Network Security, Firewalls, and VPNs | Chapter One - "Fundamentals of Network Security" | Assessment Questions #1 - #20
What distinguishes workgroups from client/server networks? (In other words, what feature is common to one of these but not both?)
Centralized authentication
What is the most important characteristic of an effective security goal?
It is written down
Which of the following is true regarding a Layer 2 address and a Layer 3 address?
Layer 2 addresses can be filtered with MAC address filtering; Network Layer addresses are at Layer 3 and are routable
Which of the following is NOT a feature of a proxy server?
MAC address filtering
Which of the following are common security objectives?
Nonrepudiation, confidentiality, integrity, and availability
Remote control is to thin clients as remote access is to?
VPN
What is a difference between a DMZ and an extranet?
VPN required for access
Which of the following is allowed under NAC if a host is lacking a security patch?
Access to remediation servers
What is an asset?
Anything used in a business task
What is the most common default security stance on firewalls?
Denying by default, allowing by exception
Who is responsible for network security?
Everyone
What is egress filtering?
Examining traffic as it leaves a network
What is the benefit of learning to think like a hacker?
Protecting vulnerabilities before they are compromised
Which of the following are NOT benefits of IPv6?
RFC 1918 address
What is the primary security concern with wireless connections?
Signal propagation
What elements of network design have the greatest risk of causing a DoS?
Single point of failure; bottlenecks
What is true about all security components and devices?
They all have flaws or limitations
An outsider needs access to a resource hosted on your extranet. The outsider is a stranger to you, but one of your largest distributors vouches for him. If you allow him access to the resource, this is known as what?
Trusted third party
What two terms are closely associated with VPNs?
Tunneling and encapsulation
For what type of threat are there no current defenses?
Zero day
