We must assume that Trudy can do all of these except A) attempt to impersonate either Bob or Alice B) hijack or take over a connection between Bob and Alice C) evesdrop or intercept messages between Bob and Alice D) know Bob or Alice's private key 2. A certificate authority (CA) A) publishes the private keys of all entities (users) B) binds a public key (certificate) to an entity (user) C) gives each pair of users wishing to communicate a private key they can use as a session key D) keeps copies of the private keys of all entities (users) 3. A VPN (Virtual Private Network) A) Uses protocols like IPSec to provide security at the network layer B) requires the user to set up a virtual circuit to the other endpoint C) uses WEP to secure the wireless channel D) provides a secure tunnel between a website and a client browser between the application layer and transport layer 4. Access control lists (ACLs) A) prevent malware from infecting computers B) prevent all traffic except what is desired C) are rules configured by network administrators that firewalls use to determine what traffic is allowed D) blocks viruses from getting into the network 5. A firewall A) never allows packets to flow outward unless they are requested from the outside network B) is all that is ever needed for a secure network C) always allows packets to flow inward D) isolates an organization's internal network from the larger internet 6. Intrusion detection systems A) operate on the TCP/IP headers only B) often result in "false alerts" that require system administrators to investigate C) conduct deep packet inspection to alert on potentially harmful traffic D) take corrective action to prevent malware from infecting routers 7. WEP (wired equivalency protocol) A) is better than WPA B) uses a 56 bit key over a 64 bit packet, and encrypts 3 times C) is more secure than the AES standard D) Is a flawed security protocol that was poorly designed 8. A modern crypto system relies on A) a secret code that only the sender and receiver know B) Trudy being dumb C) Bob and Alice not sharing their passwords D) mathematical methods that are impossible to crack without long periods of time 9. In modern network communication, A) both symmetric and asymmetric cyptography are used together B) only asymmetric cryptography is used C) the caesar cipher is used D) only symmetric cryptography is used 10. SSL (Secure Sockets Layer) A) secures the wireless signal by adding security to the physical layer B) requires the user to enter their special SSL password C) secures the communication at the data-link layer D) provides a secure API between the application layer and transport layer