CPSC 6128 - Network Security - Final Exam Test Study Guide

Study Material

Chapters 1-12 of Corporate Computer and Network Security by Panko

Material from e-library, assignments and discussions

Test Format (Take-home exam, Posted April 29, 2005; Due Friday, May 6, 2005 , 11:59 p.m. EDT)
Ten (10) Discussion Questions (choose eight) (25 points each)

Specifically Study

• Types of Attackers
• Types of Attackes
• Security Management
• Access Control
  • Password Policy
  • Physical Security
  • Biometric Authenitication
• Wireless Security
• TCP/IP Standards
• TCP/IP & OSI Layers
• Systems Pentetration Attacks
• DoS Attacks
• Malware Attacks
• Firewalls
• Host Security
  • Installation & Patching
  • Turning Off Unnecessary Services
  • Managing Users and Groups
  • Managing Permissions
• Cryptographic Elements and Systems
• Symmetric Key Encryption
• Public Key Encryption
• Encryption for Authentication
• Digital Signatures
• Key Exchange
• Replay Attacks and Defenses
• Cryptographic Systems
• SSL/TLS
• PPP
• PPTP & L2TP
• IPSec
• Kerberos
• Webservice and E-Commerce Security
• E-mail Security
• IDSs & IPSs
• Business Continuity
• Backup
• Disaster Recovery
• Organization issues with security
• Risk Analysis
• Security Architecture
• Control Principles
• Vulnerability Testing
• Computer Security Laws
• Privacy
• Workplace Monitoring
• Government Serveillance
• Cyberwar and Cyberterror
• Network Security Tools (covered in lab assignments)