SECURITY+ NETWORK SECURITY ACTUAL EXAM PAPER 2025/2026
QUESTIONS WITH SOLUTIONS GRADED A+
✔✔You have been hired as a company's network administrator. The company's network
currently uses statically configured IPv4 addresses. You have been given a list of
addresses that are used on the network that include the addresses listed in the options.
However, you are sure that some of these addresses are NOT IPv4 addresses. Which
addresses are not valid? - ✔✔fe80::200:f8ff:fe21:67cf
00-0C-F1-56-98-AD
✔✔You need to ensure that a single document transmitted from your Web server is
encrypted.
What should you do? - ✔✔Use S-HTTP
✔✔Often the sales people for your company need to connect some wireless devices
together without having an access point available. You need to set up their laptops to
ensure that this communication is possible. Which communications mode should you
use? - ✔✔ad hoc
✔✔You have discovered that hackers are gaining access to your WEP wireless
network. After researching, you discover that the hackers are using war driving. You
need to protect against this type of attack. - ✔✔Change the default Service Set Identifier
(SSID).
Disable SSID broadcast.
Configure the network to use authenticated access only.
Configure the WEP protocol to use a 128-bit key.
✔✔SSH - ✔✔A protocol that uses a secure channel to connect a server and a client
✔✔SSL - ✔✔A protocol that secures messages between the Application and Transport
layer
✔✔SCP - ✔✔A protocol that allows files to be copied over a secure connection
✔✔ICMP - ✔✔A protocol used to test and report on path information between network
devices
✔✔You need to ensure that wireless clients can only communicate with the wireless
access point and not with other wireless clients. What should you implement? -
✔✔isolation mode
, ✔✔A small business owner wants to be able to sell products over the Internet. A
security professional suggests the owner should use SSL. Which statement is NOT true
of this protocol? - ✔✔SSL operates at the Network layer of the OSI model
✔✔You must design the network for your company's new location. Which two
considerations are important? - ✔✔number of hosts to support
number of subnetworks needed
✔✔A user complains that he is unable to communicate with a remote virtual private
network (VPN) using L2TP. You discover that the port this protocol uses is blocked on
the routers in your network. You need to open this port to ensure proper
communication. Which port number should you open? - ✔✔1701
✔✔A server is located on a DMZ segment. The server only provides FTP service, and
there are no other computers on the DMZ segment. You need to configure the DMZ to
ensure that communication can occur.
Which port should be opened on the Internet side of the DMZ firewall? - ✔✔20
✔✔During maintenance, you often discover invalid devices connected to your wireless
network. You need to ensure that only valid corporate devices can connect to the
network. What should you configure to increase the security of this wireless network? -
✔✔MAC filtering
✔✔You have been hired to assess the security needs for an organization that uses
several Web technologies. During the assessment, you discover that the organization
uses HTTPS, S-HTTP, ActiveX, and JavaScript. You need to rank these technologies
based on the level of security they provide. Which of the technologies listed provides
the highest level of security? - ✔✔HTTPS
✔✔Your company has decided to deploy a new wireless network at a branch office.
This branch office is located in a busy commercial district. Management has asked you
to fully assess the external vulnerabilities of the wireless network before it is deployed.
Which three conditions should you assess? - ✔✔Antenna selection
Antenna placement
Access point power
✔✔You need to implement security countermeasures to protect from attacks being
implemented against your PBX system via remote maintenance. Which policies provide
protection against remote maintenance PBX attacks? - ✔✔Turn off the remote
maintenance features when not needed.
Use strong authentication on the remote maintenance ports.
Keep PBX terminals in a locked, restricted area.
Replace or disable embedded logins and passwords.
QUESTIONS WITH SOLUTIONS GRADED A+
✔✔You have been hired as a company's network administrator. The company's network
currently uses statically configured IPv4 addresses. You have been given a list of
addresses that are used on the network that include the addresses listed in the options.
However, you are sure that some of these addresses are NOT IPv4 addresses. Which
addresses are not valid? - ✔✔fe80::200:f8ff:fe21:67cf
00-0C-F1-56-98-AD
✔✔You need to ensure that a single document transmitted from your Web server is
encrypted.
What should you do? - ✔✔Use S-HTTP
✔✔Often the sales people for your company need to connect some wireless devices
together without having an access point available. You need to set up their laptops to
ensure that this communication is possible. Which communications mode should you
use? - ✔✔ad hoc
✔✔You have discovered that hackers are gaining access to your WEP wireless
network. After researching, you discover that the hackers are using war driving. You
need to protect against this type of attack. - ✔✔Change the default Service Set Identifier
(SSID).
Disable SSID broadcast.
Configure the network to use authenticated access only.
Configure the WEP protocol to use a 128-bit key.
✔✔SSH - ✔✔A protocol that uses a secure channel to connect a server and a client
✔✔SSL - ✔✔A protocol that secures messages between the Application and Transport
layer
✔✔SCP - ✔✔A protocol that allows files to be copied over a secure connection
✔✔ICMP - ✔✔A protocol used to test and report on path information between network
devices
✔✔You need to ensure that wireless clients can only communicate with the wireless
access point and not with other wireless clients. What should you implement? -
✔✔isolation mode
, ✔✔A small business owner wants to be able to sell products over the Internet. A
security professional suggests the owner should use SSL. Which statement is NOT true
of this protocol? - ✔✔SSL operates at the Network layer of the OSI model
✔✔You must design the network for your company's new location. Which two
considerations are important? - ✔✔number of hosts to support
number of subnetworks needed
✔✔A user complains that he is unable to communicate with a remote virtual private
network (VPN) using L2TP. You discover that the port this protocol uses is blocked on
the routers in your network. You need to open this port to ensure proper
communication. Which port number should you open? - ✔✔1701
✔✔A server is located on a DMZ segment. The server only provides FTP service, and
there are no other computers on the DMZ segment. You need to configure the DMZ to
ensure that communication can occur.
Which port should be opened on the Internet side of the DMZ firewall? - ✔✔20
✔✔During maintenance, you often discover invalid devices connected to your wireless
network. You need to ensure that only valid corporate devices can connect to the
network. What should you configure to increase the security of this wireless network? -
✔✔MAC filtering
✔✔You have been hired to assess the security needs for an organization that uses
several Web technologies. During the assessment, you discover that the organization
uses HTTPS, S-HTTP, ActiveX, and JavaScript. You need to rank these technologies
based on the level of security they provide. Which of the technologies listed provides
the highest level of security? - ✔✔HTTPS
✔✔Your company has decided to deploy a new wireless network at a branch office.
This branch office is located in a busy commercial district. Management has asked you
to fully assess the external vulnerabilities of the wireless network before it is deployed.
Which three conditions should you assess? - ✔✔Antenna selection
Antenna placement
Access point power
✔✔You need to implement security countermeasures to protect from attacks being
implemented against your PBX system via remote maintenance. Which policies provide
protection against remote maintenance PBX attacks? - ✔✔Turn off the remote
maintenance features when not needed.
Use strong authentication on the remote maintenance ports.
Keep PBX terminals in a locked, restricted area.
Replace or disable embedded logins and passwords.
