stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Domain 1.0 Network Security Flashcards | StudBud
Explore
/
Domain 1.0 Network Security
Domain 1.0 Network Security
174 terms
·
StudBud Administration
·
301 plays
All-In-One CompTIA Security + Domain 3 SY0-401 Exam Guide Fourth Edition
Flashcards
174 cards
F
Practice quiz
P
Host live
L
Questions
174
Answers
1
Hardware bridging ASICS (very: fast) and an OSI layer 2 device. Is the core of the enterprise
Load Balancer
Router
Firewall
Switch
2
Acts as a buffer zone between unprotected areas of a network and provide protection in between
VLAN
LDAP
DMZ
SAN
3
VLANs is separated by logic and programmatic. How do other VLANs directly communicate?
All of the above
By a secured tunnel with TLS/SSL
They communicate with FCoE
VLANs purpose & security strength does allow direct contact
4
Which of the following best describes security polices in a firewall ?
Rules that define a audit log
Rules that exploit and block traffic
Rules that define traffic permissible and blocked
Rules that insert malicious code in traffic 2 prevent access
5
Why is MAC filtering usage
Attackers can clone working MAC addresses
All of the above
The use os 802.1x for network authentication was replaced
It is cumbersome to implement
6
a wireless network allows access but only to a single website is?
Captive portal
Guest wireless
802.1x
VPN over open wireless
7
TLS can utilize which term?
LEAP
PEAP
CCMP
802.11i
8
A proxy that is invisible is known as
Reverse Proxy
Web proxy
Transparent proxy
Anonymizing proxy
9
A IEEE standard performs PNAC of devices attached to the LAN for access approval of the network
Flood guards
802.1x
IEEE PNAC
EAP
10
Which is not an antenna performance ?
Double power every 3dB of gain
high gain signals of radio waves with Yagi
measured in dB
Transmission of signals are visible
11
10.10.10.0 created into a subnet for three buildings?
255.255.255.128
255.255.255.252
255.255.255.192
255.255.255.240
12
A UTM appliance would most lily be placed:
Inside the development network
At the edge of the corporate network
Between development and production networks
In a network operations center
13
How would an IDS system help you respond to this incident?
Give more details
It wouldn't help
Provide more complete logs
Provide an earlier warning
14
Cloud deployment models are Public and Private virtualized software services. Also so is..
PaaS / HaaS
Community / Hybrid
Hybrid / Birthday
SaaS / IaaS
15
Which network mask corresponds to a /31 prefix?
255.255.255.254
255.255.255.192
255.255.255.0
255.255.255.248
16
When adjusting antenna placement these all apply for "control" except which one?
Layer APs and overlap channels
Create a rouge access point for your network
Adjust power levels or type of antenna
Condone a site survey
17
Wireless networks
use radio waves and encrypts data
use micro waves and encrypts data
use gamma waves and encrypts data
use SSID waves
18
A small IP subnetwork that sits between the trusted internal LAN and the public Internet is?
Router network design
IDS system network design
Switch network design
DMZ security layout
19
What type of NAT would be mot appropriate for mapping private IPs to a unique external IP ?
PAT
Dynamic NAT
Static NAT
Full-cone NAT
20
A 64 bit message integrity check with secret key adding a sequence counter to replace WEP is?
RC4
TKIP
CCMP
AES
21
IEEE 802.1x does not employ ....
Makes extensive use of AES and TACACS+
PNAC / Disables unused ports
Enables duplicate MAC address checking/spoofing
Makes extensive use of EAP and RAIDUS
22
What is the primary enhancement WPA2 has over WEP?
Temporary WEP keys using TKIP
WPA2 supports the 802.1x protocol for secure client auth.
