Network Device Vulnerabilities

Which of the following protocols should be disabled on a critical network device such as a router?

• TCP/IP

• ICMP

• IPX/SPX

• RIP

What feature of a network device, such as a router or switch, can control access permissions for network data?

• DNS protocol

• Firmware update

• Firewall

• Access control lists

Which zone of a network security topology should contain your Internet servers, such as web, FTP, and e-mail servers?

• DMZ

• VLAN

• VPN

• Intranet

Which network service allows internal addresses to be hidden from outside networks and allows several internal hosts to use the same external address?

• NAT

• VPN

• VLAN

• IP spoofing

What networking technology would be used to divide an internal network into smaller, more manageable, logical segments?

• NAT

• Tunneling

• VPN

• VLAN

You have been tasked to cable the network backbone of a new section of a manufacturing plant. Which of the following is the most secure type of cable to use for this environment?

• 10BaseT

• Cat3

• Cat5

• Fiber-optic

During a DoS attack, a network administrator blocks the source IP with the firewall, but the attack continues. What is the most likely cause of the problem?

• The DoS worm has already infected locally.

• The attack is coming from multiple, distributed hosts.

• A firewall can’t block DoS attacks.

• Anti-virus software needs to be installed on the target server.

A port scan has been performed on your e-mail server. Which of the following services and ports should be disabled?

• TCP port 21

• TCP port 25

• TCP port 110

• TCP port 143

Which type of network attack results in an unauthorized user being able to capture and manipulate network data as it passes through the network?

• SYN flood

• Spoofing

• DDoS

• Man-in-the-middle

If not required, which of the following services or protocols should be disabled on a router?

• UDP

• TCP/IP

• SNMP

• ACL