Quiz
CCNA Security Chapter 1 Exam
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (24)
1What method can be used to mitigate ping sweeps?
- Ausing encrypted or hashed authentication protocols
- Binstalling antivirus software on hosts
- Cdeploying antisniffer software on all network devices
- Dblocking ICMP echo and echo-replies at the network edge
2 What are the three major components of a worm attack? (Choose three.)
- Aa penetration mechanism
- Ban infecting vulnerability
- Ca payload
- Dan enabling vulnerability
- Ea probing mechanism
- Fa propagation mechanism
3Which statement accurately characterizes the evolution of threats to network security?
- AInternal threats can cause even greater damage than external threats
- BThreats have become less sophisticated while the technical knowledge needed by an attacker has grown
- CEarly Internet users often engaged in activities that would harm other users
- DInternet architects planned for network security from the beginning.
4What causes a buffer overflow?
- Alaunching a security countermeasure to mitigate a Trojan horse
- Bsending repeated connections such as Telnet to a particular device, thus denying other data sources.
- Cdownloading and installing too many software updates at one time
- Dattempting to write more data to a memory location than that location can hold
- Esending too much information to two or more interfaces of the same device, thereby causing dropped packets
5What commonly motivates cybercriminals to attack networks as compared to hactivists or state-sponsored hackers?
- Astatus among peers
- Bfame seeking
- Cfinancial gain
- Dpolitical reasons
6Which two network security solutions can be used to mitigate DoS attacks? (Choose two.)
- Avirus scanning
- Bintrusion protection systems
- Capplying user authentication
- Dantispoofing technologies
- Edata encryption
7Which two statements characterize DoS attacks? (Choose two.)
- AThey are difficult to conduct and are initiated only by very skilled attackers
- BThey are commonly launched with a tool called L0phtCrack.
- CExamples include smurf attacks and ping of death attacks.
- DThey attempt to compromise the availability of a network, host, or application
- EThey always precede access attacks
8An attacker is using a laptop as a rogue access point to capture all network traffic from a targeted user. Which type of attack is this?
- Atrust exploitation
- Bbuffer overflow
- Cman in the middle
- Dport redirection
9What functional area of the Cisco Network Foundation Protection framework is responsible for device-generated packets required for network operation, such as ARP message exchanges and routing advertisements?
- Adata plane
- Bcontrol plane
- Cmanagement plane
- Dforwarding plane
10What are the three components of information security ensured by cryptography? (Choose three.)
- Athreat prevention
- Bauthorization
- Cconfidentiality
- Dcountermeasures
- Eintegrity
- Favailability
11What is the primary method for mitigating malware?
- Ausing encrypted or hashed authentication protocols
- Binstalling antivirus software on all hosts
- Cblocking ICMP echo and echo-replies at the network edge
- Ddeploying intrusion prevention systems throughout the network
12What is an objective of a state-sponsored attack?
- Ato gain financial prosperity
- Bto sell operation system vulnerabilities to other hackers
- Cto gain attention
- Dto right a perceived wrong
13What role does the Security Intelligence Operations (SIO) play in the Cisco SecureX architecture?
- Aidentifying and stopping malicious traffic
- Bauthenticating users
- Cenforcing policy
- Didentifying applications
14What worm mitigation phase involves actively disinfecting infected systems?
- ATreatment
- Bcontainment
- Cinoculation
- Dquarantine
15How is a smurf attack conducted?
- Aby sending a large number of packets to overflow the allocated buffer memory of the target device
- Bby sending a large number of ICMP requests to directed broadcast addresses from a spoofed source address on the same network
- Cby sending a large number of TCP SYN packets to a target device from a spoofed source address
- Dby sending an echo request in an IP packet larger than the maximum packet size of 65,535 bytes
16What is a characteristic of a Trojan horse as it relates to network security?
- AMalware is contained in a seemingly legitimate executable program
- BExtreme quantities of data are sent to a particular network device interface.
- CAn electronic dictionary is used to obtain a password to be used to infiltrate a key network device.
- DToo much information is destined for a particular memory block causing additional memory areas to be affected.
17What is the first step in the risk management process specified by the ISO/IEC?
- ACreate a security policy.
- BConduct a risk assessment.
- CInventory and classify IT assets.
- DCreate a security governance model.
18What is the significant characteristic of worm malware?
- AA worm can execute independently
- BA worm must be triggered by an event on the host system.
- CWorm malware disguises itself as legitimate software
- DOnce installed on a host system, a worm does not replicate itself.
19Which condition describes the potential threat created by Instant On in a data center?
- Awhen the primary firewall in the data center crashes
- Bwhen an attacker hijacks a VM hypervisor and then launches attacks against other devices in the data center
- Cwhen the primary IPS appliance is malfunctioning
- Dwhen a VM that may have outdated security policies is brought online after a long period of inactivity
20What are the three core components of the Cisco Secure Data Center solution? (Choose three.)
- Amesh network
- Bsecure segmentation
- Cvisibility
- Dthreat defense
- Eservers
- Finfrastructure
21A disgruntled employee is using Wireshark to discover administrative Telnet usernames and passwords. What type of network attack does this describe?
- Atrust exploitation
- Bdenial of service
- Creconnaissance
- Dport redirection
22Which two statements describe access attacks? (Choose two.)
- ATrust exploitation attacks often involve the use of a laptop to act as a rogue access point to capture and copy all network traffic in a public location, such as a wireless hotspot.
- BTo detect listening services, port scanning attacks scan a range of TCP or UDP port numbers on a host
- CBuffer overflow attacks write data beyond the hallocated buffer memory to overwrite valid data or to exploit systems to execute malicious code.
- DPassword attacks can be implemented by the use os brute-force attack methods, Trojan horse, or packet sniffers.
- EPort redirection attacks use a network adapter card in promiscuous mode to capture all network packets that are sent across a LAN.
23What is a ping sweep?
- Aa scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.
- Ba software application that enables the capture of all network packets that are sent across a LAN
- Ca query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain
- Da network scanning technique that indicates the live hosts in a range of IP addresses
24As a dedicated network security tool, an intrusion ________ system can provide detection and blocking of attacks in real time.
- Aprevention
- Bnonprevention
Informações
- Descrição
- CCNA Security Chapter 1 Exam
- Autor
- d94829 d94829
- Idioma
- English
- Visualizações
- 1.842
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz