Modules 16 - 17: Building and Securing a Small Network Exam

1. Which component is designed to protect against unauthorized communications to and from a computer?

• security center
• port scanner
• antimalware
• antivirus
• firewall

2. Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

• RouterA(config)# login block-for 10 attempts 2 within 30
• RouterA(config)# login block-for 30 attempts 2 within 10
• RouterA(config)# login block-for 2 attempts 30 within 10
• RouterA(config)# login block-for 30 attempts 10 within 2

3. What is the purpose of the network security accounting function?

• to require users to prove who they are
• to determine which resources a user can access
• to keep track of the actions of a user
• to provide challenge and response questions

4. What type of attack may involve the use of tools such as nslookup and fping?

• access attack
• reconnaissance attack
• denial of service attack
• worm attack

7. Which example of malicious code would be classified as a Trojan horse?

• malware that was written to look like a video game
• malware that requires manual user intervention to spread between systems
• malware that attaches itself to a legitimate program and spreads to other programs when launched
• malware that can automatically spread from one system to another by exploiting a vulnerability in the target

8. What is the difference between a virus and a worm?

• Viruses self-replicate but worms do not.
• Worms self-replicate but viruses do not.
• Worms require a host file but viruses do not.
• Viruses hide in legitimate programs but worms do not.

9. Which attack involves a compromise of data that occurs between two end points?

• denial-of-service
• man-in-the-middle attack
• extraction of security parameters
• username enumeration

10. Which type of attack involves an adversary attempting to gather information about a network to identify vulnerabilities?

• reconnaissance
• DoS
• dictionary
• man-in-the-middle

12. What is the purpose of the network security authentication function?

• to require users to prove who they are
• to determine which resources a user can access
• to keep track of the actions of a user
• to provide challenge and response questions

13. Which firewall feature is used to ensure that packets coming into a network are legitimate responses to requests initiated from internal hosts?

• stateful packet inspection
• URL filtering
• application filtering
• packet filtering