WPA 2 uses longer keys the WEP
AES and CCMP
23
This is a capability of Data protection and compliance web security gateway
blocks traffic like malware and spyware
group of users are monitored
measures how much web traffic is being generated
scans for proprietary info being sent out of the network
24
Performs as a workload distribution for traffic to evenly distributed among the server groups
Switch
URL filter
Spam filtering
Load balancer
25
When building an ACL under an explicit deny, where would you place a "deny all" statement?
At the end of the ACL entries
Before any ACLS entries that deal with HTTPs
At the beginning of the ACL entries
On the ingress filter
26
IEEE standard 802.1D
WEP/TKIP
NAT
STP
WPA2/CCMP
27
Which security measure on the cooperate network would not be compatible with BYOD?
WPA2
Captive portal
MAC address filter
Site survey
28
A OSI Layer 4 (TCP/UDP) device that can filter through OSI Layer 7?
Load balancer
Proxy
Firewall
Microsoft Windows Antivirus
29
SSH correspondes to which one?
TCP 22
SSL/TLS
Trunking
PAT
30
Web application firewall (WAF) listed features except for one:
operates on the Physical layer of the OSI model
Protect against SQL injections and buffer overflows
Applies rules to HTTP conversations (allow or deny)
Focus of PCI DSS
31
A small IP subnetwork that sits between the trusted internal LAN and the public Internet
router subnet
DMZ
spam filter
Protocol analyzer
32
WPA/TKIP was replaced by what protocol to upgrade the legacy ?
CCMP
WPA2
CHAP
Kerberos
33
Remote Access is a remote desktop software that accomplishes what?
Runs on SaaS
A connection to a device from across a secure VPN
Network address translation with Dynamic NAT
Is another version of cloud computing service
34
Translates IP addresses for int. traffic & another set for ext. traffic
NAC
NAT
IaaS
NATP
35
What does LEAP do?
Provides TLS support over Wi-Fi and uses
Provides lightweight authentication and uses dynamic keys
Modernizes Wi-Fi a new encrypting cipher
Forces CISCO devices to use WPA2
36
Which logs should be examined to determine if an intruder breached internal systems?
IDS /IPS / ACL
ACL / Switch / Router
Router / Firewall / IDS
Firewall / Switch / Load Balnacer
37
This device is usually a Ethernet-based LAN
NIPS
Switch
Router
HIDS
38
Which of the following protocols would you recommend be used to manage the remote router?
HTTP
SSH
Telenet
SNMP
39
Describes how circuit switched voice signals can be converted to the format of data packets
MDM
Vishing
Telephony (IPT)
Phreaking
40
Prevents bridging loops in an Ethernet network by setting only one switch as a root bridge
Firewall
STP
DMZ
LDAP
41
This may work at the server side or at the client end, but protects against e-mail spamming
ACLs
Loop protection
Firewall
Spam Filtering
42
RAS widely known for dial up TCP/IP access use what type of AAA method 4 secure communication
PPPTP/RAIDUS
PPPTP/ RC4
PPPTP/ TACACS+
PPPTP/ CHAP
43
Guest are can use wireless network but unable to access any web pages. This is due too what?
Antenna placement
Capacity planning
Access point power controns
Captive portal
44
Why is it important for a web app firewall to perform SSL inspection?
None of the above
Inspec the SSL traffic assist with load balancing
SSL inspec is only used when under attack
A lack of SSL inspec would allow a channel to threats
45
Which of the following is not antenna type?
Monopole antenna
Yogi antenna
Omnidirectional antenna
Dipole antenna
46
Web Security Gateways
Defends against real time threat analysis capability
Proxy functions with content-filtering product
Defends against advanced attacks
Applies security mechanisms to specific applications
47
Cloud computing services consist all of the following except?
PaaS
HaaS
IaaS
VPN
48
VLAN corresponds to which on?
PBX
Trunking
SaaS
PAT
49
FTPS corresponds with which one?
