nuts

Which measure can a security analyst take to perform effective security monitoring against network traffic encrypted by SSL technology?

• Deploy a Cisco ASA.

• Require remote access connections through IPsec VPN.

• Deploy a Cisco SSL Appliance.

• Use a Syslog server to capture network traffic.

Refer to the exhibit. Port security has been configured on the Fa 0/12 interface of switch S1. What action will occur when PC1 is attached to switch S1 with the applied configuration?

• Frames from PC1 will be forwarded to its destination, and a log entry will be created.

• Frames from PC1 will be forwarded to its destination, but a log entry will not be created.

• Frames from PC1 will cause the interface to shut down immediately, and a log entry will be made.

• Frames from PC1 will be dropped, and there will be no log of the violation.

• Frames from PC1 will be dropped, and a log message will be created

What security countermeasure is effective for preventing CAM table overflow attacks?

• port security

• IP source guard

• Dynamic ARP Inspection

• DHCP snooping

What are two examples of DoS attacks? (Choose two.)

• buffer overflow

• ping of death

• SQL injection

• port scanning

• phishing

Which method is used to identify interesting traffic needed to create an IKE phase 1 tunnel?

• a security association

• hashing algorithms

• a permit access list entry

• transform sets

When the CLI is used to configure an ISR for a site-to-site VPN connection, which two items must be specified to enable a crypto map policy? (Choose two.)

• a valid access list

• the ISAKMP policy

• encryption

• the peer

• the hash

How does a firewall handle traffic when it is originating from the public network and traveling to the DMZ network?

• Traffic that is originating from the public network is usually blocked when traveling to the DMZ network.

• Traffic that is originating from the public network is usually forwarded without inspection when traveling to the DMZ network

• Traffic that is originating from the public network is usually permitted with little or no restriction when traveling to the DMZ network.

• Traffic that is originating from the public network is inspected and selectively permitted when traveling to the DMZ network.

A client connects to a Web server. Which component of this HTTP connection is not examined by a stateful firewall?

• the source IP address of the client traffic

• the destination port number of the client traffic

• the actual contents of the HTTP connection

• the source port number of the client traffic

Which network monitoring technology uses VLANs to monitor traffic on remote switches?

• RSPAN

• TAP

• IDS

• IPS

Which rule action will cause Snort IPS to block and log a packet?

• Sdrop

• alert

• drop

• log