Title: Competency 3 - Competency Exam - MASTER
Course: Fundamentals of Networking Technologies (13658)

This is the MASTER Test with all questions for Competency 3.

Q: By default, the 802.11 standard offers substantial security.
- True
- False
A: False
If right: Objective 3.1
If wrong: Objective 3.1

Q: If your wireless stations are configured to perform passive scanning, what do they need from an access point to initiate association?
- A request to send
- An alert frame
- A beacon frame
- Nothing; they will find the access point on their own
A: A beacon frame
If right: Objective 3.1
If wrong: Objective 3.1

Q: Which of the following is one reason WEP is less secure than 802.11i?
- WEP is only capable of 16-bit keys, whereas 802.11i can use keys up to 128 bits long.
- WEP uses only one encryption method, whereas 802.11i combines two encryption methods for data in transit.
- WEP uses the same key for authentication and encryption every time a client connects, whereas 802.11i assigns keys dynamically to each transmission.
- WEP does not require clients to specify an SSID, whereas 802.11i requires clients to specify an SSID plus a user name and password for the network's access server.
A: WEP uses the same key for authentication and encryption every time a client connects, whereas 802.11i assigns keys dynamically to each transmission.
If right: Objective 3.1
If wrong: Objective 3.1

Q: Which of the following is one reason WEP is less secure than WPA?
- WEP is only capable of 16-bit keys, whereas WPA can use keys up to 128 bits long.
- WEP uses only one encryption method, whereas WPA combines two encryption methods for data in transit.
- WEP uses the same key for authentication and encryption every time a client connects, whereas WPA assigns keys dynamically to each transmission.
- WEP does not require clients to specify an SSID, whereas WPA requires clients to specify an SSID plus a user name and password for the network's access server.
A: WEP uses the same key for authentication and encryption every time a client connects, whereas WPA assigns keys dynamically to each transmission.
If right: Objective 3.1
If wrong: Objective 3.1

Q: You are designing an 802.11n wireless network for a local cafe. You want the wireless network to be available to the cafe's customers, but not to anyone with a wireless NIC who happens to be in the vicinity. Which of the following security measures require customers to enter a network key to gain access to your network via the access point?
- SSL
- IPSec
- TLS
- WPA2
A: WPA2
If right: Objective 3.1
If wrong: Objective 3.1

Q: Which of the following wireless security techniques uses RADIUS and AES?
- WEP
- WPA
- WPA2
- WPA-Enterprise
- WPA2-Enterprise
A: WPA2-Enterprise
If right: Objective 3.1
If wrong: Objective 3.1

Q: Which wireless security protocol was designed to simulate the physical security of a wired LAN?
- WEP
- SDL
- WAP
- WLANSec
A: WEP
If right: Objective 3.1
If wrong: Objective 3.1

Q: Which Wi-FI security protocol provides better protection?
- WAP
- WPA
- WEP
- All provide equal protection
A: WPA
If right: Objective 3.1
If wrong: Objective 3.1

Q: The software required to establish VPNs is usually expensive.
- True
- False
A: False
If right: Objective 3.2
If wrong: Objective 3.2

Q: PPTP and L2TP are the only protocols that can be used to carry VPN traffic.
- True
- False
A: False
If right: Objective 3.2
If wrong: Objective 3.2

Q: ____ refers to dialing directly into a private network’s or ISP’s remote access server to log on to a network.
- Dialed networking
- Traditional networking
- Dial-up networking
- Virtual networking
A: Dial-up networking
If right: Objective 3.2
If wrong: Objective 3.2

Q: When a server compares a user’s credentials with those in its database, the process is known as ____.
- authorization
- authentication
- administration
- accounting
A: authentication
If right: Objective 3.2
If wrong: Objective 3.2

Q: In the case of dial-up networking, the term ____ refers to a modem.
- serial connection
- virtual connection
- physical connection
- POTS connection
A: serial connection
If right: Objective 3.2
If wrong: Objective 3.2

Q: A ____ uses very little hard disk space or processing power from the workstation on which it is installed.
- thick client
- fat client
- thin client
- virtual client
A: thin client
If right: Objective 3.2
If wrong: Objective 3.2

Q: ____ is the remote virtual computing software that comes with Windows client and server operating systems.
- Remote Server
- Remote Client
- Remote Windows
- Remote Desktop
A: Remote Desktop
If right: Objective 3.2
If wrong: Objective 3.2

Q: ____ is an open source system designed to allow one workstation to remotely manipulate and receive screen updates from another workstation.
- Remote Desktop
- VNC
- Citrix
- Xen
A: VNC
If right: Objective 3.2
If wrong: Objective 3.2

Q: ____ are wide area networks that are logically defined over public transmission systems.
- VPNs
- Leased lines
- Private lines
- Dial-up lines
A: VPNs
If right: Objective 3.2
If wrong: Objective 3.2

Q: VPNs can be classified based on the kinds of ____ they connect.
- hardware
- software
- endpoints
- circuits
A: endpoints
If right: Objective 3.2
If wrong: Objective 3.2

Q: In a ____ VPN, tunnels connect multiple sites on a WAN.
- site-to-site
- site-to-client
- client-to-client
- link-to-line
A: site-to-site
If right: Objective 3.2
If wrong: Objective 3.2

Q: A VPN tunneling protocol operates at the ____ layer.
- Network
- Application
- Session
- Data Link
A: Data Link
If right: Objective 3.2
If wrong: Objective 3.2

Q: In ____, each datagram can follow one of many paths to reach its destination.
- circuit switching
- line switching
- packet switching
- data switching
A: packet switching
If right: Objective 3.2
If wrong: Objective 3.2

Q: In a(n) ____________________ VPN, clients, servers, and other hosts establish tunnels with a private network using a remote access server or VPN gateway.
A: client-to-site
If right: Objective 3.2
If wrong: Objective 3.2

Q: ____ is a public key encryption system that can verify the authenticity of an e-mail sender and encrypt e-mail data in transmission.
- PGP
- SSH
- IPSec
- SSL
A: PGP
If right: Objective 3.2
If wrong: Objective 3.2

Q: ____ is a method of encrypting TCP/IP transmissions above the network layer.
- PGP
- IPSec
- PAP
- SSL
A: SSL
If right: Objective 3.2
If wrong: Objective 3.2

Q: A VPN ____ authenticates VPN clients and establishes tunnels for VPN connections.
- router
- service
- concentrator
- certificate authority
A: concentrator
If right: Objective 3.2
If wrong: Objective 3.2

Q: Security is a concern when using remote access servers on a network because:
- Access servers enable computers to connect to a network and obtain access to its resources, thereby exposing the network to the outside world.
- Access servers have poor password enforcement capabilities and rely on users to choose good passwords.
- Access servers cannot accept encoded data transfers, requiring users to transmit plain text to and from the network.
- Access servers are difficult to understand and support, and so many networks are using them incorrectly and perhaps insecurely.
A: Access servers enable computers to connect to a network and obtain access to its resources, thereby exposing the network to the outside world.
If right: Objective 3.2
If wrong: Objective 3.2

Q: To complete its VPN connection, your computer is using RDP. Which of the following VPN types are you participating in?
- Site-to-link
- Site-to-site
- Link-to-client
- Client-to-site
A: Client-to-site
If right: Objective 3.2
If wrong: Objective 3.2

Q: In which of the following situations would you use RDP?
- To enable someone else to control your workstation, which is running a Windows operating system
- To establish a VPN between your home workstation and your office LAN
- To remotely control a distant workstation that's running a UNIX or Linux operating system
- To manage a pool of modems available for multiple users to log onto your network from a distance
A: To enable someone else to control your workstation, which is running a Windows operating system
If right: Objective 3.2
If wrong: Objective 3.2

Q: You have decided to set up a VPN between your home and your friend's home so that you can run a private digital telephone line over your DSL connections. Each of you has purchased a small Cisco router for terminating the VPN endpoints. Which of the following protocols could you use to create a tunnel between these two routers?
- L2TP
- PPTP
- PP2T
- SLIP
A: L2TP
If right: Objective 3.2
If wrong: Objective 3.2

Q: A VPN is designed to connect 15 film animators and programmers from around the state of California. At the core of the VPN is a router connected to a high-performance server used for storing the animation files. The server and router are housed in an ISP's data center. The ISP provides two different T3 connections to the Internet backbone. What type of connection must each of the animators and programmers have to access the VPN?
- At least a fractional T1 connection to the Internet
- At least a T1 connection to the Internet
- At least a T3 connection to the Internet
- Any type of Internet connection
A: Any type of Internet connection
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following functions makes VPN protocols unique?
- The ability to precisely time packet delivery
- The ability to interpret both frames and datagrams
- The ability to create tunnels
- The ability to detect eavesdropping
A: The ability to create tunnels
If right: Objective 3.2
If wrong: Objective 3.2

Q: You work for a retailer that sells household goods online. The company has decided to redesign its network for better security. Included in this redesign is the addition of a new firewall. Assuming the firewall is placed between the Internet connection and the Web server, which of the following should be included in the firewall's configuration so that customers can still reach the Web site?
- Allow incoming UDP-based transmissions to port 23.
- Allow incoming TCP-based transmissions to port 80.
- Allow outgoing TCP-based transmissions to port 88.
- Allow outgoing UDP-based transmissions to port 1024.
A: Allow incoming TCP-based transmissions to port 80.
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following encryption methods provides the best security for data traveling over VPN connections?
- PPTP
- L2TP
- IPSec
- SLIP
A: IPSec
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following criteria could a router's ACL use for denying packets access to a private network?
- Source IP address
- Authentication header
- RTT
- Source MAC address
A: Source IP address
If right: Objective 3.2
If wrong: Objective 3.2

Q: If you are entering your account number and password in a Web form to check your bank account balance online, which of the following encryption methods are you most likely using?
- PGP
- SSL
- SSH
- Kerberos
A: SSL
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following encryption techniques is incorporated into IP version 6?
- SSH
- SSL
- Kerberos
- IPSec
A: IPSec
If right: Objective 3.2
If wrong: Objective 3.2

Q: You are modifying your core router’s access list to prevent all FTP traffic from reaching your internal network. If the gateway’s IP address is 192.168.1.1, which of the following commands would accomplish that?
- access-list  110  deny  FTP  192.168.1.1  any  eq  TCP
- access-list  110  permit  TCP  any  192.168.1.1  not  FTP
- access-list  110  deny  FTP  any  192.168.1.1  port  23
- access-list  110  deny  TCP  any  any  eq  FTP
- access-list  110  permit  FTP  192.168.1.1  any  eq  TCP
A: access-list  110  deny  TCP  any  any  eq  FTP
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following is often used to secure data traveling over VPNs that use L2TP?
- PPTP
- PPoE
- Kerberos
- SSH
- IPSec
A: IPSec
If right: Objective 3.2
If wrong: Objective 3.2

Q: You have connected to your bank’s home page. Its URL begins with “https://.” Based on this information,  what  type  of  security  can  you  assume  the  bank  employs  for  receiving  and transmitting data to and from its Web server?
- Kerberos
- SSL
- IPSec
- L2TP
- Packet-filtering firewall
A: SSL
If right: Objective 3.2
If wrong: Objective 3.2

Q: You have purchased a new router and are prepared to install it on your network, but have some concerns about security. By default, what kind of traffic policies will the new router’s access list apply?
- It will deny all inbound and outbound traffic.
- It will deny all inbound traffic, but allow all outbound traffic.
- It will allow all private outbound and inbound traffic, but deny any public inbound or outbound traffic.
- It will allow all traffic inbound and outbound except for that directed at known, insecure ports.
- By default, the router has no access list and will therefore allow any inbound or outbound traffic.
A: By default, the router has no access list and will therefore allow any inbound or outbound traffic.
If right: Objective 3.2
If wrong: Objective 3.2

Q: You are a support technician trying to help a user configure a new graphics program she installed  on  her  laptop.  The  laptop  runs  Ubuntu  Linux.  After  some  failed  attempts  at talking her through the process, you decide to remotely take over her workstation and walk  her  through  the  process.  Which  of  the  following  open  source  software  programs would allow you to do this?
- Remote Desktop
- RealVNC
- OpenConnect
- ICA (Independent Computing Architecture) Client
- RAS (Remote Access Service)
A: RealVNC
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following protocols encapsulates data for transmission over VPNs?
- CHAP
- SNMP
- L2TP
- SFTP
- MPLS
A: L2TP
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which protocol is used to remotely display and provide interaction with applications running on a remote Windows computer?
- TSP
- TSC
- PPTP
- PPoE
- RDP
A: RDP
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following protocols provides secure encrypted file transfers between dissimilar systems?
- SFTP
- HTTP
- TDTP
- FTPS
A: SFTP
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which protocol provides secure client connections over the Internet using VPNs?
- PPP
- LSIP
- PPoE
- PPTP
A: PPTP
If right: Objective 3.2
If wrong: Objective 3.2

Q: Your company wants you to connect to the home office via the Internet.

Required result: Secure data transmission

Optional results: Dedicated connection, inexpensive.

Solution: Use PPTP, connect via dialup
- Meets required result and none of the optional
- Does not meet required results
- Meets required result and both optional
- Meets required result and one of the optional
A: Meets required result and one of the optional
If right: Objective 3.2
If wrong: Objective 3.2

Q: Which of the following protocols was designed to provide secure connectivity to the Internet over broadband Ethernet connections such as DSL or cable?
- PPTP
- STP
- PoE
- PPoE
- PPP
A: PPoE
If right: Objective 3.2
If wrong: Objective 3.2

Q: Encryption is the last means of defense against data theft.
- True
- False
A: True
If right: Objective 3.3
If wrong: Objective 3.3

Q: The combination of a public key and a private key is known as a ____.
- key lock
- key frame
- key pair
- key set
A: key pair
If right: Objective 3.3
If wrong: Objective 3.3

Q: A(n) ____ is a password-protected and encrypted file that holds an individual’s identification information, including a public key.
- digital certificate
- authentication file
- access control list
- authentication certificate
A: digital certificate
If right: Objective 3.3
If wrong: Objective 3.3

Q: The use of certificate authorities to associate public keys with certain users is known as ____.
- PGP
- PKI
- IPSec
- SSL
A: PKI
If right: Objective 3.3
If wrong: Objective 3.3

Q: In ____, a hacker forges name server records to falsify his host’s identity.
- IP spoofing
- DNS spoofing
- ID spoofing
- DHCP spoofing
A: DNS spoofing
If right: Objective 3.3
If wrong: Objective 3.3

Q: ____ protocols are the rules that computers follow to accomplish authentication.
- Access
- Availability
- Authority
- Authentication
A: Authentication
If right: Objective 3.3
If wrong: Objective 3.3

Q: RADIUS and TACACS belong to a category of protocols known as AAA (____).
- access, authorization, and accounting
- authentication, authorization, and accounting
- authentication, authorization, and authority
- authentication, authorization, and access
A: authentication, authorization, and accounting
If right: Objective 3.3
If wrong: Objective 3.3

Q: In ____, both computers verify the credentials of the other.
- mutual authorization
- mutual access
- mutual authentication
- mutual verification
A: mutual authentication
If right: Objective 3.3
If wrong: Objective 3.3

Q: A(n) ____________________ is a software application on a network host that acts as an intermediary between the external and internal networks, screening all incoming and outgoing traffic.
A: proxy service / proxy
If right: Objective 3.3
If wrong: Objective 3.3

Q: ____________________ is the use of an algorithm to scramble data into a format that can be read only by reversing the algorithm.
A: Encryption
If right: Objective 3.3
If wrong: Objective 3.3

Q: Using a 20-bit key is how many times more secure than using an 18-bit key?
- Two times
- Three times
- Four times
- Eight times
A: Four times
If right: Objective 3.3
If wrong: Objective 3.3

Q: Using a 6-bit key is how many times more secure than using an 3-bit key?
- Two times
- Three times
- Four times
- Eight times
A: Eight times
If right: Objective 3.3
If wrong: Objective 3.3

Q: Using a 4-bit key is how many times more secure than using an 2-bit key?
- Two times
- Three times
- Four times
- Eight times
A: Four times
If right: Objective 3.3
If wrong: Objective 3.3

Q: How many keys are required for public key encryption?
- One
- Two
- Four
- None
A: Two
If right: Objective 3.3
If wrong: Objective 3.3

Q: How many keys are required for private key encryption?
- One
- Two
- Four
- None
A: One
If right: Objective 3.3
If wrong: Objective 3.3

Q: How many keys are required for symmetric key encryption?
- One
- Two
- Four
- None
A: One
If right: Objective 3.3
If wrong: Objective 3.3

Q: How many keys are required for asymmetric key encryption?
- One
- Two
- Four
- None
A: Two
If right: Objective 3.3
If wrong: Objective 3.3

Q: Which of the following requires port-based authentication?
- Kerberos
- RADIUS
- WEP
- WPA
A: Kerberos
If right: Objective 3.3
If wrong: Objective 3.3

Q: Which of the following plays a crucial role in the public key infrastructure?
- IDS
- Certificate authority
- VPN concentrator
- PGP
A: Certificate authority
If right: Objective 3.3
If wrong: Objective 3.3

Q: Which of the following is a single sign-on authentication method?
- IPSec
- EAPoL
- SSL
- Kerberos
- CHAP
A: Kerberos
If right: Objective 3.3
If wrong: Objective 3.3

Q: Which is the more secure?
- PAP
- CHAP
A: CHAP
If right: Objective 3.3
If wrong: Objective 3.3

Q: Which of the following provided support for various authentication methods, including Smart Cards, certificates, Kerberos and one-time passwords?
- CHAP
- PAP
- EAP
- MS-CHAP
- SPAP
A: EAP
If right: Objective 3.3
If wrong: Objective 3.3

Q: You want to transfer data securely over a WAN, how can this be accomplished?
- Assign share level permission
- It can’t be done
- Encrypt data before sending
- Encrypt data after sending
A: Encrypt data before sending
If right: Objective 3.3
If wrong: Objective 3.3

Q: Human errors, ignorance, and omissions cause more than half of all security breaches sustained by networks.
- True
- False
A: True
If right: Objective 3.4
If wrong: Objective 3.4

Q: Network security is more often compromised “from the inside” than from external sources.
- True
- False
A: True
If right: Objective 3.4
If wrong: Objective 3.4

Q: A security policy should state exactly which hardware, software, architecture, or protocols will be used to ensure security.
- True
- False
A: False
If right: Objective 3.4
If wrong: Objective 3.4

Q: ____ is a social engineering practice in which a person attempts to glean access or authentication information by posing as someone who needs that information.
- Cracking
- Hacking
- War driving
- Phishing
A: Phishing
If right: Objective 3.4
If wrong: Objective 3.4

Q: . A hacker sends an e-mail message to everyone at your company. In the e-mail he alerts employees to a change in the health benefits Web site and requests users to follow a link to the new site, which, in fact, will capture the user’s private information. What security-threatening strategy is the hacker attempting?
- Cracking
- Hacking
- War driving
- Phishing
A: Phishing
If right: Objective 3.4
If wrong: Objective 3.4

Q: In a ____ attack, a person redirects or captures secure transmissions as they occur.
- denial-of service
- man-in-the-middle
- war driving
- phishing
A: man-in-the-middle
If right: Objective 3.4
If wrong: Objective 3.4

Q: ____ software searches a node for open ports.
- Phishing
- Sniffing
- Authentication
- Port scanner
A: Port scanner
If right: Objective 3.4
If wrong: Objective 3.4

Q: A router that is not configured to drop packets that match certain or suspicious characteristics is an example of a risk associated with ____.
- people
- transmission and hardware
- protocols and software
- Internet access
A: transmission and hardware
If right: Objective 3.4
If wrong: Objective 3.4

Q: A NOS that contains a “back door”is an example of a risk associated with ____.
- people
- transmission and hardware
- protocols and software
- Internet access
A: protocols and software
If right: Objective 3.4
If wrong: Objective 3.4

Q: A ____ attack occurs when an Internet chat user sends commands to a victim’s machine that causes the screen to fill with garbage characters and requires the victim to terminate their chat sessions.
- flashing
- denial-of-service
- war driving
- phishing
A: flashing
If right: Objective 3.4
If wrong: Objective 3.4

Q: A ____ attack occurs when a system becomes unable to function because it has inundated with requests for services and can’t respond to any of them.
- flashing
- denial-of-service
- war driving
- phishing
A: denial-of-service
If right: Objective 3.4
If wrong: Objective 3.4

Q: A ____ attack occurs when a hacker uses programs that try a combination of a user ID and every word in a dictionary to gain access to the network.
- flashing
- denial-of-service
- dictionary
- brute force
A: dictionary
If right: Objective 3.4
If wrong: Objective 3.4

Q: A ____ attack occurs when a hacker tries numerous possible character combinations to find the key that will decrypt encrypted data.
- flashing
- denial-of-service
- dictionary
- brute force
A: brute force
If right: Objective 3.4
If wrong: Objective 3.4

Q: A(n) ____________________ is a thorough examination of each aspect of the network to determine how it might be compromised.
A: posture assessment
If right: Objective 3.4
If wrong: Objective 3.4

Q: A(n) ____________________ identifies an organization’s security risks, levels of authority, designated security coordinator and team members, responsibilities for each team member, and responsibilities for each employee.
A: security policy
If right: Objective 3.4
If wrong: Objective 3.4

Q: In general, information is ____________________ if it could be used by other parties to impair an organization’s functioning, decrease customers’ confidence, cause a financial loss, damage an organization’s status, or give a significant advantage to a competitor.
A: confidential
If right: Objective 3.4
If wrong: Objective 3.4

Q: Protection against harmful code involves more than just installing anti-malware software.
- True
- False
A: True
If right: Objective 3.4
If wrong: Objective 3.4

Q: When implementing anti-malware software on a network, one of your most important decisions is where to install the software.
- True
- False
A: True
If right: Objective 3.4
If wrong: Objective 3.4

Q: An anti-malware policy is meant to protect the network from damage and downtime.
- True
- False
A: True
If right: Objective 3.4
If wrong: Objective 3.4

Q: A program that disguises itself as something useful but actually harms your system is called a ____.
- virus
- worm
- bot
- Trojan horse
A: Trojan horse
If right: Objective 3.4
If wrong: Objective 3.4

Q: ____ are programs that run independently and travel between computers and across networks.
- Viruses
- Worms
- Bots
- Trojan horses
A: Worms
If right: Objective 3.4
If wrong: Objective 3.4

Q: A ____ is a program that runs automatically, without requiring a person to start or stop it.
- virus
- worm
- bot
- Trojan horse
A: bot
If right: Objective 3.4
If wrong: Objective 3.4

Q: A(n) ____ virus disguises itself as a legitimate program to prevent detection.
- stealth
- encrypted
- time dependent
- polymorphic
A: stealth
If right: Objective 3.4
If wrong: Objective 3.4

Q: A(n) ____ virus changes its characteristics every time it is transferred to a new system.
- stealth
- encrypted
- time dependent
- polymorphic
A: polymorphic
If right: Objective 3.4
If wrong: Objective 3.4