SaaS
Trunking
PBX
SSL/TLS
50
Provides full advertised throughput speeds to all connected nodes and can perform routing
Intelligent switch
Open proxy
Load balancer
Productivity monitoring gateway
51
Logical separation of network devices and needs a router to communicate. "Natural" barrier .
VLANs
Logic bomb
separation of duties
IPv4/IPv6
52
Flood guards functionality might protect against which of the following attacks?
Brute Force
Address spoofing
Smurf attack
SQL injection
53
When would you use a directional-type antenna?
Want to communicate with signal remote client
Cover only the guest conference room
Need to cover an entire warehouse floor
Are allowed to transmit at high power
54
rDNS - Reverse DNS
Is a reverse authentication method for communication 4 DNS
Is a form of SYN attack
Blocks Domain names from your network
Block email where the senders domain doesn't match the IP
55
A common authentication on wireless networks. Can block or hold people from off the internet
MAC address filter
Captive portal
Warm Site
Hot Spot
56
This was created by Cisco, MS, and RSA Security as a encapsulation EAP in a TLS tunnel
EAP
SEAP
PEAP
LEAP
57
These devices are located outside of the network and are known as "all-in-one devices"
DMZ
EAPOL
UTM
802.1x
58
Once a client successfully authenticates they can communicate over what 802.1x system server ?
Kerberos
EAPOL
TACACS+
RAIDUS
59
A management VLAN allows administration to do which of the following?
Bundle VLANS based on traffic priority
Copy all packets passing through the switch
Connects to switch remotely
Automatically recorder VLANS based on their time of day
60
What security principle are you looking over when wanting to purchase a "all-in-one"?
Loop prevention
Defense in depth
NAC
Network separation
61
When would disabling SSID broadcasting make the most sense?
Near an airport and there's free-wifi infrastructure
Unable to encrypt the Wi-Fi signal due to malfunctions
Providing guest wireless outside the firewall thats not open
On a hotel network and worried about external intrusions
62
Between a Yagi and Parabolic antenna which would you use for a remote SOHO ?
All of the above
Yagi
Parabolic
Both 1/3
63
Which of the following is not a remote-access method?
Remote desktop software
Terminal emulation
SaaS
Secure Shell
64
Possible to inspect a packet headers for MAC addresses and managed by SNMP
Layer 2 switch
Layer 7 switch
Layer 4 switch
Layer 3 switch
65
Permissions associated with an object that used in file systems, network devices, OSs, and etc.
IP address
KDC
ACLs
DNS
66
CCMP
Integrity frame work
Used as confidentiality coding for DMZ servers
Replaced TKIP when WPA2 published
Replaced by AES
67
PBX and VoIP are connection solutions over what type of RSA connection?
TLS
SSH
IPT ( IP Telephony )
WPA2
68
Corporate fileserver is connected to VLAN. This violates which security principles ?
Loop protection
Network separation
VLAN management
Least privilege
69
Which security mechanism is the best to employ to accomplish no connections with overseas ?
ACLS
Implicit deny
VLAN management
Network separation
70
Why is site survey important to wireless security?
The Wi-Fi signal can be restricted from external users
Configure the fewest access points allows deterrence
High-strength= effective Wi-Fi encryption keys
Minimize the strength to reduce the risk of external attacks
71
A common configuring system that is an efficient manner of translating active policy objectives
Proxy
Role-based management
Rule-based management
VLANs
72
Quickbooks online is an example of:
SaaS
IaaS
PaaS
QaaS
73
Manages the endpoints on a case by case basis as they connect is ...
SaaS
Remote Access (RA)
Sub-netting
Network Access Control (NAC)
74
Capable devices 4 maintaining information about connected apps to optimize their operation isnt
Application-Level proxies
VPN
Next generation firewalls
IDS/IPS
75
Used to capture and log unicast, multicast and broadcast traffic passing through a network is?
Protocolar analyzer
Switch
VPN concentrator
IPS
76
A spam filtering disadvantage would be?
