Quiz
Ch 6 - Network Security Devices, Design, and Technology
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (40)
1A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?
- AStateful frame filtering
- BStateless frame filtering
- CStateful packet filtering
- DStateless packet filtering
2All modern operating systems include a hardware firewall, usually called a host-based firewall.
- ATrue
- BFalse
3An administrator has two servers that host the same web content, but only one server is utilized at a given time. What can be configured that can help to evenly distribute work across the network, and make use of both servers in a manner that is transparent to the end users?
- Astateful packet filtering
- Bload balancing
- Cfailover servers
- Dproxy servers
4An agent may be a permanent NAC agent and reside on end devices until uninstalled, but it cannot be a dissolvable NAC agent.
- ATrue
- BFalse
5An early networking device that functioned at layer 1 of the OSI model and added devices to a single segment is known as which of the following choices?
- Aswitch
- Brouter
- Cfirewall
- Dhub
6An intranet is a separate open network that anyone can access without prior authorization.
- ATrue
- BFalse
7Anomaly monitoring is designed for detecting statistical anomalies.
- ATrue
- BFalse
8A security advantage of VLANs is that they can be used to prevent direct communication between servers.
- ATrue
- BFalse
9A web server must be accessible to untrusted outside users. What can be done to isolate this host and any additional hosts with similar requirements from more secured hosts on a network?
- AInstall a VPN, configure host
- BSet up a proxy in front of the web server
- CCreate a DMZ, add necessary hosts
- DConfigure a reduction point on a firewall
10Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.
- ATrue
- BFalse
11If a network is completely isolated by an air gap from all other outside networks it is using what type of configuration?
- Aphysical network segregation
- Bcomplete network segregation
- Cnetwork isolation
- Dlogical network segregation
12NAT is not a specific device, technology, or protocol. It is a technique for substituting IP addresses.
- ATrue
- BFalse
13One use of data loss prevention (DLP) is blocking the copying of files to a USB flash drive.
- ATrue
- BFalse
14Select the technology that can be used to examine content through application-level filtering.
- AApplication gateway
- BSecurity proxy
- CWeb security gateway
- DFirewall
15The management in your corporate office needs to group users on the network together logically even though they are attached to separate network switches. How can this be done?
- ACreate a subnet for each network switch in use
- BCreate additional subnets for the separate groups
- CAdd all users to a single network segment
- DCreate a VLAN and add the users' computers/ports to the correct VLAN
16The OSI model breaks networking steps down into a series of six layers.
- ATrue
- BFalse
17What data unit is associated with the Open Systems Interconnection layer four?
- Asegment
- Bpacket
- Cframe
- Dbit
18What data unit is associated with the Open Systems Interconnection layer two?
- Asegment
- Bpacket
- Cframe
- Dbit
19What dedicated hardware device aggregates hundreds or thousands of VPN connections?
- AVPN server
- BVPN gateway
- CVPN switch
- DVPN concentrator
20What is the name of a computer or application program that intercepts user requests from the internal secure network and then processes that request on behalf of the user?
- Aforward proxy server
- BDNS server
- CVPN server
- Dtelnet server
21What is the name of an instruction that interrupts a program being executed and requests a service from the operating system?
- Asystem call
- Bunit call
- Chardware instruction
- Dsystem exception
22What kind of networking device forwards packets across different computer networks by reading destination addresses?
- Aswitch
- Brouter
- Cbridge
- Dfirewall
23What specific type of hardware card inserts into a web server that contains one or more co-processors to handle SSL/TLS processing?
- ASSL/TLS accelerator
- Bmedia gateway
- CSSL decryptor
- Dsecurity module
24What technology enables authorized users to use an unsecured public network, such as the Internet as if it were a secure private network?
- AIKE tunnel
- BVPN
- Cendpoint
- Drouter
25What technology will examine the current state of a network device before allowing it can to connect to the network and force any device that does not meet a specified set of criteria to connect only to a quarantine network?
- Anetwork access control
- Bvirtual LANs
- Cnetwork address translation
- Dhost health checks
26What term is used to describe the software agents that are used by NAC and installed on devices to gather information?
- ANAC check agents
- Bserver health agents
- Chost agent health checks
- Dnetwork health agents
27What type of dedicated cryptographic processor that provides protection for cryptographic keys?
- ASSL/TLS accelerator
- Bmedia gateway
- CSSL decryptor
- Dhardware security module
28What type of monitoring compares network traffic, activities, transactions, or behavior against a database of known attack patterns?
- Aapplication-based
- Bprotocol-based
- Cbehavioral-based
- Dsignature-based
29What type of network access control uses Active Directory to scan a device to verify that it is in compliance?
- Aagentless NAC
- Bdissolvable NAC
- Cdependent NAC
- Dpermanent NAC
30What type of network is a private network that belongs to an organization that can only be accessed by approved internal users?
- Aextranet
- Bintranet
- Centerprise network
- Dguest network
31What type of network is a private network that can also be accessed by authorized external customers, vendors, and partners?
- Aextranet
- Bintranet
- Centerprise network
- Dguest network
32What vendor neutral protocol implements support for VLAN tagging?
- AISL
- BVTP
- C802.1Q
- DVSTP
33When a private network uses a single public IP address, and each outgoing TCP packet uses a different port to allow for proper translation, what networking technology is in use?
- APAT
- BPNAT
- CNAPT
- DNAT
34When VPN network traffic is routing only some traffic over the secure VPN while other traffic directly accesses the Internet, what technology is being used?
- Apriority tunnel
- Bsplit tunneling
- Cfull tunnel
- Dshared tunneling
35Which network address below is not a private IP address network?
- A10.4.5.0
- B172.63.255.0
- C192.168.255.0
- D172.17.16.0
36Which of the following is a server that routes incoming requests coming from an external network to the correct internal server?
- Aforward proxy
- Bapplication proxy
- Csystem proxy
- Dreverse proxy
37Which of the following is a software-based application that runs on a local host computer that can detect an attack as it occurs?
- Alocal-based intrusion detection system
- Bhost-based intrusion detection system
- Chost-based application protection
- Dlocal-based application protection
38Which of the following is a system of security tools that are used to recognize and identify data that is critical to the organization and ensure that it is protected?
- AUSB blocking
- Bcontent inspection
- Cstorage sensors
- Ddata loss prevention
39Which of the following is defined as a security analysis of the transaction within its approved context?
- AUSB blocking
- Bcontent inspection
- Cstorage sensors
- Ddata loss prevention
40Workgroup switches must work faster than core switches.
- ATrue
- BFalse
Information
- Description
- Ch 6 quiz
- Author
- C Danvers
- Language
- English
- Views
- 986
- Tags
- Rating
- No ratings yet Rate this quiz