: ‫نام و نام خانوادگی‬

: ‫تاریخ امتحان‬

: ‫نام دوره‬

‫ جواب ها رو به صورت پی دی اف و اینکه زیر هرکدوم مشخص کنید که گزینه چند میشه تو پی وی‬:‫نکته‬
‫ ممکنه بعضی از سوال ها چند جواب داشته باشن‬.‫بفرستین‬

. ‫من جای خالی برای نوشتن جواب گذاشتم‬

1- A cloud deployment model consisting of two or more interlinked cloud

infrastructures (private, community, or public) is referred to as a hybrid cloud.
A. True
B. False

2- What is tailgating?
A. Acquiring unauthorized access to confidential data
B. Looking over someone's shoulder to get information
C. Gaining unauthorized access to restricted areas by following another person
D. Manipulating a user into disclosing confidential information
3- Which programming aspects are critical for secure application development
process? (Select 2 answers)
A. Patch management
B. Input validation
C. Password protection
D. Error and exception handling
E. Application whitelisting

4-What are the countermeasures against SQL injection attacks? (Select 2 answers)
A. Code obfuscation
B. Database normalization
C. Stored procedures
D. Code signing
E. Input validation

5- An authentication subsystem in which a single set of authentication credentials

provides access to multiple systems across different organizations is called:
A. AAA framework
B. Multi-factor authentication
C. Group-based access control
D. Federation

6- Which social engineering attack relies on identity theft?

A. Impersonation
 B. Dumpster diving
C. Watering hole attack
D. Shoulder surfing

7- Examples of static authentication methods include: (Select 2 answers)

A. Token generator
B. User-generated password
C. Short Message Service (SMS)
D. Personal Identification Number (PIN)
E. Push notification

8- Which part of the AAA security architecture deals with the verification of the
identity of a person or process?
A. Authentication
B. Authorization
C. Accounting

9- In the AAA security architecture, the process of tracking accessed services as

well as the amount of consumed resources is called:
A. Authentication
B. Authorization
C. Accounting
 A. 10- A dedicated data storage solution that combines multiple disk drive
components into a single logical unit to increase volume size, performance,
or reliability is referred to as:
B. Storage Area Network (SAN)
C. Load balancer
D. Redundant Array of Independent Disks (RAID)
E. Network-Attached Storage (NAS)

11- Which of the following RAID levels does not offer fault tolerance?
A. RAID 6
B. RAID 10
C. RAID 5
D. RAID 0
E. RAID 1

12- A dedicated local network consisting of devices providing data access is

called:
A. SDN
B. NAS
C. iSCSI
D. SAN
13- Which type of malware resides only in RAM?
A. Rootkit
B. Fileless virus
C. Backdoor
D. Logic bomb

14- In a differential backup strategy, restoring data from backup requires only a
working copy of the last full backup.
A. True
B. False

15- Examples of embedded systems include: (Select all that apply)

A. Android OS
B. Raspberry Pi
C. iOS
D. Arduino
E. Field Programmable Gate Array (FPGA)
F. Mainframe computer system

16- Which of the following provides physical security measure against laptop
theft?
A. Cable lock
B. Trusted Platform Module (TPM)
C. Geotracking
 D. LoJack for Laptops

17- What type of preventive physical access controls would provide a basic means
for securing a door access? (Select 2 answers)
A. Air gap
B. Proximity card reader
C. CCTV
D. Industrial camouflage
E. Smart card reader

18- Which of the following answers refers to a type of additional input that
increases password complexity and provides better protection against brute-force,
dictionary, and rainbow table attacks?
A. Seed
B. IV
C. Salt
D. Shim

19- Pseudo-random data added to a password before hashing is called:

A. Shim
B. Salt
C. Seed
D. IV
20- Unlike stream ciphers which process data by encrypting individual bits, block
ciphers divide data into separate fragments and encrypt each fragment separately.
A. True
B. False

21- What is the purpose of steganography?

A. Checking data integrity
B. Verifying hash values
C. Hiding data within another piece of data
D. Encrypting data

22- Which of the following terms applies to the concept of data integrity?
A. MFA
B. Digital certificate
C. Hashing
D. Security through obscurity
E. Encryption

23 - What is the function of a C2 server?

A. Spam distribution
B. Botnet control
 C. Authentication, Authorization, and Accounting (AAA)
D. Penetration testing

24- What hardware device is used to create the hardware root of

trust for modern desktops and laptops?
A. System memory
B. A HSM
C. The CPU
D. The TPM

25- The term "Rooting" refers to the capability of gaining administrative access to
the operating system and system applications on:
A. Android devices
B. iOS devices
C. Microsoft devices
D. All types of mobile devices

26- Installing mobile apps from trusted sources (e.g. Apple's App Store for iOS
devices, or Google Play for Android devices) instead of third-party application
stores decreases malware-related security risks.
A. True
B. False
27- Which of the following answers refers to a non-proprietary cryptographic
network protocol for secure data communication, remote command-line login,
remote command execution, and other secure network services?
A. RDP
B. Telnet
C. SSH
D. RAS

28- Which of the following protocols allow(s) for secure file transfer? (Select all
that apply)
A. FTPS
B. TFTP
C. FTP
D. SFTP

29- FTPS is an extension to the Secure Shell (SSH) protocol and runs by default on
port number 22.
A. True
B. False
30- Which version(s) of the SNMP protocol offer(s) authentication based on
community strings sent in an unencrypted form? (Select all that apply)
A. SNMPv1
B. SNMPv2
C. SNMPv3
D. SNMPv4

31- What is the name of a network protocol that secures web traffic via SSL/TLS
encryption?
A. SFTP
B. HTTPS
C. FTPS
D. SNMP

32- POP3 is used for:

A. Name resolution
B. Sending email messages
C. File exchange
D. Email retrieval

33- Which of the terms listed below describes a type of VPN that alleviates
bottlenecks and conserves bandwidth by enabling utilization of both the VPN and
public network links?
A. Tethering
 B. Split tunnel
C. Load balancing
D. Full tunnel

34- Which VPN type is used for connecting computers to a network? (Select all
that apply)
A. Remote access
B. Client-to-site
C. Site-to-site
D. Point-to-point

35- What is the name of a network security access control method in which a 48-
bit physical address assigned to each network card is used to determine access to
the network?
A. MAC filtering
B. Network Address Translation (NAT)
C. Static IP addressing
D. Network Access Control (NAC)

36- A NIDS/NIPS that detects intrusions by comparing network traffic against the
previously established baseline can be classified as: (Select all that apply)
A. Heuristic
B. Anomaly-based
C. Behavioral
 D. Signature-based

37- Which of the acronyms listed below refers to a firewall controlling access to a
web server?
A. WEP
B. WAP
C. WPS
D. WAF

38- Examples of application software designed to selectively block access to

websites include: (Select 2 answers)
A. URL filter
B. Captive portal
C. Firewall
D. Content filter
E. Proxy server

39- A rule-based access control mechanism implemented on routers, switches, and

firewalls is called:
A. ACL
B. CSR
C. DLP
D. AUP
40- Which of the following terms is commonly used to describe an unsolicited
advertising message?
A. Spyware
B. Adware
C. Malware
D. Spam