CS4451 Module 9 Exam Questions
With Correct Answers
Which of the following mitigation principles used to secure information is a
true statement? Select two. - ANSWER Comparing the current state of
information security with recommended controls is gap analysis.
Applying security measures to reduce unnecessary vulnerabilities is
configuration enforcement.
An associate is hired by a close friend to learn information technology (IT)
administration skills on the job. The associate finds a 24-port hub in a
cabinet and is considering using it in a small network setting for a lab
environment that will be accessed using Telnet. If the associate uses the
hub, which mitigation principle would be violated? - ANSWER
Segmentation
Budgetary constraints are preventing a small company from upgrading their
faulty wireless access points until the following month. An employee needs
to synchronize the password on their company-issued laptop, so they
disconnect the Ethernet cable from the desktop computer and plug it into
the laptop. However, no connectivity is established with the laptop. What is
the most likely reason? - ANSWER The switch port has port security
enabled.
A router connects networks A, B, and C. A threat actor is successful in
breaching the security protocols and breaks into network A. From network
A, the threat actor spoofs the source IP address as if it is originating from
network C and sends traffic to network B. How can this condition be
mitigated? - ANSWER Apply an inbound ACL on the router.
, You are responsible for ensuring the company's servers are secure. Which
of the following policies should you implement? - ANSWER Apply patches.
Monitor the server.
Remove unnecessary software.
Physically secure the server
A company launched a digital product that is selling so well that their web
server is unable to keep up with the requests. They are evaluating the
possibility of adding a second web server along with a load balancer. What
type of load balancer should they add, and what security benefit can it
provide? - ANSWER Layer 7 load balancer; it can detect and stop attacks
directed at an application.
Gino needs to procure a networking appliance that will filter traffic to permit
or deny certain packets. At the very least, Gino should buy a firewall that is
capable of filtering traffic based on which of the following parameters?
Select three. - ANSWER Protocol
IP address
Port number
Heba configures a firewall rule to prevent traffic from Network A. However,
some network services from Network A should be permitted but because of
their source IP address they will be blocked by default. What type of firewall
rule action should Heba apply? - ANSWER Force Allow
A network administrator specifies a statement that reads "Deny
management traffic from untrusted networks to Network B." What type of
firewall is the network administrator most likely configuring? - ANSWER A
policy-based firewall
Which of the following statements are true regarding software firewalls
versus hardware firewalls? Select two. - ANSWER A hardware firewall
provides less of a target for attackers.
A hardware firewall is more expensive than a software firewall.
A junior technician configures a firewall. The network administrator then
runs tests and analyzes the traffic to verify the firewall was configured as
expected. The network administrator notices that the only traffic allowed to
enter the internal network is return traffic that was requested from an
With Correct Answers
Which of the following mitigation principles used to secure information is a
true statement? Select two. - ANSWER Comparing the current state of
information security with recommended controls is gap analysis.
Applying security measures to reduce unnecessary vulnerabilities is
configuration enforcement.
An associate is hired by a close friend to learn information technology (IT)
administration skills on the job. The associate finds a 24-port hub in a
cabinet and is considering using it in a small network setting for a lab
environment that will be accessed using Telnet. If the associate uses the
hub, which mitigation principle would be violated? - ANSWER
Segmentation
Budgetary constraints are preventing a small company from upgrading their
faulty wireless access points until the following month. An employee needs
to synchronize the password on their company-issued laptop, so they
disconnect the Ethernet cable from the desktop computer and plug it into
the laptop. However, no connectivity is established with the laptop. What is
the most likely reason? - ANSWER The switch port has port security
enabled.
A router connects networks A, B, and C. A threat actor is successful in
breaching the security protocols and breaks into network A. From network
A, the threat actor spoofs the source IP address as if it is originating from
network C and sends traffic to network B. How can this condition be
mitigated? - ANSWER Apply an inbound ACL on the router.
, You are responsible for ensuring the company's servers are secure. Which
of the following policies should you implement? - ANSWER Apply patches.
Monitor the server.
Remove unnecessary software.
Physically secure the server
A company launched a digital product that is selling so well that their web
server is unable to keep up with the requests. They are evaluating the
possibility of adding a second web server along with a load balancer. What
type of load balancer should they add, and what security benefit can it
provide? - ANSWER Layer 7 load balancer; it can detect and stop attacks
directed at an application.
Gino needs to procure a networking appliance that will filter traffic to permit
or deny certain packets. At the very least, Gino should buy a firewall that is
capable of filtering traffic based on which of the following parameters?
Select three. - ANSWER Protocol
IP address
Port number
Heba configures a firewall rule to prevent traffic from Network A. However,
some network services from Network A should be permitted but because of
their source IP address they will be blocked by default. What type of firewall
rule action should Heba apply? - ANSWER Force Allow
A network administrator specifies a statement that reads "Deny
management traffic from untrusted networks to Network B." What type of
firewall is the network administrator most likely configuring? - ANSWER A
policy-based firewall
Which of the following statements are true regarding software firewalls
versus hardware firewalls? Select two. - ANSWER A hardware firewall
provides less of a target for attackers.
A hardware firewall is more expensive than a software firewall.
A junior technician configures a firewall. The network administrator then
runs tests and analyzes the traffic to verify the firewall was configured as
expected. The network administrator notices that the only traffic allowed to
enter the internal network is return traffic that was requested from an
