CHAPTER 12 - NETWORK PRO| QUESTIONS & ANSWERS VERIFIED
SOLUTIONS 100%|GRADE A+|LATEST 2024/2025
Which of the following BEST describes an inside attacker? - ✔✔An unintentional threat actor (the most
common threat).
Which of the following is an example of an internal threat? - ✔✔A user accidentally deletes the new
product designs.
Telnet is inherently unsecure because its communication is in plaintext and is easily intercepted. Which
of the following is an acceptable alternative to Telnet? - ✔✔SSH
Which of the following protocols can you use to securely manage a network device from a remote
connection? - ✔✔SSH
Which protocol does HTTPS use to offer greater security for web transactions? - ✔✔SSL
You want to allow traveling users to connect to your private network through the internet. Users will
connect from various locations, including airports, hotels, and public access points (like coffee shops and
libraries). As such, you won't be able to configure the firewalls that might be controlling access to the
internet in these locations.
Which of the following protocols is MOST likely to be allowed through the widest number of firewalls? -
✔✔SSL
Which of the following protocols are often added to other protocols to provide secure data
transmission? (Select two.) - ✔✔TLS
SSL
Which of the following intrusion detection and prevention systems uses fake resources to entice
intruders by displaying a vulnerability, configuration flaw, or valuable data? - ✔✔Honeypot
, Creating fake resources such as honeypots, honeynets, and tarpits fulfills which of the following main
intrusion detection and prevention goals? (Select two.) - ✔✔Reveals information about an attacker's
methods and gathers evidence for identification or prosecution purposes.
Offers attackers a target that occupies their time and attention while distracting them from valid
resources.
Members of the sales team use laptops to connect to the company network. While traveling, they
connect their laptops to the internet through airport and hotel networks.
You are concerned that these computers will pick up viruses that could spread to your private network.
You would like to implement a solution that prevents the laptops from connecting to your network
unless antivirus software and the latest operating system patches have been installed.
Which solution should you use? - ✔✔NAC
A network utilizes a network access control (NAC) solution to defend against malware.
When a wired or wireless host tries to connect to the network, a NAC agent on the host checks it to
make sure it has all of the latest operating system updates installed and that the latest antivirus
definitions have been applied.
What is this process called? - ✔✔Posture assessment
When analyzing assets, which analysis method assigns financial values to assets? - ✔✔Quantitative
What is the main difference between vulnerability scanning and penetration testing? - ✔✔Vulnerability
scanning is performed within the security perimeter; penetration testing is performed outside of the
security perimeter.
A security administrator is conducting a penetration test on a network. She connects a notebook system
running Linux to the wireless network and then uses Nmap to probe various network hosts to see which
operating system they are running.
Which process did the administrator use for the penetration test in this scenario? - ✔✔Active
fingerprinting
SOLUTIONS 100%|GRADE A+|LATEST 2024/2025
Which of the following BEST describes an inside attacker? - ✔✔An unintentional threat actor (the most
common threat).
Which of the following is an example of an internal threat? - ✔✔A user accidentally deletes the new
product designs.
Telnet is inherently unsecure because its communication is in plaintext and is easily intercepted. Which
of the following is an acceptable alternative to Telnet? - ✔✔SSH
Which of the following protocols can you use to securely manage a network device from a remote
connection? - ✔✔SSH
Which protocol does HTTPS use to offer greater security for web transactions? - ✔✔SSL
You want to allow traveling users to connect to your private network through the internet. Users will
connect from various locations, including airports, hotels, and public access points (like coffee shops and
libraries). As such, you won't be able to configure the firewalls that might be controlling access to the
internet in these locations.
Which of the following protocols is MOST likely to be allowed through the widest number of firewalls? -
✔✔SSL
Which of the following protocols are often added to other protocols to provide secure data
transmission? (Select two.) - ✔✔TLS
SSL
Which of the following intrusion detection and prevention systems uses fake resources to entice
intruders by displaying a vulnerability, configuration flaw, or valuable data? - ✔✔Honeypot
, Creating fake resources such as honeypots, honeynets, and tarpits fulfills which of the following main
intrusion detection and prevention goals? (Select two.) - ✔✔Reveals information about an attacker's
methods and gathers evidence for identification or prosecution purposes.
Offers attackers a target that occupies their time and attention while distracting them from valid
resources.
Members of the sales team use laptops to connect to the company network. While traveling, they
connect their laptops to the internet through airport and hotel networks.
You are concerned that these computers will pick up viruses that could spread to your private network.
You would like to implement a solution that prevents the laptops from connecting to your network
unless antivirus software and the latest operating system patches have been installed.
Which solution should you use? - ✔✔NAC
A network utilizes a network access control (NAC) solution to defend against malware.
When a wired or wireless host tries to connect to the network, a NAC agent on the host checks it to
make sure it has all of the latest operating system updates installed and that the latest antivirus
definitions have been applied.
What is this process called? - ✔✔Posture assessment
When analyzing assets, which analysis method assigns financial values to assets? - ✔✔Quantitative
What is the main difference between vulnerability scanning and penetration testing? - ✔✔Vulnerability
scanning is performed within the security perimeter; penetration testing is performed outside of the
security perimeter.
A security administrator is conducting a penetration test on a network. She connects a notebook system
running Linux to the wireless network and then uses Nmap to probe various network hosts to see which
operating system they are running.
Which process did the administrator use for the penetration test in this scenario? - ✔✔Active
fingerprinting
