Question 1

On a Linux system, which command allows you to modify settings used by the built-in packet filtering firewall?

Accepted Answer

A)  ipf 
B)  modfire 
C)  iptables 
D)  netwall 
A)  ipf 
B)  modfire 
C)  iptables 
D)  netwall C

Question 2

In order to prevent ports that are serving network hosts from being considered as best paths, what should be enabled to block BPDUs?

Accepted Answer

A)  BPDU filter 
B)  BPDU guard 
C)  root guard 
D)  BPDU drop 
A)  BPDU filter 
B)  BPDU guard 
C)  root guard 
D)  BPDU drop B

Question 3

The Wired Equivalent Privacy standard had what significant disadvantage?

Accepted Answer

A)  It did not allow the use of a password for access to the network. 
B)  It provided no encryption for traffic sent over the air. 
C)  It used a shared encryption key for all clients, and the key might never change. 
D)  It only encrypted the initial connection authentication, but did not encrypt subsequent traffic. 
A)  It did not allow the use of a password for access to the network. 
B)  It provided no encryption for traffic sent over the air. 
C)  It used a shared encryption key for all clients, and the key might never change. 
D)  It only encrypted the initial connection authentication, but did not encrypt subsequent traffic. C

Question 4

What is the difference between an Intrusion Detection System and an Intrusion Protection System?

Accepted Answer

An IDS (intrusion detection system) is a

Question 5

Describe the TACACS+ AAA protocol, and detail how it differs from RADIUS.

Accepted Answer

TACACS+ (Terminal Access Controller Acce

Question 6

What are the three components required to manage access control to a network and its resources?

Accepted Answer

The three components required are as fol

Question 7

Which legacy authentication protocol requires mutual authentication?

Accepted Answer

A)  Password Authentication Protocol (PAP) 
B)  Challenge Handshake Authentication Protocol (CHAP) 
C)  Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) 
D)  Microsoft Challenge Handshake Authentication Protocol, version 2 (MS-CHAPv2) 
A)  Password Authentication Protocol (PAP) 
B)  Challenge Handshake Authentication Protocol (CHAP) 
C)  Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) 
D)  Microsoft Challenge Handshake Authentication Protocol, version 2 (MS-CHAPv2)

Question 8

In regards to the use of local authentication, what statement is accurate?

Accepted Answer

A)  Local authentication provides the most security. 
B)  Local authentication is scalable for large networks. 
C)  Local authentication is network and server failure tolerant. 
D)  Local authentication does not allow for strong enough passwords. 
A)  Local authentication provides the most security. 
B)  Local authentication is scalable for large networks. 
C)  Local authentication is network and server failure tolerant. 
D)  Local authentication does not allow for strong enough passwords.

Question 9

A stateless firewall inspects each incoming packet to determine whether it belongs to a currently active connection.

Accepted Answer

A) True 
 B)False

Question 10

Which of the following is an example of proxy server software?

Accepted Answer

A)  Squid 
B)  BIND 
C)  Snort 
D)  Apache 
A)  Squid 
B)  BIND 
C)  Snort 
D)  Apache

Question 11

If your LAN utilizes a proxy server, and you wish to send an email message from your workstation inside the LAN to a colleague via the Internet, what does this process look like?

Accepted Answer

The process works as follows:
Step 1: Yo

Question 12

What is multifactor authentication, and what are some examples?

Accepted Answer

An authentication process that requires

Question 13

How does the CCMP help ensure data confidentiality?

Accepted Answer

CCMP helps ensure data confidentiality w

Question 14

What IEEE standard includes an encryption key generation and management scheme known as TKIP?

Accepted Answer

A)  802.11i 
B)  802.11h 
C)  802.1X 
D)  802.11j 
A)  802.11i 
B)  802.11h 
C)  802.1X 
D)  802.11j

Question 15

The Group Policy utility can be opened by typing what name into a Run box?

Accepted Answer

A)  secpol.msc 
B)  gpedit.msc 
C)  grouppol.msc 
D)  grppol.msc 
A)  secpol.msc 
B)  gpedit.msc 
C)  grouppol.msc 
D)  grppol.msc

Question 16

Of the three methods of access control (RBAC, DAC, and MAC), RBAC is the least secure of the options.

Accepted Answer

A) True 
 B)False

Question 17

In ACL statements, using the "any" keyword is equivalent to using a wildcard mask of what value?