Uses SMTP standards checking to block all anti-RFC standards
Stops unsolicited email at gateway
Can be bypassed through a social engineer attack
Uses a recipient filtering to block email not for you
77
In ACLS, an implicit deny will apply to network traffic that:
Does not match any entry in the ACL
Comes from a spoofed source address
Originates from inside the DMZ
Matches two or more rules in the ACL
78
These are all classes of NAT private addresses except?
Class C: 192.168.0.0 - 192.168.255.255
Class D: 20.0.0.0 - 20.255.255.255
Class A: 10.0.0.0 - 10.255.255.255
Class B: 172.16.0.0 - 172.31.255.255
79
Which is the best policy to use when administrating a firewall?
QOS
FIFO
Least Access
Comprehensive
80
This defines the captured traffic, creating a picture of the overall network security
UTM
Router
Log analysis
Firewall
81
802.1x defines the encapsulation of EAP. What is EAP?
Extended Authentication Protocol
Extensible Autonomous Protocol
Encapsulation Authentication Protocol
Extensible Authentication Protocol
82
IEEE 802.1x
WPA2
Internet
Switch port security
WEP with TKIP
83
Logical separation with virtualization & Physical separation of devices in static environments
802.1x
Network separation
Log Analysis
UTM
84
Can perform multiple security functions via one appliance or a "all-in-one" device
Protocol analyzer
Real-time malware protection
Layer 2 switch
VPN concentrator
85
Disable SSID broadcasting?
It's security through obscurity, apply other methods
SSIDs are protected with NETGEAR
All of the above
Service Set Identifiers can't be alter
86
When enabling port security on a switch interface, traffic his usually restricted based on :
MAC Address
IP address
Protocol
Source port
87
Which would be best for a employee network to have security practices when subtended by guest?
LEAP/ EAP
NAT/ PAT
WPA2/ Site Survey
Captive portal / VPN
88
An anomaly based NIPS will alert in which case?
Matches to know attack patterns
Changes from a configured traffic baseline
None of the above
Deviates from a predefined traffic profile
89
Why is delay-based filtering effecriVr against spam?
spam generators are poorly behaved
spam generators has a very short TTL
Spam generators won't send spam if they can't do it asap
spam generators do not wait for the SNMTP banner
90
Flood guards doesn't ...
Monitor broadcasts, multicasts, and unicasts traffic
Monitor traffic rates/percentage of bandwidths
Uses a VPN concentrator for a internet guard
Detects when to block traffic
91
This cloud service is a pay per use service your responsible for device/application management
IaaS
TKIP
SaaS
PaaS
92
This device limits the number of MAC addresses available on a switch port for net security ?
Firewall rules
VLAN management
ACLs
Port security
93
This cloud give the user independence although makes the user more vulnerable towards malware
Kerberos cloud
Private cloud
Hybrid cloud
None of the above
94
What type of port security would you select for prohibited access with BYOD?
Static mode
LIFO method
Sticky methods
Dynamic learning
95
Which of the following protocolS is not used in loop protection efforts ?
Spanning Tree
Rapid Spanning Tree
Multiple Spanning Tree
Open Shortest Path First
96
WPS can utilize which term?
CCMP
RC4
PEAP
EAP
97
NAP MS technology and NAC Cisco technology are two method of what network design ?
802.1x
Telephony
Subnetting
NAC
98
What is a threat to VPN over open wireless?
A certificate could be faked , allowing access to corp nets
All of the above
Hackers can sniff the vPN packets and decrypt them
Connect to the open wireless before a VPN, allowing a risk
99
This is not a mechanisms established security policies in a Firewall...
NAT (Network Address Translation)
Basic/Stateful packet filtering
ACLs( Access Control Lists)
Detects traffic with a behavior-based methodology
100
IPsec overs the CIA triad with IP packet transmission with the use of AH's and ___?
