net+

Which of the following IDS/IPS detection methods allows an administrator to define what normal traffic patterns are supposed to look like?

• Signature-based detection

• Policy-based detection

• Statistical anomaly detection

• Non-statistical anomaly detectio

Answer explanation

Non-statistical anomaly detection allows an administrator to define what normal traffic patterns are supposed to look like.

Which of the following best defines and IPS sensor?

• It defines a set of rules dictating which types of traffic are permitted or denied as that traffic enters or exits a firewall interfacce

• It secures communication between two sites over an untrusted network.

• It sits in-line with traffic being analyzed, can recognize the signature of a well-known attack, and respond appropriately.

• It receives a copy of traffic being analyzed, can recognize the signature of a well-known attack, and respond appropriately.

Answer explanation

An intrusion prevention system (IPS) sensor sits in-line with traffic being analyzed, can recognize the signature of a well-known attack, and respond appropriately.

Which of the following network appliances acts as a relay for packets traveling between a network's clients and the Internet and is not focused on tunneling?

• VPN concentrator

• Load balancer

• Proxy server

• Content switch

Answer explanation

Some clients are configured to forward their packets, which are seemingly destined for the Internet, to a proxy server. This proxy server receives a client's request, and on behalf of that client (The client's proxy) the proxy server sends the request out to the Internet. When a reply is received from the Internet, the proxy server forwards the response to the client.

Which of the following is a primary benefit of a VPN concentrator?

• It allows a server farm to scale.

• It hides inside addresses from the public Internet.

• It allows traffic to travel securely over an untrusted network (for example, the Internet).

• It reduces bandwidth demand on an IP WAN

Answer explanation

A virtual private network (VPN) can allow traffic to flow securely across untrusted network, such as the Internet. This security is made possible by technologies such as encryption and hashing algorithms.

Which of the following protocols resolves an IP address of a network device to a corresponding MAC address?

• DNS

• ARP

• ICMP

• IGMP

Answer explanation

Address Resolution Protocol (ARP) is a protocol that can resolve an known IP address of a network device to a corresponding media access control (MAC) address.

What type of route is manually configured in a router's routing table and tells a router where to send traffic destined for a network not in the router's routing table?

• Dynamic route

• Default static route

• Connected route

• Redistributed route

Answer explanation

A default static route is a manually configured route, which tells the router to send traffic destined for a network not currently in the routing table out of a specified interface or to a specified IP address (known as a next-hop IP address).

Routing protocols differ in the amount of time they require to failover from a previously active route to backup route. What is the name for this routing protocol property?

• Split horizon

• Poison reverse

• Time-to-live

• convergence

Answer explanation

Convergence is the amount of time required for a routing protocol to failover from a previously active route to a back up route.

Which of the following are interior gateway protocols?

Each correct answer represents a complete solution. Choose all that apply.

• BGP

• IS-IS

• EIGRP

• OSPF

Answer explanation

An interior gateway protocol (IGP) is used to route traffic within an autonomous system (AS), where an AS is a network under single administrative control. An exterior gateway protocol (EGP) is used to route traffic between autonomous system. Intermediate-Intermediate system (IS-IS), Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), and Router Information Protocol (RIP) are all considered IGPs. Border Gateway Protocol (BGP) is the only EGP in widespread use today.

Queuing is another name for which of the following quality of service (QoS) functions?

• Classification

• Marking

• Congestion management

• Congestion avoidance

Answer explanation

When a device, such as a switch or a router, receives traffic faster than it can be transmitted, the device attempts to buffer the extra traffic until bandwidth becomes available. This buffering process is called congestion management.

What media type is used by 10GBASE-SR?

• Cat 6a

• MMF

• SMF

• Cat 6

Answer explanation

With a distance limitation of 26-82 m, 10GBASE-SR uses multimode fiber (MMF). Several Ethernet standards use multimode fiber (MMF). As a few examples, 100BASE-FX, 1000BASE-LX, 10GBASE-SW, and 100GBASE-SR10 can all use MMF.