Quiz
Quix7 - D4 - 50Q
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (50)
1What important factor differentiates Frame Relay from X.25?
- AA. Frame Relay supports multiple PVCs over a single WAN carrier
connection. - BB. Frame Relay is a cell-switching technology instead of a packetswitching
technology like X.25. - CC. Frame Relay does not provide a committed information rate (CIR).
- DD. Frame Relay only requires a DTE on the provider side.
- AA. Frame Relay supports multiple PVCs over a single WAN carrier
2During a security assessment of a wireless network, Jim discovers that
LEAP is in use on a network using WPA. What recommendation
should Jim make?- AA. Continue to use LEAP. It provides better security than TKIP for
WPA networks. - BB. Use an alternate protocol like PEAP or EAP-TLS and implement
WPA2 if supported. - CC. Continue to use LEAP to avoid authentication issues, but move to
WPA2. - DD. Use an alternate protocol like PEAP or EAP-TLS, and implement
Wired Equivalent Privacy to avoid wireless security issues.
- AA. Continue to use LEAP. It provides better security than TKIP for
3Ben has connected his laptop to his tablet PC using an 802.11g
connection. What wireless network mode has he used to connect these
devices?- AA. Infrastructure mode
- BB. Wired extension mode
- CC. Ad hoc mode
- DD. Stand-alone mode
4Lauren’s and Nick’s PCs simultaneously send traffic by transmitting at
the same time. What network term describes the range of systems on a
network that could be affected by this same issue?- AA. The subnet
- BB. The supernet
- CC. A collision domain
- DD. A broadcast domain
5Sarah is manually reviewing a packet capture of TCP traffic and finds
that a system is setting the RST flag in the TCP packets it sends
repeatedly during a short period of time. What does this flag mean in
the TCP packet header?- AA. RST flags mean “Rest.” The server needs traffic to briefly pause.
- BB. RST flags mean “Relay-set.” The packets will be forwarded to the
address set in the packet. - CC. RST flags mean “Resume Standard.” Communications will resume
in their normal format. - DD. RST means “Reset.” The TCP session will be disconnected.
6Gary is deploying a wireless network and wants to deploy the fastest
possible wireless technology. Due to technical constraints, he is
limited to using a 2.4 GHz option. Which one of the following wireless
networking standards should he use?- AA. 802.11a
- BB. 802.11g
- CC. 802.11n
- DD. 802.11ac
7Chris is configuring an IDS to monitor for unencrypted FTP traffic.
What ports should Chris use in his configuration?- AA. TCP 20 and 21
- BB. TCP 21 only
- CC. UDP port 69
- DD. TCP port 21 and UDP port 21
8Which OSI layer includes electrical specifications, protocols, and
interface standards?- AA. The Transport layer
- BB. The Device layer
- CC. The Physical layer
- DD. The Data Link layer
9FHSS, DSSS, and OFDM all use what wireless communication method
that occurs over multiple frequencies simultaneously?- AA. WiFi
- BB. Spread Spectrum
- CC. Multiplexing
- DD. Orthogonal modulation
10Brian is selecting an authentication protocol for a PPP connection. He
would like to select an option that encrypts both usernames and
passwords and protects against replay using a challenge/response
dialog. He would also like to reauthenticate remote systems
periodically. Which protocol should he use?- AA. PAP
- BB. CHAP
- CC. EAP
- DD. LEAP
11Which one of the following protocols is commonly used to provide
backend authentication services for a VPN?- AA. HTTPS
- BB. RADIUS
- CC. ESP
- DD. AH
12What network topology is shown in the following image?
- AA. A ring
- BB. A bus
- CC. A star
- DD. A mesh
13What type of firewall design is shown in the diagram?
- AA. A single-tier firewall
- BB. A two-tier firewall
- CC. A three-tier firewall
- DD. A four-tier firewall
14If the VPN grants remote users the same access to network and system
resources as local workstations have, what security issue should Chris
raise?- AA. VPN users will not be able to access the web server.
- BB. There is no additional security issue; the VPN concentrator’s
logical network location matches the logical network location of the
workstations. - CC. Web server traffic is not subjected to stateful inspection.
- DD. VPN users should only connect from managed PCs.
15If Chris wants to stop cross-site scripting attacks against the web
server, what is the best device for this purpose, and where should he
put it?- AA. A firewall, location A
- BB. An IDS, location A
- CC. An IPS, location B
- DD. A WAF, location C
16Susan is deploying a routing protocol that maintains a list of
destination networks with metrics that include the distance in hops to
them and the direction traffic should be sent to them. What type of
protocol is she using?- AA. A link-state protocol
- BB. A link-distance protocol
- CC. A destination metric protocol
- DD. A distance-vector protocol
17Ben has configured his network to not broadcast an SSID. Why might
Ben disable SSID broadcast, and how could his SSID be discovered?- AA. Disabling SSID broadcast prevents attackers from discovering the
encryption key. The SSID can be recovered from decrypted
packets. - BB. Disabling SSID broadcast hides networks from unauthorized
personnel. The SSID can be discovered using a wireless sniffer. - CC. Disabling SSID broadcast prevents issues with beacon frames. The
SSID can be recovered by reconstructing the BSSID. - DD. Disabling SSID broadcast helps avoid SSID conflicts. The SSID can
be discovered by attempting to connect to the network.