Accepted Answer

A)  0.0.0.0 
B)  255.255.255.255 
C)  255.255.0.0 
D)  0.0.255.255 
A)  0.0.0.0 
B)  255.255.255.255 
C)  255.255.0.0 
D)  0.0.255.255

Question 18

By default, Active Directory is configured to use the Kerberos protocol, but can be configured to use LDAP or a combination of LDAP and Kerberos.

Accepted Answer

A) True 
 B)False

Question 19

When utilizing Kerberos, an access granting ticket is the same as a key.

Accepted Answer

A) True 
 B)False

Question 20

You have been tasked with the configuration of a Juniper switch, and have been told to restrict the number of MAC addresses allowed in the MAC address table. What command should you use?

Accepted Answer

A)  set max-mac 
B)  set total-macs 
C)  mac-address limit 
D)  mac-limit 
A)  set max-mac 
B)  set total-macs 
C)  mac-address limit 
D)  mac-limit

On a Linux system, which command allows you to modify settings used by the built-in packet filtering firewall?

In order to prevent ports that are serving network hosts from being considered as best paths, what should be enabled to block BPDUs?

The Wired Equivalent Privacy standard had what significant disadvantage?

What is the difference between an Intrusion Detection System and an Intrusion Protection System?

Describe the TACACS+ AAA protocol, and detail how it differs from RADIUS.

What are the three components required to manage access control to a network and its resources?

Which legacy authentication protocol requires mutual authentication?

In regards to the use of local authentication, what statement is accurate?

A stateless firewall inspects each incoming packet to determine whether it belongs to a currently active connection.

Which of the following is an example of proxy server software?

If your LAN utilizes a proxy server, and you wish to send an email message from your workstation inside the LAN to a colleague via the Internet, what does this process look like?

What is multifactor authentication, and what are some examples?

How does the CCMP help ensure data confidentiality?

What IEEE standard includes an encryption key generation and management scheme known as TKIP?

The Group Policy utility can be opened by typing what name into a Run box?

Of the three methods of access control (RBAC, DAC, and MAC), RBAC is the least secure of the options.

In ACL statements, using the "any" keyword is equivalent to using a wildcard mask of what value?

By default, Active Directory is configured to use the Kerberos protocol, but can be configured to use LDAP or a combination of LDAP and Kerberos.

When utilizing Kerberos, an access granting ticket is the same as a key.

You have been tasked with the configuration of a Juniper switch, and have been told to restrict the number of MAC addresses allowed in the MAC address table. What command should you use?

Introduction to Networking

Network Infrastructure and Documentation

Addressing on Networks

Network Protocols and Routing

Network Cabling

Wireless Networking

Virtualization and Cloud Computing

Subnets and VLANs

Network Risk Management

Network Performance and Recovery

Wide Area Networks

Filters

Exam 10: Security in Network Design

On a Linux system, which command allows you to modify settings used by the built-in packet filtering firewall?

In order to prevent ports that are serving network hosts from being considered as best paths, what should be enabled to block BPDUs?

The Wired Equivalent Privacy standard had what significant disadvantage?

What is the difference between an Intrusion Detection System and an Intrusion Protection System?

Describe the TACACS+ AAA protocol, and detail how it differs from RADIUS.

What are the three components required to manage access control to a network and its resources?

Which legacy authentication protocol requires mutual authentication?

In regards to the use of local authentication, what statement is accurate?

A stateless firewall inspects each incoming packet to determine whether it belongs to a currently active connection.

Which of the following is an example of proxy server software?

If your LAN utilizes a proxy server, and you wish to send an email message from your workstation inside the LAN to a colleague via the Internet, what does this process look like?

What is multifactor authentication, and what are some examples?

How does the CCMP help ensure data confidentiality?

What IEEE standard includes an encryption key generation and management scheme known as TKIP?

The Group Policy utility can be opened by typing what name into a Run box?

Of the three methods of access control (RBAC, DAC, and MAC), RBAC is the least secure of the options.

In ACL statements, using the "any" keyword is equivalent to using a wildcard mask of what value?

By default, Active Directory is configured to use the Kerberos protocol, but can be configured to use LDAP or a combination of LDAP and Kerberos.

When utilizing Kerberos, an access granting ticket is the same as a key.

You have been tasked with the configuration of a Juniper switch, and have been told to restrict the number of MAC addresses allowed in the MAC address table. What command should you use?

Introduction to Networking

Network Infrastructure and Documentation

Addressing on Networks

Network Protocols and Routing

Network Cabling

Wireless Networking

Virtualization and Cloud Computing

Subnets and VLANs

Network Risk Management

Network Performance and Recovery

Wide Area Networks

Filters