Building and Securing a Small Network

Which component is designed to protect against unauthorized communications to and from a computer?

• • security center

• • antimalware

• • antivirus

• • firewall

Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

• • RouterA(config)# login block-for 10 attempts 2 within 30

• RouterA(config)# login block-for 30 attempts 2 within 10

• RouterA(config)# login block-for 30 attempts 10 within 2

Answer explanation

COMMAND FORMAT:

login block-for <block-time> attempts <attempt-limit> within <time-period>

What is the purpose of the network security accounting function?

• to require users to prove who they are

• to determine which resources a user can access

• to keep track of the actions of a user

• to provide challenge and response questions

What type of attack may involve the use of tools such as nslookup and fping?

• access attack

• worm attack

• reconnaissance attack

• denial of service attack

Answer explanation

A Reconnaissance Attack is like the “scouting phase” of hacking. The attacker tries to gather as much information as possible about the target network before launching an actual attack.

• nslookup → Used to query DNS and find out IP addresses or domain names.

• fping → A faster version of ping used to scan networks for active devices.

Match each weakness with an example:

security policy weakness

• The network administrator did not fully consider the implications of unauthorized users accessing the network.

• When implementing an access list on a router, a network engineer did not filter a type of malicous traffic.

• A network engineer is examining the operating system of a network device for vulnerabilities.

Match each weakness with an example:

configuration weakness

• The network administrator did not fully consider the implications of unauthorized users accessing the network.

• When implementing an access list on a router, a network engineer did not filter a type of malicous traffic.

• A network engineer is examining the operating system of a network device for vulnerabilities.

Match each weakness with an example:

technological weakness

• The network administrator did not fully consider the implications of unauthorized users accessing the network.

• When implementing an access list on a router, a network engineer did not filter a type of malicous traffic.

• A network engineer is examining the operating system of a network device for vulnerabilities.

Match the type of information security threat to the scenario:

information theft

• installing virus code to destroy surveillance recordings for certain days

• pretending to be someone else by using stolen information to apply for a credit card

• preventing users from accessing a website by sending a large number of link requests in a short period

• obtaining trade secret documents illegally

• cracking the password of an administrator account on a server

Match the type of information security threat to the scenario:

identity theft

• installing virus code to destroy surveillance recordings for certain days

• pretending to be someone else by using stolen information to apply for a credit card

• preventing users from accessing a website by sending a large number of link requests in a short period

• obtaining trade secret documents illegally

• cracking the password of an administrator account on a server

Match the type of information security threat to the scenario:

data loss

• installing virus code to destroy surveillance recordings for certain days

• pretending to be someone else by using stolen information to apply for a credit card

• preventing users from accessing a website by sending a large number of link requests in a short period

• obtaining trade secret documents illegally

• cracking the password of an administrator account on a server