Chapter 3 Exploring Network Technologies and Tools

Question #2: A security analyst needs to make a recommendation for restricting access to certain segments of the network using only data-link layer security. Which of the following controls will the analyst MOST likely recommend?

• MAC

• ACL

• BPDU

• ARP

Question #3: An organization needs to implement more stringent controls over administrator/root credentials and service accounts. Requirements for the project include: Check-in/checkout of credentials The ability to use but not know the password Automated password changes Logging of access to credentials Which of the following solutions would meet the requirements?

• OAuth 2.0

• Secure Enclave

• A privileged access management system

• An OpenID Connect authentication system

Question #4: After segmenting the network, the network manager wants to control the traffic between the segments. Which of the following should the manager use to control the network traffic?

• A DMZ

• A VPN

• A VLAN

• An ACL

Question #5: A smart switch has the ability to monitor electrical levels and shut off power to a building in the event of power surge or other fault situation. The switch was installed on a wired network in a hospital and is monitored by the facilities department via a cloud application. The security administrator isolated the switch on a separate VLAN and set up a patch routine. Which of the following steps should also be taken to harden the smart switch?

• Set up an air gap for the switch

• Change the default password for the switch

• Place the switch in a Faraday cage

• Install a cable lock on the switch

Question #6: A large industrial system's smart generator monitors the system status and sends alerts to third-party maintenance personnel when critical failures occur. While reviewing the network logs the company's security manager notices the generator's IP is sending packets to an internal file server's IP. Which of the following mitigations would be BEST for the security manager to implement while maintaining alerting capabilities?

• Segmentation

• Firewall whitelisting

• Containment

• Isolation

Question #7: To mitigate the impact of a single VM being compromised by another VM on the same hypervisor, an administrator would like to utilize a technical control to further segregate the traffic. Which of the following solutions would BEST accomplish this objective?

• Install a hypervisor firewall to filter east-west traffic.

• Add more VLANs to the hypervisor network switches.

• Move exposed or vulnerable VMs to the DMZ.

• Implement a zero-trust policy and physically segregate the hypervisor servers.

Question #8: A cybersecurity administrator is using iptables as an enterprise firewall. The administrator created some rules, but the network now seems to be unresponsive. All connections are being dropped by the firewall. Which of the following would be the BEST option to remove the rules?

• # iptables -t mangle -X

• # iptables -F

• # iptables -Z

• # iptables -P INPUT -j DROP

Question #9: A network engineer needs to create a plan for upgrading the wireless infrastructure in a large office. Priority must be given to areas that are currently experiencing latency and connection issues. Which of the following would be the BEST resource for determining the order of priority?

• Nmap

• Heat maps

• Network diagrams

• Wireshark

Question #11: The facilities supervisor for a government agency is concerned about unauthorized access to environmental systems in the event that the staff WiFi network is breached. Which of the following would BEST address this security concern?

• Install a smart meter on the staff WiFi.

• Place the environmental systems in the same DHCP scope as the staff WiFi.

• Implement Zigbee on the staff WiFi access points.

• Segment the staff WiFi network from the environmental systems network.

Question #12: A company is setting up a web server on the Internet that will utilize both encrypted and unencrypted web-browsing protocols. A security engineer runs a port scan against the server from the Internet and sees the following output: Which of the following steps would be best for the security engineer to take NEXT?

• Allow DNS access from the internet

• Block SMTP access from the Internet

• Block HTTPS access from the Internet

• Block SSH access from the Internet