CCNA1 Network Security Quiz

Which component is designed to protect against unauthorized communications to and from a computer?

• security center

• port scanner

• antimalware

• antivirus

• firewall

Which command will block login attempts on Router A for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

• Router A(config)#login block-for 10 attempts 2 within 30

• Router A(config)#login block-for 30 attempts 2 within 10

• Router A(config)#login block-for 2 attempts 30 within 10

• Router A(config)#login block-for 30 attempts 10 within 2

What is the purpose of the network security accounting function?

• to require users to prove who they are

• to determine which resources a user can access

• to keep track of the actions of a user

• to provide challenge and response questions

What type of attack may involve the use of tools such as nslookup and fping?

• access attack

• reconnaissance attack

• denial of service attack

• worm attack

Match each weakness with an example. (Not all options are used.) Place the options in the following order: security policy weakness

Match the type of information security threat to the scenario. (Not all options are used.)

Which example of malicious code would be classified as a Trojan horse?

• malware that was written to look like a video game

• malware that requires manual user intervention to spread between systems

• malware that attaches itself to a legitimate program and spreads to other programs when launched

• malware that can automatically spread from one system to another by exploiting a vulnerability in the target

What is the difference between a virus and a worm?

• Viruses self-replicate but worms do not.

• Worms self-replicate but viruses do not.

• Worms require a host file but viruses do not.

• Viruses hide in legitimate programs but worms do not.

Which attack involves a compromise of data that occurs between two endpoints?

• denial-of-service

• man-in-the-middle attack

• extraction of security parameters

• username enumeration

Which type of attack involves an adversary attempting to gather information about a network to identify vulnerabilities?

• reconnaissance

• DoS

• dictionary

• man-in-the-middle