2.6 - Network Infrastructure

Which of the following are PINs in relation to the Cisco SAFE Security Reference Architecture? (Choose 3.)

• Secure services

• Internet edge

• Security intelligence

• WAN

• Campus

Which of the following correctly describes a screened subnet?

• A hardware or virtual appliance offered by Cisco Systems that provides web security and content filtering capabilities

• A security mechanism used to detect, deflect, or study unauthorized access attempts or malicious activity within a network or system.

• A separate network segment that acts as a buffer zone between an internal trusted network and an external untrusted network, such as the Internet.

• A security technology designed to monitor network traffic, detect malicious activities or potential security breaches, and take appropriate actions to protect the network.

What is the purpose of a forward proxy server?

• It is a server that is used to detect, deflect, or study unauthorized access attempts or malicious activity within a network or system.

• It is a server in a network that is used to create a separate network segment that acts as a buffer zone between an internal trusted network and an external untrusted network, such as the Internet.

• A server that acts as an intermediary between client devices and the Internet, evaluating communications to ensure that they are valid and forwarding client requests to the Internet on behalf of the client and returning the response back to the client.

• A server that acts as an intermediary between devices on the Internet and servers in a server farm, forwarding requests to the servers on behalf of the devices on the Internet and returning the response back to the devices on the Internet.

Which of the following is used to detect, deflect, or study unauthorized access attempts or malicious activity within a network or system?

• WSA

• IDS/IPS

• Honeypot

• Screened subnet

Which of the following is a security technology that is designed to monitor network traffic, detect malicious activities or potential security breaches, and take appropriate actions to protect the network?

• WSA

• Screened subnet

• IPS

• Honeypot

Which of the following are benefits of virtualization? (Choose two.)

• It enables you to provide relaxed security measures so you do not have to worry about the underlying hardware.

• It enables you to create isolated virtual networks within a single physical network infrastructure.

• It enables you to eliminate all physical equipment from your environment, reducing your overall attack surface.

• It enables you to create virtual sandboxes for testing and analyzing potentially malicious software or suspicious network traffic.

Which of the following is designed to protect organizations from web-based threats, enforce acceptable use policies, and ensure secure and compliant web browsing for users within the network?

• IPS/IDS

• Cloud

• Honeypot

• WSA

• DMZ

You need to gain insight into attack techniques, identify new threats, and understand the tools and methodologies used by attackers as they attempt to attack your network. What would be the BEST solution?

• Implement a WSA and enable content filtering.

• Implement an IPS to monitor network traffic.

• Implement a honeypot to attract and deceive attackers.

• Implement a screened subnet to segment and isolate resources.

You need a solution that will establish a baseline of normal activity and that can then alert you and block traffic when anomalies or suspicious behavior are detected. What would be the BEST solution?

• Implement a WSA.

• Implement an IPS.

• Implement a honeypot.

• Implement a screened subnet.

Which of the following correctly describes a key difference between virtualization and sandboxing in terms of environment persistence?

• Virtualization creates temporary environments, while sandboxing creates permanent ones

• Both virtualization and sandboxing create permanent environments

• Sandboxing typically provides a temporary, disposable environment, while virtualization offers a persistent, long-term environment

• Virtualization and sandboxing always delete data after shutdown