C Danvers
Quiz by , created more than 1 year ago

Ch 6 quiz

908
0
0
C Danvers
Created by C Danvers about 6 years ago
Close

Ch 6 - Network Security Devices, Design, and Technology

Question 1 of 40

1

A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?

Select one of the following:

  • Stateful frame filtering

  • Stateless frame filtering

  • Stateful packet filtering

  • Stateless packet filtering

Explanation

Question 2 of 40

1

All modern operating systems include a hardware firewall, usually called a host-based firewall.

Select one of the following:

  • True
  • False

Explanation

Question 3 of 40

1

An administrator has two servers that host the same web content, but only one server is utilized at a given time. What can be configured that can help to evenly distribute work across the network, and make use of both servers in a manner that is transparent to the end users?

Select one of the following:

  • stateful packet filtering

  • load balancing

  • failover servers

  • proxy servers

Explanation

Question 4 of 40

1

An agent may be a permanent NAC agent and reside on end devices until uninstalled, but it cannot be a dissolvable NAC agent.

Select one of the following:

  • True
  • False

Explanation

Question 5 of 40

1

An early networking device that functioned at layer 1 of the OSI model and added devices to a single segment is known as which of the following choices?

Select one of the following:

  • switch

  • router

  • firewall

  • hub

Explanation

Question 6 of 40

1

An intranet is a separate open network that anyone can access without prior authorization.

Select one of the following:

  • True
  • False

Explanation

Question 7 of 40

1

Anomaly monitoring is designed for detecting statistical anomalies.

Select one of the following:

  • True
  • False

Explanation

Question 8 of 40

1

A security advantage of VLANs is that they can be used to prevent direct communication between servers.

Select one of the following:

  • True
  • False

Explanation

Question 9 of 40

1

A web server must be accessible to untrusted outside users. What can be done to isolate this host and any additional hosts with similar requirements from more secured hosts on a network?

Select one of the following:

  • Install a VPN, configure host

  • Set up a proxy in front of the web server

  • Create a DMZ, add necessary hosts

  • Configure a reduction point on a firewall

Explanation

Question 10 of 40

1

Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.

Select one of the following:

  • True
  • False

Explanation

Question 11 of 40

1

If a network is completely isolated by an air gap from all other outside networks it is using what type of configuration?

Select one of the following:

  • physical network segregation

  • complete network segregation

  • network isolation

  • logical network segregation

Explanation

Question 12 of 40

1

NAT is not a specific device, technology, or protocol. It is a technique for substituting IP addresses.

Select one of the following:

  • True
  • False

Explanation

Question 13 of 40

1

One use of data loss prevention (DLP) is blocking the copying of files to a USB flash drive.

Select one of the following:

  • True
  • False

Explanation

Question 14 of 40

1

Select the technology that can be used to examine content through application-level filtering.

Select one of the following:

  • Application gateway

  • Security proxy

  • Web security gateway

  • Firewall

Explanation

Question 15 of 40

1

The management in your corporate office needs to group users on the network together logically even though they are attached to separate network switches. How can this be done?

Select one of the following:

  • Create a subnet for each network switch in use

  • Create additional subnets for the separate groups

  • Add all users to a single network segment

  • Create a VLAN and add the users' computers/ports to the correct VLAN

Explanation

Question 16 of 40

1

The OSI model breaks networking steps down into a series of six layers.

Select one of the following:

  • True
  • False

Explanation

Question 17 of 40

1

What data unit is associated with the Open Systems Interconnection layer four?

Select one of the following:

  • segment

  • packet

  • frame

  • bit

Explanation

Question 18 of 40

1

What data unit is associated with the Open Systems Interconnection layer two?

Select one of the following:

  • segment

  • packet

  • frame

  • bit

Explanation

Question 19 of 40

1

What dedicated hardware device aggregates hundreds or thousands of VPN connections?

Select one of the following:

  • VPN server

  • VPN gateway

  • VPN switch

  • VPN concentrator

Explanation

Question 20 of 40

1

What is the name of a computer or application program that intercepts user requests from the internal secure network and then processes that request on behalf of the user?

Select one of the following:

  • forward proxy server

  • DNS server

  • VPN server

  • telnet server

Explanation

Question 21 of 40

1

What is the name of an instruction that interrupts a program being executed and requests a service from the operating system?

