WorksheetsN10-007 uC Security
Total questions: 62
Worksheet time: 33mins
SNMP uses a series of objects to collect information about a managed device. The structure, similar to a database, containing these objects is referred to as what?
LSA
RIB
MIB
DUAL
Which of the following best defines an IDS sensor?
An IDS sensor secures communication between two sites over an untrusted network.
An IDS sensor defines a set of rules dictating which types of traffic are permitted or denied as that traffic enters or exits a firewall interface.
An IDS sensor scans, audits, and monitors the security infrastructure for signs of attacks in progress.
An IDS sensor enables external clients to access data on private systems without compromising the security of the internal network as a whole.
Which of the following best defines a firewall?
A firewall secures communication between two sites over an untrusted network.
A firewall defines a set of rules dictating which types of traffic are permitted or denied as that traffic enters or exits a firewall interface.
A firewall receives a copy of traffic being analyzed, can recognize the signature of a well-known attack, and respond appropriately.
A firewall sits in-line with traffic being analyzed, can recognize the signature of a well-known attack, and respond appropriately.
One error occurred during the transmission of 8 bits. What is the BER?
.25
0125
025
.125
A toner probe is also known as what?
OTDR
TDR
Fox and hound
Tip and ring
Which of the following tools best helps you determine which wires on a punch down block connect back to a specific user's office?
Protocol analyzer
Loopback plug
Toner probe
Punch down tool
What is the name of the physical security device that is credit card sized and allows a user to authenticate onto a network?
Bioidentification
Smart card
SmartID
Biometrics
Which of the following security threats can infect a system or propagate to other systems without any intervention from an end user?
Worm
Virus
Keylogger
Trojan horse
Which of the following can send an alert to a network administrator if humidity levels in a server farm exceeds a configured threshold?
Environmental monitor
TDR
OTDR
Multimeter
What type of software application should network administrators routinely use to verify the security of their network and check for any weaknesses?
Honeypot
Vulnerability scanner
Profile scanner
Posture monitor
Antivirus
Which of the following protocols are most commonly used to provide security for an HTTPS connection? (Choose two.)
L2TP
TLS
PPTP
SSL
Which of the following remote access security technologies is a TCP-based protocol used to communicate with an AAA server and encrypts an entire authentication packet, rather than just the password?
RADIUS
TACACS+
CHAP
Kerberos
Which of the following is a vulnerability scanner product from Tenable Network Security®?
Honeynet
Nmap
Nessus®
Honeypot
What is the name of the physical security device that's commonly grouped with keys and can be used to gain access to a network or a physical location?
Smart cards
Access token
Key fob
SmartID
Which of the following is a system designed to appear as an attractive attack target?
Honeynet
Nmap
Nessus®
Honeypot
While an IPsec tunnel is being established, the peers at each end of the tunnel determine whether or not a certain feature should be used. This feature makes sure that a session key will remain secure, even if one of the private keys used to derive the session key becomes compromised. What is the name of this feature?
Diffie-Hellman (DH)
Security association (SA)
Internet Security Association and Key Management Protocol (ISAKMP)
Perfect forward secrecy (PFS)
Which of the following security threats is a piece of code (for example, a program or a script) that infects a system, because an end-user executed a program?
Worm
Trojan horse
Keylogger
Virus
Identify the Simple Network Management Protocol (SNMP) component that is a piece of software, which runs on a managed device (for example, a server, router, or a switch).
MIB
SNMP agent
SNMP manager
SNMP trap
Which two of the following are firewall inspection types?
Hardware
Packet filtering
Stateful
Software
Which two of the following virtual private network (VPN) protocols lack native security features?
L2TP
SSL
TLS
PPTP
Which of the following protocols can be used to remotely connect to and control the desktop of a Microsoft Windows® computer?
WINS
RTP
RDP
SNMP
Identify the Simple Network Management Protocol (SNMP) component that is also known as an NMS.
MIB
SNMP trap
SNMP manager
SNMP agent
Which of the following security threats is a program that appears to be for one purpose (for example, a game), but secretly performs another task (for example, collecting a list of contacts from an end-user's e-mail program)?
Worm
Virus
Keylogger
Trojan horse
Which of the following is a symmetric encryption algorithm available in 128-bit, 192-bit, and 256-bit key versions?
TKIP
RSA
3DES
AES
A notification that a specific operation failed to complete successfully is classified as what syslog severity level?
Informational (6)
Warnings (4)
Errors (3)
Critical (2)
Which of the following security solutions consists of software running on a host to protect that host against a collection of well-known attacks?
NIPS
L2F
NIDS
HIPS
Which two of the following protocols are commonly used to communicate with an AAA server?
Kerberos
TACACS+
RDP
RADIUS
What are the three levels of security associated with events appearing in Microsoft Windows® application logs?
Error
Critical
Warning
Information
A dedicated network device that acts as an intrusion prevention system (IPS) sensor is called a
NIPS
HIPS
HIDS
NIDS
Which of the following is a Microsoft Windows® log that would report events such as a failed login attempt?
Syslog
Application
Security
System
Which of the following is a set of communication rules that govern the secure implementation of a VPN?
IPSec
PPTP
DHCP
TLS
Which two of the following virtual private network (VPN) tunneling protocols can be used to provide security for HTTPS?
L2TP
PPTP
TLS
SSL
Which of the following remote access security technologies is a UDP-based protocol used to communicate with an AAA server and does not encrypt an entire authentication packet, but only encrypts the password?
