NEW
Font size
WorksheetsSecurity+ Study Guide-04 Securing Your Network
Total questions: 15
Worksheet time: 10mins
A HIDS reported a vulnerability on a system based on a known attack. After researching the alert from the HIDS, you identify the recommended solution and begin applying it.
What type of HIDS is in use?
Network-based
Signature-based
Heuristic-based
Anomaly-based
You are preparing to deploy a heuristic-based detection system to monitor activity. Which of the following would you create first?
BPDU guard
Signatures
Baseline
Honeypot
Lenny noticed a significant number of logon failures for administrator accounts on the organization's public website. After investigating it further, he notices that most of these attempts are from IP addresses assigned to foreign countries. He wants to implement a solution that will detect and prevent similar attacks.
Which of the following is the BEST choice?
Implement a passive NIDS
Block all traffic from foreign countries
Implement an inline NIPS
Disable the administrator accounts
Lisa created a document called password.txt and put the usernames of two accounts with elevated privileges. She then placed the file on her administrator account desktop on several servers.
Which of the following BEST explains her actions?
She can use this file to retrieve the passwords if she forgets them
This file will divert attackers from the live network
The document is a honeyfile
The file is needed by an application to run when the system starts
Your organization is planning to upgrade the wireless network used by employees. It will provide encrypted authentication of wireless users over TLS.
Which of the following protocols are the MOST likely implementing?
EAP
PEAP
WPA2
WPA3
Lisa is creating a detailed diagram of wireless access points and hotspots within your organization. What is another name for this?
Remote access VPN
Wireless footprinting
Channel overlap map
Architectural diagram
You are assisting a small business owner in setting up a public wireless for her customers. She wants to allow customers to access the hotspot without entering a password. Which of the following is the MOST appropriate for this hotspot?
Use Open mode
Use a PSK
A Raspberry Pi device
Rogue AP
APT
A network administrator routinely test the network looking for vulnerabilities. He recently discover a new access point set to open. After connecting to it, he found he was able to access network resources.
What is the BEST explanation for this device?
Evil twin
A Raspberry Pi device
Rogue AP
APT
You are an administrator at a small organization. Homer contacted you today and reported the following:
* He logged on normally on Monday morning and accessed network shares.
* Later, when he tried to access the Internet, a pop-up window with the organization's wireless SSID prompted him to log on.
* After doing so, he could access the Internet but no longer had access to the network shares.
* Three days later, his bank notified him of suspicious activity on his account.
Which of the following indicates the MOST likely explanation for this activity?
An evil twin
A rogue access point
A DDoS attack
A captive portal
Mobile users in your network report that they frequently lose connectivity with the wireless network on some days, but they don't have any problems on other days. You suspect this is due to an attack. Which of the following attacks is MOST likely to cause these symptoms?
Wireless jamming attack
IV attack
Replay attack
Bluesnarfing attack
An attacker can access email contact lists on your smartphone.
What type of attack is this?
Bluesnarfing
Bluejacking
Captive portal
WPS
Your organization plans to implement a connection between the main site and a remote office giving remote employees on-demand access to resources at headquarters. The chief information officer (CIO) wants to use the Internet for this connection.
Which of the following solutions will BEST support this requirement?
Remote access VPN
Site-to-site VPN
Always-on VPN
Full-tunnel VPN
Split-tunnel VPN
Your organization is allowing more employees to work from home, and they want to upgrade their VPN. Management wants to ensure that after a VPN client connects to the VPN server, all traffic from the VPN client is encrypted.
Which of the following would BEST meet this goal?
Split tunnel
Full tunnel
IPsec using Tunnel mode
IPsec using Transport mode
An organization is hosting a VPN that employees are using while working from home. Management wants to ensure that all VPN clients are using up-to-date operating systems and antivirus software.
Which of the following would BEST meet this need?
NAT
NAC
VLAN
DMZ
Your organization recently implemented a BYOD policy. However, management want to ensure that mobile devices meet minimum standards for security before they can access any network resources.
Which of the following would the NAC MOST likely use?
Permanent
Health
RADIUS
Agentless
