Font size
WorksheetsTopics 5-8
Total questions: 88
Worksheet time: 1hrs 4mins
Connects to your device and knows your
IP, but not your destination.
Entry Node
Middle Node
Exit Node
Passes data along without knowing the
sender or destination.
Entry Node
Middle Node
Exit Node
Sends the data to its final destination but
doesn’t know your IP.
Entry Node
Middle Node
Exit Node
It was originally created by the US Navy to protect sensitive government communications.
(a)
Who primarily uses Tor today?
Only government agencies
The general public, including journalists, activists, and whistleblowers
Large corporations
Law enforcement agencies
In addition to the general public, who still uses Tor?
Social media influencers
Private businesses
Government agencies
Online gamers
What is one of the main dangers of visiting dangerous websites?
Scamming
Exposure to illegal content
Malware infection
Risk of involvement with illegal activities
TOR or VPN
Data passes through multiple relays (entry, middle, exit nodes) with a new path per session.
TOR
VPN
TOR or VPN
Generally faster, as data is routed through a single server.
TOR
VPN
TOR or VPN
Traceable if the provider logs activity or shares data.
TOR
VPN
TOR or VPN
Usually paid, with some free VPNs offering limited features.
TOR
VPN
TOR or VPN
Slower due to multiple hops through the network.
TOR
VPN
TOR or VPN
Very difficult to trace, as no single node knows the full path of the traffic.
TOR
VPN
TOR or VPN
Free to use.
TOR
VPN
Why do journalists, activists, and whistleblowers use Tor?
To improve internet speed
To access premium websites
To protect their privacy and security from surveillance
To communicate directly with government agencies
What does NAT stands for?
(a)
Source host inside address before translation typically an RFC 1918 address
Inside Local
Outside Local
Inside Global
Outside Global
Multiple private IP addresses are mapped to a pool of public IP addresses. It is used when we know the number of fixed users who want to access the Internet at a given point in time.
Static NAT
Dynamic NAT
PAT (Port Address Translation)
What is NAT (Network Address Translation)?
A process that translates public IP addresses into private IP addresses for internet access.
A mechanism used in routers to allow multiple devices on a local network to share a single public IP address.
A protocol for encrypting data between devices on the same network.
A method to assign static IP addresses to devices in a local network.
What is the primary function of NAT?
Encrypting data for secure transmission
Replacing IP addresses at the boundary of a private network
Monitoring network traffic
Assigning dynamic IP addresses to devices
NAT enables communication between:
Devices within a private network only
Hosts on private networks and hosts on the Internet
Devices in separate private networks
Hosts on the Internet exclusively
Which of the following is replaced by NAT in IP datagrams?
Source and destination MAC addresses
Source and destination IP addresses (and possibly port numbers)
Packet size and type
Encryption key and protocol
What is one reason for using NAT (Network Address Translation)?
To create more IPv6 addresses.
To address the shortage of IPv4 addresses.
To increase the speed of internet connections.
To reduce the number of devices on a network.
Address of outside destination host. The real Internet address.
Inside Local
Outside Local
Inside Global
Outside Global
Address from which source host is known on the Internet.
This is usually the address of the router interface connected to ISP-the actual Internet
address.
Inside Local
Outside Local
Inside Global
Outside Global
Source host address used after translation to get onto the Internet.
This is also the actual Internet address.
Inside Local
Outside Local
Inside Global
Outside Global
One-to-one mapping between a private IP address and a public IP.
Static NAT
Dynamic NAT
PAT (Port Address Translation)
A single private IP address is mapped with a single Public IP
address, i.e., a private IP address is translated to a public IP address.
Static NAT
Dynamic NAT
PAT (Port Address Translation)
Maps a private IP to an available public IP from a pool.
Static NAT
Dynamic NAT
PAT (Port Address Translation)
Many local (private) IP addresses can be translated to a single public IP address. Port numbers are used to distinguish the traffic, i.e., which traffic belongs to which IP address.
Static NAT
Dynamic NAT
PAT (Port Address Translation)
This is also known as NAT overload.
