V3 SEC+ 601 Network Security DAY 4

Geoff must audit the current privileges assigned to key database files. What command should be used?

You are configuring firewall rules to allow DNS for external name resolution, what port will you allow?

How can we prevent looping traffic on our switch stack, when there needs to be redundant connections?

Engineers must manage an edge router stack remotely. What protocol would allow this to happen with the BEST security?

What Linux command line tool allows for searching of text strings?

Regulatory compliance insists management of network equipment is encrypted, What would allow this?

What command allows an auditor to view 10 events at the end of a log file?

A CISO must ensure the Bank uses secure video conferencing and VoIP protocols? Choose 2

What must I ensure, is configured, to route ALL traffic through company VPN device?

Fisma compliance requires a preventitive in-line solution is deployed to block malicious inbound traffic?

If I want to find out what attack methods a potential hacker is using, what do I need to set up?

How can we segment the Finance & Human resources networks whilst minimizing network disruption?

Remote desktop administration must be encrypted, What protocol would allow this?

What team defends the company network as part of a test, they are testing their skills against realistic threat actors?

Jerry must allocate an IPV6 address to the public facing interface of the web application server?

You are configuring firewall rules to block telnet access from external users, what port will you block?

You need to access Server graphical tools on the windows server 2019 desktop, what port will you open on the firewall?

A technician is must remotely administer proprietary hardware on a customer SCADA network. Choose the best solution?

You must configure firewall ports to allow for secure web access and allow technicians to securely manage switches?

You need to implement a secure set of services to prevent E-mail spam, phishing attacks and Pharming exploits?

What command allows an auditor to search for a text string within a security log file?

What Ethernet standard will allow me to restrict access to known devices on my switch stack?

You are selecting a cloud model for a 50,000 user - DoD project. What would be the most secure?

An IDS must see ALL traffic passing through the perimeter enterprise switch. How can it monitor multiple network ports?

You are configuring firewall rules to allow SMTP messaging to use external servers, what port will you allow?

What will we use to ensure e-mail is secured all the way from source to destination mailbox?

Alice must ensure that file permissions are modified as the current permssions do not match the permissions matrix.

An analyst runs a command on the CEO's laptop and observes the following output. What attack are they seeing?

A pentester must use active techniques to quickly footprint all servers on a network segment. What will be BEST?

how can we mitigate clients being redirected to malicious pharming sites by poisoned DNS lookups?

What type of network server will allow for blocking of outbound urls & provide content filtering?

If I want to uncover an insider threat actor or an APT already established on the company network, what will be used?

Microsoft servers have been compromised by external threat actors using Netbios ports. What ports should be blocked?