Quiz
CCNA Security Chapter 1 Exam
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (24)
1What method can be used to mitigate ping sweeps?
- Ausing encrypted or hashed authentication protocols
- Binstalling antivirus software on hosts
- Cdeploying antisniffer software on all network devices
- Dblocking ICMP echo and echo-replies at the network edge
2 What are the three major components of a worm attack? (Choose three.)
- Aa penetration mechanism
- Ban infecting vulnerability
- Ca payload
- Dan enabling vulnerability
- Ea probing mechanism
- Fa propagation mechanism
3Which statement accurately characterizes the evolution of threats to network security?
- AInternal threats can cause even greater damage than external threats
- BThreats have become less sophisticated while the technical knowledge needed by an attacker has grown
- CEarly Internet users often engaged in activities that would harm other users
- DInternet architects planned for network security from the beginning.
4What causes a buffer overflow?
- Alaunching a security countermeasure to mitigate a Trojan horse
- Bsending repeated connections such as Telnet to a particular device, thus denying other data sources.
- Cdownloading and installing too many software updates at one time
- Dattempting to write more data to a memory location than that location can hold
- Esending too much information to two or more interfaces of the same device, thereby causing dropped packets
5What commonly motivates cybercriminals to attack networks as compared to hactivists or state-sponsored hackers?
- Astatus among peers
- Bfame seeking
- Cfinancial gain
- Dpolitical reasons
6Which two network security solutions can be used to mitigate DoS attacks? (Choose two.)
- Avirus scanning
- Bintrusion protection systems
- Capplying user authentication
- Dantispoofing technologies
- Edata encryption
7Which two statements characterize DoS attacks? (Choose two.)
- AThey are difficult to conduct and are initiated only by very skilled attackers
- BThey are commonly launched with a tool called L0phtCrack.
- CExamples include smurf attacks and ping of death attacks.
- DThey attempt to compromise the availability of a network, host, or application
- EThey always precede access attacks
8An attacker is using a laptop as a rogue access point to capture all network traffic from a targeted user. Which type of attack is this?
- Atrust exploitation
- Bbuffer overflow
- Cman in the middle
- Dport redirection
9What functional area of the Cisco Network Foundation Protection framework is responsible for device-generated packets required for network operation, such as ARP message exchanges and routing advertisements?
- Adata plane
- Bcontrol plane
- Cmanagement plane
- Dforwarding plane
10What are the three components of information security ensured by cryptography? (Choose three.)
- Athreat prevention
- Bauthorization
- Cconfidentiality
- Dcountermeasures
- Eintegrity
- Favailability
11What is the primary method for mitigating malware?
- Ausing encrypted or hashed authentication protocols
- Binstalling antivirus software on all hosts
- Cblocking ICMP echo and echo-replies at the network edge
- Ddeploying intrusion prevention systems throughout the network
12What is an objective of a state-sponsored attack?
- Ato gain financial prosperity
- Bto sell operation system vulnerabilities to other hackers
- Cto gain attention
- Dto right a perceived wrong
13What role does the Security Intelligence Operations (SIO) play in the Cisco SecureX architecture?
- Aidentifying and stopping malicious traffic
- Bauthenticating users
- Cenforcing policy
- Didentifying applications
14What worm mitigation phase involves actively disinfecting infected systems?
- ATreatment
- Bcontainment
- Cinoculation
- Dquarantine
15How is a smurf attack conducted?
- Aby sending a large number of packets to overflow the allocated buffer memory of the target device
- Bby sending a large number of ICMP requests to directed broadcast addresses from a spoofed source address on the same network
- Cby sending a large number of TCP SYN packets to a target device from a spoofed source address
- Dby sending an echo request in an IP packet larger than the maximum packet size of 65,535 bytes
16What is a characteristic of a Trojan horse as it relates to network security?
- AMalware is contained in a seemingly legitimate executable program
- BExtreme quantities of data are sent to a particular network device interface.
- CAn electronic dictionary is used to obtain a password to be used to infiltrate a key network device.
- DToo much information is destined for a particular memory block causing additional memory areas to be affected.
17What is the first step in the risk management process specified by the ISO/IEC?
- ACreate a security policy.
- BConduct a risk assessment.
- CInventory and classify IT assets.
- DCreate a security governance model.
18What is the significant characteristic of worm malware?
- AA worm can execute independently
- BA worm must be triggered by an event on the host system.
- CWorm malware disguises itself as legitimate software
- DOnce installed on a host system, a worm does not replicate itself.
19Which condition describes the potential threat created by Instant On in a data center?
- Awhen the primary firewall in the data center crashes
- Bwhen an attacker hijacks a VM hypervisor and then launches attacks against other devices in the data center
- Cwhen the primary IPS appliance is malfunctioning
- Dwhen a VM that may have outdated security policies is brought online after a long period of inactivity
20What are the three core components of the Cisco Secure Data Center solution? (Choose three.)
- Amesh network
- Bsecure segmentation
- Cvisibility
- Dthreat defense
- Eservers
- Finfrastructure
21A disgruntled employee is using Wireshark to discover administrative Telnet usernames and passwords. What type of network attack does this describe?
- Atrust exploitation
- Bdenial of service
- Creconnaissance
- Dport redirection
22Which two statements describe access attacks? (Choose two.)
- ATrust exploitation attacks often involve the use of a laptop to act as a rogue access point to capture and copy all network traffic in a public location, such as a wireless hotspot.
- BTo detect listening services, port scanning attacks scan a range of TCP or UDP port numbers on a host
- CBuffer overflow attacks write data beyond the hallocated buffer memory to overwrite valid data or to exploit systems to execute malicious code.
- DPassword attacks can be implemented by the use os brute-force attack methods, Trojan horse, or packet sniffers.
- EPort redirection attacks use a network adapter card in promiscuous mode to capture all network packets that are sent across a LAN.
23What is a ping sweep?
- Aa scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.
- Ba software application that enables the capture of all network packets that are sent across a LAN
- Ca query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain
- Da network scanning technique that indicates the live hosts in a range of IP addresses
24As a dedicated network security tool, an intrusion ________ system can provide detection and blocking of attacks in real time.
- Aprevention
- Bnonprevention
Information
- Description
- CCNA Security Chapter 1 Exam
- Author
- d94829 d94829
- Language
- English
- Views
- 1,842
- Tags
- Rating
- No ratings yet Rate this quiz