Mod 3 - 5 Review

Question 1

Which encryption algorithm is asymmetric?

Accepted Answer

RSA

Question 2

Which protocol is commonly used in TCP attacks?

Accepted Answer

TCP

Question 3

Which of the following is a type of IPv4 ACL?

Accepted Answer

Standard and Extended

Question 4

What is the main difference between standard and extended ACLs?

Accepted Answer

Extended ACLs can filter based on port numbers

Question 5

What happens when a packet does not match any ACE in the ACL?

Accepted Answer

The packet is discarded due to an implicit deny

Question 6

Which objective of secure communications is achieved by encrypting data?

Accepted Answer

Confidentiality

Question 7

IT is reporting that a company web server is receiving a high number of web page requests, what type of attack?

Accepted Answer

DDoS

Question 8

What is the function of a wildcard mask in an IPv4 ACE?

Accepted Answer

To determine which bits of the address to examine for a match

Question 9

What does the clear access-list counters command do?

Accepted Answer

Clears the ACL statistics

Question 10

Which cyber attack involves a coordinated attack from a botnet of zombie computers?

Accepted Answer

DDoS

Question 11

Who are considered threat actors?

Accepted Answer

Hackers, devices, people, groups, or nation states

Question 12

How are sequence numbers used in modifying ACLs?

Accepted Answer

They allow for adding or deleting ACEs

Question 13

What is a best practice before implementing ACLs on a production network?

Accepted Answer

Test the ACLs on a development network

Question 14

What is the purpose of a firewall?

Accepted Answer

To enforce access control policy between networks

Question 15

What is the primary purpose of ethical hacking?

Accepted Answer

To find vulnerabilities and secure the network

Question 16

Which command is used to create a numbered standard ACL?

Accepted Answer

access-list [access-list-number]

Question 17

What is a reconnaissance attack?

Accepted Answer

Unauthorized discovery and mapping of systems

Question 18

What is an attack vector?

Accepted Answer

A path by which a threat actor can gain access to a network

Question 19

What should be documented with the remark command?

Accepted Answer

The purpose of the ACL

Question 20

Which type of hacker creates advanced, customized attack code?

Accepted Answer

State-Sponsored

Question 21

What is a significant characteristic of virus malware?

Accepted Answer

A virus is triggered by an event on the host system.

Question 22

What is the primary purpose of an ACL on a router?

Accepted Answer

To filter packets based on information in the packet header

Question 23

What does an inbound ACL do?

Accepted Answer

Filters packets before they are routed

Question 24

What is a characteristic of a Trojan horse?

Accepted Answer

Executes unwanted functions

Question 25

Which of the following is NOT a guideline for ACL creation?

Accepted Answer

Place ACLs where they have the least impact

Question 26

What is the role of an IPS?

Accepted Answer

To detect patterns of malicious traffic by the use of signature files

Question 27

What type of malware has the primary objective of spreading across the network?

Accepted Answer

Worm

Question 28

Which of the following is NOT a common type of malware?

Accepted Answer

Firewall

Question 29

What is the advantage of using named ACLs?

Accepted Answer

They provide information about the purpose of the ACL

Question 30

How many ACLs can be applied to a dual-stacked router interface?

Accepted Answer

4

Question 31

What does the "host" keyword in Cisco IOS do when used in an ACL?

Accepted Answer

Matches a single IP address

Question 32

How can a numbered standard IPv4 ACL be linked to an interface?

Accepted Answer

ip access-group {access-list-number} {in | out}

Question 33

What is the range for standard IPv4 ACL numbers?

Accepted Answer

1-99

Question 34

What causes a buffer overflow?

Accepted Answer

Attempting to write more data to memory than that location can hold

Question 35

Which tool is used to test the security of a network?

Accepted Answer

Network penetration testing tools

Question 36

What specialized network device is responsible for enforcing access control policies between networks?

Accepted Answer

Router

Question 37

Which element of secure communications ensures that data has not been altered?

Accepted Answer

Data integrity

Question 38

How does a router evaluate packets when an ACL is applied?

Accepted Answer

It performs sequential comparisons of the packet's source IP

Question 39

What is the correct command to remove a named standard IPv4 ACL?

Accepted Answer

no ip access-list standard [access-list-name]

Question 40

What is the purpose of using the show ip interface command?

Accepted Answer

To verify if an ACL is applied to an interface

Question 41

To which category of security attacks does man-in-the-middle belong?

Accepted Answer

Access

Question 42

What is ARP cache poisoning used for?

Accepted Answer

To redirect network traffic

Question 43

What kind of attack exploits known vulnerabilities in authentication services?

Accepted Answer

Access

Question 44

How can a wildcard mask be calculated easily?

Accepted Answer

Subtract the subnet mask from 255.255.255.255

Question 45

When should an extended ACL be placed close to the source of the traffic?

Accepted Answer

To deny undesirable traffic close to the source network

Question 46

What is the main goal of a Denial-of-Service (DoS) attack?

Accepted Answer

To interrupt network services

Mod 3 - 5 Review

Questions 46

Mod 3 - 5 Review

Questions 46