Ch 6 - Network Security Devices, Design, and Technology

1

A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?

1

All modern operating systems include a hardware firewall, usually called a host-based firewall.

1

An administrator has two servers that host the same web content, but only one server is utilized at a given time. What can be configured that can help to evenly distribute work across the network, and make use of both servers in a manner that is transparent to the end users?

1

An agent may be a permanent NAC agent and reside on end devices until uninstalled, but it cannot be a dissolvable NAC agent.

1

An early networking device that functioned at layer 1 of the OSI model and added devices to a single segment is known as which of the following choices?

1

An intranet is a separate open network that anyone can access without prior authorization.

1

Anomaly monitoring is designed for detecting statistical anomalies.

1

A security advantage of VLANs is that they can be used to prevent direct communication between servers.

1

A web server must be accessible to untrusted outside users. What can be done to isolate this host and any additional hosts with similar requirements from more secured hosts on a network?

1

Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.

1

If a network is completely isolated by an air gap from all other outside networks it is using what type of configuration?

1

NAT is not a specific device, technology, or protocol. It is a technique for substituting IP addresses.

1

One use of data loss prevention (DLP) is blocking the copying of files to a USB flash drive.

1

Select the technology that can be used to examine content through application-level filtering.

1

The management in your corporate office needs to group users on the network together logically even though they are attached to separate network switches. How can this be done?

1

The OSI model breaks networking steps down into a series of six layers.

1

What data unit is associated with the Open Systems Interconnection layer four?

1

What data unit is associated with the Open Systems Interconnection layer two?

1

What dedicated hardware device aggregates hundreds or thousands of VPN connections?

1

What is the name of a computer or application program that intercepts user requests from the internal secure network and then processes that request on behalf of the user?

1

What is the name of an instruction that interrupts a program being executed and requests a service from the operating system?

1

What kind of networking device forwards packets across different computer networks by reading destination addresses?

1

What specific type of hardware card inserts into a web server that contains one or more co-processors to handle SSL/TLS processing?

1

What technology enables authorized users to use an unsecured public network, such as the Internet as if it were a secure private network?

1

What technology will examine the current state of a network device before allowing it can to connect to the network and force any device that does not meet a specified set of criteria to connect only to a quarantine network?

1

What term is used to describe the software agents that are used by NAC and installed on devices to gather information?

1

What type of dedicated cryptographic processor that provides protection for cryptographic keys?

1

What type of monitoring compares network traffic, activities, transactions, or behavior against a database of known attack patterns?

1

What type of network access control uses Active Directory to scan a device to verify that it is in compliance?

1

What type of network is a private network that belongs to an organization that can only be accessed by approved internal users?

1

What type of network is a private network that can also be accessed by authorized external customers, vendors, and partners?

1

What vendor neutral protocol implements support for VLAN tagging?

1

When a private network uses a single public IP address, and each outgoing TCP packet uses a different port to allow for proper translation, what networking technology is in use?

1

When VPN network traffic is routing only some traffic over the secure VPN while other traffic directly accesses the Internet, what technology is being used?

1

Which network address below is not a private IP address network?

1

Which of the following is a server that routes incoming requests coming from an external network to the correct internal server?

1

Which of the following is a software-based application that runs on a local host computer that can detect an attack as it occurs?

1

Which of the following is a system of security tools that are used to recognize and identify data that is critical to the organization and ensure that it is protected?

1

Ch 6 quiz

Ch 6 - Network Security Devices, Design, and Technology

A firewall that keeps a record of the state of a connection between an internal computer and an external device is using what technology below?

All modern operating systems include a hardware firewall, usually called a host-based firewall.

An administrator has two servers that host the same web content, but only one server is utilized at a given time. What can be configured that can help to evenly distribute work across the network, and make use of both servers in a manner that is transparent to the end users?

An agent may be a permanent NAC agent and reside on end devices until uninstalled, but it cannot be a dissolvable NAC agent.

An early networking device that functioned at layer 1 of the OSI model and added devices to a single segment is known as which of the following choices?

An intranet is a separate open network that anyone can access without prior authorization.

Anomaly monitoring is designed for detecting statistical anomalies.

A security advantage of VLANs is that they can be used to prevent direct communication between servers.

A web server must be accessible to untrusted outside users. What can be done to isolate this host and any additional hosts with similar requirements from more secured hosts on a network?

Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.

If a network is completely isolated by an air gap from all other outside networks it is using what type of configuration?

NAT is not a specific device, technology, or protocol. It is a technique for substituting IP addresses.

One use of data loss prevention (DLP) is blocking the copying of files to a USB flash drive.

Select the technology that can be used to examine content through application-level filtering.

The management in your corporate office needs to group users on the network together logically even though they are attached to separate network switches. How can this be done?

The OSI model breaks networking steps down into a series of six layers.

What data unit is associated with the Open Systems Interconnection layer four?

What data unit is associated with the Open Systems Interconnection layer two?

What dedicated hardware device aggregates hundreds or thousands of VPN connections?

What is the name of a computer or application program that intercepts user requests from the internal secure network and then processes that request on behalf of the user?