Question 1

Match each item with a statement below.
-Handle each packet separately and are not resistant to spoofing or DoS attacks
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

Stateless packet filters handle each packet separately but do not maintain any state information between packets, thus they are not resistant to spoofing or DoS attacks.

Answer: C
 NAT (Network Address Translation) does not provide any security feature by itself. However, it can act as a barrier between a private network and the public internet, hiding the internal network's computer IP addresses behind a single public IP address.

Answer: F, G
 User mode and privileged mode are two CPU operating modes, used by the processor to handle instructions in different situations. Programs running in user mode do not have access to system resources, while programs running in privileged mode, also known as kernel mode, have access to all system resources.

Answer: I
 Active systems are security solutions that continuously monitor the network, analyze traffic, and take action in real-time, such as blocking or alerting on suspicious activities. These systems are effective against advanced and persistent threats.

Question 2

Match each item with a statement below.
-Small network containing resources that a company wants to make available to Internet users and helps maintain security
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

DMZ (demilitarized zone) is a secure network that contains resources that a company wants to make available to Internet users while ensuring security by separating it from the internal network.

Answer: J
 An application-aware firewall is designed to inspect application layer data and make decisions based on the content of the packet, helping to prevent attacks that may exploit application vulnerabilities.

Question 3

Match each item with a statement below.
-Inspects network traffic at a higher level in the OSI model than a traditional stateful packet inspection
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

An application-aware firewall inspects network traffic at a higher level in the OSI model than a traditional stateful packet inspection.

Question 4

How do "Network-based IDSs/IPSs" monitor activity on network segments?

Accepted Answer

The answer of How do "Network-based IDSs/IPSs" monitor activity on...

Question 5

List the different types of memory and their main function found in Cisco routers?

Accepted Answer

The answer of List the different types of memory and...

Question 6

Match each item with a statement below.
-IDS systems that don't take any action to stop or prevent an activity
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

Passive systems are IDS systems that only monitor network activity and do not take any action to stop or prevent it.

Answer: A, E, J
 A stateful packet filter and a stateless packet filter are both types of firewall technologies that can be used in IDS systems. An application-aware firewall is also a type of firewall technology commonly used in IDS systems.

Answer: C, D
 NAT (Network Address Translation) and DMZ (Demilitarized Zone) are network security technologies that are not typically used in IDS systems.

Answer: F, G
 User mode and privileged mode are concepts related to operating system permissions and do not relate directly to IDS systems.

Answer: H
 Indicators of Compromise (IOCs) are pieces of data or information that suggest a network has potentially been breached, and is not specifically an IDS system technology.

Question 7

What are the advantages and disadvantages of hardware and software firewalls?

Accepted Answer

The answer of What are the advantages and disadvantages of...

Question 8

Match each item with a statement below.
-Administrator can perform full router configuration tasks
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

Only the privileged mode allows for full router configuration tasks.

Answer: A 
 Stateful packet filters keep track of the state of each outgoing connection and use that information to filter incoming traffic.

Answer: C 
 NAT (Network Address Translation) allows multiple devices to share a single public IP address.

Answer: D 
 DMZ (Demilitarized Zone) is a network segment that sits between the internal network and the public internet, used for hosting public-facing servers.

Answer: E 
 Stateless packet filters do not keep track of the state of outgoing connections, making them less secure than stateful packet filters.

Answer: F 
 User mode allows for basic commands and limited configuration options.

Answer: J 
 Application-aware firewalls can identify and block traffic based on the specific application being used.

Answer: H 
 Indicators of compromise (IOCs) are signs or evidence that a security breach has occurred or is underway.

Answer: I 
 Active systems are security measures that take proactive actions to identify and prevent security threats, as opposed to passive systems that are more reactive.

Question 9

What are the interfaces in a Cisco router?

Accepted Answer

The answer of What are the interfaces in a Cisco...

