Security+ (Sy0-401) Practice Test 1/12

Front 1

A software or hardware that checks information coming from the Internet and depending on the applied configuration settings either blocks it or allows it to pass through is called:

Back 1

Firewall

Front 2

A device designed to forward data packets between networks is called:

Back 2

Router

Front 3

Allowing a program through a firewall is known as creating

Back 3

Exception

Front 4

A network device designed for managing the optimal distribution of workloads across multiple computing resources is called:

Back 4

Load balancer

Front 5

The last default rule on a firewall is to:

Back 5

Deny all traffic

Front 6

A computer network service that allows clients to make indirect network connections to other network services is called:

Back 6

Proxy

Front 7

A solution designed for filtering malicious / restricted content from entering corporate networks is known as:

Back 7

Web security gateway

Front 8

One of the measures for securing networking devices includes the practice of disabling unused ports.

Back 8

True

Front 9

What type of protocols ensure the privacy of a VPN connection?

Back 9

Tunneling

Front 10

Which of the following answers refers to a dedicated device for managing secure connections established over an untrusted network, such as the Internet?

Back 10

VPN concentrator

Front 11

Which of the following acronyms refers to a network or host based monitoring system designed to automatically alert administrators of known or suspected unauthorized activity?

Back 11

IDS (Intrusion Detection System)

Front 12

A software tool used to monitor and examine contents of network traffic is known as:

(Select 2 answers)

Back 12

SMTP (Simple Mail Transfer Protocol)

Port# 25

Front 13

Which of the following acronyms refers to a network security solution combining the functionality of a firewall with additional safeguards such as URL filtering, content inspection, or malware inspection?

Back 13

UTM (Unified Threat Management)

Front 14

URL filtering restricts access to Internet sites based on which of the following criteria?

Back 14

Web address

Front 15

Which of the following network security solutions inspects network traffic in real-time and has the capability to stop the ongoing attack?

Back 15

NIPS (Network Intrusion Prevention System)

Front 16

Which of the following acronyms refers to a firewall controlling access to a web server?

Back 16

WAF (Web Application-based Firewall)

Front 17

Which of the following answers refers to a set of rules that specify which users or system processes are granted access to objects as well as what operations are allowed on a given object?

Back 17

ACL (Access Control List)

Front 18

Which of the following actions can be taken by passive IDS? (Select 2 answers)

Back 18

Logging / Sending an alert

Front 19

802.1x is an IEEE standard defining:

Back 19

Port-based network access control

Front 20

An access control model in which access to resources is granted or denied depending on Access Control List (ACL) entries is also known as:

Back 20

Rule-Based Access Control

Front 21

Which type of Intrusion Detection System (IDS) relies on the previously established baseline of normal network activity in order to detect intrusions?

Back 21

Anomaly-based

Front 22

Which of the following security solutions provides a countermeasure against denial-of-service attack characterized by increasing number of half-open connections?

Back 22

Flood guard

Front 23

Which of the following protocols protects against switching loops?

Back 23

STP (Spanning Tree Protocol)

Front 24

Which type of Intrusion Detection System (IDS) relies on known attack patterns to detect an intrusion?

Back 24

Signature-based