Unit 5 Quiz

Which of the following types of controls should the network technician review?

• Security

• Technical

• Physical

• Administrative

Which of the following best explains why organizations implement security policies and procedures?

• To improve hardware performance for all devices

• To establish guidelines and rules for protecting data

• To enhance user experience on the organization’s devices and network

• To optimize software licenses for all members of the organization

What is a primary difference between a host-based firewall and a network-based firewall?

• The supported operating system

• The type of traffic being monitored

• The location of deployment

• The type of encryption used

An organization is implementing a new firewall and has hired an IT consultant to evaluate the network. Based on budgetary restrictions implemented by the organization, any firewall that tracks active connections or includes special features like intrusion prevention are not being considered. Therefore, the consultant recommends implementing a firewall that filters traffic at the network level based solely on data found in packet headers (such as IP addresses, ports, and protocols).

Which of the following types of network-based firewalls would best fit the consultant’s recommendations for the organization?

• Stateless firewall

• Stateful firewall

• Next-generation firewall

• Host-based firewall

A technician is trying to prevent a DoS attack on a web server by implementing an Access Control List (ACL) rule. Review the ACL rule configuration.

What impact does this rule have on inbound traffic?

• The inbound traffic from the 184.25.44.0/24 network to the web server is being permitted, and all other traffic is also permitted.

• The inbound traffic from the 184.25.44.0/24 network to the web server is being denied, and all other traffic is also denied.

• The inbound traffic from the 184.25.44.0/24 network to the web server is being denied, but all other traffic is permitted.

• The inbound traffic from the 184.25.44.0/24 network to the web server is being permitted, but all other traffic is denied.

Which of the following best explains a screened subnet and its benefit to a network?

• It is a network segment that connects multiple internal networks and is typically considered a lower security zone.

• It is a network segment within an internal network that is isolated from external networks and is typically considered a higher security zone.

• It is a network segment that sits between external and internal networks and is typically considered a lower security zone.

• It is a network segment that is part of the internal network and is used to store sensitive data, making it a higher security zone.

A system administrator receives a notification containing the following system alerts from an IDS and an IPS.

Which of the following alerts could have only originated from an IPS?

• Alert: Unauthorized access attempt

• Alert: Malware detection

• Alert: Blocked malicious traffic

• Alert: Unauthorized configuration change

What is a primary benefit of tracking relevant network events in security logs?

• They enable a user to track the history of their completed work.

• They provide information while investigating an incident.

• They increase system performance by consuming less storage space.

• They serve as a first layer of defense against cyberattacks.

Which of the following is a true statement about defense-in-depth?

• Defense-in-depth relies solely on a strong perimeter firewall to protect the network

• Defense-in-depth eliminates the need for regular security updates and patches

• Defense-in-depth is only necessary for large organizations with complex networks

• Defense-in-depth provides resilience for data protection

A small company operates its SOHO network within a shared rental space, an open-concept office where multiple small businesses work side by side. While the company has taken steps to secure its network, including a firewall and a secure Wi-Fi setup, it remains concerned about the physical security of its networking equipment. Employees from other companies frequently move through the shared space, increasing the risk of unauthorized access, tampering, or even device theft.

Which of the following is an additional security measure that should be implemented to ensure the company’s network’s hardware is secure against physical tampering?

• Install antivirus software on the networking equipment.

• Relocate the networking equipment into a more restricted location, such as inside a locked cabinet

• Implement a VPN on the networking hardware

• Train employees on security best practices when utilizing networking hardware