Whitelist spam filter is a filter that ?

Only receives email from trusted senders

Network separation is primarily to:

Separate networks for security reasons

Why does a network protocol analzyr need to be in promiscuous mode?

To force the network card to process all packets

It is considered an extra layer of protection with firewalls

Replaced TKIP when WPA2 published

Which one is not VPN concentrator advantage ?

filters out spam with spam VPN protocol

When disscuisng virstulixzaitn , a snapshot is:

State of a virtual machine at an exact point in time

When devices initially attempt to access the network

WAF rules are listed but there is one that doesn't look familiar. Which one is not a WAF rule?

Are based off of protocol analyzer configurations

How can traffic from within your company that has private IPs go out to the internet securely ?

A static NAT will provide confidentiality for your IPs

Which of the following best describes security polices in a firewall ?

Rules that define traffic permissible and blocked

Disable SSID broadcasting?

It's security through obscurity, apply other methods

The process of spanning a single VLAN across a # of switches

A spam filtering disadvantage would be?

Can be bypassed through a social engineer attack

Web application firewall (WAF) listed features except for one:

operates on the Physical layer of the OSI model

VLANs is separated by logic and programmatic. How do other VLANs directly communicate?

VLANs purpose & security strength does allow direct contact

What is a threat to VPN over open wireless?

Connect to the open wireless before a VPN, allowing a risk

Why does a switch manufactured with a Switched Port Analyzer (SPAN) copy network traffic?

