ITN 260 MIDTERM EXAM SOLVED
QUESTIONS WITH EXPLANATIONS
Create a VLAN and add the users' computers / ports to the VLAN - Answer-The
management in your corporate office needs to group users on the network together
logically even though they are attached to separate network switches. How can this be
done?
signature-based - Answer-What type of monitoring compares network traffic, activities,
transactions, or behavior against a database of known attack patterns?
load balancing - Answer-An administrator has two servers that host the same web
content, but only one server is utilized at a given time. What can be configured to make
use of both servers in a manner that is transparent to the end users?
Data Loss Prevention (DLP) - Answer-Which of the following is a system of security
tools that are used to recognize and identify data that is critical to the organization and
ensure that it is protected?
VPN concentrator - Answer-What dedicated hardware device aggregates hundreds or
thousands of VPN connections?
network access control - Answer-What technology will examine the current state of a
network device before allowing it can to connect to the network and force any device
that does not meet a specified set of criteria to connect only to a quarantine network!
Create a DMZ, add necessary hosts. - Answer-A web server must be accessible to
untrusted outside users. What can be done to isolate this host and any additional hosts
with similar requirements from more secured hosts on a network?
router - Answer-What kind of networking device forwards packets across different
computer networks by reading destination addresses?
reverse proxy - Answer-Which of the following is a server that routes incoming requests
coming from an external network to the correct internal server?
True - Answer-NAT is not a specific device, technology, or protocol. It is a technique for
substituting IP addresses.
PAT - Answer-When a private network uses a single public IP address, and each
outgoing TCP packet uses a different port to allow for proper translation, what
networking technology is in use?
,The OSI model breaks networking steps down into a series of six layers. - Answer-False
Behavior-based monitoring attempts to overcome the limitations of both anomaly-based
monitoring and signature-based monitoring by being more adaptive and proactive
instead of reactive. - Answer-True
All modern operating systems include a hardware firewall, usually called a host-based
firewall - Answer-False
Workgroup switches must work faster than core switches. - Answer-False
An intranet is a separate open network that anyone can access without prior
authorization. - Answer-False
NAT is not a specific device, technology, or protocol. It is a technique for substituting IP
addresses. - Answer-True
A security advantage of VLANs is that they can be used to prevent direct
communication between servers. - Answer-True
An agent may be a permanent NAC agent and reside on end devices until uninstalled,
but it cannot be a dissolvable NAC agent - Answer-False
One use of data loss prevention (DLP) is blocking the copying of files to a USB flash
drive. - Answer-True
Anomaly monitoring is designed for detecting statistical anomalies - Answer-True
Which of the following is the process of running a user desktop inside a virtual machine
that resides on a server?
- PaaS
- SDN
- VDI
- SaaS " - Answer-VDI
Which technology is a means of managing and presenting computer resources by
function without regard to their physical layout or location?
- IaaS
- cloud computing
, - virtualization
- PaaS " - Answer-virtualization
Select the email protocols that are not secure? (Choose all that apply.)
- TLS
- S/MIME
- POP
- IMAP " - Answer-POP, IMAP
At what level of the OSI model does the IP protocol function?
- Transport Layer
- Network Layer
- Data link Layer
- Presentation Layer " - Answer-Network Layer
What type of system is designed to collect and consolidate logs from multiple sources
for easy analysis?
- centralized device log analyzer
- core device log analyzer
- network log device
- system log manager " - Answer-centralized device log analyzer
What device operates at the Network Layer (layer 3) of the OSI model and forwards
packets across computer networks?
- bridge
- router
- switch
- hub " - Answer-router
QUESTIONS WITH EXPLANATIONS
Create a VLAN and add the users' computers / ports to the VLAN - Answer-The
management in your corporate office needs to group users on the network together
logically even though they are attached to separate network switches. How can this be
done?
signature-based - Answer-What type of monitoring compares network traffic, activities,
transactions, or behavior against a database of known attack patterns?
load balancing - Answer-An administrator has two servers that host the same web
content, but only one server is utilized at a given time. What can be configured to make
use of both servers in a manner that is transparent to the end users?
Data Loss Prevention (DLP) - Answer-Which of the following is a system of security
tools that are used to recognize and identify data that is critical to the organization and
ensure that it is protected?
VPN concentrator - Answer-What dedicated hardware device aggregates hundreds or
thousands of VPN connections?
network access control - Answer-What technology will examine the current state of a
network device before allowing it can to connect to the network and force any device
that does not meet a specified set of criteria to connect only to a quarantine network!
Create a DMZ, add necessary hosts. - Answer-A web server must be accessible to
untrusted outside users. What can be done to isolate this host and any additional hosts
with similar requirements from more secured hosts on a network?
router - Answer-What kind of networking device forwards packets across different
computer networks by reading destination addresses?
reverse proxy - Answer-Which of the following is a server that routes incoming requests
coming from an external network to the correct internal server?
True - Answer-NAT is not a specific device, technology, or protocol. It is a technique for
substituting IP addresses.
PAT - Answer-When a private network uses a single public IP address, and each
outgoing TCP packet uses a different port to allow for proper translation, what
networking technology is in use?
,The OSI model breaks networking steps down into a series of six layers. - Answer-False
Behavior-based monitoring attempts to overcome the limitations of both anomaly-based
monitoring and signature-based monitoring by being more adaptive and proactive
instead of reactive. - Answer-True
All modern operating systems include a hardware firewall, usually called a host-based
firewall - Answer-False
Workgroup switches must work faster than core switches. - Answer-False
An intranet is a separate open network that anyone can access without prior
authorization. - Answer-False
NAT is not a specific device, technology, or protocol. It is a technique for substituting IP
addresses. - Answer-True
A security advantage of VLANs is that they can be used to prevent direct
communication between servers. - Answer-True
An agent may be a permanent NAC agent and reside on end devices until uninstalled,
but it cannot be a dissolvable NAC agent - Answer-False
One use of data loss prevention (DLP) is blocking the copying of files to a USB flash
drive. - Answer-True
Anomaly monitoring is designed for detecting statistical anomalies - Answer-True
Which of the following is the process of running a user desktop inside a virtual machine
that resides on a server?
- PaaS
- SDN
- VDI
- SaaS " - Answer-VDI
Which technology is a means of managing and presenting computer resources by
function without regard to their physical layout or location?
- IaaS
- cloud computing
, - virtualization
- PaaS " - Answer-virtualization
Select the email protocols that are not secure? (Choose all that apply.)
- TLS
- S/MIME
- POP
- IMAP " - Answer-POP, IMAP
At what level of the OSI model does the IP protocol function?
- Transport Layer
- Network Layer
- Data link Layer
- Presentation Layer " - Answer-Network Layer
What type of system is designed to collect and consolidate logs from multiple sources
for easy analysis?
- centralized device log analyzer
- core device log analyzer
- network log device
- system log manager " - Answer-centralized device log analyzer
What device operates at the Network Layer (layer 3) of the OSI model and forwards
packets across computer networks?
- bridge
- router
- switch
- hub " - Answer-router
