In the 802.11i/EAP, the AP/Access Point is given the following name:

In the 802.11i/EAP, the client station is given the following name:

In the following ACL table, the firewall will:

To allow outgoing DNS queries, which iptables rule would you typically add?

In the context of firewalls, a set of rules that define which network traffic is allowed or denied is commonly referred to as a(n):

In the following ACL table, the firewall will:

WPA protocol uses the following Integrity check:

SSL stage in which the two entities use their certificates and private keys to authenticate each other and exchange shared secrets:

In the following ACL table, the firewall will:

With respect to IPSec, which field is used to prevent the play-back attack?

Related to the IPSec diagrams below (with data flowing from left to right): the source IP address in the new IP header is:

During an authentication challenge, a server might issue a unique value to a client, requiring the client to manipulate it in a specific way to prove its identity. This server-generated value is often called a:

The base64 encoding works by encrypting:

The aspect of security where the sender or receiver wants to ensure the message is not altered (in transit or afterwards) is called:

Which iptables rule would allow incoming TCP traffic on port 443 (HTTPS) from the entire subnet 192.168.1.0/24?

SSL provides:

One of the famous AAA server protocols:

Within an SSL/TLS session, a mechanism exists to ensure that the order of transmitted data records is maintained and protected against manipulation. This protection against record reordering is achieved by incorporating:

Given the encryption formula c(i)=ks(i)•m(i), the original message m(i) can be recovered through which decryption process?

In the following ACL table, the firewall will:

Which of the following OpenSSL commands is used to generate a new RSA private key?

WPA protocol uses the following encryption:

Which of the following protocols is commonly used by DNS?

One of the famous AAA server protocols:

Ready for the Security+ Exam

With stateful packet filters, a packet is forwarded/dropped based on:

With respect to IPSec, which fields is/are sent in the clear (un-encrypted):

SSL stage in which data to be transferred is broken into a series of records and transmitted in encrypted form:

The most prevalent and crucial mode of operation for the Encapsulating Security Payload (ESP) protocol within IPSec is:

To prevent attackers from manipulating the order of data segments within an SSL/TLS communication session, the protocol incorporates:

When Wireless Equivalent Privacy (WEP) is employed for Access Points (APs), how is the Initialization Vector (IV) transmitted?

A basic type of firewall makes filtering decisions by inspecting only the source and destination addresses and ports in the network packet headers. This type is known as:

IPSec defines two protocols: _______ and _______.

Which Internet Protocol Security (IPsec) protocol provides assurance of the sender's identity and the integrity of the data but does not offer confidentiality?

In an ACL table, the source address is 192.168.1.0/24. The number of hosts affected would be:

In cryptographic handshakes, a single-use number generated to ensure the freshness of communication and prevent replay attacks is often referred to as a:

To block incoming TCP traffic on a specific port range (e.g., for a custom service running on ports 10000-10010), what iptables rule would you use? iptables -A INPUT -p tcp --dport

Related to the IPsec diagrams below (with data flowing from left to right): The Destination IP address in the original IP datagram is:

To create a LAN with exactly 254 host computers, you would choose the following subnet:

When a firewall employs stateless packet filtering, its decision to permit or deny a network packet is based on information found in the:

________ operates in the transport mode or the tunnel mode.

A firewall is a crucial security component designed to perform several functions for a network, EXCEPT:

A firewall serves as a barrier between an organization's internal network and the broader Internet by:

The successor protocol to Secure Sockets Layer (SSL), offering enhanced security features, is known as:

A fundamental security mechanism that controls network traffic by examining and filtering data packets based on a set of rules is best described as a:

SSL stage in which two entities use the shared secret to derive the to-be-used set of keys:

Modern Intrusion Detection Systems (IDS) primarily identify malicious activity by looking for:

A Cipher Suite in SSL/TLS usually includes:

What is the primary purpose of the Diffie-Hellman key exchange algorithm?

In 802.11 technologies, WEP protocol stands for:

IDS stands for:

WPA-3 protocol uses the following encryption:

Which iptables command would allow incoming UDP traffic on port 123 (commonly used for NTP)?

One of the famous AAA server protocols:

With respect to IPSec, which of the fields is used to decide what decryption to use?

How many keys are derived from the Master Key in SSL/TLS?

What is the standard format for public key certificates?

One security protocol for the e-mail system is _________.

The following ACL table belongs to a firewall that is:

What is the generally recommended minimum key size for RSA to ensure reasonable security in most modern applications?

In the ________ mode, IPSec protects the whole IP packet, including the original IP header.

Related to the IPsec diagrams below (with data flowing from left to right): the destination IP address in the new IP header is:

Which OpenSSL command can be used to convert a certificate from PEM format to DER format?

SSL/TLS operates at a specific level within the standard network model, providing secure communication. Which of the following layers does SSL/TLS primarily function?

A(n) ______ function creates a message digest out of a message.

With respect to IPSec, which of the above fields is used to maintain constant block size for encryption?

A more sophisticated firewall analyzes the entire communication session, keeping track of the state of connections to make more informed filtering decisions. This is called a:

WPA-3 protocol uses the following Integrity check:

To thwart replay attacks by ensuring the uniqueness of communication elements, security protocols often employ a value that should never be repeated. This single-use value is known as a:

Within the Extensible Authentication Protocol (EAP) framework, the Access Point typically offloads the authentication process to a dedicated server running which protocol?

Comparing IPSec vs SSL VPNs (counting from the bottom):

The following is a valid MAC (in hex notation) address on a host or an end system.

In 802.11 technologies, WPA protocol stands for:

________ provides privacy, integrity, and authentication in e-mail.

Which of the following is NOT typically categorized as a distinct type of firewall architecture?

In Network Security, AAA stands for:

The enhanced security features introduced in the 802.11i standard for wireless networks brought several improvements. Which of the following security enhancements is a key feature of 802.11i?

WPA-2 protocol uses the following encryption:

It is said that public key certification mitigates but does not eliminate MITM attacks. This is because you can still attack:

A security device that goes beyond examining packet headers and scrutinizes the data payload for malicious content or policy violations is known as an:

The famous Radius protocol uses the following transport layer:

In the 802.11i/EAP, the AS/Authenticator Server is given the following name:

The famous Radius protocol uses the following port numbers:

DTLS, which stands for Datagram Transport Layer Security Protocol, uses:

The software used to create virtual networks and containers in our Iptables lab is called:

To create a LAN with exactly 62 host computers, you would choose the following subnet:

WEP protocol uses the following encryption:

Comparing IPSec vs SSL VPNs (counting from the bottom):

Which Internet Protocol Security (IPsec) protocol offers a comprehensive security solution, encompassing source authentication, data integrity, and confidentiality?

The establishment of a secure SSL/TLS connection relies on a foundational connection being in place beforehand. Which of the following underlying protocols must be established prior to initiating an SSL/TLS handshake?

WPA-2 protocol uses the following Integrity check:

SSL stage in which special messages are sent to securely close connections are exchanged.

WEB protocol uses the following Integrity check:

The original 802.11 wireless protocol, while providing initial security measures, utilized a specific encryption algorithm that has since been deemed vulnerable. This older encryption method is known as:

Which iptables command would you use to block all incoming HTTP traffic on the standard port?

A ______ provides privacy for LANs communicating through the global Internet.

Why is a /30 subnet commonly used for the link between two routers?

Firewall Access Control List (ACL) rules are typically evaluated in which order when processing incoming network packets?

Related to the IPsec diagrams below (with data flowing from left to right): The source IP address in the original IP datagram is:

Which of the following network segments acts as a buffer, allowing external access to specific services while preventing entry into the internal network?