Title: Module Twelve Quiz
Course: CNT 2001 Computer Networks & Communications > Section: Module 12 Network Access Security

Q: What is the best way to protect against social engineering?
- Windows updates
- user training
- firewalls
- ACL
A: user training
If right: User training is one of the single most important things you can do to ensure that all the various network policies and procedures are properly understood and implemented by end users. New employees should go through a training process, but established employees should also have ongoing training as new policies and procedures are developed or revised. With training, users will be aware of social engineering techniques and know to avoid and report them.

Q: What device is used to prevent a hacker or other security threats from entering the network?
- proxy server
- NAT device
- firewall
- router
A: firewall
If right: The objective of a network firewall is not to limit how fire can spread but to prevent security threats from spreading. The purpose of such a firewall is to prevent hackers or other security threats from entering the network orbarring thatlimit their ability to spread through the network.

Q: What firewall configuration uses three connections to create a separate DMZ?
- single firewall configuration
- dual firewall configuration
- three-way firewall configuration
- NIPS firewall configuration
A: single firewall configuration
If right: The simplest and most basic configuration uses only one firewall to protect the network. This type of firewall is sometimes referred to as a single firewall configuration. In this configuration, a single firewall is placed between the external network, usually the Internet, and the internal network. This configuration also allows the servers to be put on a designated DMZ.

Q: You are installing several servers that will be used as web servers to reach customers over the Internet. Where should you place the servers?
- proxy area
- DMZ
- internal network
- external network
A: DMZ
If right: Web servers and other such servers are placed in the DMZ because they generally need access to both the internal and external networks. By being in the DMZ area, they can have access to the external network without comprising the internal network.

Q: What type of system tries to detect malicious activity, such as denial of service attacks and port scans?
- router
- firewall
- proxy server
- network intrusion detection system
A: network intrusion detection system
If right: NDIS/NIPS is used for both incoming and outgoing communications because threats to a network can come from both internal and external sources and a NIDS/NIPS needs to be positioned to detect both types of threats. Another reason to have NIDS/NIPS handling both incoming and outgoing communications is to give the network administrator the ability to use data collected by the NIDS/NIPS determine what is happening during an ongoing attack against your network.

Q: What firewall configuration is the preferred method to create a DMZ?
- single firewall configuration
- dual firewall configuration
- three-way firewall configuration
- NIPS firewall configuration
A: dual firewall configuration
If right: The dual firewall configuration, also known as the DMZ configuration, is also very commonly used. In fact, the dual firewall configuration is actually preferred because it places an extra layer of defense between your internal network and the external network.

Q: What area acts a buffer between the internal and external networks?
- proxy area
- proxy arena
- DMZ
- NAT region
A: DMZ
If right: The area between two firewalls is called the DMZ or demilitarized zone, which acts as a buffer between the internal and external networks. Often, certain types of servers such as email servers, DNS servers, web servers, FTP servers, and others are placed in this area.

Q: What type of firewall works with protocols and services to block TELNET, DNS, FTP, and HTTP?
- Application layer firewall
- Network layer firewall
- packet filter firewall
- MAC filter firewall
A: Application layer firewall
If right: Application layer firewalls work with protocols and services that are located on the Application layer of the TCP/IP model. This means that Application layer firewalls can be used to block TELNET, DNS, FTP, HTTP, and any other protocols or services also located on the Application layer. Such firewalls are also called proxy servers.

Q: What software can protect an individual computer by blocking packets that may try to access a computer without your knowledge or consent?
- proxy server
- NAT device
- anti-virus console server
- host-based firewall
A: host-based firewall
If right: Host-based firewalls are basically software packages that run on a computer platform. These firewalls can evaluate packets that arrive in the host and determine whether they are malicious. Host-based firewalls can evaluate and filter packets just like a more conventional network-based firewall. Host-based firewalls are designed to stop threats once they reach the host they are protecting.

Q: What type of firewall keeps track of conversations to determine what packets it will allow to flow through the firewall?
- Application layer firewalls
- stateful firewalls
- packet filter firewall
- MAC filter firewall
A: stateful firewalls
If right: A stateful firewall filters packets based on their state. This process is called a stateful packet inspection or stateful inspection. For stateful packet inspection to take place, the firewall doing the stateful inspections needs to be able to keep track of all network connections currently flowing through the router.

Q: What type of firewall blocks packets based on IP address or port?
- Application layer firewall
- stateful firewall
- packet filter firewall
- MAC filter firewall
A: packet filter firewall
If right: Network layer firewalls, as the name implies, work on the Network layer of the TCP/IP model. This means that they target primarily packet communications. Because Network layer firewalls tend to target packet traffic on a network, they are often referred to as packet filters. The packets filtered by a Network layer firewall can be filtered based on a wide variety of criteria. Some criteria are source and destination IP addresses, port addresses, what higher level protocols the packet contains, and many others.

