Network Security Quiz

Which component is designed to protect against unauthorized communications to and from a computer?

• security center

• port scanner

• antimalware

• antivirus

• firewall

Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

• RouterA(config)# login block-for 10 attempts 2 within 30

• RouterA(config)# login block-for 30 attempts 2 within 10

• RouterA(config)# login block-for 2 attempts 30 within 10

• RouterA(config)# login block-for 30 attempts 10 within 2

What is the purpose of the network security accounting function?

• to require users to prove who they are

• to determine which resources a user can access

• to keep track of the actions of a user

• to provide challenge and response questions

What type of attack may involve the use of tools such as nslookup and fping?

• access attack

• reconnaissance attack

• denial of service attack

• worm attack

Match each weakness with an example. (Not all options are used.)

Match the type of information security threat to the scenario. (Not all options are used.)

Which example of malicious code would be classified as a Trojan horse?

• malware that was written to look like a video game

• malware that requires manual user intervention to spread between systems

• malware that attaches itself to a legitimate program and spreads to other programs when launched

• malware that can automatically spread from one system to another by exploiting a vulnerability in the target

What is the difference between a virus and a worm?

• Viruses self-replicate but worms do not.

• Worms self-replicate but viruses do not.

• Worms require a host file but viruses do not.

• Viruses hide in legitimate programs but worms do not.

Which attack involves a compromise of data that occurs between two end points?

• denial-of-service

• man-in-the-middle attack

• extraction of security parameters

• username enumeration

Which type of attack involves an adversary attempting to gather information about a network to identify vulnerabilities?

• reconnaissance

• DoS

• dictionary

• man-in-the-middle