- AA. Disabling SSID broadcast prevents attackers from discovering the
18What network tool can be used to protect the identity of clients while
providing Internet access by accepting client requests, altering the
source addresses of the requests, mapping requests to clients, and
sending the modified requests out to their destination?- AA. A gateway
- BB. A proxy
- CC. A router
- DD. A firewall
19During troubleshooting, Chris uses the nslookup command to check
the IP address of a host he is attempting to connect to. The IP he sees
in the response is not the IP that should resolve when the lookup is
done. What type of attack has likely been conducted?- AA. DNS spoofing
- BB. DNS poisoning
- CC. ARP spoofing
- DD. A Cain attack
20A remote access tool that copies what is displayed on a desktop PC to a
remote computer is an example of what type of technology?- AA. Remote node operation
- BB. Screen scraping
- CC. Remote control
- DD. RDP
21Which email security solution provides two major usage modes: (1)
signed messages that provide integrity, sender authentication, and
nonrepudiation; and (2) an enveloped message mode that provides
integrity, sender authentication, and confidentiality?- AA. S/MIME
- BB. MOSS
- CC. PEM
- DD. DKIM
22During a security assessment, Jim discovers that the organization he is
working with uses a multilayer protocol to handle SCADA systems and
recently connected the SCADA network to the rest of the
organization’s production network. What concern should he raise
about serial data transfers carried via TCP/IP?- AA. SCADA devices that are now connected to the network can now be
attacked over the network. - BB. Serial data over TCP/IP cannot be encrypted.
- CC. Serial data cannot be carried in TCP packets.
- DD. TCP/IP’s throughput can allow for easy denial of service attacks
against serial devices.
- AA. SCADA devices that are now connected to the network can now be
23What type of key does WEP use to encrypt wireless communications?
- AA. An asymmetric key
- BB. Unique key sets for each host
- CC. A predefined shared static key
- DD. Unique asymmetric keys for each host
24Arnold is receiving reports from end users that their internet
connections are extremely slow. He looks at the firewall and
determines that there are thousands of unexpected inbound
connections per second arriving from all over the world. What type of
attack is most likely occurring?- AA. A worm
- BB. A denial of service attack
- CC. A virus
- DD. A smurf attack
25What speed and frequency range is used by 802.11n?
- AA. 54 Mbps, 5 GHz
- BB. 200+ Mbps, 5GHz
- CC. 200+ Mbps, 2.4 and 5 GHz
- DD. 1 Gbps, 5 GHz
26The Address Resolution Protocol (ARP) and the Reverse Address
Resolution Protocol (RARP) operate at what layer of the OSI model?- AA. Layer 1
- BB. Layer 2
- CC. Layer 3
- DD. Layer 4
27Which of the following is a converged protocol that allows storage
mounts over TCP, and which is frequently used as a lower-cost
alternative to Fibre Channel?- AA. MPLS
- BB. SDN
- CC. VoIP
- DD. iSCSI
28Chris is building an Ethernet network and knows that he needs to span
a distance of more than 150 meters with his 1000BaseT network. What
network technology should he use to help with this?- AA. Install a repeater or a concentrator before 100 meters.
- BB. Use Category 7 cable, which has better shielding for higher speeds.
- CC. Install a gateway to handle the distance.
- DD. Use STP cable to handle the longer distance at high speeds.
29What protocol is the messaging traffic most likely to use based on the
diagram?
- AA. SLACK
- BB. HTTP
- CC. SMTP
- DD. HTTPS
30What security concern does sending internal communications from A
to B raise?- AA. The firewall does not protect system B.
- BB. System C can see the broadcast traffic from system A to B.
- CC. It is traveling via an unencrypted protocol.
- DD. Messaging does not provide nonrepudation.
31How could Lauren’s company best address a desire for secure
messaging for users of internal systems A and C?- AA. Use a third-party messaging service.
- BB. Implement and use a locally hosted service.
- CC. Use HTTPS.
- DD. Discontinue use of messaging and instead use email, which is more
secure.
32Which of the following drawbacks is a concern when multilayer
protocols are allowed?- AA. A range of protocols may be used at higher layers.
- BB. Covert channels are allowed.
- CC. Filters cannot be bypassed.
- DD. Encryption can’t be incorporated at multiple layers.
33What network topology is shown in the following image?