Q: What type of firewall is based on groups of interfaces?
- zone-based firewall
- signature firewall
- stateful firewall
- IDS firewall
A: zone-based firewall
If right: A zone-based firewall works on a router based on groups of interfaces instead of individual interfaces as the previously discussed firewall methods do.

Q: Many firewalls, IDS, and anti-virus programs use _____________ or definitions to identify threats.
- signatures
- states
- addresses
- flaw purposes
A: signatures
If right: Signature identification is the process used by many firewalls, IDS, and anti-virus programs. Many threats, whether viruses or network attacks, have unique patterns that uniquely identify them. These patterns are called signatures or definitions.

Q: What type of filtering uses physical addresses to allow or deny communications transit through a firewall?
- MAC filter
- signatures
- ACL
- zone definitions
A: MAC filter
If right: MAC filtering that relies on the MAC address or physical address of a device to decide whether communications from that device are allowed onto the network. This type of filtering is common on wireless LANs.

Q: What do you call a list of rules or policies programmed into a router or other device that specifies what can gain access to a network?
- MAC filter
- signatures
- ACL
- zone definitions
A: ACL
If right: An Access Control List (ACL) is a list of rules or policies programmed into a router or other device to control what can gain access to a network. ACLs can be used to with a wide variety of criteria to control network access. The criteria used by ACLs can range from specific computer addresses to specific address ranges, to specific protocols, and even to specific TCP ports.

Q: What PPP component is used to establish and configure the actual connection between two devices at the Data Link layer?
- LCP
- NCP
- GRE
- L2F
A: LCP
If right: PPP contains a Link Control Protocol (LCP) component, which allows it to establish, configure, and test any OSI Data Link layer connections it uses to transport other protocols.

Q: On which protocol are many tunneling protocols based?
- SMTP
- PPP
- HTTP
- DNS
A: PPP
If right: The Point-to-Point Protocol (PPP) is a Data Link protocol commonly used in establishing a direct connection between two networking nodes. It can provide connection authentication, transmission encryption privacy, and compression.

Q: What process do you call a connection through a public network?
- proxying
- NATing
- tunneling
- linking
A: tunneling
If right: Tunneling is the process of establishing a connection through a public network that looks like a point-to-point connection to the devices on either end of it, but in reality is not. For tunneling to work, three different protocols are needed: the carrier protocol, the encapsulating protocol, and the passenger protocol.

Q: What PPP component is used to establish a connection at the Layer 3 level?
- LCP
- NCP
- GRE
- L2F
A: NCP
If right: The Network Control Protocol (NCP) enables PPP to establish and configure different OSI Network layer protocols.

Q: What do you call data or text that is not encrypted?
- plain text
- key text
- hashed text
- cipher text
A: plain text
If right: An unencrypted communication packet is called plain text.

Q: What is used to encode the header or the entire packet of a network communication so that it cannot be read simply by opening it or looking at its content?
- filtering
- nating
- proxying
- encryption
A: encryption
If right: Encryption is the process by which an algorithm is used to encode either the header or the entire packet of a network communication so that it cannot be read simply by opening it and looking at its content. An algorithm is a mathematical formula that is applied to a communications packet or packet header so that the clear or plain text of the message is obscured. Another name that you may see more commonly used for algorithm is cipher.

Q: What IPSec protocol authenticates data packets but cannot encrypt them?
- AH
- ESP
- IKE
- PPTP
A: AH
If right: The Authentication Header (AH) authenticates data packets, but cannot encrypt them. By using AH for authentication, IPSec can provide integrity to the datagram it is authenticating. The authentication provided by AH also helps protect a packet from replay attacks.

Q: What protocol does L2TP use to provide encryption?
- PPTP
- MPPE
- IPSec
- AES
A: IPSec
If right: Internet Protocol Security (IPSec) is a suite of protocols designed to provide security options to IP. Because L2TP does not provide encryption, it uses IPSec.

Q: What IPSec protocol is used to authenticate and encrypt data?
- AH
- ESP
- IKE
- PPTP
A: ESP
If right: Encapsulating Security Payload (ESP) can authenticate and encrypt data. One drawback of ESP is that although it can encrypt the data, or payload, of a packet, it cannot encrypt the header, something AH can do.

Q: Which IPSec mode allows the payload to be encrypted?
- transport mode
- tunnel mode
- PPP mode
- L2TP mode
A: transport mode
If right: In transport mode, only the payload or the data in a packet is encrypted. However, in tunnel mode, the entire packet is encrypted and then surround by a new IP packet containing a new IP header.

