Network Security

Front 1

What does the acronym HIDS denote?

Back 1

host-based intrusion detection system

Front 2

What is the purpose of NAC?

Back 2

Network Access Control (NAC) ensures that the computer on the network meets an organization's security policies.

Front 3

What does the acronym POP denote?

Back 3

Post Office Protocol

Front 4

Which port numbers are used by NetBIOS?

Back 4

ports 137-139

Front 5

Which wireless mode ensures that wireless clients can only communicate with the wireless access point and not with other wireless clients?

Back 5

isolation mode

Front 6

Which two modes does IP Security (IPSec) provide to ensure confidentiality?

Back 6

tunnel mode and transport mode

Front 7

Which application or services uses TCP/UDP port 3389?

Back 7

Remote Desktop Protocol (RDP)

Front 8

What are the two modes of WPA and WPA2?

Back 8

Personal (also called Preshared Key or WPA-PSK / WPA2-PSK) and Enterprise

Front 9

Which protocol does the Enterprise mode of WPA and WPA2 use for authentication?

Back 9

Extensible Authentication Protocol (EAP)

Front 10

Which security control is lost when using cloud computing?

Back 10

physical control of the data

Front 11

What is the purpose of content inspection?

Back 11

to search for malicious code or behavior

Front 12

Which information do routers use to forward packets to their destinations?

Back 12

the network address and subnet mask

Front 13

What is Lightweight Extensible Authentication Protocol (LEAP)?

Back 13

a proprietary wireless LAN authentication method developed by Cisco Systems

Front 14

What are the non-overlapping channels for 802.11g/n?

Back 14

Channels 1, 6, and 11

Front 15

Which term is used when the amount of work that a computer has to do is divided between two or more computers so that more work is performed in the same amount of time?

Back 15

load balancing

Front 16

Which type of IDS or IPS uses an initial database of known attack types but dynamically alters their signatures base on learned behavior?

Back 16

heuristic

Front 17

What is Fibre Channel?

Back 17

a high-speed network technology (commonly running at 2-, 4-, 8- and 16-gigabit per second rates) that connects computer data storage

Front 18

What is the default PPTP port?

Back 18

TCP port 1723

Front 19

What is another term used for layered security?

Back 19

defense in depth

Front 20

Which firewall port should you enable to allow SMTP traffic to flow through the firewall?

Back 20

port 25

Front 21

What are flood guards?

Back 21

devices that protect against Denial of Service (DoS) attacks

Front 22

What is the main difference between virtualization and cloud computing?

Back 22

the location and ownership of the physical components

Front 23

Should virtual servers have the same information security requirements as physical servers?

Back 23

Yes

Front 24

What are the three main protocols that can be used for wireless networks?

Back 24

Wired Equivalent Privacy (WEP), WiFi Protected Access version 1 (WPAv1), WPA version 2 (WPAv2)

Front 25

What is the default L2TP port?

Back 25

UDP port 1701

Front 26

Which port number does DNS use?

Back 26

port 53

Front 27

Which protocol is used by network devices to transmit error messages?

Back 27

Internet Control Message Protocol (ICMP)

Front 28

Which security standard is an enhanced version of Secure Sockets Layer (SSL)?

Back 28

Transport Layer Security (TLS)

Front 29

Which port number does LDAP use when communications are NOT secured using SSL/TLS?

Back 29

port 389

Front 30

What is a VPN concentrator?

Back 30

a device that creates a virtual private network (VPN)

Front 31

What is Wireshark?

Back 31

a protocol analyzer or packet sniffer

Front 32

What does the acronym IPSec denote?

Back 32

Internet Protocol Security

Front 33

What are four common service models of cloud computing?

Back 33

Infrastructure as a service (IaaS), Monitoring as a service (MaaS), Platform as a service (PaaS), Software as a service (SaaS)

Front 34

Which type of system identifies suspicious patterns that may indicate a network or system attack?

Back 34

intrusion detection system (IDS)

Front 35

At which OSI layer does IP Security (IPSec) operate?

Back 35

the Network layer (Layer 3)

Front 36

Which port is used for LDAP authentication?

Back 36

port 389

Front 37

Which category of IDS might increase logging activities, disable a service, or close a port as a response to a detected security breach?

Back 37

active detection

Front 38

Which type of attack can turn a switch into a hub?

Back 38

MAC flooding

Front 39

What portion(s) of the IP packet are encrypted in IPSec transport mode?

Back 39

the payload

Front 40

Which term is used to describe a product that provides network firewalling, network intrusion prevention and gateway antivirus (AV), gateway anti-spam, VPN, content filtering, load balancing, data leak prevention and on-appliance reporting?

