Copiar y Editar

Ch 6 - Network Security Devices, Design, and Technology

Descripción

Ch 6 quiz
C Danvers
Test por C Danvers, actualizado hace más de 1 año
C Danvers
Creado por C Danvers hace alrededor de 6 años
905
0
0

Resumen del Recurso

Pregunta 1

Pregunta
A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?
Respuesta
  • Stateful frame filtering
  • Stateless frame filtering
  • Stateful packet filtering
  • Stateless packet filtering

Pregunta 2

Pregunta
All modern operating systems include a hardware firewall, usually called a host-based firewall.
Respuesta
  • True
  • False

Pregunta 3

Pregunta
An administrator has two servers that host the same web content, but only one server is utilized at a given time. What can be configured that can help to evenly distribute work across the network, and make use of both servers in a manner that is transparent to the end users?
Respuesta
  • stateful packet filtering
  • load balancing
  • failover servers
  • proxy servers

Pregunta 4

Pregunta
An agent may be a permanent NAC agent and reside on end devices until uninstalled, but it cannot be a dissolvable NAC agent.
Respuesta
  • True
  • False

Pregunta 5

Pregunta
An early networking device that functioned at layer 1 of the OSI model and added devices to a single segment is known as which of the following choices?
Respuesta
  • switch
  • router
  • firewall
  • hub

Pregunta 6

Pregunta
An intranet is a separate open network that anyone can access without prior authorization.
Respuesta
  • True
  • False

Pregunta 7

Pregunta
Anomaly monitoring is designed for detecting statistical anomalies.
Respuesta
  • True
  • False

Pregunta 8

Pregunta
A security advantage of VLANs is that they can be used to prevent direct communication between servers.
Respuesta
  • True
  • False

Pregunta 9

Pregunta
A web server must be accessible to untrusted outside users. What can be done to isolate this host and any additional hosts with similar requirements from more secured hosts on a network?
Respuesta
  • Install a VPN, configure host
  • Set up a proxy in front of the web server
  • Create a DMZ, add necessary hosts
  • Configure a reduction point on a firewall

Pregunta 10

Pregunta
Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.
Respuesta
  • True
  • False

Pregunta 11

Pregunta
If a network is completely isolated by an air gap from all other outside networks it is using what type of configuration?
Respuesta
  • physical network segregation
  • complete network segregation
  • network isolation
  • logical network segregation

Pregunta 12

Pregunta
NAT is not a specific device, technology, or protocol. It is a technique for substituting IP addresses.
Respuesta
  • True
  • False

Pregunta 13

Pregunta
One use of data loss prevention (DLP) is blocking the copying of files to a USB flash drive.
Respuesta
  • True
  • False

Pregunta 14

Pregunta
Select the technology that can be used to examine content through application-level filtering.
Respuesta
  • Application gateway
  • Security proxy
  • Web security gateway
  • Firewall

Pregunta 15

Pregunta
The management in your corporate office needs to group users on the network together logically even though they are attached to separate network switches. How can this be done?
Respuesta
  • Create a subnet for each network switch in use
  • Create additional subnets for the separate groups
  • Add all users to a single network segment
  • Create a VLAN and add the users' computers/ports to the correct VLAN

Pregunta 16

Pregunta
The OSI model breaks networking steps down into a series of six layers.
Respuesta
  • True
  • False

Pregunta 17

Pregunta
What data unit is associated with the Open Systems Interconnection layer four?
Respuesta
  • segment
  • packet
  • frame
  • bit

Pregunta 18

Pregunta
What data unit is associated with the Open Systems Interconnection layer two?
Respuesta
  • segment
  • packet
  • frame
  • bit

Pregunta 19

Pregunta
What dedicated hardware device aggregates hundreds or thousands of VPN connections?
Respuesta
  • VPN server
  • VPN gateway
  • VPN switch
  • VPN concentrator

Pregunta 20

Pregunta
What is the name of a computer or application program that intercepts user requests from the internal secure network and then processes that request on behalf of the user?
Respuesta
  • forward proxy server
  • DNS server
  • VPN server
  • telnet server

Pregunta 21

Pregunta
What is the name of an instruction that interrupts a program being executed and requests a service from the operating system?
Respuesta
  • system call
  • unit call
  • hardware instruction
  • system exception

Pregunta 22

Pregunta
What kind of networking device forwards packets across different computer networks by reading destination addresses?
Respuesta
  • switch
  • router
  • bridge
  • firewall

