than RADIUS because TACACS+ encrypts the entire package exchanged between client and server whereas RADIUS encrypts only the password.
The correct answers are: EAP (EAP) is a self-contained authentication protocol., MS-CHAP v2 (Microsoft Challenge Handshake Authentication Protocol version 2) is simple to crack and does not provide mutual authentication., RADIUS
(Remote Authentication Dial-In User Service) centralizes AAAA (Authentication, Authorization, Accounting and Auditing).
Question 4
Incorrect
4. If the MINIMUM password length on a Windows system is set to ZERO, what does this mean?
Mark 0.00 out of
1.00
a. The user never has to change the password.
b. The user can use a blank password.
c. The user must change the password every day.
d. The user account is disabled.
The correct answer is: The user can use a blank password.
Question 5
Correct
5. The following diagram illustrates ________ authentication.
Mark 1.00 out of
1.00
a. dualfactor
b. multifactor
c. personal
d. token-based
The correct answer is: multifactor
Question 6
Correct
6. IPSec, an extension to the IP (Internet Protocol) works by establishing an association between two communicating devices. An association is formed by two devices authenticating their identities by which methods (More than one
Mark 1.00 out of
method applies)?
1.00