Send it to a specific port that supports a protocol analyzer

studbud

Domain 1.0 Network Security

174 termsStudBud Administration301 plays

All-In-One CompTIA Security + Domain 3 SY0-401 Exam Guide Fourth Edition

Flashcards174 cardsFPractice quizPHost liveL

Questions 174

Answers

1
This methodology of network design logically separates your companies switch ports to subnets
VLANs (Trunking)
802.1x
Spanning Tree Protocol
Rule-based management
2
Whitelist spam filter is a filter that ?
Only receives email from trusted senders
Wipes all email from inbox
Receives emails from everyone
Groups spammers into that list
3
Network separation is primarily to:
Maximize performance
Facilitate logging of suspicious traffic
Limit the required number of SPAN ports
Separate networks for security reasons
4
Why does a network protocol analzyr need to be in promiscuous mode?
Promiscuous mode is not required
To tell the switch to forward traffic to a network
To avoid ACLs
To force the network card to process all packets
5
A device utilized for systems handling websites, IRC networks, & high bandwidth file transfers
Protocol Analyzer
Load balancing
HIDS
Application-aware-device
6
DMZs
Should be disabled to allow network access to the internet
It is considered an extra layer of protection with firewalls
Is another VLAN for sub-netting
Offers cloud computing services
7
What is the primary enhancement WPA2 has over WEP?
AES and CCMP
WPA2 supports the 802.1x protocol for secure client auth.
Temporary WEP keys using TKIP
WPA 2 uses longer keys the WEP
8
What type of NAT would be mot appropriate for mapping private IPs to a unique external IP ?
Static NAT
PAT
Dynamic NAT
Full-cone NAT
9
Used to capture and log unicast, multicast and broadcast traffic passing through a network is?
Switch
VPN concentrator
IPS
Protocolar analyzer
10
Emerging approach of unifying different endpoint security technologies is known as...
PAT
NAT
NAC
DAT
11
Which of the following is not a remote-access method?
Remote desktop software
Terminal emulation
Secure Shell
SaaS
12
Application delivery-only PaaS offerings generally focus on :
Development capabilities
Subscription-based services
Allowing developers to use any programing language
Security and scalability
13
Logical separation with virtualization & Physical separation of devices in static environments
Log Analysis
Network separation
802.1x
UTM
14
A small IP subnetwork that sits between the trusted internal LAN and the public Internet is?
IDS system network design
DMZ security layout
Router network design
Switch network design
15
What is the most appropriate type of cloud service to use for a project between two companies?
Hybrid
Community
Private
Hybrid
16
VLAN corresponds to which on?
SaaS
Trunking
PAT
PBX
17
CCMP
Integrity frame work
Used as confidentiality coding for DMZ servers
Replaced by AES
Replaced TKIP when WPA2 published
18
Which one is not VPN concentrator advantage ?
filters out spam with spam VPN protocol
Uses End-to-End communication
Connection point for remote users
Hamachi Open VPN
19
Captive portal can utilize which term?
HTTP
CCMP
PEAP
EAP
20
SNMPv1 and SNMPv2 authenticate using?
a encrypted password
a cleartext password
a EDH password
a TGS (Kerberos )
21
When disscuisng virstulixzaitn , a snapshot is:
The state of virtual disks with a specific virtual machine
Resources used by a virtual machine at a given PIT
The use of hardware emulation in a virtual machine
State of a virtual machine at an exact point in time
22
NAC is implemented :
When zero-day attacks are detected
When devices initially attempt to access the network
When devices change protocols
When devices change MAC addresses
23
Guest are can use wireless network but unable to access any web pages. This is due too what?
Antenna placement
Capacity planning
Access point power controns
Captive portal
24
WAF rules are listed but there is one that doesn't look familiar. Which one is not a WAF rule?
A implicit deny at the bottom
Evaluated from top-to-bottom ( logical path )
Allows or denies traffic based on security tuples(source IP)
Are based off of protocol analyzer configurations
25
SSH correspondes to which one?
TCP 22
Trunking
SSL/TLS
PAT
26
How can traffic from within your company that has private IPs go out to the internet securely ?
A destination NAT will provide confidentiality for your IPs
By sending your private IPs via TCP port 25
A static NAT will provide confidentiality for your IPs
By sending your private IPs via TCP port 161
27
Which of the following best describes security polices in a firewall ?
Rules that define a audit log
Rules that exploit and block traffic
