Question 1

What are the benefits of layering security?

Accepted Answer

At any given time a bank may have tens of thousands of dollars in cash on hand. What security is used to protect the money from theft? There is not a single type of security, such as a front door with a strong lock. Rather, there are several types of security. In addition to a front door with a strong lock, there may also be video cameras, armed guards, motion detectors, and a vault.
Each of these types of bank security is designed to coordinate with the other types of security to create layers of protection around the money.A front door with a strong lock may be the first layer of security, followed by video cameras, motion detectors, armed guards, and finally the vault.The philosophy behind layering security is that an attacker who is able to penetrate one layer (by breaking down the front door) would then face additional layers of security (an armed guard, motion detectors, and a vault) before reaching the money. A layered approach has the advantage of creating a barrier of multiple defenses that can thwart a thief who is able to break through one layer. In addition, layers can prevent a variety of attacks: layers of security at a bank can stop both a midnight break-in as well as a holdup in broad daylight.

Question 2

How can you create network segments in a wired network?

Accepted Answer

The boundaries of a network segment can be created by devices that have the capacity to regulate the flow of packets into and out of the segment. In a wired network these devices are generally classified by their relation to the OSI model. Devices that function at Layer 1, the Physical layer, do not filter any packets and instead simply pass them on to all other network devices and therefore cannot perform segmentation. Repeaters and hubs are typically Layer 1 devices. Other devices operate at Layer 2, the Data Link layer, and can perform filtering to create network segments. Bridges, switches, and routers are Layer 2 devices. Routers, which are also Layer 3 (Network layer) devices, can segment networks by directing packets based on their IP number.

Question 3

A network ____________________ is a subset of a larger network.

Accepted Answer

segment

Question 4

What is security by obscurity?

Accepted Answer

The answer of What is security by obscurity?...

Question 5

With ____, instead of giving each outgoing packet a different IP address, each packet is given the same IP address but a different port number.

Accepted Answer

A)   CSMA/CA
B)   NAT
C)   PAT
D)   CSMA/CD

Question 6

____ is used to create smaller segments for security purposes.

Accepted Answer

A)   CSMA/CA
B)   CSMA/CD
C)   Ethernet
D)   Segmentation

Question 7

How does Microsoft classify patches?

Accepted Answer

The answer of How does Microsoft classify patches?...

Question 8

What are the benefits of limiting access to information?

Accepted Answer

The answer of What are the benefits of limiting access...

Question 9

A firewall is sometimes called a ____.

Accepted Answer

A)   bridge
B)   hub
C)   packet filter
D)   repeater

Question 10

The drawback of antivirus software is that its ____ must be continuously updated to recognize new viruses.

Accepted Answer

A)   CRC files
B)   definition files
C)   TPID files
D)   infection files

Question 11

VLANs do not require that all of the devices be physically located together.

Accepted Answer

A) True 
 B)False

Question 12

What are some of the advantages of using NAT?

Accepted Answer

The answer of What are some of the advantages of...

Question 13

Sending a packet to all network devices is called a ____ transmission.

Accepted Answer

A)   unicast
B)   multicast
C)   broadcast
D)   singlecast

Question 14

____ keeps a record of the state of a connection between an internal computer and an external server and then makes decisions based on the connection as well as the rule base.

Accepted Answer

A)   Stateful packet filtering
B)   Stateless packet filtering
C)   Hubs
D)   Stateful hubs

Question 15

A(n) ____________________ is a logical grouping of network devices within a larger network.

Accepted Answer

The answer of A(n) ____________________ is a logical grouping of...

Question 16

A ____ is designed to prevent malicious packets from entering the network or computer.

Accepted Answer

A)   firewall
B)   switch
C)   hub
D)   repeater

Question 17

In addition to a hardware firewall that protects the network, each wireless device should have its own software firewall installed, sometimes known as a(n) ____.

Accepted Answer

A)   antivirus firewall
B)   antispyware software
C)   patch software
D)   personal firewall

Question 18

The Cisco Systems' ____ protocol is an alternative to IEEE 802.1q.

Accepted Answer

A)   TPID
B)   CRC
C)   ISL
D)   TCI

Question 19

____ is the practice of dividing the network into smaller units.

Accepted Answer

A)   Switching
B)   Segmentation
C)   VLANs
D)   Filtering

Question 20

Briefly describe how to create wireless VLANs using switches.

Accepted Answer

The answer of Briefly describe how to create wireless VLANs...

Exam 7: Designing a Secure Wireless Network