SECURITY IN NETWORK DESIGN EXPECTED
QUESTIONS WITH VERIFIED ANSWERS
Question 1.
Which principle ensures auditing processes are managed by someone other than the employees
whose activities are being audited?
ANSWER
Separation of duties
Question 2.
Who is responsible for the security of hardware on which a public cloud runs?
ANSWER
The cloud provider
Question 3.
What information in a transmitted message might an IDS use to identify network threats?
ANSWER
Signature
Question 4.
Which of the following is not one of the AAA services provided by RADIUS and TACACS+?
ANSWER
Administration
Question 5.
What does a client present to a network server to access a resource on that server?
ANSWER
Ticket
1/6
, Question 6.
What's the essential difference between an IPS and an IDS?
ANSWER
IDS (intrusion detection system) can only detect and log suspicious activity
IPS (intrusion prevention system) stands between the attacker and the network host, and can
prevent traffic from reaching the protected network or host
Question 7.
Which access control technique is responsible for detection of an intruder who succeeds in accessing a
network?
ANSWER
Accounting
Question 8.
Which authorization method will allow Nancy, a custodian, to access the company's email application
but not its accounting system?
ANSWER
RBAC
Question 9.
Which authentication protocol is optimized for wireless clients?
ANSWER
RADIUS
Question 10.
What characteristic of ARP makes it particularly vulnerable to being used in a DoS attack?
ANSWER
ARP doesn't perform any authentication
2/6
QUESTIONS WITH VERIFIED ANSWERS
Question 1.
Which principle ensures auditing processes are managed by someone other than the employees
whose activities are being audited?
ANSWER
Separation of duties
Question 2.
Who is responsible for the security of hardware on which a public cloud runs?
ANSWER
The cloud provider
Question 3.
What information in a transmitted message might an IDS use to identify network threats?
ANSWER
Signature
Question 4.
Which of the following is not one of the AAA services provided by RADIUS and TACACS+?
ANSWER
Administration
Question 5.
What does a client present to a network server to access a resource on that server?
ANSWER
Ticket
1/6
, Question 6.
What's the essential difference between an IPS and an IDS?
ANSWER
IDS (intrusion detection system) can only detect and log suspicious activity
IPS (intrusion prevention system) stands between the attacker and the network host, and can
prevent traffic from reaching the protected network or host
Question 7.
Which access control technique is responsible for detection of an intruder who succeeds in accessing a
network?
ANSWER
Accounting
Question 8.
Which authorization method will allow Nancy, a custodian, to access the company's email application
but not its accounting system?
ANSWER
RBAC
Question 9.
Which authentication protocol is optimized for wireless clients?
ANSWER
RADIUS
Question 10.
What characteristic of ARP makes it particularly vulnerable to being used in a DoS attack?
ANSWER
ARP doesn't perform any authentication
2/6
