Security Module 5 Network Architecture Review

Which two traits are commonly found in a basic packet-filtering firewall? (Select two.)

• Tracks active connection states

• Filters traffic by IP address and port number

• Filters traffic based on websites visited

• Makes decisions using session information

• Operates without remembering previous packets

Answer explanation

Explanation:
Packet-filtering firewalls are stateless and only look at basic header information like IPs and ports.

Real-World Scenario:
This is like a security guard who only checks your student ID and destination every time you enter, but never remembers you from earlier.

A cloud system is fully updated, yet a researcher discovers a flaw no one has ever reported. What type of vulnerability is this?

• A vulnerability that is brand-new and not yet patched

• A flaw caused by user-generated scripts

• A database query manipulation issue

• A misconfigured network device

Answer explanation

Explanation:
A zero-day vulnerability is unknown to developers and has no existing fix yet.

Real-World Scenario:
It’s like finding a hidden shortcut in a building no one else knew about — and because it hasn’t been secured, it creates risk.

A company now allows personal devices and IoT equipment on the network. Which option best ensures devices are checked and placed into the correct network areas with proper restrictions?

• Use NAC with installed agents, dynamic VLAN assignment, and firewall integration

• Use NAC without firewall coordination

• Rely only on the existing firewall

• Use NAC without dynamic VLANs

Answer explanation

Explanation:
Agent-based NAC with dynamic VLANs and firewall integration provides the strongest control in mixed-device environments.

Real-World Scenario:
It’s like having students scan in at the door, then automatically directing them to the right classroom based on their schedule.

What action best reduces how many ways an attacker could compromise a server?

• Remove unnecessary or unused services

• Install the latest updates

• Add anti-malware software

• Install a host-based intrusion detection tool

Answer explanation

Explanation:
Every running service adds a potential attack point; removing unused ones shrinks the attack surface.

Real-World Scenario:
If a school locks all unused rooms, there are fewer places for someone to hide or sneak in.

Which attack tricks devices into linking the attacker’s MAC address to another device’s IP address?

• MAC spoofing

• Cross-site scripting

• ARP poisoning

• DNS manipulation

Answer explanation

Explanation:
ARP poisoning inserts false ARP entries so traffic is misdirected to the attacker.

Real-World Scenario:
It’s like someone replacing your name on the class attendance list with their own name so your messages get routed to them

Before enforcing an application allow-list, you want to observe traffic and record violations. How should the control software handle applications not on the list?

• Slow unwanted traffic

• Log and flag anything not approved

• Drop all unapproved traffic

• Fully block everything not approved

Answer explanation

Explanation:
Flagging allows administrators to gather data before enforcing stricter rules.

Real-World Scenario:
It’s like monitoring hallway behavior for a week before deciding on new rules.

Devices on different VLANs cannot communicate. What is the MOST likely reason, and what should you do?

• Inter-VLAN routing is not turned on; enable a router or Layer 3 switch

• Devices were assigned the wrong VLAN ID

• The switch is missing VLAN configuration settings

• Switch ports were assigned improperly

Answer explanation

Explanation:
Different VLANs require Layer 3 routing to communicate.

Real-World Scenario:
Think of two separate hallways in a building — without a connecting doorway, students can’t move between them

Which attack overwhelms a switch’s MAC table, causing it to forward frames like a hub?

• Replay attack

• ARP poisoning

• MAC flooding

• MAC spoofing

Answer explanation

Explanation:
MAC flooding fills the table so the switch fails open and broadcasts traffic everywhere.

Real-World Scenario:
Like giving a teacher hundreds of fake student names — they eventually give up and allow everyone into the classroom.

Which security action is considered non-intrusive because it identifies weaknesses without actively attacking the system?

• Vulnerability scanning

• Access control list

• • Penetration testing

• • Keylogger

Answer explanation

Explanation:
Vulnerability scanning reports issues without exploiting them.

Real-World Scenario:
It’s similar to checking doors to see if they’re locked — without actually trying to break in.

What are two advantages of using security templates? (Select two.)

• Fixing a specific software bug

• Ensuring uniform security settings across devices

• Applying software updates

• Blocking harmful websites

• Applying standardized settings to many systems quickly

Answer explanation

Explanation:
Security templates let administrators push consistent settings to multiple devices efficiently.

Real-World Scenario:
It’s like a teacher copying the same rules sheet for every student instead of writing them out individually.