Which of the following is a privately controlled portion of a network that is accessible to some specific external entities?

You want to create a collection of computers on your network that appear to have valuable data but actually store fake data that could entice a potential intruder. Once the intruder connects, you want to be able to observe and gather information about the attacker's methods.

Which feature should you implement?

A honeypot is used for which purpose?

Which of the following devices can apply quality of service and traffic-shaping rules based on what created the network traffic?

You are the office manager of a small financial credit business. Your company handles personal financial information for clients seeking small loans over the internet. You are aware of your obligation to secure clients records, but the budget is an issue for your company.

Which item would provide the BEST security for this situation?

You are implementing security at a local high school that is concerned with students accessing inappropriate material on the internet from the library's computers. The students use the computers to search the internet for research paper content. The school budget is limited.

Which content filtering option would you choose?

Which of the following BEST describes a honeyfile?

Members of the sales team use laptops to connect to the company network. While traveling, they connect their laptops to the internet through airport and hotel networks.

You are concerned that these computers could pick up viruses that could spread to your private network. You would like to implement a solution that prevents the laptops from connecting to your network unless antivirus software and the latest operating system patches are installed.

Which solution should you use?

A proxy server can be configured to do which of the following?

Which of the following terms describes a network device that is exposed to attacks and has been hardened against those attacks?

Of the following security zones, which one can serve as a buffer network between a private secured network and the untrusted internet?

Which of the following is the MOST likely to happen if the firewall managing traffic into the DMZ fails?

You have a company network that is connected to the internet. You want all users to have internet access, but you need to protect your private network and users. You also need to make a web server publicly available to internet users.

Which solution should you use?

How many network interfaces does a dual-homed gateway typically have?

What needs to be configured on a firewall to allow traffic directed to the public resource in the DMZ?

In which of the following situations would you most likely implement a demilitarized zone (DMZ)?

Which of the following is another name for a firewall that performs router functions?

Which of the following is the BEST solution to allow access to private resources from the internet?

Which of the following describes how access control lists can be used to improve network security?

You want to install a firewall that can reject packets that are not part of an active session. Which type of firewall should you use?

Jessica needs to set up a firewall to protect her internal network from the internet. Which of the following would be the BEST type of firewall for her to use?

You have been given a laptop to use for work. You connect the laptop to your company network, use it from home, and use it while traveling.

You want to protect the laptop from internet-based attacks. Which solution should you use?

When designing a firewall, what is the recommended approach for opening and closing ports?

You connect your computer to a wireless network available at the local library. You find that you can access all of the websites you want on the internet except for two.

What might be causing the problem?

Which of the following best describes a stateful inspection?

You want to connect your small company network to the internet. Your ISP provides you with a single IP address that is to be shared between all hosts on your private network. You do not want external hosts to be able to initiate connection to internal hosts. Which type of Network Address Translation (NAT) should you implement?

Which NAT implementation assigns two IP addresses to the public NAT interface, allowing traffic to flow in both directions?

Which device is NAT typically implemented on?

Which problem does NAT help address?

At which layer of the OSI model do NAT routers operate?

How many concurrent connections does NAT support?

Which of the following does a NAT router use to identify where a host is connected on the switch?

A network device is given an IP address of 172.16.0.55. Which type of network is this device on?

You have a small network at home that is connected to the internet. On your home network, you have a server with the IP address of 192.168.55.199/16. You have a single public address that is shared by all hosts on your private network.

You want to configure the server as a web server and allow internet hosts to contact the server to browse a personal website.

What should you use to allow access?

You are the network administrator for a small company that implements NAT to access the internet. However, you recently acquired five servers that must be accessible from outside your network. Your ISP has provided you with five additional registered IP addresses to support these new servers, but you don't want the public to access these servers directly. You want to place these servers behind your firewall on the inside network, yet still allow them to be accessible to the public from the outside.

Which method of NAT translation should you implement for these servers?

A group of salesmen would like to remotely access your private network through the internet while they are traveling. You want to control access to the private network through a single server.

Which solution should you implement?

A VPN is primarily used for which of the following purposes?

Which VPN implementation uses routers on the edge of each site?

Which VPN tunnel style routes only certain types of traffic?

Which IPSec subprotocol provides data encryption?

In addition to Authentication Header (AH), IPsec is comprised of what other service?

Which statement BEST describes IPsec when used in tunnel mode?

