Network Security Exercises and Questions, Exams of Biology

Download Network Security Exercises and Questions and more Exams Biology in PDF only on Docsity!

Networks

and

Security

Final

Answer

with

verified

solutions

false - answer Different types of organizations have similar levels of network security risks. True - answer A firewall typically involves a combination of hardware and software. false - answer The simplest type of firewall is a content filtering firewall. True - answer A SOHO wireless router typically acts as a firewall and may include packet filtering options. True - answer The term malware is derived from a combination of the words malicious and software.

worms - answer Programs that run independently and travel between computers and across networks, such as by e-mail attachment or virtually any kind of file transfer, are known as which option below? honey net - answer If multiple honeypots are connected to form a larger network, what term is used to describe the network? SIEM system - answer A system that is capable of collecting and analyzing information generated by firewalls, IDS, and IPS systems is known as which term below? reverse proxy - answer A proxy that provides Internet clients access to services on its own network is known as what type of proxy? network - answer At what layer of the OSI model do firewalls operate? iptables - answer Which software below serves as the firewall for Linux systems?

amplification attack - answer A reflective attack can be increased in intensity by combining it with what type of attack? banner-grabbing attack - answer An attack in which hackers transmit bogus requests for connection to servers or applications in order to harvest useful information to guide their attack efforts is known as what option below? man-in-the-middle attack - answer An attack that involves a person redirecting or capturing secure transmissions as they occur is known as what type of attack? TEMPEST - answer Which option below is a standard created by the NSA that defines protections against radio frequency emanations? phishing - answer The process in which a person attempts to glean access for authentication information by posing as someone who needs that information is known as what option below? dynamic ARP inspection - answer What feature on some network switches can be used to detect faked arp messages?

If multiple honeypots are connected to form a larger network, what term is used to describe the network? - answer honey net Persistent agent & dissolvable agent - answer What two types of agents are used to check compliance with network security policies? Which two viruses below are answer ples of boot sector viruses? - answer Michelangelo & stoned Most UNIX and Linux desktop operating systems provide a GUI application for easily viewing and filtering the information in system logs. - answer false TCP is preferred over UDP for real time services. - answer True CALEA requires telecommunications carriers and equipment manufacturers to provide for surveillance capabilities. - answer True The SNMP version 3 protocol introduces authentication, validation, and encryption for

messages exchanged between devices and the network management console. - answer True (?) Wireshark or any other monitoring software running on a single computer connected to a switch doesn't see all the traffic on a network, but only the traffic the switch sends to it, which includes broadcast traffic and traffic specifically addressed to the computer. - answer True SNMP agents receive requests from an NMS on what port number? - answer UDP 161? What security standard below was created to protect credit card data and transactions, requiring network segmentation as part of security controls? - answer PCI DSS Packets that exceed the medium's maximum packet size are known by what term? - answer giants Packets that are smaller than a medium's minimum packet size are known by what term below? - answer runts

A computer that provides support for multiple H.323 terminals and manages communication between them is known as what term below? - answer MCU A server running the SIP protocol listens on what TCP/UDP port for unsecured communications? - answer 5060 What component of SIP is a server that responds to user agent clients' requests for session initiation and termination? - answer user agent server When using SIP, what term is used to describe end- user devices, which may include workstations, tablet computers, smartphones, or IP phones? - answer user agent client In order for gateways to exchange and translate signaling and control information with each other so that voice and video packets are properly routed through a network, what intermediate device is needed? - answer media gateway controller

When using DiffServ, what type of forwarding utilizes a minimum departure rate from a given node, which is then assigned to each data stream?

• answer expedited forwarding The Priority Code Point field in a frame consists of how many bits? - answer 3 bits What protocol enables multiple types of Layer 3 protocols to travel over any one of several connection-oriented Layer 2 protocols? - answer MLPS A highly available server is available what percentage of the time? - answer 99.9999% What two log files are used by older versions of UNIX and newer version of Linux to store log information? - answer /var/log/messages & /var/adm/messages What two terms below are used to describe a telephone switch that connects and manages calls within a private organization? - answer private branch exchange & PBX

The Spanning Tree Protocol stipulates that on any bridge, only one root port, which is the bridge's port that is closest to the root bridge, can forward frames toward the root bridge. - answer true A network with the subnet mask 255.255.255. would have what CIDR block? - answer / A network with 6 bits remaining for the host portion will have how many usable host addresses?

• answer 62 A single switch can manage traffic belonging to several VLANs on a single interface, by configuring which option on the interface? - answer a trunk port What type of VLAN automatically receives all untagged frames? - answer native VLANS How can VLAN hopping attacks be prevented on a network? - answer Disable auto trunking and move native VLANs to unused VLANs. The first iteration of STP was defined in what IEEE standard below? - answer 802.1d

STP selects the root bridge based on which parameter? - answer bridge ID (BID) Telnet and SSH are known as what type of management system? - answer in-band With VTP, the VLAN database is stored on a switch known as which option below? - answer stack master In order to allow communication between VLANs for exchange of data, what must be used? - answer a router What IEEE standard specifies how VLAN information appears in frames and how switches interpret that information? - answer 802. 1Q Which of the following is not a valid reason for using virtualization? - answer increase performance Which supernet mask below would allow an organization to cover the following networks with one routing entry: 192.168.0.0/24, 192.168.1.0/24,

Which virtual network type allows VMs to communicate with each other on the same host, but disallows communication with other nodes on the network? - answer host-only mode Which of the following describes a router protocol that is used to assign a virtual IP address to a group of routers so that the routers function as a group? (Choose two.) - answer Which two standards below represent newer versions of STP? - answer 802.1w & 802.1s What two standards below have been developed to replace the Spanning Tree Protocol? - answer TRILL & SPB WANs connect nodes, such as workstations, servers, printers, and other devices, in a small geographical area on a single network. - answer false A bus topology WAN is often the best option for an organization with only a few sites and the capability to use dedicated circuits. - answer True

The carrier's endpoint on a WAN is called the Data Communications Equipment (DCE). - answer TRUE T-1 cables cannot utilize straight through cables using the same wiring scheme as LAN patch cables.

• answer False In a PON setup, the system is considered passive because no repeaters or other devices intervene between the carrier and the customer. - answer True In what type of topology is each site connected to two other sites, providing redundancy? - answer ring What is the maximum throughput of a DS connection? - answer 44. How many channels exist in a T1 connection? - answer 24 In an ISDN connection, what is the size throughput did a single B channel provide? - answer 63 Kbps

What is the maximum amount of throughput provided by an OC-12? - answer 622.08 Mbps What is the frequency range of the C-band that is used by satellites? - answer 3.4-6.7 GHz What Layer 3 technology is employed by distance- vector routing protocols in which a router knows which of its interfaces a routing update and will not retransmit, or advertise, that same update on the same interface? - answer split horizon What protocol is commonly used to aggregate / bond T-1 / T-3 lines? - answer MLP When copper cabling is used to carry T-1 traffic, what kind of connector is used? - answer RJ- When using frame relay, what is the name of the identifier that routers use to determine which circuit to send frames to? - answer data link connection identifier Which version of DOCSIS provides 38 Mbps per channel and requires a minimum of 4 channels to be used? - answer DOCSIS 3

The best 802.11n signal can travel approximately how far? - answer 1/4 mile In metro settings, end-to-end, carrier-grade Ethernet networks can be established via what protocol? - answer Carrier ethernet Transport A MAN connection is also known as which two terms below? - answer ethernet MAN & Metro ethernet What two competing standards exist for cell phone networks? - answer GSM & CDMA What two network protocols below rely on virtual circuits? - answer ATM & frame relay Frame relay relies on what two different types of virtual circuits? - answer PVC & SVC At what two layers of the OSI model are LAN and WAN protocols likely to differ? - answer Layer 2 & Layer 1 The first step in asset management is to inventory all the components on the network. - answer true