Domain 4 Refresher Quiz

Question 1

How often rotate encryption keys?

Accepted Answer

Quarterly

Question 2

HSMs are software-based systems for key storage.

Accepted Answer

False

Question 3

Port security limits MAC addresses on a switch port.

Accepted Answer

True

Question 4

What is the primary difference between DoS and DDoS?

Accepted Answer

DoS is single source

Question 5

Trusted zones have stronger security controls than untrusted zones.

Accepted Answer

False

Question 6

What is a DMZ in network security?

Accepted Answer

Buffer zone

Question 7

Content filtering examines actual data payloads while URL filtering blocks access to specific websites.

Accepted Answer

True

Question 8

What is the key characteristic of a worm?

Accepted Answer

Spreads autonomously

Question 9

Which malware type connects to command servers?

Accepted Answer

Backdoor

Question 10

What is the primary purpose of network segmentation in security?

Accepted Answer

Limit lateral movement

Question 11

What happens during a MAC flooding attack?

Accepted Answer

Switch table overwhelmed

Question 12

What is a primary function of a botnet?

Accepted Answer

Coordinating attacks

Question 13

What is a rogue access point?

Accepted Answer

Unauthorized wireless point

Question 14

What is the main goal of ARP poisoning?

Accepted Answer

Link attacker's MAC to IP

Question 15

Which is an example of an on-path attack?

Accepted Answer

Intercepting data

Question 16

What is a critical first step in device hardening?

Accepted Answer

Security assessment

Question 17

How does DNS poisoning differ from DNS cache poisoning?

Accepted Answer

Targets server database

Question 18

Why change default passwords?

Accepted Answer

Publicly known

Question 19

Rogue DHCP servers can enable man-in-the-middle attacks.

Accepted Answer

True

Question 20

What technique do evil twin attacks use?

Accepted Answer

Exploit protocols

Questions 20