question

You manage a network with a single switch. All hosts connect to the network through the switch. You want to increase the security of devices that are part of the accounting department. You want to make sure that broadcast traffic sent by an accounting computer is only received by other accounting computers, and you want to implement ACLs to control traffic sent to accounting computers through network. What should you do?

answer

Use a router to configure a subnet for the accounting computers.

question

You want to reduce collisions by creating separate collision domains and virtual LANs. Which of the following devices should you choose?

answer

Switch

question

Which of the following is an average of using switches to create virtual LANs?

answer

Broadcast traffic travels to a subset of devices rather than to all devices on the network.

question

Which characteristic of a switch can improve bandwidth utilization and reduce the risk of sniffing attacks on the network?

answer

A switch filters port traffic based on MAC address.

question

Which of the following devices does "NOT" examine the MAC address in a frame before processing or forwarding the frame?

answer

Hub

question

What characteristic of hubs poses a security threat?

answer

Hubs transmit frames to all hosts on all ports.

question

Which of the following describes how a router can be used to implement security on your network?

answer

Use an access control list to deny traffic from specific IP addresses.

question

A relative new employee in the data entry cubical farm was assigned a user account similar to that of all of the other data entry employees. However, audit logs have shown that this user account has been used to change ACLs on several confidential files and has accessed data in restricted areas. This situation indicates which of the following has occurred?

answer

Privilege escalation

question

An attacker has obtained the logon credentials for a regular user on your network. Which type of security threat exists if this user account is used to perform administrative functions?

answer

Privilege escalation

question

You've just deployed a new Cisco router that a connects several network segments in your Org. What should you do to increase the security of this device?

answer

Use a stronger administrative password

question

While deploying a network application, a programmer adds functionally that allows her to access the running program, whithout authentication, to capture debugging data. what type of security weakness does this represent?

answer

Backdoor

question

Which of the following attacks, if successful, causes a switch to function like a hub?

answer

MAC flooding

question

Which of the following switch attacks associates the attacker's MAC address with the IP address of the victim's devices?

answer

ARP spoofing/poisoning

question

Which is a typical goal of MAC spoofing?

answer

Bypassing 802.1x port-based security

question

Which protocol should you disable on the user access ports of a switch?

answer

DTP

question

You've just deployed a new Cisco router that a connects several network segments in your Org. What should you do to increase the security of this device? select two

answer

Change the default admin username and password Use an SSH client to access the router configuration

question

You've just deployed a new Cisco router that a connects several network segments in your Org. What should you do to increase the security of this device?

answer

Move the router to a secure server room

question

You've just deployed a new Cisco router that a connects several network segments in your Org. What should you do to increase the security of this device?

answer

Use SCP to back up the router configuration to a remote location

question

You can use a variety of methods to manage the configuration of a network router. Match the management option on the right with its corresponding description on the left.

answer

SSL Uses public-key crypto HTTP Transfers data in clear text SSH Uses public-key crypto Telnet Transfers data in clear text Console port cannot be sniffed

question

A virtual LAN can be created using which of the following?

answer

Switch

question

When configuring VLANs on a switch, what is used to identify VLAN membership of a device?

answer

Switch port

question

You want to increase the security of your network by allowing only authenticated users to be able to access network devices through a switch. Which of the following should you implement?

answer

802.1x

question

Which of the following applications typically use 802.1x authentication? select two

answer

Controlling access through a wireless access point Controlling access though a switch

question

You manage a network that uses a single switch. All ports within your building connect through the single switch. In the lobby of your building are three RJ-45 ports connected to the switch. You want to allow visitors to plug into these ports to gain Internet Access, but they should not have access to any other devices on your private network. Employees connected throughout the rest of your building should have both private and Internet access. Which feature should you implement?

answer

VLANs

question

When configuring VLANs on a switch, what type of switch ports are members of all VLANs defined on the switch?

answer

Trunk ports

question

You manage a network that uses a single switch. All ports within your building connect through the single switch. In the lobby of your building are three RJ-45 ports connected to the switch. You want to make sure that visitors cannot plug in their computer to the free network jacks and connect to the network. However, employees who plug into those same jacks should be able to connect to the network. What feature should you configure?

answer

Port authentication

question

Which of the following solutions would you implement to eliminate switching loops?

answer

Spanning Tree

question

You manage a single subnet with three switches. The switches are connected to provide redundant paths between the switches. Which feature prevents switching loops and ensures there is only a single active path between any two switches?

answer

Spanning tree

question

In which of the following situations would you use port security?

