Deck 7: Designing a Secure Wireless Network

Question 1

____ IP addresses are designed to be used only on a private internal network and cannot be used on the Internet.

A) Public
B) Routable
C) Routing
D) Private

Answer 1

D

Question 2

____ are usually created by grouping together computers by Internet protocol (IP) addresses.

A) Segment domains
B) Collision domains
C) Subnets
D) Network segments

Answer 2

C

Question 3

____ is used to create smaller segments for security purposes.

A) CSMA/CA
B) CSMA/CD
C) Ethernet
D) Segmentation

Answer 3

D

Question 4

In a standard wired Ethernet network, all devices share the same media and a device can send a packet at any time rather than in a fixed or predictable fashion (known as ____ networking).

A) deterministic
B) sequential
C) polling
D) non-deterministic

Question 5

One standard for marking VLAN packets is the IEEE ____ standard.

A) 802.1q
B) 802.1r
C) 802.1v
D) 802.1z

Question 6

Security by obscurity is sometimes criticized as being too weak.

Question 7

IEEE 802.11 WLANs have more collisions than wired Ethernet networks.

Question 8

When a sending device on a LAN sends a packet that is intended for a single receiving device it is known as a ____ transmission.

A) multicast
B) unicast
C) broadcast
D) linecast

Question 9

____ is the practice of dividing the network into smaller units.

A) Switching
B) Segmentation
C) VLANs
D) Filtering

Question 10

Sending a packet to all network devices is called a ____ transmission.

A) unicast
B) multicast
C) broadcast
D) singlecast

Question 11

When using a single wireless gateway for SOHO or home use that has an internal firewall, it is always possible to set up the AP outside the protection of the firewall.

Question 12

A ____ is designed to prevent malicious packets from entering the network or computer.

A) firewall
B) switch
C) hub
D) repeater

Question 13

Limiting consists of placing a password on a system to keep unauthorized persons out.

Question 14

VLANs do not require that all of the devices be physically located together.

Question 15

A firewall is sometimes called a ____.

A) bridge
B) hub
C) packet filter
D) repeater

Question 16

____ keeps a record of the state of a connection between an internal computer and an external server and then makes decisions based on the connection as well as the rule base.

A) Stateful packet filtering
B) Stateless packet filtering
C) Hubs
D) Stateful hubs

Question 17

____ looks at the incoming packet and permits or denies it based strictly on the rule base.

A) Stateful packet filtering
B) Stateless packet filtering
C) Hubs
D) Stateful hubs

Question 18

The area that encompasses all of the network devices that can cause collisions is known as the ____.

A) collision domain
B) broadcast domain
C) unicast domain
D) multicast domain

Question 19

With ____, instead of giving each outgoing packet a different IP address, each packet is given the same IP address but a different port number.

A) CSMA/CA
B) NAT
C) PAT
D) CSMA/CD

Question 20

____ replaces the sender's actual IP address with another IP address.

A) CSMA/CA
B) NAT
C) CSMA/CD
D) HTTP

Question 21

Why is diversity necessary to provide better security?

Question 22

Why should information security system be as simple as possible?

Question 23

What are some of the advantages of using NAT?

Question 24

Briefly describe how to create wireless VLANs using switches.

Question 25

A network ____________________ is a subset of a larger network.

Question 26

____________________ are the air-handling spaces above drop ceilings used to circulate and otherwise handle air in a building.

Question 27

____ are designed to protect a device's network ports, or endpoints of communication.

A) Firewalls
B) Switches
C) Hubs
D) Repeaters

Question 28

How can you create network segments in a wired network?

Question 29

A(n) ____________________ is a logical grouping of network devices within a larger network.

Question 30

____ means that a single cable is used to support multiple virtual LANs.

A) Filtering
B) Broadcasting
C) Unicasting
D) Trunking

Question 31

What are the benefits of limiting access to information?

Question 32

In addition to a hardware firewall that protects the network, each wireless device should have its own software firewall installed, sometimes known as a(n) ____.

A) antivirus firewall
B) antispyware software
C) patch software
D) personal firewall

Question 33

Antivirus software definition files are also known as ____ files.

A) signature
B) infection
C) document
D) defense

Question 34

The Cisco Systems' ____ protocol is an alternative to IEEE 802.1q.

A) TPID
B) CRC
C) ISL
D) TCI

Question 35

The drawback of antivirus software is that its ____ must be continuously updated to recognize new viruses.

A) CRC files
B) definition files
C) TPID files
D) infection files

Question 36

What are the benefits of layering security?

Question 37

A(n) ____________________ is a separate network that sits outside the secure network perimeter and is protected by a firewall.

Question 38

What is security by obscurity?

Question 39

The foundation of a firewall is a(n) ____________________.

Question 40

What are some of the features and tools provided by antispyware products?

Question 41

How does Microsoft classify patches?