Quiz
Chapter 6
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (20)
1Isabella is a security support manager for a large enterprise. In a recent meeting, she was asked which of the standard networking devices already present on the network could be configured to supplement the specific network security hardware devices that were recently purchased. Which of these standard networking devices would Isabella recommend?
- Arouter
- Bhub
- Cvirtual private network
- DSIEM device
2Ximena noticed that Sofia had created a network bridge on her new laptop between the unsecured wireless network and the organization’s secure intranet. Ximena explained to Sofia the problem associated with setting up the bridge. What did Ximena tell Sofia?
- AA bridge will block packets between two different types of networks.
- BA bridge cannot be used on any Internet connection.
- CA bridge would block packets from reaching the Internet.
- DA bridge could permit access to the secure wired network from the unsecured wireless network
3Which of these would NOT be a filtering mechanism found in a firewall ACL rule?
- Asource address
- Bdirection
- Cdate
- Dprotocol
4Which of the following devices can identify the application that send packets and then make decisions about filtering based on it?
- AInternet content filter
- Bapplication-based firewall
- Creverse proxy
- Dweb security gateway
5Which function does an Internet content filter NOT perform?
- Aintrusion detection
- BURL filtering
- Cmalware inspection
- Dcontent inspection
6How does network address translation (NAT) improve security?
- AIt filters based on protocol.
- BIt discards unsolicited packets.
- CIt masks the IP address of the NAT device.
- DNATs do not improve security.
7Francisco was asked by a student intern to explain the danger of a MAC flooding attack on a switch. What would Francisco say?
- AOnce the MAC address table is full the switch functions like a network hub.
- BA MAC flooding attack with filter to the local host computer’s MAC-to-IP address tables and prevent these hosts from reaching the network.
- CIn a defense of a MAC flooding attack network routers will freeze and not permit any incoming traffic.
- DA MAC flooding attack will prevent load balances from identifying the correct VIP of the servers.
8Which device is easiest for an attacker to take advantage of to capture and analyze packets?
- Arouter
- Bhub
- Cswitch
- Dload balancer
9Sebastian was explaining to his supervisor why the enterprise needed to implement port security. His supervisor asked what security action a flood guard could do when a MAC flooding attack occurred. Which of the following was NOT an answer that was given by Sebastian?
- AIgnore the new MAC addresses while allowing normal traffic from the single pre-approved MAC address
- BCause the device to enter a fail-open mode.
- CRecord new MAC addresses up to a specific limit
- DBlock the port entirely
10Which statement regarding a demilitarized zone (DMZ) is NOT true?
- AIt can be configured to have one or two firewalls.
- BIt typically includes an email or web server.
- CIt provides an extra degree of security.
- DIt contains servers that are used only by internal network users.
11Which statement about network address translation (NAT) is true?
- AIt substitutes MAC addresses for IP addresses.
- BIt can be stateful or stateless.
- CIt can be found only on core routers.
- DIt removes private addresses when the packet leaves the network.
12Which of these is NOT used in scheduling a load balancer?
- AThe IP address of the destination packet
- BData within the application message itself
- CRound-robin
- DAffinity
13In which of the following configurations are all the load balancers always active?
- AActive-active
- BActive-passive
- CPassive-active-passive
- DActive-load-passive-load
14Which device intercepts internal user requests and then processes those requests on behalf of the users?
- AForward proxy server
- BReverse proxy server
- CHost detection server
- DIntrusion prevention device
15Raul was asked to configure the VPN to preserve bandwidth. Which configuration would he choose?
- ASplit tunnel
- BFull tunnel
- CNarrow tunnel
- DWide tunnel
16Which device watches for attacks and sounds an alert only when one occurs?
- Afirewall
- Bnetwork intrusion detection system (NIDS)
- Cnetwork intrusion prevention system (NIPS)
- Dproxy intrusion device
17Which of the following is a multipurpose security device?
- AHardware security module
- BUnified Threat Management (UTM)
- CMedia gateway
- DIntrusion Detection/Prevention (ID/P)
18Which of the following CANNOT be used to hide information about the internal network?
- Anetwork address translation (NAT)
- Ba protocol analyzer
- Ca subnetter
- Da proxy server
19What is the difference between a network intrusion detection system (NIDS) and a network intrusion prevention system (NIPS)?
- AA NIDS provides more valuable information about attacks.
- BThere is no difference; a NIDS and a NIPS are equal.
- CA NIPS can take actions more quickly to combat an attack.
- DA NIPS is much slower because it uses protocol analysis.
20Which is the most secure type of firewall?
- Astateless packet filtering
- Bstateful packet filtering
- Cnetwork intrusion detection system replay
- Dreverse proxy analysis
Informações
- Descrição
- Information Technology Quiz sobre Chapter 6, criado por Justin Bittar em 14-12-2019.
- Autor
- Justin Bittar
- Idioma
- English
- Visualizações
- 4
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz