Font size
WorksheetsNetwork and Security Foundations
Total questions: 66
Worksheet time: 2hrs 6mins
A switch forwards data only to the port that connects to the destination device. It knows which port to forward it to based on which value?
Conf value
IP address
Port Number
MAC Address
Which type of fiber cable is normally used to connect two buildings that are several miles apart?
Single-mode
Fibre Channel mode
Multi-mode
Dual-mode
Your company purchases a new bridge that filters packets based on the MAC address of the destination computer.
On which layer of the OSI model is this device functioning?
Physical
Data Link
Network
Session
Which of the following hardware devices forwards a signal out all connected ports without examining the frame or packet contents?
Switch
Modem
Hub
Bridge
Which command will show the hops that the packets passes through to get to its destination?
ARP
Route
NSLOOKUP
TRACERT
Which network command would produce the following output?
Ping
ifconfig
whois
nslookup
Nancy is responsible for the administration of many different servers in her company. Which one of the following commands can she use to gain command-line administrative access to her Linux servers in a secure manner? (Choose 2)
Telnet
SSH
SCP
RDP
Tom would like to determine what network ports are open on a newly commissioned server. Which one of the following tools is best suited for that task?
Nmap
Wireshark
Firewall Logs
SCCM
Which of the commands would produce the following output?
tracert
ping
traceroute
nslookup
Diana is investigating suspicious software installed on a machine and would like to identify any network connections made by that machine.
Which one of the following tools can best assist her with this task by running it on the target machine?
Netstat
Snort
Netcat
Nmap
Which of the following geographic network types are typically contained within city or county limits?
Personal Area Network
Wide Area Network
Metropolitan Area Network
Local Area Network
Two or more computers connected together over a wide geographical area (e.g. county, country, globe). What type of network is this?
LAN
WAN
SAN
WLAN
Which network is this? I allow wireless computers to communicate with each other in the same building.
WLAN
LAN
PAN
SAN
You have a small network that uses a switch to connect multiple devices. Which physical topology are you using?
Star
Mesh
Ring
Bus
Your manager has asked you to implement a wired network infrastructure that will accommodate failed connections.
Which of the following network topologies should you implement?
Ring
Bus
Star
Mesh
Which of the following topologies connects each device to a neighboring device?
Bus
Star
Mesh
Ring
Which of the following topologies connects all devices to a single cable?
Star
Mesh
Bus
Ring
You have implemented a network where each device provides all other devices on the network with access to shared files.
What type of network do you have?
Polling
Multiple Access
Peer-to-Peer
Client-server
Which of the following cloud computing solutions will deliver software applications to a client either over the internet or on a local area network?
PaaS
SaaS
IaaS
Which of the following describes a public cloud?
Provides cloud services to a single organization
Allows cloud services to be shared by several organizations
Integrates one cloud service with other cloud services
Provides cloud services to just about anyone
You were recently hired by a small start-up company. The company has no plans to setup their own datacenter. You have been asked to find a cloud service that would provide several physical servers or virtual machines that the company would be able to install whatever operating systems and applications they need.
Which cloud service model should you use?
Infrastructure as a Service
Platform as a Service
Software as a Service
Which of the following describes a private cloud?
Allows cloud services to be shared by several organizations
Provides cloud services to just about anyone
Integrates one cloud service with other cloud services
Provides cloud services to a single organization
James is working with his organization’s platforms team to select a virtualization approach for use on test systems managed by developers. He is looking for a hypervisor that can run on top of the Windows operating system already installed on their laptops. What type of hypervisor is James looking for?
Type 1
Type 4
Type 2
Type 3
Barry is working with his organization’s platforms team to select a virtualization approach for use in their data center. To provide stronger security, he would like to select a hypervisor that runs directly on bare metal hardware without an intervening host operating system.
What type of hypervisor should he choose?
Type 2
Type 1
Type 3
Type 4
In what type of attack does the attacker attempt to send unauthorized commands to a back-end database through a web application?
Pass-the-hash
Buffer overflow
CSRF
SQL Injection
Gary is participating in a cybersecurity exercise. His job is to defend the network against attack. What role is Gary playing?
Red team
Blue team
Black team
White team
Kyle is concerned that an attacker is probing his network and would like to use a decoy system to attract the attacker and analyze his or her activity. What type of tool would best meet Kyle’s needs?
Honeypot
Sinkhole
Jump box
Darknet
Which of the following strategies involves sharing some of the risk burden with someone else, such as an insurance company?
Risk deterrence
Risk transference
Risk acceptance
Risk mitigation
Risk avoidance
Which of the following threat actors seeks to defame, shed light on, or cripple an organization or government?
Black Hat
Insider Threat
Script Kiddie
White Hat
Which of the following are examples of social engineering? (Choose two)
Impersonation
War dialing
Phishing
Wiretapping
Which attack floods a system with traffic in order to prevent legitimate activities or transactions from occurring?
Brute force attack
Privilege escalation
Denial of service attack
Man-in-the-middle attack
Which of the following describes a man-in-the-middle attack?
Malicious code is planted on a system, where it waits for a triggering event before activating.
A false server intercepts communications from a client by impersonating the intended server.
A person convinces an employee to reveal their login credentials over the phone.
An IP packet is constructed that is larger than the valid size.
A cybersecurity specialist is asked to identify the potential criminals known to attack the organization. Which type of hackers would the cybersecurity specialist be least concerned with?
Gray hat hackers
Black hat hackers
Script kiddies
White hat hackers
What type of attack targets an SQL database using the input field of a user?
Buffer overflow
SQL injection
XML injection
Cross-site scripting
Cynthia is working on her Western Governors University application online, when the admissions website crashes. She is unable to finish her application on time.
What part of the CIA Triad is affected?
Confidentiality
Authentication
Availability
Integrity
Kim has taken her Network and Security Foundation exam and is waiting to get her results by email. By accident, Kim’s results are sent to Karen.
What part of the CIA Triad is affected?
Confidentiality
Authorization
Availability
Integrity
In cybersecurity, what does CIA stand for?
Confidentiality, Integrity, Availability
Central Intelligence Agency
Confidentiality, Integrity, Accessibility
Cybersecurity Investigation Agency
A company is concerned with traffic that flows through the network. There is a concern that there may be malware that exists that is not being blocked or eradicated by antivirus. What technology can be put in place to detect potential malware traffic on the network?
IDS
firewall
Honeypot
NAC
If it detects a threat, an IPS can:
Record the details of the threat
Report the threat to security admins
Take preventative action to stop the threat
All of the above
You want to install a firewall that can reject packets that are not part of an active session. Which type of firewall should you use?
Circuit-level
Application-level
Packet filtering
Stateful Inspection
Which of the following filters based on application, program or service?
Packet Filtering Firewall
Application Level Firewall
Stateful Inspection Firewall
Intrusion Prevention System
The restrictions most commonly implemented in packet-filtering firewalls are based on ____.
IP source and destination address
Direction (inbound or outbound)
TCP or UDP source and destination port requests
All of the above
Tom would like to protect against an intruder tapping his network cable. Which cable provides the best protection against this type of attack?
Twisted pair
Coaxial
Plenum
Fiber
Sue is inspecting her application logs and finds log records that indicate attackers may be attempting to use SQL injection attacks to access the database underlying her application.
What is the most effective security control that Sue can apply to address this risk? (Choose 2)
Stateful firewall
Input validation
IPS
Reverse Proxy System
Brian would like to secure his website. Which one of the following protocols is the best choice for encrypting communication between a website and its users?
TLS
AES
3DES
TKIP
Alice would like to send a message to Bob using an asymmetric cryptography algorithm. What key should she use to encrypt the message?
Bob’s public key
Bob’s private key
Alice’s private key
Alice’s public key
Bob receives a message from Alice that she sent using an asymmetric cryptography algorithm. What key should he use to decrypt the message?
Alice’s public key
Bob’s private key
Alice’s private key
Bob’s public key
What encryption algorithm uses the same pre-shared key to encrypt and decrypt data?
hash
asymmetric
one-time pad
symmetric
In a hybrid cloud, data is traveling over the wide area network (WAN) connection between the private and public clouds is known as?
Data at Rest
Data in Transit
Data in Use
Data at rest provides an additional layer of protection by keeping data protected and inaccessible to the attacker if even the system is physically stolen.
True
False
In a private cloud companies such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform are responsible for the physical data center security concerns.
True
False
Amazon Web Services, Microsoft Azure, and Google Cloud Platform are responsible for the physical data center security and most the physical hardware security concerns in which cloud deployment?
Private Cloud
Hybrid Cloud
Public Cloud
Community Cloud
What are two states of data? (Choose 2)
Suspended
At rest
In-transit
Encrypted
In-cloud
Which one of the following wireless encryption protocols is considered the weakest and recommended to no longer use?
WEP
WEP2
WPA
WPA2
Which of the following would provide the most effective security for a small wireless network?
WPA
WPA2
WEP
SSID
Which of the following wireless security protocols has been discouraged in favor of newer standards due to known vulnerabilities resulting from implementation flaws?
EAP
AES
WPA2
WEP
A wireless deauthentication attack is an example of which type of attack:
Denial of service attack
Downgrade attack
Brute-force attack
Cryptographic attack
With regards to AAA, ________ defines what the user can access and in what manner.
Authentication
Authorization
Accounting
Availability
With regards to AAA, _______ confirms that the user is how he or she claims to be.
Authorization
Accounting
Authentication
Accessibility
What should we be concerned with keeping up to date?
Office Suites
Browser plugins
Anti-virus
All of these
What are two ways to protect a computer from malware? (Choose two.)
Empty the browser cache.
Use antivirus software.
Delete unused software.
Keep software up to date.
Defragment the hard disk.