Q: ____ scanning detects malware by comparing a file’s content with known malware signatures in a signature database.
- Integrity checking
- Polymorphic
- Signature
- Heuristic
A: Signature
If right: Objective 3.4
If wrong: Objective 3.4

Q: ____ detects malware by comparing current characteristics of files and disks against an archived version of these characteristics to discover any changes.
- Integrity checking
- Polymorphic
- Signature
- Heuristic
A: Integrity checking
If right: Objective 3.4
If wrong: Objective 3.4

Q: ____ scanning techniques attempt to identify malware by discovering “malware-like” behavior.
- Integrity checking
- Polymorphic
- Signature
- Heuristic
A: Heuristic
If right: Objective 3.4
If wrong: Objective 3.4

Q: Many bots spread through the ____________________, a protocol that enables users running client software to communicate instantly with other participants in a chat room on the Internet.
A: IRC (Internet Relay Chat) / Internet Relay Chat / IRC
If right: Objective 3.4
If wrong: Objective 3.4

Q: Which of the following is the most secure password?
- 12345ABC
- dolphins
- !tlzOGS557x^^L
- A1B2C333
A: !tlzOGS557x^^L
If right: Objective 3.4
If wrong: Objective 3.4

Q: Which of the following NOS logon restrictions is most likely to stop a hacker who is attempting to discover someone's password through a brute force or dictionary attack?
- Total time logged on
- Time of day
- Period of time after which a password expires
- Number of unsuccessful logon attempts
A: Number of unsuccessful logon attempts
If right: Objective 3.4
If wrong: Objective 3.4

Q: Which of the following techniques would prevent an FTP bounce attack?
- Configuring your firewall to deny requests to ports 20 and 21
- Performing a port scan of your network using NMAP
- Configuring the FTP service to require a password.
- Restricting the size of your FTP server’s memory allocation table
A: Configuring your firewall to deny requests to ports 20 and 21
If right: Objective 3.4
If wrong: Objective 3.4

Q: What characteristic of the IRC protocol makes it an effective way to spread viruses and worms quickly?
- It does not require users to log on, thus allowing open entry to the server via users' connections.
- It broadcasts communication from one chat room participant to others.
- It maintains a registry of all potential users and issues keep-alive transmissions to those users periodically.
- It relies on multiple servers to provide the IRC service, thus enabling many hosts to become infected at once.
A: It broadcasts communication from one chat room participant to others.
If right: Objective 3.4
If wrong: Objective 3.4

Q: If your anti-malware software uses signature scanning, what must you do to keep its malware-fighting capabilities current?
- Purchase new malware signature scanning software every three months.
- Reinstall the malware-scanning software each month.
- Manually edit the date in the signature scanning file.
- Regularly update the anti-malware software's signature database.
A: Regularly update the anti-malware software's signature database.
If right: Objective 3.4
If wrong: Objective 3.4

Q: Which of the following must be true for an evil twin attack to succeed?
- The rogue access point must have the same SSID as the legitimate access point.
- The rogue access point and legitimate access point must be in the same locale.
- The rogue access point and legitimate access point must use the same security method.
- The rogue access point and legitimate access point must use the same security key.
- All of the above
A: All of the above
If right: Objective 3.4
If wrong: Objective 3.4

Q: How do most modern FTP servers prevent FTP bounce attacks?
- They will not issue data to hosts other than the client that originated the request.
- They will deny requests to ports 21 or 22.
- They will not allow anonymous logins.
- They require clients to communicate using SSH.
- They maintain an access list to determine which clients are legitimate.
A: They will not issue data to hosts other than the client that originated the request.
If right: Objective 3.4
If wrong: Objective 3.4

Q: Which of the following passwords provide the best security?
- userTwo
- user2
- User$Two
- Password
A: User$Two
If right: Objective 3.4
If wrong: Objective 3.4

Q: You want to connect your network to the Internet, but are concerned about viruses.  What is the best solution to protect your network?
- Install a firewall
- Install a proxy
- Install a network virus protection suite
- Install virus protection at each workstation
A: Install a network virus protection suite
If right: Objective 3.4
If wrong: Objective 3.4

Q: The statement: “Viruses can be transmitted by external storage media and are capable for moving across any pathway that can carry data”  is _________
- Dependent on the media
- Dependent upon an EMI that is occurring
- True
- False
A: True
If right: Objective 3.4
If wrong: Objective 3.4

Q: What is the most effective password for user one?
- User0
- Passwordone
- Userone
- User$one
A: User$one
If right: Objective 3.4
If wrong: Objective 3.4

