Domain 4 Network Security

Which attack involved the attacker impersonaing both sides of a conversation between 2 hosts?

• On-path attack

• Deauthentication

• DoS

• Spoofing

Answer explanation

An on-path attack, also known as a man-in-the-middle, MiTM attack allows the attacker to impersonate both parties involved in a network conversation.

Which security concept dictates that a user be given only the permission to perform their job?

• Zero trust

• Role-based access

• Least privilege

• Defense in depth

Answer explanation

The principle of least privilege dictates that a user be given the least permission to perform their job.

Which principle describes the process of verification of a user's identity?

• Authentication

• Authorization

• Accounting

• Auditing

Answer explanation

Authentication is the process of verification of a user's identify.

Which attack can be used on a native VLAN?

• Double-tagging

• VLAN traversal

• Truck popping

• Denial of Service

Answer explanation

Double-tagging in an attack that can be sued against the native VLAN. The attacker will tage the natvie VLAN on a fram and then tag another inside that fram for the VLAN that the attacker intends to compromise.

Which console-based management protocol has built-in security?

• SSH

• SCP

• HTTPS

• FTP

Answer explanation

Secure Shell (SSH) negotiates encryption when a connection is made.

Which authentication system is an open standard originally proposed by the Internet Engineering Task Force (IETF)?

• RADIUS

• TACACS+

• Kerberos

• LDAP

Answer explanation

Remote Authentication Dial-In User Service (RADIUS) was originally proposed by the IETF and because an open standard for authentication, often used with 802.1X.

Which form of social engineering is nothing more than lookin gover someone's shoulder while they enter or view sensitive information?

• Shoulder surfing

• Phishing

• Tailgating

• Whaling

You are implementing a wireless network and need to make sure that only hosts that have up-to-date antivirus protection can join? Which technology should you implement?

• NAC

• 802.1X

• EAP-TLS

• ACLs

Answer explanation

Network access control (NAC) is used in conjunction with 802.1X and can restrict clients if specific security policies are not met, such as current antivirus and software updates.

What can you use to protect against spoofing of internal IP addresses on the perimeter of your network?

• Access control lists

• Intrusion detection systems

• Transport Layer Security

• Host intrusion detection systems

Answer explanation

Access Control Lists (ACLs) are an effective way to mitigate spoofing of internal IPs from outside the trusted network.

You have several remote workers who enter patient information and require a high level of security. Which technology would best sute teh connectivity for these workers?

• GRE tunnel

• Wireless WAN

• Client-to-site VPN

• Site-to-site VPN

Answer explanation

Since you haveseveral remote workers who telecommute, the best connectivity option is a client-to-site VPN.