Static NAT
Dynamic NAT
PAT (Port Address Translation)
Direct connection to the internet, no firewall. Best for gaming but less secure.
NAT TYPE 1
(OPEN)
NAT TYPE 2
(MODERATE)
NAT TYPE 3
(STRICT)
Connected through a router with some port restrictions. Good balance between security and connectivity.
NAT TYPE 1
(OPEN)
NAT TYPE 2
(MODERATE)
NAT TYPE 3
(STRICT)
High security, restricted connections, may block some traffic. Potential connectivity issues for peer-to-peer applications.
NAT TYPE 1
(OPEN)
NAT TYPE 2
(MODERATE)
NAT TYPE 3
(STRICT)
What is one benefit of NAT regarding private addresses?
It blocks internet access for private addresses.
It allows only a limited number of private addresses to access the internet.
It allows an unlimited number of private addresses to access a single internet connection.
It converts private addresses into public addresses for better security.
How does NAT help save money?
By reducing data usage.
By avoiding the need for multiple internet connections for multiple devices.
By offering discounts on internet services.
By encrypting your data for free.
Which of the following is NOT an advantage of NAT?
Hiding the internal network's IP address.
Acting as a firewall.
Allowing multiple devices to share a single internet connection.
Increasing the internet speed for each device.
One disadvantage of NAT is that it:
Blocks all outgoing connections.
Blocks some incoming connections.
Enhances the performance of peer-to-peer applications.
Supports all TCP/IP applications seamlessly.
Why can some applications face issues with NAT?
NAT reduces bandwidth.
It changes IP addresses dynamically.
It does not support end-to-end connections required by certain protocols.
It prioritizes multicast routing protocols.
What is the main purpose of a sandbox in cybersecurity?
To increase system performance
To test potentially malicious code in isolation
To speed up code execution
To integrate new software components quickly
Which of the following is a benefit of using a sandbox environment?
It reduces hardware requirements
It allows you to troubleshoot code without affecting the broader system
It eliminates all security risks
It makes the system slower
What is a challenge of using sandboxing environments?
It always detects all threats accurately
It is resource-intensive and can slow down system performance
It requires no technical expertise
It always reduces operational costs
Which type of sandboxing is most suitable for remote work environments?
Appliance-based sandboxing
Hardware sandboxing
Cloud-based sandboxing
Software Sandboxing
Sandboxing is only used for security testing and cannot be applied to functional or performance testing.
True
False
Which of the following is true about appliance-based sandboxing?
It requires external hardware
It requires external hardware
It operates in a local, secure environment
It is more accessible for remote teams
Which of the following is a potential drawback of sandboxing?
It eliminates the need for testing in real environments
It can produce false positives and false negatives
It improves all system functionalities automatically
It requires no computing resources
What is the main advantage of cloud-based sandboxing over appliance-based sandboxing?
Requires no maintenance
Accessible from anywhere, ideal for remote work
Does not require an internet connection
More secure than appliance-based systems
In the context of sandboxing, a 'false positive' refers to:
A legitimate threat that is not detected
A benign action flagged as a security threat
An error that happens due to resource intensity
A security breach caused by sandboxing
Sandboxing is a security practice that isolates code in a (a) to test it without affecting the broader system.
A major benefit of appliance-based sandboxing is:
It is easier to scale and add resources
It requires no internet connection
It can be used in remote work settings
It provides a local, secure testing environment
Which type of sandboxing might be more cost-effective for a small organization?
Appliance-based sandboxing
Hybrid sandboxing
Hardware sandboxing
Cloud-based sandboxing
Match the types of sandboxing environments to their descriptions:
Requires physical hardware and is typically more secure due to local control
Cloud-Based Sandboxing
Appliance-Based Sandboxing
What is one primary reason sandboxing is used in quality assurance?
To replicate end-user environments for testing
To automate debugging processes
To avoid testing compatibility between builds
To guarantee faster deployment to live systems
A sandbox environment completely isolates potentially malicious code from the rest of the system, preventing any negative impact.
