stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Module 10 Quiz (In progress) Flashcards | StudBud
Explore
/
Module 10 Quiz (In progress)
Module 10 Quiz (In progress)
41 terms
·
StudBud Administration
·
14 plays
Imported from external platform
Flashcards
41 cards
F
Practice quiz
P
Host live
L
Questions
41
Answers
1
What is an endpoint?
An intermedial device between connections on a network, used for management
A host, usually a laptop, desktop, server, phone or employee device (BYOD)
A device that sends out information to a large amount of hosts
A device at the end of a network, the last device on the network
2
Layer 3 is the weakest link in the OSI model
False
True
3
What does an NGFW do?
Provides IP Spoofing, private connections to remote users and authorization
Stateful packet inspection, advanced malware protection and URL filtering
Stops Malware by scanning your device's SSD
Authentication, Authorization and Accounting Services.
4
What does ESA stand for?
Email Security Appliance
Electronic Security Application
Email Sorting Algorithm
Electronic Security Appliance
5
What is a MAC Table attack?
When a MAC address table is flooded with false addresses
When MAC addresses on a device are maliciously changed
When the device building the MAC address table is destroyed
When a MAC address table is wiped by a threat actor
6
What is an address spoofing attack?
An attack that includes MAC and IP address spoofing attacks
An attack that manipulates STP to cause disarray
7
What does AAA stand for?
Authentication, Authorization and Accounting
Access, Authentication, Automation
Access, Authorization, Accounting
Access, Accounting, Automation
8
What does the IEEE 802.1X protocol restrict?
Users from connecting to malicious websites
Unauthorized workstations from connecting to a LAN through switch ports
Authorized workstations abusing their credentials and installing malware
Authentication servers being deceived by threat actors
9
What does good port security do?
Prevents ARP spoofing and ARP poisoning attacks
Prevents DHCP starvation and spoofing attacks
Prevents MAC and IP address spoofing attacks
Prevents MAC address flooding and DHCP starvation attacks
10
What is an ARP attack?
An attack that includes ARP spoofing and ARP poisoning attacks.
An attack that manipulates IP and MAC addresses to redirect traffic
11
Antivirus/Antimalware can be installed on hosts
True
False
12
What does WSA stand for?
Wide Secure Area
Web Security Administrator
Web Security Appliance
Web Sorting Algorithm
13
What are the roles for 802.1X Port-Based Authentication?
Client (Supplicant), Switch (Authenticator), Authentication Server
Host (Potential Threat Actor), Switch (Authenticator), Server (Supplicant)
14
What does DHCP Snooping do?
Prevents DHCP starvation and DHCP spoofing attacks
Prevents ARP spoofing and ARP poisoning attacks
Prevents MAC address flooding attacks and DHCP starvation attacks
15
What does a NAC device do?
Provides standards for a network or organization on internet safety
Provides a secure, remote connection to users across a public network
Stateful packet inspection, URL filtering and advanced malware protection
Provides Authentication, Authorization, and Accounting services
16
What does a VPN enabled router do?
Provides a secure connection to remote users across a public network
Uses black magic to make the network invincible
Authorizes connected users to access the network
Provides stateful packet inspection
17
The IEEE 802.1X standard is a port-based access control and authentication protocol
True
False
18
What does Local AAA Authentication do?
Stores usernames and passwords on a local network. Good for large networks.
Stores usernames and passwords on a local network. Good for small networks.
Stores usernames and passwords in a local device. Good for small networks.
Stores usernames and passwords in a local device. Good for large networks.
19
What is a Data Breach?
An attack on data servers or hosts to steal confidential information
An attack designed to attack from many devices, overloading their target
An attack with the ability to self-replicate, overloading a devices storage
An attack where malicious software "takes over" a target host
20
What is a VLAN attack?
A type of attack that creates a new VLAN, directing traffic to it
A type of attack that includes double-tagging and VLAN hopping
21
What does an ESA do?
Monitor Incoming Network Traffic, Provide a secure connection and AMP
Blocks certain ports, reports websites with malware, URL filtering
Provides a VPN, URL filtering, AMP and a NGIPS
Block known threats, discard emails with bad links, encrypt outgoing emails
22
What protections does a WSA provide?
Provides Authentication, Authorization and Accounting services
Protection from infected sites, blocking known threats, encrypt emails
Idk something good I guess
AMP, Application visibility and control, Policy controls and Reporting
23
A WSA is a part of NAC
True
False
24
What does an IP Source Guard (IPSG) do?
Prevents ARP spoofing and ARP poisoning attacks
Prevents MAC and IP address spoofing attacks
25
What is a DDOS?
An attack on an organization, meant to steal confidential information
An attack that infects hosts with malicious software to cause many problems
An attack from several devices, designed to overload their target
An attack on a device meant to remotely control it
26
What is Malware?
An attack that destroys a host device completely
An attack where malicious software can cause a variety of problems
idk I'm stupid
An attack that targets servers or host to gain specific information
27
What does AMP stand for?
Administrator Management Protocol
Advanced Malware Protection
Agreed Management Protocol
Advanced Malware Protocol
28
What does an ESA monitor?
Port 587
Port 25
SMTP
Port 80
29
What does VPN stand for?
Virtual Personalized Network
Virtual Private Network
Visually Presented Network
Voice Protocol Network
30
What are the two most common types of AAA authentication?
Access and Authorization-based
Local and Server-Based
Public and Private
Host and Cloud-based
31
AAA accounting collects and reports usage data. What data might it collect?
Usernames, Passwords, IP addresses and location data.
Executed Commands, Host names, IP addresses and MAC addresses
IP addresses, MAC addresses and Host names
Number of packets, Number of bytes, Executed commands, connection times.
32
What is a DHCP attack?
An attack where a device intercepts DHCP information and directs traffic
An attack where devices get assigned invalid IP addresses by a DHCP server
An attack where VLAN traffic is directed to a threat actor
33
How is SSH more secure than Telnet?
Is on a different port from Telnet
It isn't mandatory in China so they can spy on people
Can be used from a long distance, making it more secure
Requires a username/password, authentication and records users logging in
34
What does NAC stand for?
Non-Accessible Control
Network Access Control
Network Address Copy
Network Address Collection
35
NGFW stands for
Next-Generation Forwarding WAN
I lowkey cant think of a fourth answer
New-Generation Forwarding WAN
Next-Generation Firewall
36
NAC is a part of a WSA
False
True
37
Layer 2 is the weakest link in the OSI model
True
False
38
What does NAC usually include?
SMTP Monitoring, URL Filtering and Stateful Packet Inspection
Port Blocking, VPNs and NGFW
SMTP, HTTPS and AMP
ESA, WSA and AMP
39
What does Server-Based AAA Authentication do?
Stores usernames and passwords in a server, good for large networks.
Stores usernames and passwords in a router, good for large networks.
Stores usernames and passwords in a server, good for small networks.
Stores usernames and passwords in a host, good for large networks.
40
A VPN enabled router can be integrated into the firewall
True
False
41
What does Dynamic ARP Inspection (DAI) do?
Prevents IP spoofing attacks
Prevents many types of attacks, including IP address flooding
Prevents DHCP starvation and DHCP spoofing attacks
Prevents ARP spoofing and ARP poisoning attacks.
