WorksheetsSec + CH.3 Pre-Assessment
Total questions: 7
Worksheet time: 5mins
Lisa uses a Linux system to regularly connect to a remote server named
gcga with a secure ssh connection. However, the ssh account has a complex
password, and she wants to avoid using it without sacrificing security.
Which of the following commands would she use as a FIRST step when
creating a passwordless login with the remote system?
ssh-copy-id -i ~.ssh/id_rsa.pub lisa@gcga
chmod 644 ~/.ssh/id_rsa
ssh-keygen -t rsa
ssh root@gcga
Your organization plans to deploy a server in the screened subnet that
will perform the following functions:
Identify mail servers
Provide data integrity
Prevent poisoning attacks
Respond to requests for A and AAAA records
Which of the following will BEST meet these requirements?
DNS
DNSSEC
TLS
ESP
Your organization has added a hot site as shown in the graphic. All firewalls should enforce the following requirements:
1) Use only secure protocols for remote management
2) Block cleartext web traffic
Users in the hot site are unable to access websites in the Internet. The
following graphic shows the current rules configured in Firewall 3. You’re asked to verify the rules are configured correctly. Which rule, if any, should be changed in Firewall 3?
HTTPS Outbound
HTTP Outbound
DNS
Telnet
SSH
Bart incorrectly wired a switch in your organization’s network. It
effectively disabled the switch as though it was a victim of a denial-of-
service attack. Which of the following should be done to prevent this
situation in the future?
Install an IDS.
Only use Layer 2 switches.
Install SNMPv3 on the switches.
Implement STP or RSTP.
Maggie is a sales representative for a software company. While in a
coffee shop, she uses her laptop to connect to the public Wi-Fi, check her
work emails, and upload details of a recent sale. Which of the following
would she use to prevent other devices on the public network from
accessing her laptop? (Choose the BEST two choices.)
TPM
HSM
Firewall
DLP
VPN
Your organization wants to combine some of the security controls used
to control incoming and outgoing network traffic. At a minimum, the
solution should include stateless inspection, malware inspection, and a
content filter. Which of the following BEST meets this goal?
VLAN
NAT
UTM
DNSSEC
WAF
Administrators are deploying a new Linux server in the screened subnet.
After it is installed, they want to manage it from their desktop computers
located within the organization’s private network. Which of the following
would be the BEST choice to meet this need?
Forward proxy server
Reverse proxy server
Web application firewall
Jump server
