Question 1

A honeypot appears to have important data or sensitive information stored on it.

Accepted Answer

A honeypot is a security mechanism set to detect, deflect, or study hacking attempts by simulating a vulnerable system, often appearing to contain valuable data to attract attackers.

Question 2

To see the contents of flash memory and the amount of memory used and available, a Cisco administrator would type this command: ____.

Accepted Answer

The command "show flash" is used to display the contents of the flash memory on CISCO devices, including the amount of memory used and available. The other options do not provide information about flash memory.

Question 3

To see the contents of NVRAM, a Cisco administrator would type this command: ____.

Accepted Answer

The command "show startup-config" displays the contents of NVRAM, which stores the device's configuration that is used during startup. Option A ("show running-config") displays the current running configuration in RAM. Option C ("show flash") displays the contents of the flash memory. Option D ("show ip route") displays the routing table.

Question 4

____ IDSs/IPSs monitor activity on network segments. Essentially, they sniff traffic as it flows over the network and alert a security administrator when something suspicious occurs.

Accepted Answer

Network-based IDSs/IPSs monitor traffic on network segments. They analyze network packets in real-time and detect unauthorized or malicious activity.

Question 5

____ access lists can restrict IP traffic entering or leaving a router's interface based on only one criterion: source IP address.

Accepted Answer

Standard IP access lists can only filter based on source IP address, whereas extended IP access lists can filter based on both source and destination IP addresses, as well as protocols and port numbers. Therefore, for the given scenario, the best choice is standard IP access lists.

Question 6

A(n) ____ sits between the Internet and the internal network and is sometimes referred to as a "perimeter network."

Accepted Answer

The DMZ (demilitarized zone) is a network segment that is located between the internal network and the Internet, and is typically used to host servers that provide public-facing services. A firewall is typically used to protect the DMZ from external threats, while allowing certain types of traffic to reach the servers in the DMZ. Honeypots and IDS (intrusion detection systems) are not directly related to the concept of a perimeter network.

Question 7

The ____ of a Cisco router contains a minimal version of the IOS used to boot the router if flash memory gets corrupted.

Accepted Answer

The ROM (Read-Only Memory) of a Cisco router contains a minimal version of the IOS (Internetworking Operating System) used to boot the router if the flash memory gets corrupted or there is no IOS available in the flash memory. The ROM is also used to perform diagnostic tests on the hardware components of the router during the boot process. RAM (Random Access Memory) is used to hold the running configuration, NVRAM (Non-Volatile Random Access Memory) is used to hold the startup configuration, and flash memory is used to hold the IOS image and other files.

Question 8

A security appliance is a single device combining two or more network protection functions.

Accepted Answer

A security appliance is designed to provide multiple security functions such as firewall, intrusion prevention, VPN, content filtering, and more in a single device. This reduces the complexity and cost of managing multiple devices while improving network efficiency and security.

Question 9

The main purpose of a(n) ____ is to reduce broadcast traffic that passes over a network and to choose the best path for moving those packets.

Accepted Answer

A router is designed to reduce broadcast traffic that passes over a network and choose the best path for moving those packets. Routers use routing tables and algorithms to direct traffic between different networks, thereby reducing congestion and allowing for more efficient communication. Firewalls, IDS, and honeypots are all security mechanisms that serve different purposes than a router.

Question 10

To see what information is stored in RAM, a Cisco administrator would type this command: ____.

Accepted Answer

The "show running-config" command displays the information currently stored in RAM on a Cisco device, including the running configuration of the device's settings. The other options listed display information from different storage locations (startup-config from non-volatile memory, flash from a specific storage module, and ip route from the routing table).

Question 11

Routers operate at the data link layer of the OSI model.

Accepted Answer

Routers operate at the network layer of the OSI model, not the data link layer. They use information from the data link layer to make forwarding decisions, but they do not operate at that layer.

Question 12

The ____ of a Cisco router holds the router's configuration file, but the information is not lost if the router is turned off.

Accepted Answer

NVRAM (non-volatile RAM) holds the router's configuration file and the information is retained even when the router is turned off. RAM (random access memory) holds temporary data while the router is running, but is lost when the router is turned off. Flash memory is used to store the Cisco IOS software, and ROM (read-only memory) contains the bootstrap program used to start the router.

