Network 1

Explanation Slide...

Network architecture involves the selection and placement of media, devices, protocols/services, and data assets to design and manage a network infrastructure effectively.

Multiple Choice

What are network applications designed to do?

• Provide entertainment to users

• Run on the infrastructure to support business activities

• Store data assets in a secure environment

• Connect with untrusted internet hosts

Multiple Choice

What does network architecture involve the selection and placement of?

• Software development kits

• Media, devices, protocols/services, and data assets

• Marketing strategies

• Human resources

Explanation Slide...

Network applications are designed to run on the infrastructure to support business activities, not for entertainment, data storage, or connecting with untrusted hosts.

Multiple Choice

What are network applications designed to do?

• Provide entertainment to users

• Run on the infrastructure to support business activities

• Store data assets in a secure environment

• Connect with untrusted internet hosts

Explanation Slide...

Understanding and controlling how data flows between network segments is crucial for secure and effective network architecture design, as it helps in managing and securing the data transfer within the network.

Multiple Choice

What is a critical aspect of secure and effective network architecture design?

• Placing all systems within the same segment to reduce vulnerabilities

• Understanding and controlling how data flows between network segments

• Ensuring that all data is stored on a single server for easy access

• Allowing free communication between trusted and untrusted networks

Explanation Slide...

The OSI model is an example of a method for defining network functions, not a protocol for wireless communication, network topology, or network security standard.

Multiple Choice

What is the OSI model an example of?

• A protocol for wireless communication

• A method for defining network functions

• A type of network topology

• A network security standard

Explanation Slide...

A WAN refers to a network that spans metropolitan, country-wide, or global scopes, making it the correct choice.

Multiple Choice

What type of network is referred to as a WAN?

• A network within a single site

• A network that spans metropolitan, country-wide, or global scopes

• A network that is limited to a local area

• A network that uses only wireless communication

Explanation Slide...

The scope of a Local Area Network (LAN) is typically limited to a single site, such as a building or campus, connecting devices within that specific area.

Multiple Choice

What is the scope of a Local Area Network (LAN)?

• Global

• Metropolitan

• Single site

• Country-wide

Explanation Slide...

Preventive controls are typically placed at the border of a network segment or zone to monitor and control traffic entering and exiting the network, providing an initial line of defense.

Multiple Choice

Where are preventive controls typically placed in a network?

• At the endpoint of the network

• Within the perimeter to monitor traffic

• At the border of a network segment or zone

• In the center of the network for centralized management

Explanation Slide...

Detective controls are used to identify and alert of malicious traffic that has evaded preventive controls within the perimeter.

Multiple Choice

Which type of control might be placed within the perimeter to alert of malicious traffic that has evaded perimeter controls?

• Preventive controls

• Corrective controls

• Detective controls

• Load balancer controls

Explanation Slide...

A firewall at the network border is considered a Preventive Control as it aims to prevent unauthorized access and protect the network from potential threats.

Multiple Choice

What type of control is a firewall at the network border considered to be?

• Detective Control

• Corrective Control

• Preventive Control

• None of the above

Explanation Slide...

An active security control requires explicit configuration on hosts to use it, making it the correct choice among the options provided.

Multiple Choice

What is an active security control?

• A control that operates without the hosts on the network being aware of it

• A control that requires explicit configuration on hosts to use it

• A control that becomes part of the cable path without changes in the IP or routing topology

• A control that is attached to a network cable without any data exchange

Explanation Slide...

The primary role of a proxy server in network security is to provide a layer of protection to the client by acting as an intermediary.

Multiple Choice

What is the primary role of a proxy server in network security?

• To distribute network traffic across multiple servers

• To provide a layer of protection to the client by acting as an intermediary

• To enhance security by controlling access to sensitive resources

• To capture and analyze network traffic for malicious activity

Explanation Slide...

The main purpose of a jump server is to provide access to other hosts and enhance security by controlling access to sensitive resources.

Multiple Choice

What is the main purpose of a jump server?

• To distribute network traffic to optimize performance

• To act as a sensor for capturing malicious traffic

• To provide access to other hosts and enhance security by controlling access to sensitive resources

• To provide fault tolerance in a network

Explanation Slide...

A key feature of a load balancer is to provide a Web Application Firewall (WAF) for protection against common web application attacks.

Multiple Choice

What is a key feature of a load balancer?

• To mask user IP addresses for anonymity

• To provide a Web Application Firewall (WAF) for protection against common web application attacks

• To capture and analyze network traffic for malicious activity

• To act as an intermediary for web access

Explanation Slide...

A sensor in network security is used to capture and analyze network traffic for malicious activity, helping to detect and prevent security threats.

Multiple Choice

What is the function of a sensor in network security?

• To distribute network traffic across multiple servers

• To provide fault tolerance in a network

• To capture and analyze network traffic for malicious activity

• To provide access to other hosts and enhance security

Explanation Slide...

Power surges, overheating, and physical damage can cause a security device to enter a failure state according to the text.

Multiple Choice

What can cause a security device to enter a failure state according to the text?

• Power surges, overheating, and physical damage

• Regular maintenance and updates

• Proper user training and awareness

• Strong password policies

Explanation Slide...

A fail-open control prioritizes availability over confidentiality and integrity, meaning that in case of failure, it will allow traffic to pass through without inspection to maintain availability.

