Module 6 Network security Devices, Design, and Technology

Which device is easiest for an attacker to take advantage of to capture and analyze packets?

• Router

• WIFI Access Point

• Switch

• Load Balancer

Which device watches for attacks and sounds an alert only when one occurs?

• firewall

• network intrusion detection system (NIDS)

• network intrusion prevention system (NIPS)

• proxy intrusion device

Which of these would NOT be a filtering mechanism found in a firewall ACL rule?

• source address

• direction

• date

• protocol

Which of the following devices can identify the application that sent packets and then make decisions about filtering based on it?

• Internet content filter

• application-based firewall

• reverse proxy

• web security gateway

Which function does an Internet content filter NOT perform?

• intrusion detection

• URL filtering

• malware inspection

• content inspection

Frank was asked to explain the danger of a MAC flooding attack on a switch.  What might Frank say?

• Once the MAC address table is full the switch functions like a network hub.

• A MAC flooding attack with filter to the local host computer’s MAC-to-IP address tables and prevent these hosts from reaching the network.

• In a defense of a MAC flooding attack network routers will freeze and not permit any incoming traffic.

• A MAC flooding attack will prevent load balances from identifying the correct VIP of the servers.

Which device is easiest for an attacker to take advantage of to capture and analyze packets?

• Router

• WIFI Access Point

• Switch

• Load Balancer

Which is the most secure type of firewall?

• stateless packet filtering

• stateful packet filtering

• network intrusion detection system replay

• reverse proxy analysis