Select one of the following:

  • system call

  • unit call

  • hardware instruction

  • system exception

Explanation

Question 22 of 40

1

What kind of networking device forwards packets across different computer networks by reading destination addresses?

Select one of the following:

  • switch

  • router

  • bridge

  • firewall

Explanation

Question 23 of 40

1

What specific type of hardware card inserts into a web server that contains one or more co-processors to handle SSL/TLS processing?

Select one of the following:

  • SSL/TLS accelerator

  • media gateway

  • SSL decryptor

  • security module

Explanation

Question 24 of 40

1

What technology enables authorized users to use an unsecured public network, such as the Internet as if it were a secure private network?

Select one of the following:

  • IKE tunnel

  • VPN

  • endpoint

  • router

Explanation

Question 25 of 40

1

What technology will examine the current state of a network device before allowing it can to connect to the network and force any device that does not meet a specified set of criteria to connect only to a quarantine network?

Select one of the following:

  • network access control

  • virtual LANs

  • network address translation

  • host health checks

Explanation

Question 26 of 40

1

What term is used to describe the software agents that are used by NAC and installed on devices to gather information?

Select one of the following:

  • NAC check agents

  • server health agents

  • host agent health checks

  • network health agents

Explanation

Question 27 of 40

1

What type of dedicated cryptographic processor that provides protection for cryptographic keys?

Select one of the following:

  • SSL/TLS accelerator

  • media gateway

  • SSL decryptor

  • hardware security module

Explanation

Question 28 of 40

1

What type of monitoring compares network traffic, activities, transactions, or behavior against a database of known attack patterns?

Select one of the following:

  • application-based

  • protocol-based

  • behavioral-based

  • signature-based

Explanation

Question 29 of 40

1

What type of network access control uses Active Directory to scan a device to verify that it is in compliance?

Select one of the following:

  • agentless NAC

  • dissolvable NAC

  • dependent NAC

  • permanent NAC

Explanation

Question 30 of 40

1

What type of network is a private network that belongs to an organization that can only be accessed by approved internal users?

Select one of the following:

  • extranet

  • intranet

  • enterprise network

  • guest network

Explanation

Question 31 of 40

1

What type of network is a private network that can also be accessed by authorized external customers, vendors, and partners?

Select one of the following:

  • extranet

  • intranet

  • enterprise network

  • guest network

Explanation

Question 32 of 40

1

What vendor neutral protocol implements support for VLAN tagging?

Select one of the following:

  • ISL

  • VTP

  • 802.1Q

  • VSTP

Explanation

Question 33 of 40

1

When a private network uses a single public IP address, and each outgoing TCP packet uses a different port to allow for proper translation, what networking technology is in use?

Select one of the following:

  • PAT

  • PNAT

  • NAPT

  • NAT

Explanation

Question 34 of 40

1

When VPN network traffic is routing only some traffic over the secure VPN while other traffic directly accesses the Internet, what technology is being used?

Select one of the following:

  • priority tunnel

  • split tunneling

  • full tunnel

  • shared tunneling

Explanation

Question 35 of 40

1

Which network address below is not a private IP address network?

Select one of the following:

  • 10.4.5.0

  • 172.63.255.0

  • 192.168.255.0

  • 172.17.16.0

Explanation

Question 36 of 40

1

Which of the following is a server that routes incoming requests coming from an external network to the correct internal server?

Select one of the following:

  • forward proxy

  • application proxy

  • system proxy

  • reverse proxy

Explanation

Question 37 of 40

1

Which of the following is a software-based application that runs on a local host computer that can detect an attack as it occurs?

Select one of the following:

  • local-based intrusion detection system

  • host-based intrusion detection system

  • host-based application protection

  • local-based application protection

Explanation

Question 38 of 40

1

Which of the following is a system of security tools that are used to recognize and identify data that is critical to the organization and ensure that it is protected?

Select one of the following:

  • USB blocking

  • content inspection

  • storage sensors

  • data loss prevention

Explanation

Question 39 of 40

1

Which of the following is defined as a security analysis of the transaction within its approved context?

Select one of the following:

  • USB blocking

  • content inspection

  • storage sensors

  • data loss prevention

Explanation

Question 40 of 40

1

Workgroup switches must work faster than core switches.

Select one of the following:

  • True
  • False

Explanation

Previous
Check answer
Next