True
False
Appliance-based sandboxing is often used for large organizations with significant in-house infrastructure.
True
False
Cloud-based sandboxing typically requires physical hardware and is difficult to scale.
True
False
False positives occur when a sandbox incorrectly identifies a legitimate, safe action as a threat.
True
False
In a (a) -based sandbox, the testing environment is set up on local hardware that is controlled by the organization.
Resource-intensive sandboxing can slow down application performance and increase operational costs.
True
False
In a sandbox environment, which of the following can be controlled to ensure a secure testing process?
The flow of internet traffic to external websites
The interaction of code with live data and systems
The physical access to the server hosting the code
All of the above
Which of the following is an example of a scenario where sandboxing is particularly useful?
Testing a new feature with real customer data in production
Running suspicious code to check if it contains malware
Performing an upgrade on a live system
Delivering final updates to end-users
Appliance-based sandboxing is more flexible and cost-effective than cloud-based sandboxing for most businesses.
True
False
Which of the following is NOT an advantage of using sandboxing in software development?
It helps identify bugs and vulnerabilities before deployment
It allows developers to experiment with new code without affecting the live system
It guarantees 100% protection against malicious code
It provides a safe environment to test the integration of new features
In the context of sandboxing, what does the term "false positive" refer to?
A legitimate code or action flagged as harmful
A malicious code identified as safe
A successful code execution in a test environment
A sandbox that runs without any security flaws
Sandboxing can prevent malicious software from affecting other systems, but it does not guarantee complete protection against all threats.
True
False
Sandbox environments are primarily used to test new software that is already considered secure and stable.
True
False
Sandboxing is useful for testing potentially unsafe code in isolation before it is integrated into the production environment.
True
False
Sandboxing environments can help ensure that all new code is compatible with existing systems before being deployed in production.
True
False
False (a) is a common challenge when working with sandbox environments, as it can result in security gaps or missed threats.
What does VPN stand for?
Virtual Protection Network
Virtual Private Network
Verified Private Network
Variable Protection Network
Which of the following is a benefit of using a VPN?
Reducing your internet bill
Accessing content restricted to specific countries
Increasing the speed of your local network
Disabling cookies in web browsers
Which VPN type is designed to allow employees to access corporate resources remotely?
Site-to-Site VPN
Remote Access VPN
Cloud VPN
Mobile VPN
What is the primary purpose of encryption in a VPN?
To speed up data transfer
allow remote access
To make data unreadable to unauthorized users
To enable data storage
What kind of VPN would be most useful for connecting
two office networks in different cities?
Remote Access VPN
Mobile VPN
Site-to-Site VPN
Cloud VPN
Which VPN type is ideal for users who are constantly
moving between networks, like from cellular to Wi-Fi?
Remote Access VPN
Mobile VPN
Site-to-Site VPN
Cloud VPN
Which protocol is known for being open-source and
highly secure, commonly used in VPNs?
HTTP
OpenVPN
FTP
SMTP
Which encryption standard is often used in VPNs for
secure data transmission?
AES-256
DES
MD5
SHA-1
Which of the following is NOT a benefit of using a VPN?
Data encryption
Increased browsing speed
IP address masking
Bypassing geo-restrictions
A Site-to-Site VPN that connects different branches of
the same company is called a(n) ____.
Intranet-based VPN
Extranet-based VPN
Internet-based VPN
Cloud-based VPN
What is network traffic?
The flow of vehicles on a network
The movement of data packets across a network
The movement of people through a network of roads
A type of cybersecurity threat
Which of the following is an example of dynamic bandwidth allocation?
Allocating equal bandwidth to all users regardless of usage
Adjusting bandwidth based on real-time demand
Reserving bandwidth exclusively for video conferencing
Allocating a fixed amount of bandwidth to each device
Sharing file through the BitTorrent protocol
(a)
Network of seeders and peers
(a)
Peers who have pieces but don't seed
(a)
Percentage of a file available for download
(a)
Amount seeded divided by amount downloaded
(a)
Server tracking the swarm
(a)
Redirecting communication request to a different port.
(a)
