Question 1

Which of the following devices is capable of providing infrastructure security and is used for packet filtering purposes?&#10;A)Router&#10;B)Hub&#10;C)Switch&#10;D)NIC

Accepted Answer

Routers can be configured to act as packet-filtering firewalls. When configured so, they can prevent unauthorized ports from being opened.
Key Takeaway: A packet-filtering router makes a permit or deny decision for each packet that it receives. The router examines each datagram to determine whether it matches one of its packet-filtering rules. The filtering rules are based on the packet header information that is made available to the IP forwarding process. If a match is found and the rule permits the packet, the packet is forwarded according to the information in the routing table. If a match is found and the rule denies the packet, the packet is discarded. If there is no matching rule, a user-configurable default parameter determines whether the packet is forwarded or discarded.

Question 2

Jack wants to implement a remote access solution that will enable mobile users to access the corporate network. Which of the solutions should you use to enable laptop users to connect to the corporate network and access all resources and e-mail?

A)ISDN
B)VLAN
C)VPN
D)SSL

VPN

Accepted Answer

VPN tunnels through a public network, providing higher security than an ordinary Internet connection. Once authenticated to the VPN server, users can virtually access the private network in a safe and secure manner.
Key Takeaway: VPN uses the shared public infrastructure while maintaining privacy through security procedures and tunneling protocols. It mostly uses the Layer Two Tunneling Protocol or L2TP for tunneling. The protocols encrypt data at the sending end and decrypt it at the receiving end. VPNs are often installed by organizations to provide remote access to a secure organizational network.

Question 3

Which of the following NAT models provides the maximum security benefits in hiding the internal network's addressing structure from the external network?&#10;A)Secure NAT&#10;B)Dynamic NAT&#10;C)Static NAT&#10;D)Overloading NAT

Accepted Answer

Overloading NAT uses port-based mappings to ensure that the external structure is entirely different from the internal network structure.
Key Takeaway: The overloading NAT technique allows a single public address to differentiate between sessions according to port number. This is also known as Port Address Translation. When a client on the internal network wishes to access the Internet, the computer forwards the request to its configured gateway-the router running NAT. The router will translate the source address and port number of the packet to use the router's public IP address and the same port number and then forward the new packet to the destination host.

Question 4

Which type of NAT models performs a one-to-one mapping of an internal IP address to an external IP address?&#10;A)Dynamic NAT&#10;B)Overloading NAT&#10;C)One-to-one NAT&#10;D)Static NAT

Accepted Answer

Static NAT performs a one-to-one mapping of an internal IP address to an external IP address.
Key Takeaway: Static NAT is a type of NAT in which a private IP address is mapped to a static public IP address. This allows an internal host, such as a Web server, to have an unregistered (private) IP address and still be reachable over the Internet. Dynamic NAT maps multiple internal IP addresses to a range of external IP addresses. Overloading NAT maps multiple internal IP addresses to one external IP address.

Question 5

Which of the following is an area on the network that allows a technician to place a public-facing system on it without compromising the entire infrastructure?&#10;A)VLAN&#10;B)VPN&#10;C)NAT&#10;D)DMZ

Accepted Answer

A DMZ, or Demilitarized Zone, is an area for placing Web and other servers that serve the general public outside the firewall, therefore isolating them from internal network access. It is inserted as a "neutral zone" between a company's private network and the outside public network.
Key Takeaway: DMZ prevents outside users from getting direct access to a server that has company data. It is an optional and more secure approach to a firewall and effectively acts as a proxy serveras well. Users of the public network outside the company can access only the DMZ host. The DMZ typically holds the company's Web pages so these can be served to the outside world. However, the DMZ provides access to no other company data. In the event that an outside user penetrated the DMZ host's security, the Web pages might be corrupted, but no other company information would be exposed.

Question 6

Which of the following NIDS configurations is based solely on specific network traffic?&#10;A)Anomaly based&#10;B)Behavior based&#10;C)Signature based&#10;D)Passive IDS

Accepted Answer

A signature based NIDS is solely based on specific network traffic.
Key Takeaway: IDS is primarily focused on evaluating attacks based on attack signatures and audit trails. A signature based intrusion detection system, or IDS, evaluates packets on the network to a database of known attacks for similarities to these known attacks. The issue that can occur with a signature based IDS is the lag time between the exploits being released and the database being updated with the signature. An anomaly or behavior based IDS is one that looks for behaviors different than expected based on the system's configuration.

Question 7

Which of the following best describes the purpose of an SSID in a wireless network?&#10;A)Identifying the network&#10;B)Better signal strength&#10;C)Better connectivity&#10;D)Encryption

Accepted Answer

An SSID is the name of a wireless local area network (WLAN). All wireless devices on a WLAN must employ the same SSID in order to communicate with each other and identify themselves.
Key Takeaway: SSID broadcast beacons are released out into the open at periodic intervals. These beacons have information about the specific wireless network from which it was sent. A user can use the network using the information contained in this SSID beacon. The SSID on wireless clients can be set either manually by entering the SSID into the client network settings or automatically by leaving the SSID unspecified or blank and letting the wireless network settings be auto discovered and set remotely.

