Post Midterm Quiz Questions
The PEAP standard creates an encrypted TLS tunnel between the supplicant and the server before proceeding with the usual EAP process.
True
What is the formula for determining the number of possible hosts on a network?
2^h - 2 = Z
What specifications define the standards for cable broadband?
DOCSIS
When you set private IP address ranges for servers in your cloud, what service model are you using?
IaaS
What kind of software can be used to secure employee-owned devices?
MDM
A company accidentally sends a newsletter with a mistyped website address. The address points to a website that has been spoofed by hackers to collect information from people who make the same typo. What kind of attack is this?
Phishing
Which authorization method will allow Nancy, a custodian, to access the company's email application but not its accounting system?
RBAC
Which routing protocol is limited to 15 hops?
RIPv2
Which of the following is not a benefit of subnetting?
Routers more easily manage IP address spaces that overlap.
Where is a router's hostname stored when you first change the name?
Running-config file
Which WAN service offers active-active load balancing?
SD-WAN
Which principle ensures auditing processes are managed by someone other than the employees whose activities are being audited?
Separation of duties
Which of the following features of a network connection between a switch and server is not improved by link aggregation?
Speed
Which of the following is an example of proxy server software?
Squid
In the typical social engineering attack cycle, what occurs at Phase 3?
The attacker exploits an action undertaken by the victim in order to gain access.
Your roommate has been hogging the bandwidth on your router lately. What feature should you configure on the router to limit the amount of bandwidth his computer can utilize at any one time?
Traffic shaping
Which of the following would an environmental monitoring system not track?
User authentication
Which network type supports long-haul connections between ISPs?
WAN
Which backup site includes a running server that does not have access to the latest backups?
Warm site
A network with 10 bits remaining for the host portion will have how many usable host addresses?
1022
How many bits of a class A IP address are used for host information?
24 bits
What is the binary number 1111 1111 in decimal?
255
A network with a CIDR notation of /26 would have what subnet mask?
255.255.255.192
Which of the following would be assigned an OID?
A switch's interface
Which log type is used to prove who did what and when?
Audit log
Which problem is most likely caused by a damaged cable?
CRC error
Which type of disaster recovery site contains all the equipment you would need to get up and running again after a disaster, and yet would require several weeks to implement?
Cold site
At what OSI layer do VLANs function?
Data link layer
What type of attack relies on spoofing?
Deauth attack
You're playing a game on your Xbox when you suddenly get bumped off your Wi-Fi network. You reconnect and start playing, then get bumped off again. What type of attack is most likely the cause?
Deauth attack
Which VLAN on a switch cannot be renamed or deleted?
Default VLAN
What field in an IPv4 packet is altered to prioritize video streaming traffic over web surfing traffic?
DiffServ
A RAID 5 configuration requires a minimum of two hard disks to operate.
False
A system with an availability of 99.999% can be down for a maximum of 52 minutes per year.
False
Of the three methods of access control (RBAC, DAC, and MAC), RBAC is the least secure of the options.
False
When utilizing Kerberos, an access granting ticket is the same as a key.
False
Which flow control method resends a lost frame along with all frames sent with it?
Go-back-n sliding window
The Link Aggregation Control Protocol was initially defined by what IEEE standard?
IEEE 802.3ad
Which policy ensures messages are discarded when they don't match a specific firewall rule?
Implicit deny
A network TAP serves what purpose on a network?
It provides a mirrored port for monitoring traffic between other ports.
Which protocol balances traffic across multiple links?
LACP
Which device can manage traffic to multiple servers in a cluster so all servers equally share the traffic?
Load balancer
A company wants to have its employees sign a document that details some project-related information that should not be discussed outside the project's team members. What type of document should they use?
NDA
Which security device relies on a TAP or port mirroring?
NIDS
Which of the following is considered a secure protocol?
SSH
You need to securely store handheld radios for your network technicians to take with them when they're troubleshooting problems around your campus network. What's the best way to store these radios so all your techs can get to them and so you can track who has the radios?
Smart locker
What method does a GSM network use to separate data on a channel?
TDMA
Suppose you have a small network with one router, one switch, and a few computers that are grouped into three VLANs. Which of the following statements is false?
Traffic between computers on the same VLAN must go through the router.
Over a long-distance connection, using SSH keys is more secure than using passwords.
True
While troubleshooting a recurring problem on your network, you want to examine the TCP messages being exchanged between a server and a client. Which tool should you use on the server?
Wireshark
Which ACL rule will prevent pings from a host at 192.168.2.100?
access-list acl_2 deny icmp host 192.168.2.100 any
Which of the following ACL commands would permit web-browsing traffic from any IP address to any IP address?
access-list acl_2 permit https any any
The ability to insert code into a database field labeled "Name" is an example of a(n) _________.
vulnerability
The following ports were listed as open during a recent port scan. Which one is no longer used except by legacy software and should be closed?
139
What is the network ID of the IP address 192.168.72.149/16?
192.168.0.0
An IP address of 192.168.18.73/28 has what network ID?
192.168.18.64
By default, when using classful addressing, how many bits exist in the host portion of a Class A address?