Rules that insert malicious code in traffic 2 prevent access
Rules that define traffic permissible and blocked
28
Disable SSID broadcasting?
SSIDs are protected with NETGEAR
All of the above
It's security through obscurity, apply other methods
Service Set Identifiers can't be alter
29
Which devices can be used to eliminate spam email traffic?
IDS / Spam Filter
Caching proxy / Switch
VPN / ACL
Router / Firewalls
30
Trunking
The process of spanning a single VLAN across a # of switches
Used in VPNs
A protocol for file transfers
Rootkit attack
31
A spam filtering disadvantage would be?
Can be bypassed through a social engineer attack
Uses a recipient filtering to block email not for you
Uses SMTP standards checking to block all anti-RFC standards
Stops unsolicited email at gateway
32
A "packet sniffer" that requires a network adapter that can run in promiscuous mode.
UTMs
Protocol analyzer
URL Filter
Proxies
33
When enabling port security on a switch interface, traffic his usually restricted based on :
MAC Address
IP address
Protocol
Source port
34
This device is usually a Ethernet-based LAN
Router
Switch
NIPS
HIDS
35
IPsec overs the CIA triad with IP packet transmission with the use of AH's and ___?
Temporal Key Integrity Protocol
Encapsulating Security Payload
Oakley
Authentication Extensible Standard
36
IEEE standard 802.1D
WPA2/CCMP
STP
WEP/TKIP
NAT
37
RAS widely known for dial up TCP/IP access use what type of AAA method 4 secure communication
PPPTP/RAIDUS
PPPTP/ TACACS+
PPPTP/ RC4
PPPTP/ CHAP
38
Possible to inspect a packet headers for MAC addresses and managed by SNMP
Layer 3 switch
Layer 2 switch
Layer 4 switch
Layer 7 switch
39
Relays packets across multiple networks by using a special routing table based upon the IP
Router
Proxies
Firewall
Switch
40
Gmail and Google Docs are example of what computing cloud service?
PaaS
SaaS
PaaP
IaaS
41
Which of the following protocols would you recommend be used to manage the remote router?
SSH
SNMP
HTTP
Telenet
42
AKA the "hardware" address that can be spoofed and limits access through the physical hardware
Private cloud
MAC Filter
PEAP
omnidirectional antenna signal name
43
Clients are aware that requests go through a proxy and use SSL to exchange data is what proxy?
Open proxy
Explicit proxy
Transparent proxy
Content-filtering proxy
44
Provides users additional bandwidth without upgrading all equipment and can also be a VLAN
UTM
Network Seperation
Firewall
Log analysis
45
IEEE 802.1x
WPA2
WEP with TKIP
Internet
Switch port security
46
Cloud computing services consist all of the following except?
PaaS
IaaS
VPN
HaaS
47
Web application firewall (WAF) listed features except for one:
operates on the Physical layer of the OSI model
Protect against SQL injections and buffer overflows
Focus of PCI DSS
Applies rules to HTTP conversations (allow or deny)
48
VLANs is separated by logic and programmatic. How do other VLANs directly communicate?
They communicate with FCoE
VLANs purpose & security strength does allow direct contact
By a secured tunnel with TLS/SSL
All of the above
49
What is a threat to VPN over open wireless?
A certificate could be faked , allowing access to corp nets
Hackers can sniff the vPN packets and decrypt them
Connect to the open wireless before a VPN, allowing a risk
All of the above
50
Behavior based, Signature based, Anomaly based, and Heuristic are branched form what device?
IDS/IPS
PEAP authentication module
NAT/PAT
NAC/ICMP
51
Why does a switch manufactured with a Switched Port Analyzer (SPAN) copy network traffic?
Send it to port 443 that will support a protocol analyzer
SPAN is a portal for a VPN
Send it to a specific port that supports a protocol analyzer
Send it to port 125 that will support a protocol analyzer
52
When would disabling SSID broadcasting make the most sense?
Providing guest wireless outside the firewall thats not open
Unable to encrypt the Wi-Fi signal due to malfunctions
On a hotel network and worried about external intrusions
Near an airport and there's free-wifi infrastructure
53
What is meant by the word "stateful" with respect to firewalls?
Packets that are addressed to the internal server R allowed
The firewall tracks what country request are from
The firewall keeps a list of all addresses to prevent spoofs
Only packets matching an active connection are allowed
54
When building an ACL under an explicit deny, where would you place a "deny all" statement?
At the end of the ACL entries
On the ingress filter
At the beginning of the ACL entries
Before any ACLS entries that deal with HTTPs
55
This is an application delivery only cloud computing service. SalesForce.com is this service
LaaP
SaaS
SaaP
PaaS
