Domain 4 Network Security

Front

Which security concept dictates that a user be given only the permission to perform their job?

Back

Least privilege

Answer explanation

The principle of least privilege dictates that a user be given the least permission to perform their job.

Front

Which principle describes the process of verification of a user's identity?

Back

Authentication

Answer explanation

Authentication is the process of verification of a user's identify.

Front

Which authentication system can use Advanced Encryption Standards (AES) encryption for encryption of user credentials?

Back

Keberos

Answer explanation

Kerberos is an authentication system that used Data Encryption Standard (3DES) and uses Advanced Encryption Standards (AES) encryption of user credentials.

Front

Which authentication system is an open standard originally proposed by the Internet Engineering Task Force (IETF)?

Back

RADIUS

Answer explanation

Remote Authentication Dial-In User Service (RADIUS) was originally proposed by the IETF and because an open standard for authentication, often used with 802.1X.

Front

Which protocol is often used with single sign-on (SSO) to exchange credentials?

Back

SAML

Answer explanation

Security Assertion Markup Language (SAML) is an open-stanard XML-based framework used for transmitting authentication and authorization information of users and compuers.

Front

Which principle describes the process of verification of a user's permissions?

Back

Authorization

Answer explanation

Authorization is the process of verifying whether a user has permission for a specific action; it is followed by the authentication of the user.

Front

What protocol and port number does LDAP use for directory lookups?

Back

TCP/389

Answer explanation

The protocol TCP and the prot number 389 are used for LDAP lookups.

Front

Which option accurately describes an exploit?

Back

A technique to gain unauthorized access.

Answer explanation

An exploit is a script, code, application, or techinique used to gain unauthorized access to an operating system thorugh a vulnerability.

Front

Which type of attack will attempt to configure hosts with a malicious default gateway?

Back

Rogue DHCP

Answer explanation

A rougue DHCP (Domain Host Control Protocol) is an attack in which another DHCP servers out IP addresses along with a malicious default gateway.

Front

What attack vector can be used for an on-path attack? Options: DHCP, DNS, Wireless, All of the above

Back

All of the above

Answer explanation

Any service that allow the user to create a connection or access to information can be used as an attack vector.