CS409 Final Exam
, Which technology allows scattered users to be logically grouped even when they are
connected to different physical switches? - CORRECT ANSWERS-VLAN
Which protocol is used to prevent looping in a switch? - CORRECT ANSWERS-STP
In an interview, you are asked to analyze the following statements regarding secure
network designs and choose the correct one. Which of the following should you
choose? - CORRECT ANSWERS-Load balancers can detect and stop protocol attacks
directed at a server or application.
Which of the following is a deception instrument? - CORRECT ANSWERS-Sinkhole
Which monitoring methodology will trigger the IDS if any application tries to scan
multiple ports? - CORRECT ANSWERS-Heuristic monitoring
Which of the following is a network set up with intentional vulnerabilities? - CORRECT
ANSWERS-Honeynet
As a cybersecurity specialist, you are asked to defend the web app hosted by your
enterprise from web application attacks like cross-site scripting, SQL injections, etc.
Which of the following actions should you take? - CORRECT ANSWERS-You should
install a WAF.
Which of the following best describes an extranet? - CORRECT ANSWERS-Private
network only accessed by an authorized party
The head of cybersecurity at your enterprise has asked you to set up an IDS that can
create the baseline of all system activities and raise an alarm whenever any abnormal
activities take place, without waiting to check the underlying cause. Which of the
following actions should you take? - CORRECT ANSWERS-You should set up an IDS
with anomaly-based monitoring methodology.
Which of the following best describes DLP? - CORRECT ANSWERS-DLP is used to
prevent leakage of confidential data.
Which of the following best describes a host-based firewall? - CORRECT ANSWERS-A
host-based firewall is a software firewall that protects a single endpoint device.
Sansa is a network security administrator at an enterprise. She is asked to take
appropriate steps to defend against a MAC address spoofing attack in the enterprise
network. Which of the following methods should Sansa apply? - CORRECT ANSWERS-
Configure the switch so that only one port can be assigned per MAC address
In an interview, Max was asked to tell one difference between a software firewall and a
virtual firewall. How should Max answer? - CORRECT ANSWERS-Software firewalls
are locally installed on a device, whereas virtual firewalls run in the cloud.
, Which technology allows scattered users to be logically grouped even when they are
connected to different physical switches? - CORRECT ANSWERS-VLAN
Which protocol is used to prevent looping in a switch? - CORRECT ANSWERS-STP
In an interview, you are asked to analyze the following statements regarding secure
network designs and choose the correct one. Which of the following should you
choose? - CORRECT ANSWERS-Load balancers can detect and stop protocol attacks
directed at a server or application.
Which of the following is a deception instrument? - CORRECT ANSWERS-Sinkhole
Which monitoring methodology will trigger the IDS if any application tries to scan
multiple ports? - CORRECT ANSWERS-Heuristic monitoring
Which of the following is a network set up with intentional vulnerabilities? - CORRECT
ANSWERS-Honeynet
As a cybersecurity specialist, you are asked to defend the web app hosted by your
enterprise from web application attacks like cross-site scripting, SQL injections, etc.
Which of the following actions should you take? - CORRECT ANSWERS-You should
install a WAF.
Which of the following best describes an extranet? - CORRECT ANSWERS-Private
network only accessed by an authorized party
The head of cybersecurity at your enterprise has asked you to set up an IDS that can
create the baseline of all system activities and raise an alarm whenever any abnormal
activities take place, without waiting to check the underlying cause. Which of the
following actions should you take? - CORRECT ANSWERS-You should set up an IDS
with anomaly-based monitoring methodology.
Which of the following best describes DLP? - CORRECT ANSWERS-DLP is used to
prevent leakage of confidential data.
Which of the following best describes a host-based firewall? - CORRECT ANSWERS-A
host-based firewall is a software firewall that protects a single endpoint device.
Sansa is a network security administrator at an enterprise. She is asked to take
appropriate steps to defend against a MAC address spoofing attack in the enterprise
network. Which of the following methods should Sansa apply? - CORRECT ANSWERS-
Configure the switch so that only one port can be assigned per MAC address
In an interview, Max was asked to tell one difference between a software firewall and a
virtual firewall. How should Max answer? - CORRECT ANSWERS-Software firewalls
are locally installed on a device, whereas virtual firewalls run in the cloud.