56
IDS/IPS DO NOT DO THIS:
Create a secure tunnel for Integrity
IPS: block the attack
Protects against OS and application exploits
IDS: Alerts but doesn't stop attack
57
A proxy that is invisible is known as
Transparent proxy
Web proxy
Reverse Proxy
Anonymizing proxy
58
What does LEAP do?
Modernizes Wi-Fi a new encrypting cipher
Forces CISCO devices to use WPA2
Provides TLS support over Wi-Fi and uses
Provides lightweight authentication and uses dynamic keys
59
Loop protection is referred to as
ACLs
NAT
DMZ
Spanning-Tree Protocol (STP)
60
Which is the best policy to use when administrating a firewall?
Least Access
FIFO
QOS
Comprehensive
61
Prevents unauthorized access to or from a private network by simple packet filtering on Layer 4
Firewall
Content-filtering proxy
Egress spam filtering
Data protection and compliance web security gateway
62
This cloud service is a pay per use service your responsible for device/application management
PaaS
TKIP
SaaS
IaaS
63
Why is site survey important to wireless security?
Minimize the strength to reduce the risk of external attacks
Configure the fewest access points allows deterrence
High-strength= effective Wi-Fi encryption keys
The Wi-Fi signal can be restricted from external users
64
An organization wanting to create restrained access to the internet for sensitive data ?
A private cloud
A community cloud
SaaS
A public cloud
65
Quickbooks online is an example of:
QaaS
PaaS
SaaS
IaaS
66
What security principle are you looking over when wanting to purchase a "all-in-one"?
Defense in depth
Network separation
NAC
Loop prevention
67
Flood guards functionality might protect against which of the following attacks?
Address spoofing
Smurf attack
Brute Force
SQL injection
68
Wireless networks
use micro waves and encrypts data
use radio waves and encrypts data
use SSID waves
use gamma waves and encrypts data
69
Describes how circuit switched voice signals can be converted to the format of data packets
Vishing
Telephony (IPT)
MDM
Phreaking
70
Manages the endpoints on a case by case basis as they connect is ...
Sub-netting
Network Access Control (NAC)
SaaS
Remote Access (RA)
71
Local public entities and key local firms are both on the same computing cloud. What is it?
Hybrid
Nimbostratus
Private
Community
72
You have the IP address but not the traffic content. What is your next step?
Turn findings over to management
Disconnect the router from the Internet to prevent attacks
Use a protocol analzyer to see current attack traffic
Use ACLS to drop IP address the came from
73
Firewall filter executes their security polices in a top-down manner, with allow or block rule
and ends with a deny all rule
and ends with a auth all rule
and ends with a affirm all rule
and ends with a translate all rule
74
Data and applications are centrally managed and updates are seamless (Microsoft Office 365)
IaaP
IaaS
SaaS
PaaS
75
This security method ensures confidentiality with data encryption when on a WLAN.
URL filter
MAC address filter
VPN concentrator
IPsecv4
76
How is TKIP a security benefit?
All of the above
Forces TLS auth. between client and AP
Provides session key based upon pre-shared key
Enforces security by a single WEP key for a short time
77
What involves having security decisions made in real time via scripted policy rules?
Rule-based management
VLAN management
Flood guards
Firewall rules
78
Between a Yagi and Parabolic antenna which would you use for a remote SOHO ?
Yagi
Parabolic
All of the above
Both 1/3
79
This cloud give the user independence although makes the user more vulnerable towards malware
Kerberos cloud
Hybrid cloud
Private cloud
None of the above
80
Can perform multiple security functions via one appliance or a "all-in-one" device
Real-time malware protection
VPN concentrator
Protocol analyzer
Layer 2 switch
81
802.1x defines the encapsulation of EAP. What is EAP?
Extensible Authentication Protocol
Extensible Autonomous Protocol
Extended Authentication Protocol
Encapsulation Authentication Protocol
82
Performs health checks and best for stateless systems
Switch
Proxy
Load balancer
Content filter firewall gateway
83
Sequence counters in TKIP prevent what type of attacks?
Backdoor attack
Trojan Horse attack
Replay attacks
Adware attack
84
WPA/TKIP was replaced by what protocol to upgrade the legacy ?
CCMP
CHAP
Kerberos
WPA2
85
In ACLS, an implicit deny will apply to network traffic that:
Matches two or more rules in the ACL
Comes from a spoofed source address
Does not match any entry in the ACL
Originates from inside the DMZ
86
Which of the following servers would be least likely to place in a DMZ?
web server
DNS server
File server
SMTP server
