IS 560 Chapter 10 Quiz

Which of the following is not one of the three AAA services provided by RADIUS and TACACS+? Authentication Authorization Accounting Access control

Access control

What feature of Windows Server allows for agentless authentication? Network-based firewall IDS (intrusion detection system) ACL (access control list) AD (Active Directory)

Active directory

What software might be installed on a device to authenticate it to the network? Operating system NAC (network access control) Security policy Agent

Agent

Which NGFW feature allows a network admin to restrict traffic generated by a specific game? Application awareness User awareness Context awareness Content filter

Application awareness

Which of the following ACL commands would permit web-browsing traffic from any IP address to any IP address? access-list acl_2 permit http any any access-list acl_2 permit icmp any any access-list acl_2 deny tcp host 2.2.2.2 host 3.3.3.3 eq www access-list acl_2 deny tcp any any

access-list acl_2 permit http any any

What kind of firewall blocks traffic based on application data contained within the packets? Stateless firewall Host-based firewall Packet-filtering firewall Content-filtering firewall

Content-filtering firewall

Active Directory and 389 Directory Server are both compatible with which directory access protocol? Kerberos AES LDAP RADIUS

LDAP

Which command on an Arista switch would require an SNMP notification when too many devices try to connect to a port? mac-limit storm-control shutdown switchport port-security

switchport port-security

At what layer of the OSI model do proxy servers operate? Layer 3 Layer 2 Layer 7 Layer 4

Layer 7

Which of the following features is common to both an NGFW and traditional firewalls? Application Control IDS and/or IPS User authentication User awareness

User authentication