24
Which cellular generation was the first to offer speeds up to 1 Gbps?
4G
A routing protocol's reliability and priority are rated by what measurement?
AD
Which access control technique is responsible for detection of an intruder who succeeds in accessing a network?
Accounting
Which of the following techniques does not break up a large broadcast domain into smaller broadcast domains?
Adding more layer 2 switches to a network
Which of the following criteria can a packet-filtering firewall not use to determine whether to accept or deny traffic?
Application data
Which firewall type can protect a home network from adult content not suitable for the family's children?
Application layer firewall
Which routing protocol does an edge router use to collect data to build its routing tables for paths across the Internet?
BGP
Which routing protocol runs between your network's edge router and your ISP's edge router?
BGP
Which physical security device works through wireless transmission?
Badge reader
Which virtual network connection type assigns a VM its IP address from the physical network?
Bridged
An attacker guesses an executive's password ("M@nd@lori@n") to a sensitive database after chatting for a while at a club. What kind of password attack did the hacker use?
Brute-force attack
You work in an organization as a network administrator. One of your new clients owns a hotel and has asked you to provide a single Internet connection for every room, but also ensure that the users are not visible to each other. Which technology on the switch will you use to meet the requirements stated in the scenario?
Create Private VLANs
You have configured a new DHCP server and connected it to the network. There is connectivity to the server, but the clients in the network are unable to obtain IP addresses from the server. Which of the following enabled feature on the switch can cause this issue?
DHCP Snooping
Which device would allow an attacker to make network clients use an illegitimate default gateway?
DHCP server
When repairing a coworker's computer, you find some illegal files. What should you do next?
Disconnect the computer from the network and leave it running.
Which type of switch is best used for connections to web servers?
Edge switch
When a router can't determine a path to a message's destination, where does it send the message?
Gateway of last resort
You need to create an access list on your router to filter specific IP addresses and ports. You created entries with permit statements and deny statements. But you forget to add one specific deny statement to filter traffic from host A. How will this traffic be treated?
Host A traffic will be denied because, at the end of every access list, there is an implicit deny statement
When shopping for a new router, what does the MTBF tell you?
How long devices like this one will last on average until the next failure
Which type of cloud service model involves hardware services that are provided virtually, including network infrastructure devices such as virtual servers?
IaaS
What is the first step in improving network security?
Identify risks.
A former employee discovers six months after he starts work at a new company that his account credentials still give him access to his old company's servers. He demonstrates his access to several friends to brag about his cleverness and talk badly about the company. What kind of attack is this?
Insider threat
What does the Common Address Redundancy Protocol do?
It allows a pool of computers or interfaces to share the same IP address.
At what point is a packet considered to be a giant?
It becomes a giant when it exceeds the medium's maximum packet size.
A differential backup covers what data on a system?
It includes data that has changed since the last full backup.
Active Directory and 389 Directory Server are both compatible with which directory access protocol?
LDAP
Which of these cellular technologies offers the fastest speeds?
LTE-A
What is the lowest layer of the OSI model at which LANs and WANs support the same protocols?
Layer 3
Which of these WAN services is backed by an SLA?
Leased line
You have empty ports on your switches, that is, no connected hosts. Which of the following are best practices to ensure that the empty ports are secure?
Move the ports from the default VLAN to a new, unused VLAN and then disable them
By default, what network connection type is selected when creating a VM in VMware, VirtualBox, or KVM?
NAT mode
With which network connection type does the VM obtain IP addressing information from its host?
NAT mode
What do well-chosen subnets accomplish?
Network documentation is easier to manage.
Which OSI layer is responsible for directing data from one LAN to another?
Network layer
Which of the following attack simulations detect vulnerabilities and attempt to exploit them?
Pen testing Red team-blue team exercise
Which of the following social engineering attack types most likely requires that the attacker have existing knowledge about the victim?
Phishing
Your organization has just approved a special budget for a network security upgrade. What procedure should you conduct to develop your recommendations for the upgrade priorities?
Posture assessment
Which assessment type would most likely discover a security risk related to employee onboarding?
Process assessment
Which device can be used to increase network performance by caching websites?
Proxy server
Which of the following defenses addresses a weakness of IPv6?
RA guard
By far the most popular AAA service, what open-source service runs in the Application layer and can use UDP or TCP in the Transport layer?
RADIUS
Which authentication protocol is optimized for wireless clients?
RADIUS
Which team might ask a user for a password?
Red Team
Which STP bridge serves as the basis for all path calculations?
Root bridge
What does a client present to a network server to access a resource on that server?
Ticket
Which of the following is not a good reason to segment a network?
To increase the number of networking devices on a network
Which type of switch connects all devices in a rack to the rest of the network?
ToR switch
Which port mode on a switch enables that port to manage traffic for multiple VLANs?
Trunk
What virtual, logically defined device operates primarily at the data link layer to pass frames between nodes?
Virtual switch
When is it appropriate to utilize the NAT network connection type?
Whenever the VM does not need to be access at a known address by other network nodes.