answer

You wanted to restrict the devices that could connect through a switch port

question

You are the network administrator for a city library. Throughout the library are several groups of computers that provide public access to the Internet. Supervision of these computers has been difficult. You've had problems with patrons brining personal laptops into the library and disconnecting the network cables from the library computers to connect their laptops to the Internet. The library computers are in groups of four. Each group of four computers is connected to a hub that is connected to the library network through an access point on a switch. You want to restrict access to the network so only the library computers are permitted connectivity to the internet. What can you do?

answer

Configure port security on the switch

question

You run a small network for your business that has a single router connected to the internet and a single switch. You keep sensitive doc. on a computer that would like to keep isolated from other computers on the network. Other hosts on the network should not be able to communicate with this computer through the switch, but you still need to access the network through the computer. What should you implement?

answer

VLAN

question

Which of the following best describes the concept of virtual LAN?

answer

Device on the same network logically grouped as if they were on separate networks

question

Your company is a small start-up company that has leased office in a building shared by other businesses. All businesses share a common network infrastructure. A single switch connects all devices in the building to the router that provides Internet access. You would like to make sure that your computers are isolated from computers used by other companies. Which feature should you request to have implemented?

answer

VLAN

question

You manage a network that uses multiple switches. You want to provide multiple paths between switches so that if one link goes down, an alternate path is available. What feature should your switch support?

answer

Spanning tree

question

You are concerned about protecting your network from network-based attacks from the Internet. Specially, you are concerned about attacks that have not yet been identified or that do not have prescribed protections. Which type of device should you use?

answer

Anomaly based IDS

question

What do host based intrusion detection systems often rely upon to perform their detection activities?

answer

Host system auditing capabilities

question

What actions can a typical passive intrusion Detection System (IDS) take when it detects and attack? select two

answer

The IDS logs all pertinent data about the intrusion An alert is generated and delivered via email, the console, or an SNMP trap

question

Which of the following activities are considered passive in regards to the functioning of an IDS? select two

answer

Monitoring the audit trails on a server Listening to network traffic

question

An active IDS system often performs which of the following actions? select two

answer

Update filters to clock suspect traffic perform reverse lookups to identify an intruder

question

Which IDS method searches for intrusion or attack attempts by recognizing patterns or identities listed in a database?

answer

Signature based

question

You have just installed a new network-based IDS system that uses signature recognition. What should you do on a regular basis?

answer

Update the signature files

question

What is the most common form of host based IDS that employs signature or pattern matching detection methods?

answer

Anti-virus software

question

You have configured a NIDS to monitor network traffic. Which of the following describes an attack that is not detected by the NIDS device?

answer

False negative

question

Which of the following describes a false positive when using an IPS device?

answer

Legitimate traffic being flagged as malicious

question

If maintaining confidentiality is of the utmost importance to your organization, what is the best response when an intruder is detected on your network?

answer

Disconnect the intruder

question

Which of the following devices is capable of detecting and responding to security threats?

answer

IPS

question

You want to create a collection of computers on your network that appear to have valuable data, but are really computers configured with fake data that could entice a potential intruder. Once the intruder connects, you want to be able to observe and gather information about the methods of attack that is being deployed. What should you implement?

answer

Honeynet

question

A honey pot is used for what purpose?

answer

To delay intruders in order to gather auditing data

question

Your organization uses a Web server to host an e-commerce site.... What should you do?

answer

Implement an application-aware IPS in front of the Web server.

question

Match the fabric zoning implementation on the right with the appropriate description on the left

answer

Hard zoning The SAN switch is configured Port zoning Zone membership Soft zoning The SAN fabric

question

You are implementing an iSCSI SAN that will be used by the file servers in your organization. Which of the following are true in the scenario? select two

answer

The Challenge-Handshake Authentication Protocol (CHAP) The Internet Protocol Security (IPsec)

question

You are implementing a Fibre Channel SAN that will be used by the database servers in your organization. Which of the following are true in this scenario? select two

answer

(ESP) (DH-CHAP)

question

Match the SAN security control on the right with the appropriate description on the left.

answer

Port locking Binds specific SAN IDs to specific SAN switch ports Fabric zoning Makes devices within a zone visible only to others devices within that same zone. Port type locking Limits the types of devices Virtual SANs Devices a SAN into LUN masking Makes LUNs available

question

you are designing a Gibre Channel SAN implementation that will be used by the file servers in your org. Which of the following is true in this scenario?

answer

LUN making provides weak security as it only obscures volume on the SAN

Chapter 7 Network Defense

Unlock all answers in this set

Haven't found what you were looking for?

Search for samples, answers to your questions and flashcards