NEW
Font size
WorksheetsSecurity Fundamental
Total questions: 20
Worksheet time: 18mins
Jason knows that his Apple system uses a separate portion of its SoC (system on chip) to
store keys and biometric information. What is this specialized component called?
A TPM
A HSM
A secure enclave
A screened subnet
What important encryption challenge does asymmetric encryption help with by using
public keys?
Evil twins
Collision resistance
Key length
Key exchange
Jackie wants to implement an AAA system for her network. What AAA protocol is commonly used for network devices?
OpenID
SAML
RADIUS
TANGENT
Which of the following is not a common control focused on availability?
Uninterruptible power systems
Redundant Internet connectivity
Disk encryption
Load balancers
How many key-pairs are required for four individuals to communicate securely using
asymmetric encryption?
1
4
8
12
Murali wants to digitally sign a file. What key does he need to sign it?
The recipient’s private key
His private key
The recipient’s public key
His public key
The company that Gary works for has deployed a wireless network. Which of the following
network options is the most secure?
WPA-2 Personal
WPA-3
WPA-2 Enterprise
WPA-4
Julie wants to conduct a replay attack. What type of attack is most commonly associated
With successful replay attacks?
SQL injection
An on-path attack
Brute force
A DDoS
Frank is a network administrator for a small college. He discovers that several machines
on his network are infected with malware. That malware is sending a flood of packets to a
target external to the network. What best describes this attack?
SYN flood
DDoS
Botnet
Backdoor
Users in your company report that someone has been calling their extension and claiming to
be doing a survey for a large vendor. Based on the questions asked in the survey, you sus-
pect that this is a scam to elicit information from your company’s employees. What best
describes this?
Spear phishing
Vishing
War dialing
smishing
John has discovered that an attacker is trying to get network passwords by using software
that attempts a series of passwords with a minor change each time the password is tried.
What type of attack is this?
Dictionary
Rainbow table
Brute force
Session hijacking
What two connection methods are used for most geofencing applications?
Cellular and GPS
USB and Bluetooth
GPS and Wi-Fi
Cellular and Bluetooth
Matt has enabled port security on the network switches in his building. What does port
security do?
Filters by MAC address
Prevents routing protocol updates from being sent from protected ports
Establishes private VLANs
Prevents duplicate MAC addresses from connecting to the network
Nick wants to protect Microsoft Excel files in transit across a network. Which of the follow-
ing is not a method he could use to protect data in transit?
TLS
VPN
File encryption
Disk encryption
Mikayla wants to prevent unauthorized users from plugging network devices into her wired
network. What control would be most effective for this if she needs Ethernet jacks to be
available in publicly accessible spaces for her staff to plug devices in as they move around the
facility, but also wants to ensure those devices are secure?
NAC
Port security
IPS
Jump servers
What layer is Layer 7 in the OSI model?
The physical layer
The application layer
The transport layer
The session layer
Cassandra wants to deploy a network security device that can detect and stop attacks.
What type of network security device should she use if she wants to stop attacks based on
behaviors and threat feeds?
An IDS
A proxy server
An IPS
A jump server
John has deployed three servers that all respond as though they’re the same device to pro-
vide service he runs. What term best describes this configuration?
Load balancing
Clustering
Fail-open
Fail-closed
Which of the following is not a common means of enforcing segmentation on a network?
ACLs
VLANs
Firewalls
Air gaps
Using VLANs is an example of what type of segmentation?
Air gapping
Logical segmentation
Physical segmentation
Physical isolation
