Your organization’s security policy requires that confidential data

transferred over the internal network must be encrypted. Which of the

following protocols would BEST meet this requirement?

Maggie needs to collect network device configuration information and

network statistics from devices on the network. She wants to protect the

confidentiality of credentials used to connect to these devices. Which of the

following protocols would BEST meet this need?

You are trying to determine what information attackers can gain about

your organization using network reconnaissance methods via the Internet.

Using a public wireless hot spot, you issue the following command:

nslookup -querytype=mx gcgapremium.com

You then see these results:

Server: UnKnown

Address: 10.0.0.1

Non-authoritative answer:

gcgapremium.com MX preference = 90, mail exchanger =

mx1.emailsrvr.com

gcgapremium.com MX preference = 20, mail exchanger =

mx2.emailsrvr.com

What does this tell you?

Administrators are configuring a server within your organization’s

screened subnet. This server will have the following capabilities when it is

fully configured:

1) It will use RRSIG.

2) It will perform authenticated requests for A records.

3) It will perform authenticated requests for AAAA records.

What BEST identifies the capabilities of this server?

Maggie regularly connects to a remote server named gcga using Secure

Shell (ssh) from her Linux system. However, she has trouble remembering

the password, and she wants to avoid using it without sacrificing security.

She creates a cryptographic key pair to use instead. Which of the following

commands is the BEST choice to use after creating the key pair?

You are tasked with enabling NTP on some servers within your

organization’s screened subnet. Which of the following use cases are you

MOST likely supporting with this action?

Your organization has several switches in use throughout the internal

network. Management wants to implement a security control to prevent

unauthorized access to these switches within the network. Which of the

following choices would BEST meet this need?

Network administrators manage network devices remotely. However, a

recent security audit discovered they are using a protocol that allows them

to send credentials over the network in cleartext. Which of the following

methods should be adopted to eliminate this vulnerability?

Which of the following devices would MOST likely have the following

entries used to define its operation?

permit IP any any eq 80

permit IP any any eq 443

deny IP any any

Your organization’s network looks like the following graphic, and you’ve been asked to verify that Firewall 1 has the correct settings. All firewalls should enforce the following requirements:

1) Use only secure protocols for remote management.

2) Block cleartext web traffic.

You’re asked to verify the rules are configured correctly. Which rule, if any,

should be changed to ensure Firewall 1 meets the stated requirements?

The Springfield Nuclear Power Plant has several stand-alone computers

used for monitoring. Employees log on to these computers using a local

account to verify proper operation of various processes. The CIO of the

organization has mandated that these computers cannot be connected to the

organization’s network or have access to the Internet. Which of the

following would BEST meet this requirement?

You have added another router in your network. This router provides a

path to a limited access network that isn’t advertised. However, a network

administrator needs to access this network regularly. Which of the

following could he do to configure his computer to access this limited

network?

Several servers in your organization’s screened subnet were recently

attacked. After analyzing the logs, you discover that many of these attacks

used TCP, but the packets were not part of an established TCP session.

Which of the following devices would provide the BEST solution to

prevent these attacks in the future?

Your network currently has a dedicated firewall protecting access to a

web server. It is currently configured with only the following two rules in

the ACL:

PERMIT TCP ANY ANY 443

PERMIT TCP ANY ANY 80

You have detected DNS requests and DNS zone transfer requests coming

through the firewall and you need to block them. Which of the following

would meet this goal? (Select TWO. Each answer is a full solution.)