Encapsulating Security Payload
Temporal Key Integrity Protocol
Oakley
Authentication Extensible Standard
101
This is good for post-event analysis and provide real-time analysis
VLAN management
Port security
Firewall rules
Log analysis
102
Why should most organizations use a content-filtering proxy?
allow users to browse the internet anomonlsy
To enforce a network AUP
To provide a secure tunnel to the Internet
To reduce bandwidth usage with local copies content
103
NAC is implemented :
When devices change protocols
When zero-day attacks are detected
When devices initially attempt to access the network
When devices change MAC addresses
104
What is the most appropriate type of cloud service to use for a project between two companies?
Hybrid
Community
Hybrid
Private
105
How can traffic from within your company that has private IPs go out to the internet securely ?
A destination NAT will provide confidentiality for your IPs
By sending your private IPs via TCP port 161
By sending your private IPs via TCP port 25
A static NAT will provide confidentiality for your IPs
106
This is an application delivery only cloud computing service. SalesForce.com is this service
PaaS
SaaS
SaaP
LaaP
107
WAF rules are listed but there is one that doesn't look familiar. Which one is not a WAF rule?
Are based off of protocol analyzer configurations
Evaluated from top-to-bottom ( logical path )
Allows or denies traffic based on security tuples(source IP)
A implicit deny at the bottom
108
An OSI Layer 3 device that can often connect LANs to WANs or Copper to Fibre networks
Switch
Protocol Analyzer
Router
Layer 4 router
109
Which one is not VPN concentrator advantage ?
filters out spam with spam VPN protocol
Connection point for remote users
Hamachi Open VPN
Uses End-to-End communication
110
Provides users additional bandwidth without upgrading all equipment and can also be a VLAN
Network Seperation
UTM
Firewall
Log analysis
111
SNMPv1 and SNMPv2 authenticate using?
a cleartext password
a TGS (Kerberos )
a encrypted password
a EDH password
112
Application-layer firewalls can analyze packets to the equivalency of a IPS by?
Deny all traffic to enter the network
Examine app AHs and log specific actions
Log app characteristics and allow traffic to travel inside
Examine app characteristics and blocking specific actions
113
Firewall filter executes their security polices in a top-down manner, with allow or block rule
and ends with a deny all rule
and ends with a translate all rule
and ends with a affirm all rule
and ends with a auth all rule
114
Clients are aware that requests go through a proxy and use SSL to exchange data is what proxy?
Content-filtering proxy
Open proxy
Transparent proxy
Explicit proxy
115
Which security practice is best for a network that is used for guest also access for employees
WPA2
Site Survey
MAC address filtering
Captive/ LEAP
116
This security method ensures confidentiality with data encryption when on a WLAN.
MAC address filter
IPsecv4
URL filter
VPN concentrator
117
This methodology of network design logically separates your companies switch ports to subnets
802.1x
Rule-based management
VLANs (Trunking)
Spanning Tree Protocol
118
Emerging approach of unifying different endpoint security technologies is known as...
NAT
NAC
DAT
PAT
119
NAT corresponds to which one ?
PBX
PAT
TCP 22
SSL/TLS
120
You're selecting a computing cloud for your firm but it's sensitive. Pick the best the cloud.
Public cloud
Private cloud
Community cloud
LAKITU cloud
121
AKA the "hardware" address that can be spoofed and limits access through the physical hardware
PEAP
omnidirectional antenna signal name
MAC Filter
Private cloud
122
Which of the following servers would be least likely to place in a DMZ?
DNS server
web server
SMTP server
File server
123
What is the primary difference between a proxy and a firewall?
firewalls perform NAT while proxies don't
A firewall used as hard OS tool, proxies don't
Proxies allow, firewalls deny access
Proxy is application level request, and firewalls access
124
You have the IP address but not the traffic content. What is your next step?