87
FTPS corresponds with which one?
PBX
SaaS
SSL/TLS
Trunking
88
What best describes Implicit deny?
STOP command
ALLOW ALL
DENY ALL
START command
89
This defines the captured traffic, creating a picture of the overall network security
UTM
Log analysis
Router
Firewall
90
An AES-based encryption mode used by WPA2 for providing strong security uses 128-bit key
TLS/SSL
EAP
CCMP
TKIP
91
Web Security Gateways
Proxy functions with content-filtering product
Applies security mechanisms to specific applications
Defends against advanced attacks
Defends against real time threat analysis capability
92
A IEEE standard performs PNAC of devices attached to the LAN for access approval of the network
802.1x
Flood guards
IEEE PNAC
EAP
93
Logical separation of network devices and needs a router to communicate. "Natural" barrier .
IPv4/IPv6
separation of duties
Logic bomb
VLANs
94
Which network mask corresponds to a /31 prefix?
255.255.255.192
255.255.255.0
255.255.255.248
255.255.255.254
95
You're selecting a computing cloud for your firm but it's sensitive. Pick the best the cloud.
LAKITU cloud
Community cloud
Public cloud
Private cloud
96
A company adopting an IaaS model would typically:
Only support networking infrastructure
Own the infrastructure equipment
Pay on per-use basis
Be responsible for housing and maintaining equipment
97
NAT corresponds to which one ?
PBX
TCP 22
PAT
SSL/TLS
98
Corporate fileserver is connected to VLAN. This violates which security principles ?
Least privilege
Loop protection
Network separation
VLAN management
99
IEEE 802.1x does not employ ....
Makes extensive use of EAP and RAIDUS
Enables duplicate MAC address checking/spoofing
PNAC / Disables unused ports
Makes extensive use of AES and TACACS+
100
This is good for post-event analysis and provide real-time analysis
Port security
Log analysis
VLAN management
Firewall rules
101
Flood guards doesn't ...
Detects when to block traffic
Monitor broadcasts, multicasts, and unicasts traffic
Monitor traffic rates/percentage of bandwidths
Uses a VPN concentrator for a internet guard
102
What do load balancers use to determine if a host is operational ?
Logixn
Health checking
Request count
Time to live
103
How would an IDS system help you respond to this incident?
Provide an earlier warning
It wouldn't help
Give more details
Provide more complete logs
104
How low should you set your wireless configuration?
Average wireless configuration should be fine
As low as possible
Below average as possible
At a humble level
105
802.11i can utilize which term?
CCMP
LEAP
EAP
HTTP
106
Which of the following is not a best practice for secure router configuration ?
Disabling echo, CHARGEN, and other simple services
Disabling IP sure route
Enabling Telnet access
Enabling logging
107
This device limits the number of MAC addresses available on a switch port for net security ?
ACLs
VLAN management
Port security
Firewall rules
108
Network firewall includes all of the following except ?
Operates on OSI Network layer 3
A network layer firewall
Filters HTTP traffic
Runs at a low level of the TCP/IP stack to filter packets.
109
Analog voice signal has to be digitized into pulse code modulation (PCM) signals via ..
a mic on a iPad (IPT)
a voice coder (IPT)
a voice-decoder (IPT)
a mic on a phone (IPT)
110
A management VLAN doesn't configure to this remote access
SSH
web interface built switch
Mobile device
Telnet
111
Why is MAC filtering usage
All of the above
Attackers can clone working MAC addresses
The use os 802.1x for network authentication was replaced
It is cumbersome to implement
112
Which of the following is not antenna type?
Monopole antenna
Dipole antenna
Yogi antenna
Omnidirectional antenna
113
rDNS - Reverse DNS
Blocks Domain names from your network
Is a form of SYN attack
Is a reverse authentication method for communication 4 DNS
Block email where the senders domain doesn't match the IP
114
A small IP subnetwork that sits between the trusted internal LAN and the public Internet
DMZ
spam filter
router subnet
Protocol analyzer
115
Which logs should be examined to determine if an intruder breached internal systems?
Firewall / Switch / Load Balnacer
Router / Firewall / IDS
IDS /IPS / ACL
ACL / Switch / Router
116
Performs as a workload distribution for traffic to evenly distributed among the server groups
URL filter
Spam filtering
Load balancer
Switch
117
Capable devices 4 maintaining information about connected apps to optimize their operation isnt
VPN
Application-Level proxies
IDS/IPS
Next generation firewalls
118
This is Cisco proprietary that uses only passwords for securing communications based on MS-CHAP
LEAP
WEP
PEAP
TKIP
119