Multiple Choice

What is the risk of a fail-open control?

• It prioritizes confidentiality and integrity over availability

• It prioritizes availability over confidentiality and integrity

• It causes immediate system downtime

• It encrypts all data passing through the device

Explanation Slide...

The primary function of a content filtering server is to deny or allow users access to certain websites.

Multiple Choice

What is the primary function of a content filtering server?

• To speed up internet access

• To deny or allow users access to certain websites

• To monitor employee productivity

• To provide encryption for data transmission

Explanation Slide...

Random blocking is NOT a method implemented by content filters, as it does not fall under the typical methods such as security levels, allow lists, and deny lists.

Multiple Choice

Which of the following is NOT a method implemented by content filters?

• Security levels

• Allow lists

• Deny lists

• Random blocking

Explanation Slide...

The correct approaches to web filtering mentioned in the text are agent-based and centralized filters.

Multiple Choice

What are the two approaches to web filtering mentioned in the text?

• URL-based and content-based

• Agent-based and centralized filters

• Input-based and output-based

• Local and remote

Explanation Slide...

The role of a centralized proxy server in web filtering is to perform content filtering by analyzing web requests and enforcing company policies.

Multiple Choice

What is the role of a centralized proxy server in web filtering?

• To distribute web traffic evenly across multiple servers

• To perform content filtering by analyzing web requests and enforcing company policies

• To increase the speed of internet access for end users

• To store and manage user credentials for various applications

Explanation Slide...

DNS filtering controls the resolution of domain names into IP addresses, allowing specific websites to be blocked or allowed based on their domain names.

Multiple Choice

What does DNS filtering control to block or allow access to specific websites?

• The encryption level of the data being transmitted

• The speed of the connection to the website

• The resolution of domain names into IP addresses

• The storage of user data on the website

Explanation Slide...

DNS filtering is highly effective because it provides a proactive defense mechanism, blocking access to known phishing sites and other malicious online destinations.

Multiple Choice

What is one of the reasons why DNS filtering is highly effective?

• It increases the speed of the internet connection.

• It provides a proactive defense mechanism, blocking access to known phishing sites and other malicious online destinations.

• It reduces the cost of internet services.

• It enhances the graphical user interface of websites.

Explanation Slide...

DNS filtering provides an additional layer of security by protecting all devices connected to a network, including IoT devices, from malicious websites and threats.

Multiple Choice

What additional layer of security does DNS filtering provide?

• It encrypts all data leaving the organization's network.

• It can protect all devices connected to a network, including IoT devices.

• It offers physical security to the organization's premises.

• It creates a backup of all organizational data.

Multiple Choice

What is the purpose of security zones in a network or system?

• To provide a backup for data

• To ensure all devices have different security access levels

• To have specific security concerns or requirements addressed

• To increase the speed of the network

Explanation Slide...

Security zones in a network or system are used to have specific security concerns or requirements addressed.

Multiple Choice

What type of network is typically used within an organization to allow internet access without a physical connection to a router or switch?

• Guest network

• Honeynet

• Wireless network

• Screened subnet

Explanation Slide...

A wireless network is typically used within an organization to allow internet access without a physical connection to a router or switch, making it the correct choice for this scenario.

Multiple Choice

What is a honeynet primarily used for?

• To provide guest access to the internet

• To trap potential attackers and protect the real network

• To connect devices directly to each other without a base station

• To act as a buffer between an internal production network and the internet

Explanation Slide...

A honeynet is primarily used to trap potential attackers and protect the real network by luring them into a controlled environment for monitoring and analysis.

Multiple Choice

What is the function of a screened subnet in a security zone network?

• To connect more devices directly to each other for a specific purpose

• To provide a decentralized network without a traditional base station

• To act as a public-facing accessible network and a buffer to the internal production network

• To broadcast network usage on most internal networks

Explanation Slide...

A screened subnet functions as a public-facing accessible network and a buffer to the internal production network, enhancing security by segregating internal and external traffic.

Multiple Choice

What is the purpose of a bastion host?

• To provide wireless access to users within an organization

• To serve as a server specifically designed to withstand attacks

• To grant resource access to business partners, suppliers, and customers

• To employ internet information services for internal use only

Explanation Slide...

A bastion host is designed to withstand attacks, acting as a secure server for external access while protecting internal resources.

Multiple Choice

What is an intranet primarily used for?

• To connect to a wireless access point without a physical network port

• To grant resource access to external partners and customers

• To provide internet information services for internal use within a company

• To host a single application and resist attacks

Explanation Slide...

An intranet is primarily used to provide internet information services for internal use within a company, making it the correct choice.

Multiple Choice

What distinguishes an extranet from an intranet?

• An extranet is used to connect to wireless access points

• An extranet is a public network that provides internet access to everyone

• An extranet is used to grant resource access to external entities like business partners

• An extranet is a server designed to resist attacks

Explanation Slide...

An extranet is used to grant resource access to external entities like business partners, distinguishing it from an intranet which is limited to internal use only.

Multiple Choice

How do users connect to a wireless zone in an organization?

• By using a physical connection to a network port

• By connecting to the intranet with a cable

• By using a wireless connection on their device

• By accessing a server designed to withstand attacks

Explanation Slide...

Users connect to a wireless zone in an organization by using a wireless connection on their device.