Which VPN protocol typically employs IPsec as its data encryption mechanism?

Which of the following VPN protocols is no longer considered secure?

Travis is sending a highly confidential email to Craig that contains sensitive data. Which of the following should Travis implement to ensure that only Craig is able to read the email?

Which of the following types of proxies would you use to remain anonymous when surfing the internet?

As the security analyst for your organization, you have noticed an increase in emails that attempt to trick users into revealing confidential information. Which web threat solution should you implement to protect against these threats?

You are configuring web threat protection on the network and want to block emails coming from a specific sender. Which of the following should be configured?

You are configuring web threat protection on the network and want to prevent users from visiting www.videosite.org. Which of the following needs to be configured?

Which of the following types of proxies can be used for web filtering?

You are configuring web threat protection on the network and have identified a website that contains malicious content. Which of the following should you configure?

Which of the following NAC agent types would be used for IoT devices?

Which of the steps in the Network Access Control (NAC) implementation process occurs once the policies have been defined?

Which of the following defines all the prerequisites a device must meet in order to access a network?

Which of the following applies the appropriate policies in order to provide a device with the access it's defined to receive?

Which of the following NAC agent types creates a temporary connection?

What is Cisco's Network Access Control (NAC) solution called?

You are configuring the security settings for your network. You have decided to configure a policy that requires any computer connecting to the network to run at least Windows 10 version 2004. Which of the following have you configured?

Which of the following NAC agent types is the most convenient agent type?

You are part of a committee that is meeting to define how Network Access Control (NAC) should be implemented in the organization. Which step in the NAC process is this?

Which of the following BEST describes zero-trust security?

You are the security analyst for your organization and have discovered evidence that someone is attempting to brute-force the root password on the web server. Which classification of attack type is this?

An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind of attack?

In which of the following zones would a web server most likely be placed?

Which area of focus helps to identify weak network architecture or design?

Which classification of attack type does packet sniffing fall under?

Which area of focus do public-facing servers, workstations, Wi-Fi networks, and personal devices fall under?

Your network devices are categorized into the following zone types:

No-trust zone

Low-trust zone

Medium-trust zone

High-trust zone

Your network architecture employs multiple VLANs for each of these network zones. Each zone is separated by a firewall that ensures only specific traffic is allowed.

Which of the following is the secure architecture concept that is being used on this network?

Your organization has started receiving phishing emails. You suspect that an attacker is attempting to find an employee workstation they can compromise. You know that a workstation can be used as a pivot point to gain access to more sensitive systems.

Which of the following is the MOST important aspect of maintaining network security against this type of attack?

Which of the following is commonly created to segment a network into different zones?

While developing a network application, a programmer adds functionally that allows her to access the running program without authentication so she can capture debugging data. The programmer forgets to remove this functionality prior to finalizing the code and shipping the application.

Which type of security weakness does this describe?

An attacker was able to gain unauthorized access to a mobile phone and install a Trojan horse so that he or she could bypass security controls and reconnect later.

Which type of attack is this an example of?

In an effort to increase the security of your organization, programmers have been informed they can no longer bypass security during development.

Which vulnerability are you attempting to prevent?

An attacker has gained access to the administrator's login credentials. Which type of attack has most likely occurred?

When setting up a new wireless access point, what is the first configuration change that should be made?

You've just deployed a new Cisco router that connects several network segments in your organization.

The router is physically located in a server room that requires an ID card to gain access. You've backed up the router configuration to a remote location in an encrypted file. You access the router configuration interface from your notebook computer by connecting it to the console port on the router. You've configured the management interface with a username of admin and a password of password.

What should you do to increase the security of this device?

A relatively new employee in the data entry cubical farm was assigned a user account similar to the other data entry employees' accounts. However, audit logs have shown that this user account has been used to change ACLs on several confidential files and has accessed data in restricted areas.

This situation indicates which of the following has occurred?

An attacker has obtained the logon credentials for a regular user on your network. Which type of security threat exists if this user account is used to perform administrative functions?

Travis and Craig are both standard users on the network. Each user has a folder on the network server that only they can access. Recently, Travis has been able to access Craig's folder.

This situation indicates which of the following has occurred?

Which common design feature among instant messaging clients make them less secure than other means of communicating over the internet?

Which type of application allows users to share and access content without using a centralized server?

Which of the following methods did Microsoft introduce in Windows 10 to help distribute OS updates?

Which of the following is a benefit of P2P applications?