Back 40

unified threat management (UTM)

Front 41

Which implementation of the File Transfer Protocol (FTP) provides the least security?

Back 41

Trivial File Transfer Protocol (TFTP)

Front 42

What does the acronym SMTP denote?

Back 42

Simple Mail Transfer Protocol

Front 43

Is a DHCP server normally placed inside a DMZ?

Back 43

no

Front 44

Which IPSec mode is used to create a VPN between two gateways?

Back 44

Which IPSec mode is used to create a VPN between two gateways?

Front 45

Which port number does SSH use?

Back 45

port 22

Front 46

Between which two OSI layers does Secure Sockets Layer (SSL) operate?

Back 46

between the OSI Transport and Application layers (Layer 4 to Layer 7)

Front 47

What is the purpose of a spam filter?

Back 47

to identify and block unwanted messages

Front 48

Which type of IDS detects attacks on individual devices?

Back 48

host intrusion detection system (HIDS)

Front 49

Which type of IDS detects malicious packets on a network?

Back 49

network intrusion detection system (NIDS)

Front 50

What is the purpose of Software as a Service (SaaS) in cloud computing?

Back 50

It ensures on-demand, online access to an application suite without the need for local installation.

Front 51

What portion(s) of the IP packet are encrypted in IPSec tunnel mode?

Back 51

both the header and the payload

Front 52

What are the four types of cloud computing based on management type?

Back 52

public, private, hybrid, and community

Front 53

Which port number is used by SSL, FTPS, and HTTPS?

Back 53

TCP port 443

Front 54

What is an Internet Protocol (IP)-based storage networking standard for linking data storage facilities?

Back 54

Internet Small Computer System Interface (iSCSI)

Front 55

Which intrusion detection system (IDS) watches for intrusions that match a known identity?

Back 55

signature-based IDS

Front 56

Which term refers to voice communication over a network?

Back 56

telephony or Voice over IP (VoIP)

Front 57

What is a Web security gateway?

Back 57

a device that filters Web content

Front 58

What do you use to control traffic from the Internet to the LAN (local area network) by controlling the packets that are allowed to enter the LAN?

Back 58

a firewall

Front 59

What does the acronym NIDS denote?

Back 59

network-based intrusion detection system

Front 60

In a secure network, what should be the default permission position?

Back 60

implicit deny

Front 61

Which port number does HTTP use?

Back 61

port 80

Front 62

Which services are usually provided by all-in-one security devices?

Back 62

URL filtering, content inspection, and malware inspection

Front 63

Which port number does SNMP use?

Back 63

UDP port 161

Front 64

What is a proxy server?

Back 64

a server that caches and filters content

Front 65

Which port number is used by Microsoft SQL Server?

Back 65

TCP port 1433

Front 66

Which firewall port should you enable to allow POP3 traffic to flow through the firewall?

Back 66

TCP port 110

Front 67

Which port should you block at your network firewall to prevent Telnet access?

Back 67

port 23

Front 68

What is the purpose of load balancing?

Back 68

to distribute the workload across multiple devices

Front 69

What is the default automated key-management protocol for IPSec?

Back 69

Internet Key Exchange (IKE)

Front 70

What is the term for an unauthorized access that a network-based intrusion detection system (NIDS) fails to detect?

Back 70

missed detection or false negative

Front 71

Which tool should you use to retrieve the contents of a GET request: a protocol analyzer or port scanner?

Back 71

a protocol analyzer

Front 72

What is the purpose of MAC filtering?

Back 72

to restrict the clients that can access a wireless network

Front 73

Which port number is used by SMB?

Back 73

TCP port 445

Front 74

Which port number does DHCP use?

Back 74

port 67

Front 75

What is a good solution if you need to separate two departments into separate networks?

Back 75

VLAN segregation

Front 76

Which IPSec mode is used mostly in host-to-host communications?

Back 76

transport mode

Front 77

Which port number is used by SSH, SCP, and SFTP?

Back 77

port 22

Front 78

Which two ports does FTP use?

Back 78

ports 20 and 21

Front 79

Which Layer 3 device allows different logical networks to communicate?

Back 79

router

Front 80

What is the primary security advantage of using NAT?

Back 80

Network Address Translation (NAT) hides internal IP addresses from the public network

Front 81

Which type of connectivity provides a remote user the ability to safely connect to his or her corporate network while maintaining data confidentiality and integrity?

Back 81

a virtual private network (VPN)

Front 82

Which wireless protocol provides the best security: WEP, WAP, WPA, or WPA2?