Which security measure on the cooperate network would not be compatible with BYOD?
Site survey
Captive portal
WPA2
MAC address filter
120
Which protocol can create a security vulnerability in switches because it uses plaintext?
SNMP
SSH
SMTP
NAT
121
What two models doe WPA2 operate in, and what is the dry differedncre between them?
Enterprise and Personal; authentication
Public and Work ; Encryption
AES and WEP; key strength
Enterprise and Guest; integrity
122
Once a client successfully authenticates they can communicate over what 802.1x system server ?
EAPOL
RAIDUS
Kerberos
TACACS+
123
U want to protect configuration file transfers like TFTP, SCP, and HTTP. What should u secure?
Secure firewall rules
Flood Guards
Port security
Secure router configuration
124
What type of port security would you select for prohibited access with BYOD?
LIFO method
Sticky methods
Dynamic learning
Static mode
125
Which security mechanism is the best to employ to accomplish no connections with overseas ?
VLAN management
ACLS
Network separation
Implicit deny
126
A OSI Layer 4 (TCP/UDP) device that can filter through OSI Layer 7?
Proxy
Firewall
Microsoft Windows Antivirus
Load balancer
127
A common authentication on wireless networks. Can block or hold people from off the internet
Hot Spot
MAC address filter
Warm Site
Captive portal
128
Acts as a buffer zone between unprotected areas of a network and provide protection in between
LDAP
VLAN
DMZ
SAN
129
This was created by Cisco, MS, and RSA Security as a encapsulation EAP in a TLS tunnel
SEAP
EAP
LEAP
PEAP
130
Provides full advertised throughput speeds to all connected nodes and can perform routing
Load balancer
Intelligent switch
Productivity monitoring gateway
Open proxy
131
A 64 bit message integrity check with secret key adding a sequence counter to replace WEP is?
AES
CCMP
RC4
TKIP
132
An anomaly based NIPS will alert in which case?
None of the above
Changes from a configured traffic baseline
Matches to know attack patterns
Deviates from a predefined traffic profile
133
TLS can utilize which term?
802.11i
PEAP
CCMP
LEAP
134
10.10.10.0 created into a subnet for three buildings?
255.255.255.192
255.255.255.252
255.255.255.128
255.255.255.240
135
What best explains targeting ?
A WPA2 authentication protocol
based on IP address and creates a list of trusted users
Intentionally slows down the server so spammers will leave
groups users who send email that don't have IP addresses
136
Remote Access is a remote desktop software that accomplishes what?
Network address translation with Dynamic NAT
A connection to a device from across a secure VPN
Runs on SaaS
Is another version of cloud computing service
137
If you need multiple host to share a single external IP address , you might use:
PAT
Source NAT
Dynamic NAT
Destination NAT
138
Pick on that doesn't apply to ACLs
verification is via discretionary access control list
A device that is attached to NAT
Enforces privilege separation and controls access
ACCESS_MASK is specific to an object being created
139
Which is not a variant of port security ?
Dynamic learning (MAC address association)
Static learning (specific MAC address )
Sticky learning (MAC addresses knowledge)
Heuristic learning (MAC address intelligence)
140
IEEE 802.11 protocol
WLANs
WEP
Virtual cloud for the extranet
FCoE
141
Cloud deployment models are Public and Private virtualized software services. Also so is..
Community / Hybrid
PaaS / HaaS
Hybrid / Birthday
SaaS / IaaS
142
When in the cloud you have data local but have your PaaS located externally in the public cloud
Community cloud
Private cloud
Public cloud
Hybrid cloud
143
Why should most organizations use a content-filtering proxy?
To reduce bandwidth usage with local copies content
To provide a secure tunnel to the Internet
allow users to browse the internet anomonlsy
To enforce a network AUP
144
Which is not an antenna performance ?
measured in dB
Transmission of signals are visible
high gain signals of radio waves with Yagi
Double power every 3dB of gain
145
A UTM appliance would most lily be placed:
At the edge of the corporate network
Inside the development network
Between development and production networks
In a network operations center
146
What is the primary difference between a proxy and a firewall?
firewalls perform NAT while proxies don't
Proxy is application level request, and firewalls access
A firewall used as hard OS tool, proxies don't
Proxies allow, firewalls deny access
147
When adjusting antenna placement these all apply for "control" except which one?
Adjust power levels or type of antenna
Layer APs and overlap channels
Create a rouge access point for your network