Question 8

Which of the following device/application monitors network traffic passively?&#10;A)Web browser&#10;B)IDS&#10;C)Firewall&#10;D)Sniffer

Accepted Answer

Sniffers monitor network traffic, captures it, logs it and makes it available for display and analysis. They were originally designed for network maintenance and troubleshooting, but they are increasingly being used by hackers.
Key Takeaway: Sniffing is the electronic form of eavesdropping on communications that computers transmit across networks. A sniffer asks the NIC to stop ignoring all the traffic headed to other computers and pay attention to them. It places the NIC in a state known as promiscuous mode to perform this action. Passive sniffing is mostly performed by putting the sniffer on the same collision domain as the network segment being analyzed. This is usually accomplished by putting the sniffer on a hub, tap, or other pass-through device on the segment. All the person using the sniffer must do is start the sniffer and wait for a device on the same collision domain to start sending or receiving data.

Question 9

Which of the following statements best suits the working of DSSS?&#10;A)Communicates by adding data that is to be transmitted to a low speed transmission.&#10;B)Communicates by breaking the data into sub signals and transmitting them.&#10;C)Communicates by hopping the transmission over a range of predefined frequencies.&#10;D)Communicates by adding data that is to be transmitted to a higher speed transmission.

Accepted Answer

DSSS communicates by adding data that is to be transmitted to a higher speed transmission.
Key Takeaway: With DSSS, the transmitted signal takes up more bandwidth than the information signal that is being modulated. The benefits of DSSS include resistance to intended or unintended jamming, sharing of a single channel among multiple users, reduced signal/background-noise level, lower interception, and better timing between transmitter and receiver. FHSS accomplishes communication by hopping the transmission over a range of predefined frequencies. OFDM communicates by breaking the data into sub signals and transmitting them.

Question 10

Which type of firewall functions at the network layer of the OSI Model?&#10;A)Application-Level Gateway&#10;B)Circuit-Level Firewall&#10;C)Packet Filtering Firewall&#10;D)Network Bridge

Accepted Answer

A packet-filtering firewall functions at the network layer of the OSI model.
Key Takeaway: A packet-filtering firewall examines the source IP address, source port, destination IP address, destination port, and the IP protocol, whether TCP or UDP. Depending on the rules configured on the firewall, the packet will be allowed through, rejected, or dropped. If the firewall rejects the packet, it sends a message back to the sender letting him know that the packet was rejected. If the packet was dropped, the firewall simply does not respond to the packet. The sender must wait for the communication to time out. Dropping packets instead of rejecting them greatly increases the time required to scan your network. Packet filtering firewalls operate on layer 3 of the OSI model, the network layer.

Question 11

Which of the following protocols operates on 2.4GHz and has a bandwidth of 1Mbps or 2Mbps?&#10;A)802.11g&#10;B)802.11a&#10;C)802.11b&#10;D)802.11-1997

Accepted Answer

The answer of Which of the following protocols operates on...

Question 12

John wants to implement a proxy server with a functionality that controls the websites accessed by the employees of the organization. Which of these proxies would serve his purpose?&#10;A)Blocking proxy&#10;B)Caching proxy&#10;C)Web proxy&#10;D)Content-filtering proxy

Accepted Answer

The answer of John wants to implement a proxy server...

Question 13

David wants to install a proxy server that can reduce the organization's upstream bandwidth usage, reduce cost, and improve the network performance. Which of these could serve his purpose?&#10;A)Hostile proxy&#10;B)Content-filtering proxy&#10;C)Web proxy&#10;D)Caching proxy

Accepted Answer

The answer of David wants to install a proxy server...

Question 14

What IEEE standard describes port switching which is also known as port-based Network Access Control (PNAC)?&#10;A)802.1x&#10;B)NAT&#10;C)VPN&#10;D)802.11g

Accepted Answer

The answer of What IEEE standard describes port switching which...

Question 15

Using one externally facing address to communicate between an internal network and external networks would best describe what?&#10;A)Virtualization&#10;B)DMZ&#10;C)NAT&#10;D)Subnetting

Accepted Answer

The answer of Using one externally facing address to communicate...

Question 16

What is a sniffer used for?&#10;A)Detecting environmental variables in MDFs.&#10;B)Collecting data from network traffic flow.&#10;C)Examining files as they are scanned into a computer.&#10;D)Encrypting data traveling from a computer to a server.

Accepted Answer

The answer of What is a sniffer used for?&#10;A)Detecting environmental...

Deck 24: Network