Q: In order to satisfy mission critical timelines you come into work 4 hours early.  You are in the office at 5:00 am, but you are unable to get on the network to access your files.  What could be the problem?
- It too early and you’re not thinking straight.  Go to YOUR office.
- The network doesn’t “come up” until 7:00 am
- The network shares are locked down during off peak hours.
- Your user account has time restrictions on it
A: Your user account has time restrictions on it
If right: Objective 3.4
If wrong: Objective 3.4

Q: Your company’s private network and its wiring are subject to federal regulations.
- False
- True
A: True
If right: Objective 3.4
If wrong: Objective 3.4

Q: Which of the following are  good security tips for the administrator of a network? (Choose Three)
- For passwords, use two words from the same context in order to remember them
- Do not leave any old accounts on the network
- Have an attack plan in place
- Never attach a server to the Internet without a firewall
- Make sure everyone can log on as administrator in case of an emergency
- Make sure your password is all numbers; it makes it very hard to guess
A: Do not leave any old accounts on the network; Have an attack plan in place; Never attach a server to the Internet without a firewall
If right: Objective 3.4
If wrong: Objective 3.4

Q: This intrusion detection type monitors your network for activity that would indicate problems such as a virus.
- Behavior-based
- Signature-based
- Anomaly-based
- Bandwidth-based
A: Behavior-based
If right: Objective 3.4
If wrong: Objective 3.4

Q: How do you protect your internal network against viruses?
- Firewall
- Network virus protection suite
- Workstation virus protection suite
- Proxy server
A: Network virus protection suite
If right: Objective 3.4
If wrong: Objective 3.4

Q: How can you improve password security?
- Force a password changed periodically
- Prevent users from have access to passwords
- Specify password length
- Create random passwords
A: Force a password changed periodically
If right: Objective 3.4
If wrong: Objective 3.4

Q: Virus programs are constantly being modified in order to escape detection.  The best defense against newly evolved viruses is to update your _______
- Virus program
- Virus definitions
- Virus algorithms
- Quarantine lists
A: Virus definitions
If right: Objective 3.4
If wrong: Objective 3.4

Q: Which of the following passwords offers the most security?
- BSMITH1
- SMITHb
- BSMITH
- BSM1ITH
A: BSM1ITH
If right: Objective 3.4
If wrong: Objective 3.4

Q: A ____ main function is to examine packets and determine where to direct them based on their Network layer addressing information.
- switch’s
- gateway’s
- router’s
- proxy server’s
A: router’s
If right: Objective 3.5
If wrong: Objective 3.5

Q: A ____ firewall is a router (or a computer installed with software that enables it to act as a router) that examines the header of every packet of data it receives to determine whether that type of packet is authorized to continue to its destination.
- packet-filtering
- gateway
- proxy
- selective
A: packet-filtering
If right: Objective 3.5
If wrong: Objective 3.5

Q: You are alerted that suddenly 100% of the resources on your two core routers are being used and no legitimate traffic can travel into or out of your network. What kind of security attack are you most likely experiencing?
- IP spoofing
- Brute force attack
- Flashing
- Denial-of-service attack
A: Denial-of-service attack
If right: Objective 3.5
If wrong: Objective 3.5

Q: A user's remote marketing server has changed IP address schemes and now the user can no longer access it. The user further discovers that the distant end still has access to them. Which of the following is a possible cause?
- SNMP strings need to be added
- Firewall rules need to be configured
- Port bonding on the interface needs to be enabled
- The switch has lost power
A: Firewall rules need to be configured
If right: Objective 3.5
If wrong: Objective 3.5

Q: You are a network administrator for a WAN that connects two regional insurance company offices—one main office and one satellite office—to each other by a T1. The main office is also connected to the Internet using a T1.  This T1 provides Internet access for both offices. To ensure that your private network is not compromised by unauthorized access through the Internet connection, you install a firewall between the main office and the Internet. Shortly thereafter, users in your satellite office complain that they cannot access the file server in the main office, but users in the main office can still access the Internet. What two things should you check?
- Whether the firewall has been configured to run in promiscuous mode
- Whether the firewall is placed in the appropriate location on the network
- Whether the firewall has been configured to allow access from IP addresses in the satellite office
- Whether the firewall has been configured to receive and transmit UDP-based packets
- Whether the firewall has been configured to allow Internet access over the main office’s T1
A: Whether the firewall is placed in the appropriate location on the network; Whether the firewall has been configured to allow access from IP addresses in the satellite office
If right: Objective 3.5
If wrong: Objective 3.5