- AA. A ring
- BB. A star
- CC. A bus
- DD. A mesh
34Chris uses a cellular hot spot (modem) to provide internet access when
he is traveling. If he leaves the hot spot connected to his PC while his
PC is on his organization’s corporate network, what security issue
might he cause?- AA. Traffic may not be routed properly, exposing sensitive data.
- BB. His system may act as a bridge from the internet to the local
network. - CC. His system may be a portal for a reflected DDoS attack.
- DD. Security administrators may not be able to determine his IP
address if a security issue occurs.
35In her role as an information security professional, Susan has been
asked to identify areas where her organization’s wireless network may
be accessible even though it isn’t intended to be. What should Susan
do to determine where her organization’s wireless network is
accessible?- AA. A site survey
- BB. Warwalking
- CC. Wardriving
- DD. A design map
36The DARPA TCP/IP model’s Application layer matches up to what
three OSI model layers?- AA. Application, Presentation, and Transport.
- BB. Presentation, Session, and Transport.
- CC. Application, Presentation, and Session.
- DD. There is not a direct match. The TCP model was created before the
OSI model.
37One of Susan’s attacks during a penetration test involves inserting
false ARP data into a system’s ARP cache. When the system attempts
to send traffic to the address it believes belongs to a legitimate system,
it will instead send that traffic to a system she controls. What is this
attack called?- AA. RARP flooding
- BB. ARP cache poisoning
- CC. A denial of ARP attack
- DD. ARP buffer blasting
38Sue modifies her MAC address to one that is allowed on a network that
uses MAC filtering to provide security. What is the technique Sue
used, and what nonsecurity issue could her actions cause?- AA. Broadcast domain exploit, address conflict
- BB. Spoofing, token loss
- CC. Spoofing, address conflict
- DD. Sham EUI creation, token loss
39Jim’s audit of a large organization’s traditional PBX showed that
Direct Inward System Access (DISA) was being abused by third
parties. What issue is most likely to lead to this problem?- AA. The PBX was not fully patched.
- BB. The dial-in modem lines use unpublished numbers.
- CC. DISA is set up to only allow local calls.
- DD. One or more users’ access codes have been compromised.
40SMTP, HTTP, and SNMP all occur at what layer of the OSI model?
- AA. Layer 4
- BB. Layer 5
- CC. Layer 6
- DD. Layer 7
41Lauren uses the ping utility to check whether a remote system is up as
part of a penetration testing exercise. If she does not want to see her
own ping packets, what protocol should she filter out from her packet
sniffer’s logs?- AA. UDP
- BB. TCP
- CC. IP
- DD. ICMP
42Lauren wants to provide port-based authentication on her network to
ensure that clients must authenticate before using the network. What
technology is an appropriate solution for this requirement?- AA. 802.11a
- BB. 802.3
- CC. 802.15.1
- DD. 802.1x
43Ben has deployed a 1000BaseT 1 gigabit network and needs to run a
cable to another building. If Ben is running his link directly from a
switch to another switch in that building, what is the maximum
distance Ben can cover according to the 1000BaseT specification?- AA. 2 kilometers
- BB. 500 meters
- CC. 185 meters
- DD. 100 meters
44Jim is building the network for a remote site that only has ISDN as an
option for connectivity. What type of ISDN should he look for to get
the maximum speed possible?- AA. BRI
- BB. BPRI
- CC. PRI
- DD. D channel
45SPIT attacks target what technology?
- AA. Virtualization platforms
- BB. Web services
- CC. VoIP systems
- DD. Secure Process Internal Transfers
46What does a bluesnarfing attack target?
- AA. Data on IBM systems
- BB. An outbound phone call via Bluetooth
- CC. 802.11b networks
- DD. Data from a Bluetooth-enabled device
47Which of the following options includes standards or protocols that
exist in layer 6 of the OSI model?- AA. NFS, SQL, and RPC
- BB. TCP, UDP, and TLS
- CC. JPEG, ASCII, and MIDI
- DD. HTTP, FTP, and SMTP
48What network topology is shown here?
- AA. A ring
- BB. A bus
- CC. A star
- DD. A mesh
49There are four common VPN protocols. Which group listed contains
all of the common VPN protocols?- AA. PPTP, LTP, L2TP, IPsec
- BB. PPP, L2TP, IPsec, VNC
- CC. PPTP, L2F, L2TP, IPsec
- DD. PPTP, L2TP, IPsec, SPAP
50What network technology is best described as a token-passing network
that uses a pair of rings with traffic flowing in opposite directions?- AA. A ring topology
- BB. Token Ring
- CC. FDDI
- DD. SONET
Informações
- Descrição
- Good Luck!
- Autor
- Requiemdust Sheena
- Idioma
- English
- Visualizações
- 90
- Etiquetas
- Avaliação
- 5,0 de 5 · 1 avaliação Avalie este quiz