Question 13

____ monitor network devices so that security administrators can identify attacks in progress and stop them.

Accepted Answer

IDSs (Intrusion Detection Systems) are specifically designed to monitor network devices and identify attacks in progress. They analyze network traffic for patterns and anomalies and can alert security administrators to potential threats. Firewalls, DMZs, and honeypots can also provide some level of protection and monitoring, but they are not designed specifically for intrusion detection.

Question 14

The ____ of a Cisco router holds the router's running configuration, routing tables, and buffers; this information is lost if the router is turned off.

Accepted Answer

RAM (Random Access Memory) is volatile memory that holds the router's running configuration, routing tables, and buffers. This information is lost when the router is turned off or restarted. NVRAM (Non-Volatile RAM) holds the router's startup configuration, which is loaded into RAM when the router boots up. Flash memory holds the router's IOS (Internetwork Operating System) software, which can be upgraded or downgraded. ROM (Read-Only Memory) contains the router's bootstrap program, which is used to initiate the boot process when the router is turned on.

Question 15

To see the router's routing table, a Cisco administrator would type this command: ____.

Accepted Answer

The command "show ip route" displays the router's routing table, which contains information on how the router should forward packets to different networks. Options A, B, and C do not provide information on the router's routing table.

Question 16

When first logging on to a Cisco router, you're in user mode by default.

Accepted Answer

When first logging on to a Cisco router, you're in user mode by default.

Question 17

A standard IP access list is restricted to source IP addresses.

Accepted Answer

A standard IP access list only filters based on the source IP address, not the destination IP address.

Question 18

____ IDSs/IPSs are used to protect a critical network server or database server. The software is installed on the server you're attempting to protect, just like antivirus software you install on your desktop system.

Accepted Answer

Host-based IDSs/IPSs are installed on the server you're attempting to protect and monitor for any suspicious activity. This type of IDS/IPS is best suited for protecting critical network servers or database servers.

Question 19

Stateless packet filters recognize types of anomalies that most routers ignore, such as hundreds or thousands of SYN/ACK packets being sent to a computer or server, even though the computer or server hasn't sent out any SYN packets

Accepted Answer

Stateless packet filters do not track the state of connections and therefore cannot recognize anomalies like SYN/ACK packets without corresponding SYN packets. They only filter packets based on predefined rules such as IP addresses and port numbers.

Question 20

The ____ of a Cisco router holds the IOS the router is using.

Accepted Answer

Flash memory is the type of memory that holds the IOS (Internetwork Operating System) of a Cisco router. It is non-volatile and retains the IOS even when the router is powered off. RAM is volatile memory used for temporary storage, NVRAM is used to store the configuration file, and ROM contains the boot firmware of the router.

Quiz 13: Network Protection Systems

A honeypot appears to have important data or sensitive information stored on it.

To see the contents of flash memory and the amount of memory used and available, a Cisco administrator would type this command: ____.

To see the contents of NVRAM, a Cisco administrator would type this command: ____.

____ IDSs/IPSs monitor activity on network segments. Essentially, they sniff traffic as it flows over the network and alert a security administrator when something suspicious occurs.

____ access lists can restrict IP traffic entering or leaving a router's interface based on only one criterion: source IP address.

A(n) ____ sits between the Internet and the internal network and is sometimes referred to as a "perimeter network."

The ____ of a Cisco router contains a minimal version of the IOS used to boot the router if flash memory gets corrupted.

A security appliance is a single device combining two or more network protection functions.

The main purpose of a(n) ____ is to reduce broadcast traffic that passes over a network and to choose the best path for moving those packets.

To see what information is stored in RAM, a Cisco administrator would type this command: ____.

Routers operate at the data link layer of the OSI model.

The ____ of a Cisco router holds the router's configuration file, but the information is not lost if the router is turned off.

____ monitor network devices so that security administrators can identify attacks in progress and stop them.

The ____ of a Cisco router holds the router's running configuration, routing tables, and buffers; this information is lost if the router is turned off.

To see the router's routing table, a Cisco administrator would type this command: ____.

When first logging on to a Cisco router, you're in user mode by default.

A standard IP access list is restricted to source IP addresses.

____ IDSs/IPSs are used to protect a critical network server or database server. The software is installed on the server you're attempting to protect, just like antivirus software you install on your desktop system.

Stateless packet filters recognize types of anomalies that most routers ignore, such as hundreds or thousands of SYN/ACK packets being sent to a computer or server, even though the computer or server hasn't sent out any SYN packets

The ____ of a Cisco router holds the IOS the router is using.