Exam simulator: Network Security

Multifactor authentication combines two or more independent credentials: what the user knows (password), what the user has (security token) and what the user is (biometric verification). True or False?

Which of the following servers is used in 802.1X-based networks to authenticate users?

A technician is called to block certain computers from connecting to the Wi-Fi network. The computers that need to be blocked have the following MAC addresses:

• Computer A: 00:00:5e:00:53:af
• Computer B: aa:55:5e:00:53:af
• Computer C: 44:20:5e:00:53:af

Which of the following tools does the technician need to complete the task?

Drag and drop the common networking attacks into their respective fields.

One purpose of a brute-force attack is to:

Exploits are a weakness in software systems, while vulnerabilities are attacks made to take advantage of exploits.

Which of the following networking attacks redirects online traffic to a fraudulent website that resembles its intended destination?

Which of the following attacks doesn’t require the use of technology in order to get access to sensitive data?

Which one of the following attacks requires the attacker to be on the same network as the victim?

Which of the following passwords you would choose to make your account harder to be hacked? (Select TWO)

Which of the following represents an authorized simulated attack on a system with the purpose of identifying weak spots that attackers could take advantage of?

Which of the following statements are true regarding Security Information and Event Management (SIEM)? (Select TWO)

Which of the following process comprises scanning devices on a network for missing software updates and keeping the devices updated to avoid security threats?

Which of the following security concepts is a dictionary that provides definitions for publicly disclosed cybersecurity vulnerabilities and exposures?

A graduate intern asked you to explain to him what is zero-day vulnerability all about. Which of the following statements is true?

A network technician is tasked with implementing a solution to increase the local area network security within an organization. All of the company’s external-facing servers (Web server, FTP server) should be placed in a separate area in order to be accessible from the internet, and the rest servers (Mail server, Storage server) of the internal LAN to be unreachable. Which of the following techniques does the technician need to implement to meet the requirement?

A network security engineer is tasked with implementing a solution to allow users from untrusted networks to access the Web Server and the Mail Server while keeping the private network secured and inaccessible. Which of the following does the engineer need to implement to complete the task?

Which of the following options are considered authentication protocols? (Select TWO)

Which of the following is used in a distributed denial-of-service (DDoS) attack?

In which of the following API attacks does the attacker intercept communications between an API endpoint and a client in order to steal and/or alter the confidential data that is passed between them?

Your website uses Cloudflare to resolve DNS queries. Upon checking the records, you have discovered there are A and MX record entries that point to unknown and potentially harmful IP addresses. Which of the following attacks have you just discovered?

A hacker introduces corrupt Domain Name System (DNS) data into a DNS resolver’s cache to redirect users either to the wrong websites or to his own computer. What type of DNS attack does the hacker implement in this scenario?

A security expert is tasked with implementing a solution to prevent Rogue DHCP servers from offering IP addresses to end-users within an organization. Which of the following security technology does the expert need to implement to meet the requirement?

In which of the following wireless network attacks does the attacker set up a fraudulent Wi-Fi access point that appears to be legitimate but is used to eavesdrop on wireless communications?

In which of the following types of malware does an attacker prevent users from accessing their system or personal files and demand a ransom payment in order to regain access?

An attacker breaks into a password-protected computer by systematically entering every word in a dictionary as a password. What type of attack does the attacker carry out?

An attacker impersonates a delivery driver and waits outside of a building. When an employee gains security’s approval and opens the door, the attacker asks the employee to hold the door to gain access to the building. What type of social engineering attack the attacker has performed?

A cybercriminal stole the personal information or confidential information of a victim by peering over the target’s shoulders. What type of attack did the cybercriminal perform?

A technician is tasked with improving the wired network security within an organization by limiting the number of MAC addresses on a given port. Packets that have a matching MAC address should be considered secure packets and should be forwarded; all other packets (unsecured packets) should be restricted. Which of the following features does the technician need to implement to complete the task?

You have been tasked with implementing a solution to send product offers to consumers’ smartphones when they trigger a search in a particular geographic location, enter a mall, neighborhood, or store. What solution will you implement in order to achieve that?

A network administrator is tasked with accessing a remote computer to handle some administrative tasks over an unsecured network in a secure way. Which of the following protocols does the administrator need to use to connect to the device?

The attacker uses a tool named Driftnet to fool both router and workstation to connect to the attacker’s machine, instead of to each other. Then, the attacker is secretly in the middle of all communications. What type of attack is this an example of?

Which of the following protocols is used in the AAA framework to provide centralized authentication for users who want to gain access to the network?

An administrator is tasked with implementing a solution that will provide limited capabilities (such as browsing) to guest Wi-Fi users while keeping the rest of the user roles untouched. Which of the following technologies does the administrator need to implement?

End-users within an office building report web server connectivity issues. A network administrator troubleshooting the issue notices there is a high CPU load on the server when typing the grep processor /proc/cpuinfo command. Which of the following is causing the issue?

A rogue postal worker sits in a post office and intercepts letters written between two people. This postal worker can read private messages and even edit the contents of those letters before passing them along to their intended recipients. What type of attack is this an example of?

Drag and drop the social engineering attacks into their respective fields.

Which of the following is the MOST effective way to prevent network security breaches from happening in the workplace?

Which of the following types of attacks is shown in the figure below?