Condone a site survey
148
This may work at the server side or at the client end, but protects against e-mail spamming
Spam Filtering
ACLs
Loop protection
Firewall
149
This capability doesn't apply to Real-time malware protection ( Malware inspection)
detects and blocks undesired web traffic
Blocks malware, file-based attacks, and malicious script
generated by a group of users
Scans all outgoing and incoming web traffic and UTM app
150
a wireless network allows access but only to a single website is?
802.1x
Captive portal
VPN over open wireless
Guest wireless
151
A management VLAN allows administration to do which of the following?
Bundle VLANS based on traffic priority
Copy all packets passing through the switch
Connects to switch remotely
Automatically recorder VLANS based on their time of day
152
Why is it important for a web app firewall to perform SSL inspection?
SSL inspec is only used when under attack
A lack of SSL inspec would allow a channel to threats
Inspec the SSL traffic assist with load balancing
None of the above
153
A common configuring system that is an efficient manner of translating active policy objectives
Rule-based management
VLANs
Proxy
Role-based management
154
Which security practice is best for a network that is used for guest also access for employees
Site Survey
Captive/ LEAP
MAC address filtering
WPA2
155
This is a capability of Data protection and compliance web security gateway
blocks traffic like malware and spyware
measures how much web traffic is being generated
group of users are monitored
scans for proprietary info being sent out of the network
156
Hardware bridging ASICS (very: fast) and an OSI layer 2 device. Is the core of the enterprise
Router
Firewall
Load Balancer
Switch
157
This is not in the network design purpose of Virtualization...
Pings Flooding
flexibility in the enterprise with faster backups
Snapshot allows you to return to previous point in time
Separates hardware from software and creates a storage area
158
PBX and VoIP are connection solutions over what type of RSA connection?
IPT ( IP Telephony )
SSH
WPA2
TLS
159
Why is delay-based filtering effecriVr against spam?
spam generators do not wait for the SNMTP banner
Spam generators won't send spam if they can't do it asap
spam generators has a very short TTL
spam generators are poorly behaved
160
Which would be best for a employee network to have security practices when subtended by guest?
Captive portal / VPN
NAT/ PAT
LEAP/ EAP
WPA2/ Site Survey
161
NAP MS technology and NAC Cisco technology are two method of what network design ?
Subnetting
NAC
802.1x
Telephony
162
These devices are located outside of the network and are known as "all-in-one devices"
EAPOL
802.1x
UTM
DMZ
163
Translates IP addresses for int. traffic & another set for ext. traffic
NAT
NATP
IaaS
NAC
164
Multiple overlapping fashion with different security elements achieves protection is?
IPS
Firewall
VLAN
Layered security/ Defense in depth
165
An OSI Layer 3 device that can often connect LANs to WANs or Copper to Fibre networks
Router
Layer 4 router
Protocol Analyzer
Switch
166
Permissions associated with an object that used in file systems, network devices, OSs, and etc.
KDC
IP address
ACLs
DNS
167
WPS can utilize which term?
RC4
CCMP
EAP
PEAP
168
This is not a mechanisms established security policies in a Firewall...
ACLs( Access Control Lists)
Basic/Stateful packet filtering
NAT (Network Address Translation)
Detects traffic with a behavior-based methodology
169
These are all classes of NAT private addresses except?
Class B: 172.16.0.0 - 172.31.255.255
Class D: 20.0.0.0 - 20.255.255.255
Class C: 192.168.0.0 - 192.168.255.255
Class A: 10.0.0.0 - 10.255.255.255
170
Computer services that offer scalability, flexibility, security ,and reliability to a user
Firewall
802.1x
Cloud computing
VPNs
171
Prevents bridging loops in an Ethernet network by setting only one switch as a root bridge
DMZ
STP
LDAP
Firewall
172
Which of the following protocolS is not used in loop protection efforts ?
Spanning Tree
Rapid Spanning Tree
Multiple Spanning Tree
Open Shortest Path First
173
Application-layer firewalls can analyze packets to the equivalency of a IPS by?
Examine app AHs and log specific actions
Log app characteristics and allow traffic to travel inside
Deny all traffic to enter the network
Examine app characteristics and blocking specific actions
174
When would you use a directional-type antenna?
Are allowed to transmit at high power
Need to cover an entire warehouse floor
Cover only the guest conference room
Want to communicate with signal remote client

Domain 1.0 Network Security Flashcards | StudBud