Q: Your company’s network administrator has told you that you may operate a Web server for employees to access as long as it remains inside the demilitarized zone. What does he mean by this?
- You may set up a Web server on your home network.
- You may set up a Web server on the company’s access server, which allows clients from around the globe to connect to your WAN.
- You may set up a Web server at a hosting facility outside of the company’s LAN or WAN.
- You may set up a Web server on the company’s private LAN, which is protected by a firewall.
- You may not set up a Web server on the company’s LAN or WAN.
A: You may set up a Web server on the company’s private LAN, which is protected by a firewall.
If right: Objective 3.5
If wrong: Objective 3.5

Q: To provide some basic security for your small office network, you install software called IP Tables on an old Linux computer. This software examines each incoming datagram. Based on a set of criteria, including source IP address, source and destination ports, and protocols, it blocks or allows traffic. What type of system is this? (Choose all that apply.)
- Content-filtering firewall
- Stateful firewall
- Stateless firewall
- Packet-filtering firewall
- Application layer firewall
A: Stateless firewall
If right: Objective 3.5
If wrong: Objective 3.5

Q: What is the security function of a firewall?
- Shuts down equipment if there is a fire
- Restricts unauthorized users from accessing your network
- Does not allow any connections to the Internet
- It is a DHCP server
A: Restricts unauthorized users from accessing your network
If right: Objective 3.5
If wrong: Objective 3.5

Q: Firewalls are used to ____________
- Protect the Internet from attacks on the private side
- Protect networks from attacks on the public side
- Either of the above, but not both in the same firewall
- Both of the above.
A: Both of the above.
If right: Objective 3.5
If wrong: Objective 3.5

Q: Software that examines your Internet traffic and blocks unapproved content is known as a ___________
- Packet filter
- Content filter
- IDS
- Proxy
A: Content filter
If right: Objective 3.5
If wrong: Objective 3.5

Q: Which of the following is a security function of a firewall?
- Restricts unauthorized users from accessing sensitive data
- Does not allow any connections to the server
- Allows people on the Internet to see just one IP address
- Manages password functions.
A: Restricts unauthorized users from accessing sensitive data
If right: Objective 3.5
If wrong: Objective 3.5

Q: When a router is acting as a firewall, it can use a technique that monitors all current TCP sessions and allows only the traffic that is requested from inside the network for the open sessions.  This technique is knows as __________ packet inspection.
- Content
- Filtering
- Stateful
- Stateless
A: Stateful
If right: Objective 3.5
If wrong: Objective 3.5

Q: A network layer firewall uses stateful packet inspection.
- True
- False
A: False
If right: Objective 3.5
If wrong: Objective 3.5

Q: Which of the following can provide protection for you network from outside invaders? (Choose three)
- Class 3 modems
- Proxy Servers
- Hidden files
- Firewalls
- Packet-filtering routers
- Class 2 modems
A: Proxy Servers; Firewalls; Packet-filtering routers
If right: Objective 3.5
If wrong: Objective 3.5

Q: What is true about a firewall? (Choose three)
- Exposed the identities of the user and the network
- Restrict a user from accessing an unauthorized site
- Can only be implemented in software
- Blocks a hacker from accessing the network
- A firewall has no bearing on NFS
- Provides an alarm for unauthorized access attempts
A: Restrict a user from accessing an unauthorized site; Blocks a hacker from accessing the network; Provides an alarm for unauthorized access attempts
If right: Objective 3.5
If wrong: Objective 3.5

Q: Which of the following can automatically detect and deny network access to a host whose traffic patterns appear suspicious?
- IPS
- NAT gateway
- Proxy server
- Router
A: IPS
If right: Objective 3.6
If wrong: Objective 3.6

Q: You have decided to add a honeypot to your network. Where on the network would you place it?
- On your company’s Web server
- In a decoy DMZ
- Between the access server and RADIUS server
- Attached to a workgroup switch
A: In a decoy DMZ
If right: Objective 3.6
If wrong: Objective 3.6

Q: You are part of a team participating in a posture assessment of your company’s WAN. Which of the following tools or strategies will help you gain a broad understanding of your network’s vulnerabilities?
- MIB
- War chalking
- NMAP
- WPA cracking
- PGP
A: NMAP
If right: Objective 3.6
If wrong: Objective 3.6

Q: Recently, your company’s WAN experienced a disabling DDoS attack. Which of the following devices could detect such an attack and prevent it from affecting your network in the future?
- A honeypot
- HIDS
- HIPS
- NIDS
- NIPS
A: NIPS
If right: Objective 3.6
If wrong: Objective 3.6

Q: This method of intrusion monitoring has the added capability of shutting down suspicious traffic.
- IPS
- IDS
- Proxy
- Firewall
A: IPS
If right: Objective 3.6
If wrong: Objective 3.6

Q: This intrusion detection type monitors your network the same way antivirus programs use definition files.
- Behavior-based
- Signature-based
- Anomaly-based
- Bandwidth-based
A: Signature-based
If right: Objective 3.6
If wrong: Objective 3.6