Deck 7: Administering a Secure Network

Question 1

A ____ forwards packets across computer networks.

A) bridge
B) router
C) switch
D) hub

Answer 1

B

Question 2

The most common protocol suite used today for local area networks (LANs) as well as the Internet is ____.

A) UDP
B) ASN.1
C) TCP/IP
D) BER

Answer 2

C

Question 3

____ can be used to determine whether new IP addresses are attempting to probe the network.

A) DNS logs
B) Firewall logs
C) DHCP logs
D) Proxy logs

Answer 3

B

Question 4

SNMP agents are protected with a password known as a(n) ____ in order to prevent unauthorized users from taking control over a device.

A) entity
B) community string
C) MIB
D) OID

Question 5

It is possible to segment a network by physical devices grouped into logical units through a(n) ____.

A) VLAN
B) subnets
C) IP address
D) MAC address

Question 6

Despite its promise to dramatically impact IT, cloud computing raises significant security concerns.

Question 7

TCP/IP uses its own five-layer architecture that includes Network Interface, Internet, Control, Transport, and Application.

Question 8

A ____ can create entries in a log for all queries that are received.

A) network log
B) DHCP log
C) DNS log
D) proxy log

Question 9

IEEE 802.1x is commonly used on wireless networks.

Question 10

IP telephony and Voice over IP (VoIP) are identical.

Question 11

____ is used to relay query messages.

A) ICMP
B) FTP
C) UDP
D) TCP

Question 12

TCP is responsible for addressing packets and sending them on the correct route to the destination, while IP is responsible for reliable packet transmission.

Question 13

Routers operate at the ____ Layer.

A) Transport
B) Application
C) Presentation
D) Network

Question 14

IP is the protocol that functions primarily at the Open Systems Interconnection (OSI) ____.

A) Transport Layer
B) Network Layer
C) Data link Layer
D) Presentation Layer

Question 15

The ____ is a database, organized as a hierarchy or tree, of the name of each site on the Internet and its corresponding IP number.

A) WINS
B) NIS
C) TACACS+
D) DNS

Question 16

Broadcast storms can be prevented with ____.

A) spanning tree
B) Dijkstra's algorithm
C) 802.11x
D) loop protection

Question 17

TCP is the main ____ protocol that is responsible for establishing connections and the reliable data transport between devices.

A) Application Layer
B) Presentation Layer
C) Network Layer
D) Transport Layer

Question 18

TCP port ____ is the FTP control port used for passing FTP commands.

A) 19
B) 20
C) 21
D) 22

Question 19

A ____ is a feature that controls a device's tolerance for unanswered service requests and helps to prevent a DoS attack.

A) flood guard
B) protocol guard
C) link guard
D) frame guard

Question 20

DNS poisoning can be prevented by using the latest editions of the DNS software known as ____.

A) BIND
B) DHCP
C) WINS
D) finger

Question 21

In the ____ cloud computing model, the customer has the highest level of control.

A) Cloud Application as a Service
B) Cloud Infrastructure as a Service
C) Cloud Software as a Service
D) Cloud System as a Service

Question 22

____ is a pay-per-use computing model in which customers pay only for the computing resources they need.

A) Cloud computing
B) Virtualization
C) Cloud Software as a Service
D) Infrastructure as a Service

Question 23

Server virtualization typically relies on the ____, which is software that runs on a physical computer to manage one or more virtual machine operating systems.

A) kernel
B) supervisor
C) hypercard
D) hypervisor

Question 24

List and describe the three fields that each ICMP message contains.

Question 25

Describe one way to use FTP on a local host computer.

Question 26

In the ____ model, the cloud computing vendor provides access to the vendor's software applications running on a cloud infrastructure.

A) Cloud Application as a Service
B) Cloud Infrastructure as a Service
C) Cloud Software as a Service
D) Cloud System as a Service

Question 27

Why is the Physical Layer omitted in the TCP/IP model?

Question 28

Discuss one security advantage to hosts running virtualization.

Question 29

What are the two types of community strings?

Question 30

____ is a means of managing and presenting computer resources by function without regard to their physical layout or location.

A) Portability
B) Virtualization
C) Availability
D) Migration assistance

Question 31

____ provides a greater degree of security by implementing port-based authentication.

A) IEEE 802.3ad
B) IEEE 802.11n
C) IEEE 802.1x
D) IEEE 802.1z

Question 32

The ____________________ Layer is omitted in the TCP/IP model.

Question 33

List the steps of a DNS lookup.

Question 34

With operating system virtualization, a(n) ____________________ system is the native operating system to the hardware.

Question 35

____________________ servers are intermediate hosts through which Web sites are accessed.

Question 36

List the steps in an 802.1x authentication procedure.

Question 37

Discuss the problems associated with storing the entire database of names and IP addresses in one location.

Question 38

____________________ computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.

Question 39

A(n) ____________________ is a record of events that occur.

Question 40

List and describe the three service models of cloud computing.

Question 41

List and describe three benefits offered by IP telephony.