Testout Quiz Questions 6

Which of the following best describes the purpose of using subnets?

Which of the following is not a reason to use subnets on a network?

Which of the following IPv6 addresses is equivalent to the IPv4 loopback address of 127.0.0.1?

Which of the following describes an IPv6 address? (Select two.

)

Which of the following correctly describe the most common format for expressing IPv6 addresses? (Select two.)

Which of the following are valid IPv6 addresses? Select all that apply.

Which of the following is a valid IPv6 address?

Routers operate at what level of the Open System Interconnect model?

You've decided to use a subnet mask of 255.255.192.

0 on the 172.17.0.0 network to create four separate subnets.Which network IDs will be assigned to these subnets in this configuration? (Select two.

)

You have been using SNMP on your network for monitoring and management. You are concerned about the security of this configuration. What should you do?

You want to implement a protocol on your network that allows computers to find the IP address of a host from a logical name.

Which protocol should you implement?

Which of the following protocols allows hosts to exchange messages to indicate problems with packet delivery?

You are configuring a network firewall to allow SMTP outbound e-mail traffic, and POP3 inbound e-mail traffic. Which of the following TCP/IP ports should you open on the firewall? (Select two.)

Which port number is used by SNMP?

Which of the following ports does FTP use to establish sessions and manage traffic?

Using the Netstat command, you notice that a remote system has made a connection to your Windows Server 2008 system using TCP

IP port 21. Which of the following actions is the remote system most likely to be performing?

To increase security on your company's internal network, the administrator has disabled as many ports as possible. Now, however, though you can browse the Internet, you are unable to perform secure credit card transactions.

Which port needs to be enabled to allow secure transactions?

Which of the following network services or protocols uses TCP/IP port 22?

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.SNMP

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.SSH

Drag each IP port number on the left to its associated service on the right.

Be aware that some port numbers may be used more than once.TFTP

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.SCP

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.

Telnet

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.HTTPS

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.

HTTP

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.FTP

Drag each IP port number on the left to its associated service on the right. Be aware that some port numbers may be used more than once.SMTP

Drag each IP port number on the left to its associated service on the right.

Be aware that some port numbers may be used more than once.POP3

Which two of the following lists accurately describes TCP and UDP?

You are an application developer creating applications for a wide variety of customers. In which two of the following situations would you select a connectionless protocol?

You want to maintain tight security on your internal network so you restrict access to the network through certain port numbers. If you want to allow users to continue to use DNS, which port should you enable?

Your company's network provides HTTP, HTTPS, and SSH access to remote employees. Which ports must be opened on the firewall to allow this traffic to pass?

Your network recently experienced a series of attacks aimed at the Telnet and FTP services.

You have rewritten the security policy to abolish the unsecured services, and now you must secure the network using your firewall and routers. Which ports must be closed to prevent traffic directed to these two services?

Which of the following is the main difference between a DoS attack and a DDoS attack?

An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind of attack?

You suspect that an Xmas tree attack is occurring on a system.

Which of the following could result if you do not stop the attack? (Select two.)

You need to enumerate the devices on your network and display the configuration details of the network. Which of the following utilities should you use?

An attacker is conducting passive reconnaissance on a targeted company.

Which of the following could he be doing?

Which type of active scan turns off all flags in a TCP header?

Which of the following Denial of Service (DoS) attacks uses ICMP packets and will only be successful if the victim has less bandwidth than the attacker?

In which of the following Denial of Service (DoS) attacks does the victim's system rebuild invalid UDP packets, causing the system to crash or reboot?

A SYN packet is received by a server. The SYN packet has the exact same address for both the sender and receiver addresses, which is the address of the server. This is an example of what type of attack?

Which of the following is a form of denial of service attack that subverts the TCP three-way handshake process by attempting to open numerous sessions on a victim server but intentionally failing to complete the session by not sending the final required packet?

Which of the following is a form of denial of service attack that uses spoofed ICMP packets to flood a victim with echo requests using a bounce amplification network?

A SYN attack or a SYN flood exploits or alters which element of the TCP three-way handshake?

When a SYN flood is altered so that the SYN packets are spoofed in order to define the source and destination address as a single victim IP address, the attack is now called what?

A Smurf attack requires all but which of the following elements to be implemented?

Which of the following best describes the ping of death?

Which of the following is the best countermeasure against man-in-the-middle attacks?

What is modified in the most common form of spoofing on a typical IP packet?

Which type of Denial of Service (DoS) attack occurs when a name server receives malicious or misleading data that incorrectly maps host names and IP addresses?

Which of the following describes a man-in-the-middle attack?

Capturing packets as they travel from one host to another with the intent of altering the contents of the packets is a form of which security concern?

When the TCP/IP session state is manipulated so that a third party is able to insert alternate packets into the communication stream, what type of attack has occurred?

What is the goal of a TCP/IP hijacking attack?

Which of the following is not a protection against session hijacking?

Which of the following is the most effective protection against IP packet spoofing on a private network?

While using the Internet, you type the URL of one of your favorite sites in the browser. Instead of going to the correct site, however, the browser displays a completely different website. When you use the IP address of the Web server, the correct site is displayed.

Which type of attack has likely occurred?

Which of the following attacks tries to associate an incorrect MAC address with a known IP address?

What are the most common network traffic packets captured and used in a replay attack?

When a malicious user captures authentication traffic and replays it against the network later, what is the security problem you are most concerned about?

A router on the border of your network detects a packet with a source address that is from an internal client but the packet was received on the Internet-facing interface. This is an example of what form of attack?

An attacker uses an exploit to push a modified hosts file to client systems. This hosts file redirects traffic from legitimate tax preparation sites to malicious sites to gather personal and financial information.What kind of exploit has been used in this scenario? (Choose two. Both responses are different names for the same exploit.)