Kerberos
RADIUS
TACACS+
CHAP
Which component of an SNMP solution is a piece of software, which runs on a managed device (for example, a server, router, or a switch)?
SNMP trap
MIB
SNMP agent
SNMP manager
Which of the following IDS/IPS detection methods could trigger an alarm if a certain string of bytes, in a certain context, is observed?
Non-statistical anomaly detection
Statistical anomaly detection
Policy-based detection
Signature-based detection
Which of the following is a Microsoft Windows® log that would report events related to software applications running on the underlying operating system?
Application
Security
System
Syslog
Which of the following user authentication technologies is used by Microsoft Windows® clients to remotely access a Microsoft Windows® network?
802.1X
PKI
RAS
MS-CHAP
Which of the following remote access security technologies performs authentication through a three-way handshake (that is, challenge, response, and acceptance messages) between a server and a client, where the three-way handshake allows a client to be authenticated without sending credential information across a network?
CHAP
TACACS+
RADIUS
Kerberos
Which of the following IDS/IPS detection methods watches network traffic patterns over a period of time and dynamically builds a baseline?
Non-statistical anomaly detection
Signature-based detection
Policy-based detection
Statistical anomaly detection
While an IPsec tunnel is being established, which of the following acts as an agreement between the two IPsec peers about the cryptographic parameters to be used in the ISAKMP session?
Security association (SA)
Diffie-Hellman (DH)
Perfect forward secrecy (PFS)
Secure sockets layer (SSL)
Which of the following remote access technologies is a Citrix Systems® proprietary protocol that allows applications running on one platform (for example, Microsoft Windows®) to be seen and controlled from a remote client, independent of the client platform (for example, UNIX)?
ICA
PPP
RDP
RAS
Which of the following IDS/IPS detection methods allows an administrator to define what normal traffic patterns are supposed to look like?
Signature-based detection
Policy-based detection
Statistical anomaly detection
Non-statistical anomaly detection
Which Syslog severity level produces highly detailed information that is typically used for troubleshooting purposes?
4
1
0
7
Which of the following specifies how authentication is performed by IEEE 802.1X?
SSO
EAP
TFA
Multifactor authentication
While an IPsec tunnel is being established, which of the following securely establishes a shared secret key, over the unsecured medium?
Perfect forward secrecy (PFS)
Diffie-Hellman (DH)
Security association (SA)
Internet Security Association and Key Management Protocol (ISAKMP)
Which of the following is an IPSec protocol that provides authentication and integrity services but does not support encryption?
ESP
AH
IKE Phase II
IKE Phase I
What feature allows a firewall to permit traffic to flow from a trusted network (for example, a corporate intranet) to an untrusted network (for example, the Internet) and then allow return traffic for that session, while blocking sessions initiated on the untrusted network?
Implicit deny all instruction
Demilitarized zone
Stateful inspection
Packet filtering
Which of the following is a publicly available network security scanner?
Honeypot
Honeynet
Nmap
Access control lists
Which of the following requires two types of authentication (but no more) from a user seeking admission to a network?
EAP
SSO
Multifactor authentication
TFA
Which of the following security attacks occurs when an attacker exploits a known vulnerability in an application (for example, an error in an application that allowed that application to write to an area of memory dedicated to a different application), which could cause another application to crash?
Packet sniffing attack
Buffer overflow attack
Social engineering attack
Man-in-the-middle attack
Which of the following user authentication protocols added two-way authentication to an earlier version of the protocol?
802.1X
PKI
RAS
MS-CHAP
What type of authentication credentials are used by SNMPv2c?
SHA
Username/password
Community strings
MD5
Which of the following security attacks leverages the PORT command?
FTP bounce attack
Smurf attack
DoS attack
DDoS attack
Which of the following remote access technologies is a common Layer 2 protocol offering features such as: multilink interface, looped link detection, error detection, and authentication?
PPP
RDP
RAS
ICA
Which of the following security attacks uses Internet Control Message Protocol (ICMP) traffic with the intended victim's spoofed source IP, directed to a subnet, to flood a target system with Ping replies?
DoS attack
Smurf attack
FTP bounce attack
DDoS attack
Identify the broad categories of SNMP message types. (Choose three.)
Set
Trap
Get
Put
Which of the following user authentication technologies uses digital certificates and a certificate authority (CA)?
802.1X
MS-CHAP
RAS
PKI
Which of the following remote access security technologies is a client-server authentication protocol and uses the concept of a trusted third party (that is, a Key Distribution Center) that hands out tickets that are used instead of a username and password combination?
TACACS+
CHAP
Kerberos
RADIUS
Which of the following is a continually changing document that dictates a set of guidelines for network use?
Syslog report
QoS policy
Security policy
Post-mortem report
What is a snapshot of performance on a typical usage level for the network?
Incremental report
SLA
Baseline
Differential report
What Microsoft Windows application enables you to view a variety of log types, including application, security, and system logs?
Control Panel
Event Viewer
Performance Monitor
Microsoft Management Console
What is a best practice to prevent you from damaging a circuit board with static from your body?
Apply antistatic spray to the circuit board.
Ground the circuit board.
Stand on a carpeted floor (or a rug) when working on a circuit board to provide insulation between your body and an electric ground potential.
Wear an ESD wrist strap.
UPS
