ITN Modules 16-17

Which component is designed to protect against unauthorized communications to and from a computer?

• security center

• port scanner

• antimalware

• antivirus

• firewall

An administrator is testing connectivity to a remote device with the IP address 10.1.1.1. What does the output of this command indicate?

• Connectivity to the remote device was successful.

• A router along the path did not have a route to the destination.

• A ping packet is being blocked by a security device along the path.

• The connection timed out while waiting for a reply from the remote device.

Answer explanation

In the output of the ping command, an exclamation mark (!) indicates a response was successfully received, a period (.) indicates that the connection timed out while waiting for a reply, and the letter “U” indicates that a router along the path did not have a route to the destination and sent an ICMP destination unreachable message back to the source.

Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

• RouterA(config)# login block-for 10 attempts 2 within 30
• RouterA(config)# login block-for 30 attempts 2 within 10
• RouterA(config)# login block-for 2 attempts 30 within 10
• RouterA(config)# login block-for 30 attempts 10 within 2

What type of attack may involve the use of tools such as nslookup and fping?

• access attack
• reconnaissance attack
• denial of service attack
• worm attack

Which example of malicious code would be classified as a Trojan horse?

• malware that was written to look like a video game
• malware that requires manual user intervention to spread between systems
• malware that attaches itself to a legitimate program and spreads to other programs when launched
• malware that can automatically spread from one system to another by exploiting a vulnerability in the target

What is the difference between a virus and a worm?

• Viruses self-replicate but worms do not.
• Worms self-replicate but viruses do not.
• Worms require a host file but viruses do not.
• Viruses hide in legitimate programs but worms do not.

Which attack involves a compromise of data that occurs between two end points?

• denial-of-service
• extraction of security parameters
• man-in-the-middle attack
• username enumeration

 Which type of attack involves an adversary attempting to gather information about a network to identify vulnerabilities?

• dictionary
• man-in-the-middle
• DoS
• reconnaissance

What is the purpose of the network security authentication function?

• to require users to prove who they are
• to determine which resources a user can access
• to keep track of the actions of a user
• to provide challenge and response questions

Which firewall feature is used to ensure that packets coming into a network are legitimate responses to requests initiated from internal hosts?

• stateful packet inspection
• URL filtering
• application filtering
• packet filtering