Question 10

Match each item with a statement below.
-IDS systems log events and send alerts,but they can also interoperate with routers and firewalls to stop an attack
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

Active systems are IDS/IPS solutions that can actively block attacks by interfacing with routers and firewalls.

Answer: J 
 An application-aware firewall is an advanced firewall that not only monitors network traffic but also inspects the protocol and data of each packet to identify the application or service associated with it.

Question 11

Match each item with a statement below.
-Internal private IP addresses are mapped to public external IP addresses hiding the internal infrastructure
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

NAT is the process of mapping internal private IP addresses to public external IP addresses in order to hide the internal infrastructure.

Answer: D 
 A DMZ (demilitarized zone) is a separate network segment used to isolate public-facing servers from the rest of the internal network.

Answer: J 
 An application-aware firewall can inspect the content of network traffic to identify specific applications and enforce security policies based on Application-layer data.

Question 12

Match each item with a statement below.
-Records session-specific information about a network connection
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

Stateful packet filters keep track of the state of a network connection and record session-specific information.

Answer: C)NAT 
 Network Address Translation (NAT) allows multiple devices on a private network to share a single public IP address, which can provide some level of protection.

Answer: D)DMZ 
 A DMZ (demilitarized zone) is a separate network that sits between a company's private network and the internet, where publicly accessible servers can be placed.

Answer: J)application-aware firewall 
 An application-aware firewall is a next-generation firewall that can identify specific applications or services within network traffic and then apply specific security policies to those applications.

Question 13

What is a path-vector routing protocol?

Accepted Answer

The answer of What is a path-vector routing protocol?...

Question 14

What is a link-state routing protocol?

Accepted Answer

The answer of What is a link-state routing protocol?...

Question 15

Match each item with a statement below.
-Administrator can perform basic troubleshooting tests and list information stored on the router
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

The answer of Match each item with a statement below.
-Administrator...

Question 16

What is a distance-vector routing protocol?

Accepted Answer

The answer of What is a distance-vector routing protocol?...

Question 17

What is the purpose of creating a "Security Operations Center"?

Accepted Answer

The answer of What is the purpose of creating a...

Question 18

What is the difference between passive and active IDSs?

Accepted Answer

The answer of What is the difference between passive and...

Question 19

Match each item with a statement below.
-Indicates that a system or network has been hacked
A)stateful packet filter
B)passive systems
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)privileged mode
H)indicators of compromise
I)active systems
J)application-aware firewall

Accepted Answer

Indicators of compromise are signs that a system or network has been hacked, such as unusual network activity, unauthorized access or changes, and unusual system behavior.

Quiz 13: Network Protection Systems

Match each item with a statement below. -Handle each packet separately and are not resistant to spoofing or DoS attacks

Match each item with a statement below. -Small network containing resources that a company wants to make available to Internet users and helps maintain security

Match each item with a statement below. -Inspects network traffic at a higher level in the OSI model than a traditional stateful packet inspection

How do "Network-based IDSs/IPSs" monitor activity on network segments?

List the different types of memory and their main function found in Cisco routers?

Match each item with a statement below. -IDS systems that don't take any action to stop or prevent an activity

What are the advantages and disadvantages of hardware and software firewalls?

Match each item with a statement below. -Administrator can perform full router configuration tasks

What are the interfaces in a Cisco router?

Match each item with a statement below. -IDS systems log events and send alerts,but they can also interoperate with routers and firewalls to stop an attack

Match each item with a statement below. -Internal private IP addresses are mapped to public external IP addresses hiding the internal infrastructure

Match each item with a statement below. -Records session-specific information about a network connection

What is a path-vector routing protocol?

What is a link-state routing protocol?

Match each item with a statement below. -Administrator can perform basic troubleshooting tests and list information stored on the router

What is a distance-vector routing protocol?

What is the purpose of creating a "Security Operations Center"?

What is the difference between passive and active IDSs?

Match each item with a statement below. -Indicates that a system or network has been hacked