Networking Unit 11

At what layer of the OSI model do proxy servers operate?

• a. Layer 3

• b. Layer 4

• c. Layer 2

• d. Layer 7

Which of the following ACL commands would permit web-browsing traffic from any IP address to any IP address?

• a. access-list acl_2 permit icmp any any

• b. access-list acl_2 deny tcp host 2.2.2.2 host 3.3.3.3 eq www

• c. access-list acl_2 permit https any any

• d. access-list acl_2 deny tcp any any

Which of the following criteria can a packet-filtering firewall not use to determine whether to accept or deny traffic?

• a. Destination IP address

• b. SYN flags

• c. ICMP message

• d. Application data

What information in a transmitted message might an IDS use to identify network threats?

• a. FIM

• b. ACL

• c. Port mirroring

• d. Signature

Which principle ensures auditing processes are managed by someone other than the employees whose activities are being audited?

• a. Shared responsibility model

• b. Principle of least privilege

• c. Separation of duties

• d. Defense in depth

Who is responsible for the security of hardware on which a public cloud runs?

• a. It depends

• b. The cloud customer

• c. The cloud provider

• d. Both the cloud customer and the cloud provider

Which of the following is not one of the AAA services provided by RADIUS and TACACS+?

• a. Authorization

• b. Administration

• c. Authentication

• d. Accounting

Which device would allow an attacker to make network clients use an illegitimate default gateway?

• a. Network-based firewall

• b. RA guard

• c. Proxy server

• d. DHCP server

Which policy ensures messages are discarded when they don't match a specific firewall rule?

• a. Explicit allow

• b. Explicit deny

• c. Implicit deny

• d. Implicit allow

Active Directory and 389 Directory Server are both compatible with which directory access protocol?

• a. Kerberos

• b. LDAP

• c. AD DS

• d. RADIUS