Back 82

Wi-Fi Protected Access IIversion 2 (WPA2) with CCMP

Front 83

Which technology enables a LAN to use one set of IP addresses for internal traffic and a second set of addresses for external traffic, while hiding internal addresses or address space?

Back 83

Network Address Translation (NAT)

Front 84

How many TCP/UDP ports are vulnerable to malicious attacks?

Back 84

65,536

Front 85

Does each VLAN create its own collision domain or its own broadcast domain?

Back 85

broadcast domain

Front 86

What are the non-overlapping channels for 802.11b?

Back 86

Channels 1, 6, 11, and 14

Front 87

Which security protocol is the standard encryption protocol for use with the WPA2 standard?

Back 87

Counter Mode Cipher Block Chaining Message Authentication Code Protocol (often abbreviated CCMP)

Front 88

Which port number is used by TFTP?

Back 88

UDP port 69

Front 89

What is the most secure implementation of File Transfer Protocol (FTP)?

Back 89

Secure File Transfer Protocol (SFTP)

Front 90

Which TCP port number does Secure Sockets Layer (SSL) use?

Back 90

port 443

Front 91

Which technique is used to prevent network bridging?

Back 91

network separation

Front 92

What is the most common type of system used to detect intrusions into a computer network?

Back 92

network intrusion detection system (NIDS)

Front 93

What are the two major types of intrusion detection systems (IDS)?

Back 93

network IDS (NIDS) and host IDS (HIDS)

Front 94

What does VLAN segregation accomplish?

Back 94

It protects each individual segment by isolating the segments.

Front 95

Which servers are susceptible to the same type of attacks as their hosts, including denial-of-service attacks, detection attacks, and escape attacks?

Back 95

virtual servers

Front 96

What should you do to ensure that a wireless access point signal does not extend beyond its needed range?

Back 96

Reduce the power levels.

Front 97

What is a trusted OS?

Back 97

An operating system that provides support for multilevel security

Front 98

Which firewall port should you enable to allow IMAP4 traffic to flow through the firewall?

Back 98

TCP port 143

Front 99

If the user is NOT prompted for credentials when connected to a Network Access Control (NAC) server, what is the user's computer missing?

Back 99

the authentication agent

Front 100

What is the term for an authorized access that a network-based intrusion detection system (NIDS) incorrectly detects as an attack?

Back 100

false positive

Front 101

What does the acronym IDS denote?

Back 101

intrusion detection system

Front 102

What does the acronym FCoE denote?

Back 102

Fibre Channel over Ethernet

Front 103

What is Protected Extensible Authentication Protocol (PEAP)?

Back 103

a protocol that encapsulates the EAP within an encrypted and authenticated Transport Layer Security (TLS) tunnel

Front 104

What is the name of the area that connects to a firewall and offers services to untrusted networks?

Back 104

demilitarized zone (DMZ)

Front 105

What is the purpose of Platform as a Service (PaaS) in cloud computing?

Back 105

It provides not only a virtualized deployment platform but also a value-added solution stack and an application development platform.

Front 106

Which devices can limit the effectiveness of sniffing attacks: switches or routers?

Back 106

switches

Front 107

Which port number does NTP use?

Back 107

port 123

Front 108

Which security protocol is best used for connection-oriented systems such as an intranet?

Back 108

Secure Sockets Layer/Transport Layer Security (SSL/TLS)

Front 109

According to CompTIA, why should you disable the SSID broadcast of your wireless router?

Back 109

to improve your network's security

Front 110

What is the term for a device that acts as a concentrator for a wireless LAN?

Back 110

wireless access point (WAP)

Front 111

Which port number does NNTP use?

Back 111

TCP port 119

Front 112

Which two security protocols does IP Security (IPSec) use?

Back 112

Authentication Header (AH) and Encapsulating Security Payload (ESP)

Front 113

What is the default rule found in a firewall's access control list (ACL)?

Back 113

Deny All

Front 114

Which security protocol was designed as an interim solution to replace WEP without requiring the replacement of legacy hardware?

Back 114

Temporal Key Integrity Protocol (TKIP)

Front 115

Which port number does LDAP use for communications encrypted using SSL/TLS?

Back 115

port 636

Front 116

What is the purpose of Infrastructure as a Service (IaaS) in cloud computing?

Back 116

It provides computer and server infrastructure, typically through a virtualization environment.

Front 117

Which protocol will provide loop protection?

Back 117

spanning tree protocol

Front 118

What is the main difference between an IDS and an IPS?

Back 118

An IDS detects intrusions. An IPS prevents intrusions.