Pregunta 23

Pregunta
What specific type of hardware card inserts into a web server that contains one or more co-processors to handle SSL/TLS processing?
Respuesta
  • SSL/TLS accelerator
  • media gateway
  • SSL decryptor
  • security module

Pregunta 24

Pregunta
What technology enables authorized users to use an unsecured public network, such as the Internet as if it were a secure private network?
Respuesta
  • IKE tunnel
  • VPN
  • endpoint
  • router

Pregunta 25

Pregunta
What technology will examine the current state of a network device before allowing it can to connect to the network and force any device that does not meet a specified set of criteria to connect only to a quarantine network?
Respuesta
  • network access control
  • virtual LANs
  • network address translation
  • host health checks

Pregunta 26

Pregunta
What term is used to describe the software agents that are used by NAC and installed on devices to gather information?
Respuesta
  • NAC check agents
  • server health agents
  • host agent health checks
  • network health agents

Pregunta 27

Pregunta
What type of dedicated cryptographic processor that provides protection for cryptographic keys?
Respuesta
  • SSL/TLS accelerator
  • media gateway
  • SSL decryptor
  • hardware security module

Pregunta 28

Pregunta
What type of monitoring compares network traffic, activities, transactions, or behavior against a database of known attack patterns?
Respuesta
  • application-based
  • protocol-based
  • behavioral-based
  • signature-based

Pregunta 29

Pregunta
What type of network access control uses Active Directory to scan a device to verify that it is in compliance?
Respuesta
  • agentless NAC
  • dissolvable NAC
  • dependent NAC
  • permanent NAC

Pregunta 30

Pregunta
What type of network is a private network that belongs to an organization that can only be accessed by approved internal users?
Respuesta
  • extranet
  • intranet
  • enterprise network
  • guest network

Pregunta 31

Pregunta
What type of network is a private network that can also be accessed by authorized external customers, vendors, and partners?
Respuesta
  • extranet
  • intranet
  • enterprise network
  • guest network

Pregunta 32

Pregunta
What vendor neutral protocol implements support for VLAN tagging?
Respuesta
  • ISL
  • VTP
  • 802.1Q
  • VSTP

Pregunta 33

Pregunta
When a private network uses a single public IP address, and each outgoing TCP packet uses a different port to allow for proper translation, what networking technology is in use?
Respuesta
  • PAT
  • PNAT
  • NAPT
  • NAT

Pregunta 34

Pregunta
When VPN network traffic is routing only some traffic over the secure VPN while other traffic directly accesses the Internet, what technology is being used?
Respuesta
  • priority tunnel
  • split tunneling
  • full tunnel
  • shared tunneling

Pregunta 35

Pregunta
Which network address below is not a private IP address network?
Respuesta
  • 10.4.5.0
  • 172.63.255.0
  • 192.168.255.0
  • 172.17.16.0

Pregunta 36

Pregunta
Which of the following is a server that routes incoming requests coming from an external network to the correct internal server?
Respuesta
  • forward proxy
  • application proxy
  • system proxy
  • reverse proxy

Pregunta 37

Pregunta
Which of the following is a software-based application that runs on a local host computer that can detect an attack as it occurs?
Respuesta
  • local-based intrusion detection system
  • host-based intrusion detection system
  • host-based application protection
  • local-based application protection

Pregunta 38

Pregunta
Which of the following is a system of security tools that are used to recognize and identify data that is critical to the organization and ensure that it is protected?
Respuesta
  • USB blocking
  • content inspection
  • storage sensors
  • data loss prevention

Pregunta 39

Pregunta
Which of the following is defined as a security analysis of the transaction within its approved context?
Respuesta
  • USB blocking
  • content inspection
  • storage sensors
  • data loss prevention

Pregunta 40

Pregunta
Workgroup switches must work faster than core switches.
Respuesta
  • True
  • False
Mostrar resumen completo Ocultar resumen completo

¿Quieres crear tus propios Tests gratis con GoConqr? Más información.

Similar

CCNA Security 210-260 IINS - Exam 3
Mike M
Application of technology in learning
Jeff Wall
Innovative Uses of Technology
John Marttila
Ch1 - The nature of IT Projects
mauricio5509
The Internet
Gee_0599
SQL Quiz
R M
CCNA Answers – CCNA Exam
Abdul Demir
Professional, Legal, and Ethical Issues in Information Security
mfundo.falteni
System Analysis
R A
Flash Cards Networks
JJ Pro Wrestler
EDUC260- Multimodal Literacies for a Digital Age
angelwoo2002
Explorar la Librería