Security+ Certmaster CE test 3|Question with
100% Correct Answers
HTML5 VPN - ✔️✔️Systems administrators want to set up a way to perform remote
administration from home. Rather than installing a software agent, the solution should use an
underlying technology that is available to an application, such as a web browser. Which option
would best support these requirements?
Broadcast storms - ✔️✔️A network engineer is plugging in new patch cables and wants to
prevent inadvertent disruptions to the network while doing so. What will the engineer prevent
if Spanning Tree Protocol (STP) is configured on the switches?
Provide secure access to DMZ servers. - ✔️✔️What is a jump server commonly used for?
Reverse Proxy - ✔️✔️A company hosts internal web servers between two firewalls: one firewall
at the edge network and another near the internal gateways. A recent security audit advised
the company to utilize filtering rules for connections between remote clients and these internal
web servers. Which of the following will satisfy the security advice?
Signature-based - ✔️✔️An administrator deploys a basic network intrusion detection system
(NIDS) device to identify known attacks. What detection method does this device use?
-Block TCP ports
-Allow network protocols - ✔️✔️A network administrator set up a basic packet filtering firewall
using an open-source application running on a Linux virtual machine. The immediate benefit to
this deployment is the quick configuration of basic firewall rules. What other functionality
would influence a decision to deploy a stateless, rather than stateful, firewall? (Select all that
apply.)
ACL - ✔️✔️An administrator navigates to the Windows Firewall with Advanced Security. The
inbound rules show a custom rule, which assigned the action, "Allow the connection" to all
, programs, all protocols, and all ports with a scope of 192.168.0.0/24. This is an example of what
type of security setting?
-Message authentication
-Block source routed packets - ✔️✔️A company is renovating a new office space and is updating
all Cisco routers. The up-to-date Internetwork Operating System (IOS) will provide the best
protection from zero-day exploits. What other options could a network administrator configure
for route security? (Select all that apply.)
Use 802.1p header. - ✔️✔️Users are reporting jittery video communication during routine video
conferences. What can a system administrator implement to improve video quality and overall
use of the network bandwidth?
-Unlike WPA, WPA2 supports an encryption algorithm based on the Advanced Encryption
Standard (AES) instead of the version of RC4 "patched" with the Temporal Key Integrity
Protocol (TKIP).
-
-
- - ✔️✔️What are the differences between WPA and WPA2? (Select all that apply.)
-WPA3
-SAE - ✔️✔️Which wireless configurations provide the most up-to-date and secure way of
connecting wireless devices to an office or home network? (Select all that apply.)
-Survey a site for signal strength
-Determine where to place access points - ✔️✔️What are the benefits of using Wi-Fi heat maps
for existing wireless networks? (Select all that apply.)
Configure VPC endpoint interface. - ✔️✔️A cloud administrator deploys two cloud servers on the
Amazon Web Services (AWS) platform, each in a separately defined virtual network. How does
100% Correct Answers
HTML5 VPN - ✔️✔️Systems administrators want to set up a way to perform remote
administration from home. Rather than installing a software agent, the solution should use an
underlying technology that is available to an application, such as a web browser. Which option
would best support these requirements?
Broadcast storms - ✔️✔️A network engineer is plugging in new patch cables and wants to
prevent inadvertent disruptions to the network while doing so. What will the engineer prevent
if Spanning Tree Protocol (STP) is configured on the switches?
Provide secure access to DMZ servers. - ✔️✔️What is a jump server commonly used for?
Reverse Proxy - ✔️✔️A company hosts internal web servers between two firewalls: one firewall
at the edge network and another near the internal gateways. A recent security audit advised
the company to utilize filtering rules for connections between remote clients and these internal
web servers. Which of the following will satisfy the security advice?
Signature-based - ✔️✔️An administrator deploys a basic network intrusion detection system
(NIDS) device to identify known attacks. What detection method does this device use?
-Block TCP ports
-Allow network protocols - ✔️✔️A network administrator set up a basic packet filtering firewall
using an open-source application running on a Linux virtual machine. The immediate benefit to
this deployment is the quick configuration of basic firewall rules. What other functionality
would influence a decision to deploy a stateless, rather than stateful, firewall? (Select all that
apply.)
ACL - ✔️✔️An administrator navigates to the Windows Firewall with Advanced Security. The
inbound rules show a custom rule, which assigned the action, "Allow the connection" to all
, programs, all protocols, and all ports with a scope of 192.168.0.0/24. This is an example of what
type of security setting?
-Message authentication
-Block source routed packets - ✔️✔️A company is renovating a new office space and is updating
all Cisco routers. The up-to-date Internetwork Operating System (IOS) will provide the best
protection from zero-day exploits. What other options could a network administrator configure
for route security? (Select all that apply.)
Use 802.1p header. - ✔️✔️Users are reporting jittery video communication during routine video
conferences. What can a system administrator implement to improve video quality and overall
use of the network bandwidth?
-Unlike WPA, WPA2 supports an encryption algorithm based on the Advanced Encryption
Standard (AES) instead of the version of RC4 "patched" with the Temporal Key Integrity
Protocol (TKIP).
-
-
- - ✔️✔️What are the differences between WPA and WPA2? (Select all that apply.)
-WPA3
-SAE - ✔️✔️Which wireless configurations provide the most up-to-date and secure way of
connecting wireless devices to an office or home network? (Select all that apply.)
-Survey a site for signal strength
-Determine where to place access points - ✔️✔️What are the benefits of using Wi-Fi heat maps
for existing wireless networks? (Select all that apply.)
Configure VPC endpoint interface. - ✔️✔️A cloud administrator deploys two cloud servers on the
Amazon Web Services (AWS) platform, each in a separately defined virtual network. How does