Use ACLS to drop IP address the came from
Disconnect the router from the Internet to prevent attacks
Use a protocol analzyer to see current attack traffic
Turn findings over to management
125
Captive portal can utilize which term?
EAP
PEAP
CCMP
HTTP
126
When in the cloud you have data local but have your PaaS located externally in the public cloud
Public cloud
Community cloud
Hybrid cloud
Private cloud
127
Trunking
The process of spanning a single VLAN across a # of switches
Used in VPNs
A protocol for file transfers
Rootkit attack
128
802.11i can utilize which term?
CCMP
LEAP
HTTP
EAP
129
What involves having security decisions made in real time via scripted policy rules?
Flood guards
VLAN management
Firewall rules
Rule-based management
130
If you need multiple host to share a single external IP address , you might use:
Dynamic NAT
Destination NAT
PAT
Source NAT
131
What is meant by the word "stateful" with respect to firewalls?
The firewall keeps a list of all addresses to prevent spoofs
Only packets matching an active connection are allowed
Packets that are addressed to the internal server R allowed
The firewall tracks what country request are from
132
Whitelist spam filter is a filter that ?
Wipes all email from inbox
Receives emails from everyone
Groups spammers into that list
Only receives email from trusted senders
133
Behavior based, Signature based, Anomaly based, and Heuristic are branched form what device?
NAT/PAT
PEAP authentication module
IDS/IPS
NAC/ICMP
134
Application delivery-only PaaS offerings generally focus on :
Security and scalability
Allowing developers to use any programing language
Development capabilities
Subscription-based services
135
What do load balancers use to determine if a host is operational ?
Time to live
Logixn
Request count
Health checking
136
What best describes Implicit deny?
START command
DENY ALL
ALLOW ALL
STOP command
137
Pick on that doesn't apply to ACLs
verification is via discretionary access control list
Enforces privilege separation and controls access
A device that is attached to NAT
ACCESS_MASK is specific to an object being created
138
Analog voice signal has to be digitized into pulse code modulation (PCM) signals via ..
a voice-decoder (IPT)
a mic on a iPad (IPT)
a mic on a phone (IPT)
a voice coder (IPT)
139
An organization wanting to create restrained access to the internet for sensitive data ?
A community cloud
A private cloud
SaaS
A public cloud
140
A management VLAN doesn't configure to this remote access
SSH
Telnet
web interface built switch
Mobile device
141
Network firewall includes all of the following except ?
A network layer firewall
Operates on OSI Network layer 3
Runs at a low level of the TCP/IP stack to filter packets.
Filters HTTP traffic
142
What best explains targeting ?
Intentionally slows down the server so spammers will leave
based on IP address and creates a list of trusted users
A WPA2 authentication protocol
groups users who send email that don't have IP addresses
143
This is Cisco proprietary that uses only passwords for securing communications based on MS-CHAP
WEP
LEAP
PEAP
TKIP
144
Why does a switch manufactured with a Switched Port Analyzer (SPAN) copy network traffic?
Send it to a specific port that supports a protocol analyzer
SPAN is a portal for a VPN
Send it to port 443 that will support a protocol analyzer
Send it to port 125 that will support a protocol analyzer
145
IEEE 802.11 protocol
FCoE
WLANs
Virtual cloud for the extranet
WEP
146
Which protocol can create a security vulnerability in switches because it uses plaintext?
SSH
SMTP
SNMP
NAT
147
Which of the following is not a best practice for secure router configuration ?
Disabling echo, CHARGEN, and other simple services
Enabling logging
Disabling IP sure route
Enabling Telnet access
148
Which is not a variant of port security ?
Dynamic learning (MAC address association)
Sticky learning (MAC addresses knowledge)
Heuristic learning (MAC address intelligence)
Static learning (specific MAC address )
149
A "packet sniffer" that requires a network adapter that can run in promiscuous mode.
