CSIS330 Module 15 - Building and Securing a Small Network
Exam
Study Guide
Correct answers are highlighted in green.
Graphics from the prompt are included as recreated study-guide exhibits when the original question used an
image or topology.
Question 1
Which firewall feature is used to ensure that packets coming into a network are legitimate responses to
requests initiated from internal hosts?
Choices:
☐ URL filtering
☐ Application filtering
☐ Packet filtering
✓ Stateful packet inspection
Brief explanation:
Stateful packet inspection keeps track of sessions started from inside the network and permits inbound packets
only when they match an established, legitimate connection.
Question 2
A user is redesigning a network for a small company and wants to ensure security at a reasonable price. The
user deploys a new application-aware firewall with intrusion detection capabilities on the ISP connection. The
user installs a second firewall to separate the company network from the public network. Additionally, the user
installs an IPS on the internal network of the company. What approach is the user implementing?
Choices:
✓ layered
☐ structured
☐ attack based
☐ risk based
Brief explanation:
Using several security controls at different places in the network is a layered security approach, also
called defense-in-depth.
Question 3
Identify the steps needed to configure a switch for SSH. The answer order does not matter.
Choices:
CSIS330 Module 15 Study Guide
, ✓ Create a local user.
✓ Generate RSA keys.
✓ Configure a domain name.
✓ Use the login local command.
✓ Use the transport input ssh command.
Brief explanation:
SSH requires a domain name and RSA keys, plus local user authentication and VTY line settings that require
local login and allow SSH transport.
Question 4
What feature of SSH makes it more secure than Telnet for a device management connection?
Choices:
☐ stronger password requirement
☐ confidentiality with IPsec
☐ random one-time port connection
✓ login information and data encryption
Brief explanation:
SSH encrypts both the login credentials and the management session data. Telnet sends management traffic in
plain text.
Question 5
Which type of attack involves an adversary attempting to gather information about a network to identify
vulnerabilities?
Choices:
☐ Dictionary
✓ Reconnaissance
☐ Man-in-the-middle
☐ DoS
Brief explanation:
Reconnaissance is the information-gathering phase attackers use to learn about a network before attempting
further attacks.
Question 6
Match the type of information security threat to the scenario.
All options shown:
Options
• installing virus code to destroy surveillance recordings for certain days
• preventing users from accessing a website by sending a large number of link requests in a short period
• obtaining trade secret documents illegally
• pretending to be someone else by using stolen personal information to apply for a credit card
CSIS330 Module 15 Study Guide
Exam
Study Guide
Correct answers are highlighted in green.
Graphics from the prompt are included as recreated study-guide exhibits when the original question used an
image or topology.
Question 1
Which firewall feature is used to ensure that packets coming into a network are legitimate responses to
requests initiated from internal hosts?
Choices:
☐ URL filtering
☐ Application filtering
☐ Packet filtering
✓ Stateful packet inspection
Brief explanation:
Stateful packet inspection keeps track of sessions started from inside the network and permits inbound packets
only when they match an established, legitimate connection.
Question 2
A user is redesigning a network for a small company and wants to ensure security at a reasonable price. The
user deploys a new application-aware firewall with intrusion detection capabilities on the ISP connection. The
user installs a second firewall to separate the company network from the public network. Additionally, the user
installs an IPS on the internal network of the company. What approach is the user implementing?
Choices:
✓ layered
☐ structured
☐ attack based
☐ risk based
Brief explanation:
Using several security controls at different places in the network is a layered security approach, also
called defense-in-depth.
Question 3
Identify the steps needed to configure a switch for SSH. The answer order does not matter.
Choices:
CSIS330 Module 15 Study Guide
, ✓ Create a local user.
✓ Generate RSA keys.
✓ Configure a domain name.
✓ Use the login local command.
✓ Use the transport input ssh command.
Brief explanation:
SSH requires a domain name and RSA keys, plus local user authentication and VTY line settings that require
local login and allow SSH transport.
Question 4
What feature of SSH makes it more secure than Telnet for a device management connection?
Choices:
☐ stronger password requirement
☐ confidentiality with IPsec
☐ random one-time port connection
✓ login information and data encryption
Brief explanation:
SSH encrypts both the login credentials and the management session data. Telnet sends management traffic in
plain text.
Question 5
Which type of attack involves an adversary attempting to gather information about a network to identify
vulnerabilities?
Choices:
☐ Dictionary
✓ Reconnaissance
☐ Man-in-the-middle
☐ DoS
Brief explanation:
Reconnaissance is the information-gathering phase attackers use to learn about a network before attempting
further attacks.
Question 6
Match the type of information security threat to the scenario.
All options shown:
Options
• installing virus code to destroy surveillance recordings for certain days
• preventing users from accessing a website by sending a large number of link requests in a short period
• obtaining trade secret documents illegally
• pretending to be someone else by using stolen personal information to apply for a credit card
CSIS330 Module 15 Study Guide