What type of an attack forces clients off a wireless network, creating a form of Wi-Fi DoS?
deauthentication attack
When using a host-based intrusion detection system, what additional feature might be available to alert the system of any changes made to files that shouldn't change?
file integrity monitoring (FIM)
An attack that relies on redirected and captured secure transmissions as they occur is known as what type of attack?
man-in-the-middle attack
Which command will output your Windows computer's routing table?
route print
Which bandwidth management technique limits traffic specifically between a single sender and a single receiver?
Flow control
Which of the following is not defined by syslog?
Message security
VMware Player and Linux KVM are both examples of what type of hypervisor?
Type 2 hypervisor
Which assignment technique requires a RADIUS server?
Dynamic VLAN assignment
Which SDN plane moves traffic from switch port to switch port?
Infrastructure plane
A vSwitch (virtual switch) or bridge is a logically defined device that operates at what layer of the OSI model?
Layer 2
At what layer of the OSI model do proxy servers operate?
Layer 7
What kind of device can monitor a connection at the demarc but cannot interpret data?
Smartjack
What kind of route is created when a network administrator configures a router to use a specific path between nodes?
Static route
In a red team-blue team exercise, what is the purpose of the blue team?
The blue team is charged with the defense of the network.
Which hexadecimal block in an IPv6 address is used for the Subnet ID?
The fourth one
Which formulas can be used to calculate the magic number?
- 2^h - 256 - the interesting octet
Leading up to the year 2000, many people expected computer systems the world over to fail when clocks turned the date to January 1, 2000. What type of threat was this?
Logic bomb
What information in a transmitted message might an IDS use to identify network threats?
Signature
Which power backup method will continually provide power to a server if the power goes out during a thunderstorm?
Online UPS
What is the minimum number of bits that should be borrowed to create 14 subnets?
4 bits
What IEEE standard specifies how VLAN information appears in frames and how switches interpret that information?
802.1Q
Which IEEE standard determines how VLANs work on a network?
802.1Q
You just moved into a rural office space that has telephone service but no cable. Which WAN service could you use without needing to install new wiring to your location?
DSL
Which of the following is not one of the AAA services provided by RADIUS and TACACS+?
Administration
When using Spanning Tree Protocol, what is the first step in selecting paths through a network?
STP must first select the root bridge, or master bridge.
Which SAN connection technology can run over ordinary Ethernet NICs without any special equipment needed?
iSCSI
The concept of giving employees and contractors only enough access and privileges to do their jobs is known by what term?
principle of least privilege
What document addresses the specific concerns related to special access given to administrators and certain support staff?
privileged user agreement
Which of the following is the most secure password?
yellowMonthMagneficant
You sent a coworker a .exe file to install an app on their computer. What information should you send your coworker so they can ensure the file has not been tampered with in transit?
Hash of the file
The combination of a public key and a private key are known by what term below?
key pair
An interface that manages traffic from multiple VLANs is known by what term?
trunk port
What information does the switchport port-security command use to restrict access to a switch's interface?
MAC address
Which data link layer flow control method offers the most efficient frame transmission when sending large volumes of data?
Selective repeat sliding window
Given a host IP address of 172.16.1.154 and a subnet mask of 255.255.254.0, what is the network ID for this host?
172.16.0.0
Which two features on a switch or router are integrated into CoPP?
- QoS -ACLs
Which of the following statements is true?
- When streaming a movie, the transmission is sensitive to delays and tolerant of loss. - When sending an email, the transmission is sensitive to loss and tolerant of delays
If a server has a subnet mask of 255.255.255.224, how many bits in its IP address identify the host?
5 bits
What is the greatest number of bits you could borrow from the host portion of a class B subnet mask and still have at least 130 hosts per subnet?
8 bits
Which wired WAN service offers speeds most comparable to the highest satellite Internet speeds in a similar price range?
Cable broadband
Which type of DoS attack orchestrates an attack bounced off uninfected computers?
DRDoS attack
Which legacy authentication protocol requires mutual authentication?
Microsoft Challenge Handshake Authentication Protocol, version 2 (MS-CHAPv2)
Which cloud management technique executes a series of tasks in a workflow?
Orchestration
In a software defined network, what is responsible for controlling the flow of data?
SDN controller
Which of the following versions of SNMP are considered unsecure?
SNMPv1 and SNMPv2c
Who is responsible for the security of hardware on which a public cloud runs?
The cloud provider
In an IPv6 address, what do the first four blocks or 64 bits of the address represent?
The site prefix or global routing prefix.
Which statement regarding the use of a bridged mode vNIC is accurate?
The vNIC will its own IP address on the physical LAN.
A variant of BYOD, what does CYOD allow employees or students to do?
They can choose a device from a limited number of options.
One of your coworkers downloaded several, very large video files for a special project she's working on for a new client. When you run your network monitor later this afternoon, what list will your coworker's computer likely show up on?
Top listeners
Which log type would most likely be used first to investigate the cause of high numbers of dropped packets?
Traffic log
Class of Service utilizes 8 levels of priority, and modifies the PCP field in an 802.1Q tag.
True
Which power device prevents a critical server from losing power, even for an instant?
UPS
What port do SNMP agents listen on?
Port 161