Proxies
URL Filter
UTMs
Protocol analyzer
150
DMZs
Should be disabled to allow network access to the internet
Is another VLAN for sub-netting
It is considered an extra layer of protection with firewalls
Offers cloud computing services
151
Multiple overlapping fashion with different security elements achieves protection is?
VLAN
Layered security/ Defense in depth
IPS
Firewall
152
When disscuisng virstulixzaitn , a snapshot is:
Resources used by a virtual machine at a given PIT
The state of virtual disks with a specific virtual machine
State of a virtual machine at an exact point in time
The use of hardware emulation in a virtual machine
153
U want to protect configuration file transfers like TFTP, SCP, and HTTP. What should u secure?
Port security
Flood Guards
Secure router configuration
Secure firewall rules
154
A device utilized for systems handling websites, IRC networks, & high bandwidth file transfers
Load balancing
HIDS
Application-aware-device
Protocol Analyzer
155
Performs health checks and best for stateless systems
Content filter firewall gateway
Proxy
Switch
Load balancer
156
IDS/IPS DO NOT DO THIS:
IDS: Alerts but doesn't stop attack
IPS: block the attack
Protects against OS and application exploits
Create a secure tunnel for Integrity
157
An AES-based encryption mode used by WPA2 for providing strong security uses 128-bit key
TLS/SSL
EAP
CCMP
TKIP
158
This is not in the network design purpose of Virtualization...
Snapshot allows you to return to previous point in time
Pings Flooding
flexibility in the enterprise with faster backups
Separates hardware from software and creates a storage area
159
How low should you set your wireless configuration?
As low as possible
At a humble level
Average wireless configuration should be fine
Below average as possible
160
Sequence counters in TKIP prevent what type of attacks?
Backdoor attack
Trojan Horse attack
Replay attacks
Adware attack
161
This capability doesn't apply to Real-time malware protection ( Malware inspection)
Scans all outgoing and incoming web traffic and UTM app
generated by a group of users
Blocks malware, file-based attacks, and malicious script
detects and blocks undesired web traffic
162
Loop protection is referred to as
ACLs
Spanning-Tree Protocol (STP)
NAT
DMZ
163
Local public entities and key local firms are both on the same computing cloud. What is it?
Community
Private
Hybrid
Nimbostratus
164
Data and applications are centrally managed and updates are seamless (Microsoft Office 365)
IaaP
PaaS
SaaS
IaaS
165
Network separation is primarily to:
Facilitate logging of suspicious traffic
Separate networks for security reasons
Limit the required number of SPAN ports
Maximize performance
166
Why does a network protocol analzyr need to be in promiscuous mode?
To tell the switch to forward traffic to a network
To avoid ACLs
Promiscuous mode is not required
To force the network card to process all packets
167
What two models doe WPA2 operate in, and what is the dry differedncre between them?
Public and Work ; Encryption
Enterprise and Personal; authentication
Enterprise and Guest; integrity
AES and WEP; key strength
168
Gmail and Google Docs are example of what computing cloud service?
PaaP
PaaS
IaaS
SaaS
169
Prevents unauthorized access to or from a private network by simple packet filtering on Layer 4
Content-filtering proxy
Egress spam filtering
Firewall
Data protection and compliance web security gateway
170
How is TKIP a security benefit?
Forces TLS auth. between client and AP
Enforces security by a single WEP key for a short time
All of the above
Provides session key based upon pre-shared key
171
Relays packets across multiple networks by using a special routing table based upon the IP
Router
Firewall
Proxies
Switch
172
Computer services that offer scalability, flexibility, security ,and reliability to a user
Cloud computing
802.1x
Firewall
VPNs
173
A company adopting an IaaS model would typically:
Own the infrastructure equipment
Only support networking infrastructure
Be responsible for housing and maintaining equipment
Pay on per-use basis
174
Which devices can be used to eliminate spam email traffic?
VPN / ACL
Caching proxy / Switch
Router / Firewalls
IDS / Spam Filter
