ITN Unit 16

Which component is designed to protect against unauthorized communications to and from a computer?

• security center

• port scanner

• antimalware

• antivirus

• firewall

Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

• RouterA(config)# login block-for 10 attempts 2 within 30

• RouterA(config)# login block-for 30 attempts 2 within 10

• RouterA(config)# login block-for 2 attempts 30 within 10

• RouterA(config)# login block-for 30 attempts 10 within 2

What type of attack may involve the use of tools such as nslookup and fping?

• access attack

• reconnaissance attack

• denial of service attack

• worm attack

Which example of malicious code would be classified as a Trojan horse?

• malware that was written to look like a video game

• malware that requires manual user intervention to spread between systems

• malware that attaches itself to a legitimate program and spreads to other programs when launched

• malware that can automatically spread from one system to another by exploiting a vulnerability in the target

Answer explanation

A Trojan horse is malicious code that has been written specifically to look like a legitimate program. This is in contrast to a virus, which simply attaches itself to an actual legitimate program. Viruses require manual intervention from a user to spread from one system to another, while a worm is able to spread automatically between systems by exploiting vulnerabilities on those devices.

Which attack involves a compromise of data that occurs between two end points?

• denial-of-service

• man-in-the-middle attack

• extraction of security parameters

• username enumeration

What is the purpose of the network security authentication function?

• to require users to prove who they are

• to determine which resources a user can access

• to keep track of the actions of a user

• to provide challenge and response questions

Answer explanation

Authentication, authorization, and accounting are network services collectively known as AAA. Authentication requires users to prove who they are. Authorization determines which resources the user can access. Accounting keeps track of the actions of the user.

Which firewall feature is used to ensure that packets coming into a network are legitimate responses to requests initiated from internal hosts?

• stateful packet inspection

• URL filtering

• application filtering

• packet filtering

Answer explanation

Stateful packet inspection on a firewall checks that incoming packets are actually legitimate responses to requests originating from hosts inside the network. Packet filtering can be used to permit or deny access to resources based on IP or MAC address. Application filtering can permit or deny access based on port number. URL filtering is used to permit or deny access based on URL or on keywords.

What feature of SSH makes it more secure than Telnet for a device management connection?

• confidentiality with IPsec

• stronger password requirement

• random one-time port connection

• login information and data encryption

Answer explanation

Secure Shell (SSH) is a protocol that provides a secure management connection to a remote device. SSH provides security by providing encryption for both authentication (username and password) and the transmitted data. Telnet is a protocol that uses unsecure plaintext transmission. SSH is assigned to TCP port 22 by default. Although this port can be changed in the SSH server configuration, the port is not dynamically changed. SSH does not use IPsec.

What is the role of an IPS?

• detecting and blocking of attacks in real time

• connecting global threat information to Cisco network security devices

• authenticating and validating traffic

• filtering of nefarious websites

Answer explanation

An intrusion prevention system (IPS) provides real-time detection and blocking of attacks.

What is an accurate description of redundancy?

• configuring a router with a complete MAC address database to ensure that all frames can be forwarded to the correct destination

• configuring a switch with proper security to ensure that all traffic forwarded through an interface is filtered

• designing a network to use multiple virtual devices to ensure that all traffic uses the best path through the internetwork

• designing a network to use multiple paths between switches to ensure there is no single point of failure

Answer explanation

Redundancy attempts to remove any single point of failure in a network by using multiple physically cabled paths between switches in the network.