Q: Which IPSec mode is used when using a VPN protocol?
- transport mode
- tunnel mode
- PPP mode
- L2TP mode
A: tunnel mode
If right: VPN uses tunnel mode for network-to-network communications, network-to-host communications, and host-to-host communications.

Q: What is used to establish a connection from a client computer outside a local network to an enterprise LAN using the Internet or other public network?
- NAT
- proxy
- SSL
- VPN
A: VPN
If right: A Virtual Private Network (VPN) is a method used to establish a connection from a client computer outside a local network to an enterprise LAN using the Internet or other public network. VPN uses tunneling to establish this connection over the Internet.

Q: Which VPN allows you to use port 443?
- PPTP
- L2TP
- SSL
- MPPE
A: SSL
If right: SSL VPN is a specific implementation of VPN that allows secure sessions to be set up from within a browser. Any browser that supports Secure Sockets Layer (SSL) can be used for SSL VPN. SSL uses port 443.

Q: What do you call terminal services in Windows Server 2008 R2?
- Remote Desktop Services
- Graphical Desktop services
- Graphical Redirection
- Terminal Services
A: Remote Desktop Services
If right: Currently, Microsoft refers to its terminal server/RDP server component as Remote Desktop Services and its client portion of RDP as Remote Desktop Connection. In older Windows versions, these were referred to as Terminal Services and Terminal Services Client respectively.

Q: What allows you to log in remotely to a machine running Linux using a graphical user interface?
- VNC
- SSL
- TELNET
- Remote Desktop Connection
A: VNC
If right: Virtual Network Computing (VNC) allows a user to get remote access to a desktop computer much like Microsofts RDP does, but with some significant differences. First, VNC is an open-source standard and not proprietary. VNC also can work with pretty much any graphical user interface (GUI) available, including Windows, OS/X, and X11, which is the underlying system for the various Linux GUIs.

Q: What protocol is used to create a graphical interface from one computer to another?
~ Remote Desktop Protocol (RDP) is a proprietary protocol from Microsoft that is used to create a graphical interface from one computer to another. The latest version of RDP, version 7, was released with Windows Server 2008 R2 and Windows 7.

Q: What directory services technology is usually used with Windows networks?
~ In the Windows 2000 and later environment, directory services is called Active Directory.

Q: What service is used to control access to resources on a network via a user access list?
~ Directory services make up a networking service that controls access to the resources on a network via a user access list. Directory services contain several different lists, including one that lists all users on a network and one that lists all resources available on the network.

Q: What device is used to concentrate multiple VPN connections into a single device?
~ VPN Concentrators are purpose-built devices created by Cisco that are designed to concentrate multiple VPN connections into a single device.

Q: ___________ was the first encryption protocol used in wireless networks but has since been replaced by WPA and WPA2.
A: WEP
If right: The idea behind Wired Equivalent Privacy (WEP) was to make wireless communications just as secure and private as wired communications. It was released as part of the original IEEE 802.11 standard but never lived up to expectations. Even follow-on variations of WEP failed to provide privacy equivalent to that found on a wired network.

Q: You would use ____________ to connect to a server running Remote Desktop Services.
A: Remote Desktop Connection
If right: Remote Desktop Protocol (RDP) is a proprietary protocol from Microsoft that is used to create a graphical interface from one computer to another. Currently, Microsoft refers to its RDP server component as Remote Desktop Services and its client portion of RDP as Remote Desktop Connection. In older Windows versions, these were referred to as Terminal Services and Terminal Services Client respectively.

Q: WebVPN uses __________.
A: SSL VPN
If right: SSL VPN is a specific implementation of VPN that allows secure VPN sessions to be set up from within a browser. Any browser that supports Secure Sockets Layer (SSL) can be used for SSL VPN. SSL VPN is also sometimes known as WebVPN.

Q: What do you call a document that specifies the security standards established and followed within your company?
~ A network security policy is a detailed document outlining a large variety of policies related to the security of a company or organization’s network. Network security policies are meant not just to be used to keep bad guys out, but also are intended to outline what activities legitimate users of the network are allowed to do. Some things covered in a network policy include network access rules, password policies, email usage rules, web browsing rules, and general network usage rules.

Q: What are the series of steps followed in a regular definite order?
~ Procedures are defined by Webster’s Dictionary as “a series of steps followed in a regular definite order.” In other words, procedures could be defined as standardized steps, rules, and expectations to be followed when a certain event or occurrence takes place.

Q: What are the rules and expectations of what is to happen in the general day-to-day operations of a network or organization?
~ Policies are rules and expectations of what is to happen in the general day-to-day operations of a network or organization. Policies are usually defined by management.