What do application control solutions use to identify specific applications?

Which of the following is susceptible to social engineering exploits?

Which of the following is considered a major problem with instant messaging applications?

You are the security analyst for your organization and have recently noticed a large amount of spim on the company mobile devices. Employees rely on the IM app to communicate with each other.

Which of the following countermeasures should you implement?

You have implemented a new application control solution. After monitoring traffic and use for a while, you have noticed an application that continuously circumvents blocking.

How should you configure the application control software to handle this application?

You are implementing a new application control solution.

Prior to enforcing your application whitelist, you want to monitor user traffic for a period of time to discover user behaviors and log violations for later review.

How should you configure the application control software to handle applications not contained in the whitelist?

Which of the following scenarios would typically utilize 802.1x authentication?

You are the network administrator for a city library. Throughout the library are several groups of computers that provide public access to the internet. Supervision of these computers has been difficult. You've had problems with patrons bringing personal laptops into the library and disconnecting the network cables from the library computers to connect their laptops to the internet.

The library computers are in groups of four. Each group of four computers is connected to a hub that is connected to the library network through an access port on a switch. You want to restrict access to the network so that only library computers are permitted connectivity to the internet.

What can you do?

You manage a single subnet with three switches. They are connected to provide redundant paths between the switches.

Which feature prevents switching loops and ensures there is only a single active path between any two switches?

When configuring VLANs on a switch, which type of switch ports are members of all VLANs defined on the switch?

Which of the following best describes the concept of a virtual LAN?

Which of the following switch attacks associates the attacker's MAC address with the IP address of the victim's devices?

Which of the following attacks, if successful, causes a switch to function like a hub?

Which of the following is a typical goal of MAC spoofing?

Which protocol should you disable on the user access ports of a switch?

You are adding switches to your network to support additional VLANs. Unfortunately, the new switches are from a different vendor than the current switches.

Which standard do you need to ensure that the switches are supported?

When configuring VLANs on a switch, what is used to identify which VLAN a device belongs to?

Which 802.1Q priority is IP phone traffic on a voice VLAN tagged with by default?

The IT manager has asked you to create four new VLANs for a new department. As you are going through the VLAN configurations, you find some VLANs numbered 1002-1005. However, they are not in use.

What should you do with these VLANs?

The IT manager has asked you to create a separate VLAN to be used exclusively for wireless guest devices to connect to.

Which of the following is the primary benefit of creating this VLAN?

A virtual LAN can be created using which of the following?

Which of the following is an appropriate definition of a VLAN?

You manage a network that uses a single switch. All ports within your building connect through the single switch.

In the lobby of your building are three RJ-45 ports connected to the switch. You want to allow visitors to plug into these ports to gain internet access, but they should not have access to any other devices on your private network. Employees connected throughout the rest of your building should have both private and internet access.

Which feature should you implement?

You run a small network for your business that has a single router connected to the internet and a single switch. You keep sensitive documents on a computer that you would like to keep isolated from other computers on the network. Other hosts on the network should not be able to communicate with this computer through the switch, but you still need to access the network through the computer.

What should you use for this situation?

You are creating a VLAN for voice over IP (VoIP). Which command should you use?

Which of the following should be configured on the router to filter traffic at the router level?

You've just deployed a new Cisco router that connects several network segments in your organization.

The router is physically located in a cubicle near your office. You've backed up the router configuration to a remote location in an encrypted file. You access the router configuration interface from your notebook computer using an SSH client with the username admin01 and the password P@ssW0rd. You have used the MD5 hashing algorithm to protect the password.

What should you do to increase the security of this device?

Which of the following happens by default when you create and apply a new ACL on a router?

Which type of ACL should be placed as close to the source as possible?

You are deploying a brand new router. After you change the factory default settings, what should you do next?

Which of the following can make passwords useless on a router?

You've just deployed a new Cisco router that connects several network segments in your organization.

The router is physically located in a locked server closet. You use an FTP client to regularly back up the router configuration to a remote server in an encrypted file. You access the router configuration interface from a notebook computer that is connected to the router's console port. You've configured the device with the username admin01 and the password P@ssW0rd. You have used the MD5 hashing algorithm to protect the password.

What should you do to increase the security of this device?

You have configured your ACL to block outgoing traffic from a device with the IP address 192.168.1.52. Which type of ACL have you configured?

Which of the following does a router use to determine where packets are forwarded to?