Which of the following is a privately controlled portion of a network that is accessible to some specific external entities?

You are the office manager of a small financial credit business.

Your company handles personal, financial information for clients seeking small loans over the Internet. You are aware of your obligation to secure clients records, but budget is an issue. Which item would provide the best security for this situation?

You are implementing security at a local high school that is concerned with students accessing inappropriate material on the Internet from the library's computers. The students will use the computers to search the Internet for research paper content. The school budget is limited. Which content filtering option would you choose?

Match the application-aware network device on the right with the appropriate description on the left. Each description may be used once, more than once, or not at all. Application-aware proxy

Match the application-aware network device on the right with the appropriate description on the left. Each description may be used once, more than once, or not at all. Application-aware firewall

Match the application-aware network device on the right with the appropriate description on the left. Each description may be used once, more than once, or not at all.

Application-aware IDS

Your company has a connection to the Internet that allows users to access the Internet. You also have a Web server and an e-mail server that you want to make available to Internet users. You want to create a DMZ for these two servers. Which type of device should you use to create the DMZ?

You have a company network that is connected to the Internet. You want all users to have Internet access, but need to protect your private network and users. You also need to make a Web server publicly available to Internet users.

Which solution should you use?

You have used firewalls to create a demilitarized zone. You have a Web server that needs to be accessible to Internet users.

The Web server must communicate with a database server for retrieving product, customer, and order information. How should you place devices on the network to best protect the servers? (Select two.)

Of the following security zones, which one can serve as a buffer network between a private secured network and the untrusted Internet?

Which of the following is likely to be located in a DMZ?

Members of the Sales team use laptops to connect to the company network. While traveling, they connect their laptops to the Internet through airport and hotel networks.

You are concerned that these computers will pick up viruses that could spread to your private network. You would like to implement a solution that prevents the laptops from connecting to your network unless anti-virus software and the latest operating system patches have been installed.Which solution should you use?

In which of the following situations would you most likely implement a demilitarized zone (DMZ)?

Which of the following terms describes a network device that is exposed to attacks and has been hardened against those attacks?

Which of the following is a firewall function?

Which of the following are characteristics of a circuit-level gateway? (Select two.)

Which of the following are characteristics of a packet filtering firewall? (Select two.

)

You want to install a firewall that can reject packets that are not part of an active session. Which type of firewall should you use?

You provide Internet access for a local school. You want to control Internet access based on user, and prevent access to specific URLs. Which type of firewall should you install?

Which of the following is the best device to deploy to protect your private network from a public untrusted network?

You have been given a laptop to use for work. You connect the laptop to your company network, use it from home, and use it while traveling. You want to protect the laptop from Internet-based attacks.

Which solution should you use?

You connect your computer to a wireless network available at the local library. You find that you can access all web sites you want on the Internet except for two.What might be causing the problem?

Which of the following functions are performed by proxies? (Select two.)

Which of the following are true of a circuit proxy filter firewall? (Select two.

)

Which of the following does a router acting as a firewall use to control which packets are forwarded or dropped?

You have a router that is configured as a firewall. The router is a layer 3 device only. Which of the following does the router use for identifying allowed or denied packets?

You have just installed a packet-filtering firewall on your network.

What options will you be able to set on your firewall? Select all that apply.

When designing a firewall, what is the recommended approach for opening and closing ports?

Which of the following firewall types can be a proxy between servers and clients? (Select two.)

You have a small network at home that is connected to the Internet.

On your home network you have a server with the IP address of 192.168.55.199/16. You have a single public address that is shared by all hosts on your private network.

You want to configure the server as a Web server and allow Internet hosts to contact the server to browse a personal Web site. What should you use to allow access?

You are the network administrator for a small company that implements NAT to access the Internet. However, you recently acquired 5 servers that must be accessible from outside your network. Your ISP has provided you with 5 additional registered IP addresses to support these new servers but you don't want the public to access these servers directly. You want to place these servers behind your firewall on the inside network yet still allow them to be accessible to the public from the outside. Which method of NAT translation should you implement for these 5 servers?

You want to connect your small company network to the Internet.

Your ISP provides you with a single IP address that is to be shared between all hosts on your private network. You do not want external hosts to be able to initiate connection to internal hosts. What type of Network Address Translation (NAT) should you implement?

Which of the following is not one of the ranges of IP addresses defined in RFC 1918 that are commonly used behind a NAT server?

Which of the following networking devices or services prevents the use of IPSec in most cases?

Which of the following is not a benefit of NAT?

You have a group of salesmen who would like to access your private network through the Internet while they are traveling. You want to control access to the private network through a single server.

A VPN is used primarily for what purpose?

Which VPN protocol typically employs IPSec as its data encryption mechanism?

Which statement best describes IPSec when used in tunnel mode?

Which IPSec subprotocol provides data encryption?

Which of the following is not a VPN tunnel protocol?

Which is the best countermeasure for someone attempting to view your network traffic?

PPTP (Point to Point Tunneling Protocol) is quickly becoming obsolete because of what VPN protocol?

What is the primary use of tunneling?

In addition to Authentication Header (AH), IPSec is comprised of what other service?

A salesperson in your organization spends most of her time traveling between customer sites.

After a customer visit, she must complete various managerial tasks, such as updating your organization's order database. Because she rarely comes back to your home office, she usually accesses the network from her notebook computer using Wi-Fi access provided by hotels, restaurants, and airports.Many of these locations provide unencrypted public Wi-Fi access, and you are concerned that sensitive data could be exposed. To remedy this situation, you decide to configure her notebook to use a VPN when accessing the home network over an open wireless connection.Which key steps should you take when implementing this configuration? (Select two.)