SY0-701 Exam 1 Questions with Correct
Answers
What is Telnet? What port does it use? Does it support TCP or UDP?
Telnet provides insecure remote control of another machine using a text-based environment
(older version of SSH)
Telnet uses port 23 and supports UDP
What is HTTP? What port does it use? Does it support TCP or UDP?
Hypertext Transfer Protocol is used for insecure web browsing.
It uses port 80 and supports TCP
What is LDAP? What port does it use? Does it support TCP or UDP?
Lightweight Directory Access Protocol facilitates directory services
Uses port 389 over a TCP connection
What is SNMTrap? What port does it use? Does it support TCP or UDP?
Sends SNMP Trap messages
It uses port 162 over a UDP connection
What is HTTPS? What port does it use? Does it support TCP or UDP?
HTTP Secure is used for secure web communication
It uses port 443 and supports TCP
,What is SNMP? What port does it use? Does it support TCP or UDP?
Simple Network Management Protocol manages network devices
Uses port 161 over a UDP connection
What is a CAM table?
■ Stores MAC addresses associated with switch ports
■ Vulnerable to MAC flooding attacks, which can cause the switch to fail open
Define the following terms:
Identification
Authentication
Authorization
Accounting
Identification
● User claims an identity using a unique identifier (e.g., username or email
address)
● Ensures user legitimacy and accuracy of provided information
Authentication
● Verifies the identity of a user, device, or system
● Typically involves validating user credentials against an authorized user
database
● Methods
○ Passwords
○ Biometrics
,○ Multi-factor authentication
Authorization
● Determines the permissions or access levels for authenticated users
● Ensures users have access only to appropriate resources
● Role-based access control often used
Accounting (Auditing)
● Tracks and records user activities
Information Security
Protecting data and information from unauthorized access, modification, disruption,
disclosure, and destruction
Information Systems Security
Protecting the systems (e.g., computers, servers, network devices) that hold and process
critical data
CIA Triad
Confidentiality
● Ensures information is accessible only to authorized personnel (e.g., encryption)
Integrity
● Ensures data remains accurate and unaltered (e.g., checksums)
Availability
● Ensures information and resources are accessible when needed (e.g., redundancy measures)
, Non-Repudiation
Guarantees that an action or event cannot be denied by the involved parties (e.g., digital
signatures)
CIANA Pentagon
An extension of the CIA triad with the addition of non-repudiation and authentication
Triple A's of Security
Authentication
● Verifying the identity of a user or system (e.g., password checks)
Authorization
● Determining actions or resources an authenticated user can access (e.g., permissions)
Accounting
● Tracking user activities and resource usage for audit or billing purposes
Define the following security control categories:
technical
managerial (aka administrative)
operational
physical
Technical Controls
● Technologies, hardware, and software mechanisms that are implemented to manage and
reduce risks
Answers
What is Telnet? What port does it use? Does it support TCP or UDP?
Telnet provides insecure remote control of another machine using a text-based environment
(older version of SSH)
Telnet uses port 23 and supports UDP
What is HTTP? What port does it use? Does it support TCP or UDP?
Hypertext Transfer Protocol is used for insecure web browsing.
It uses port 80 and supports TCP
What is LDAP? What port does it use? Does it support TCP or UDP?
Lightweight Directory Access Protocol facilitates directory services
Uses port 389 over a TCP connection
What is SNMTrap? What port does it use? Does it support TCP or UDP?
Sends SNMP Trap messages
It uses port 162 over a UDP connection
What is HTTPS? What port does it use? Does it support TCP or UDP?
HTTP Secure is used for secure web communication
It uses port 443 and supports TCP
,What is SNMP? What port does it use? Does it support TCP or UDP?
Simple Network Management Protocol manages network devices
Uses port 161 over a UDP connection
What is a CAM table?
■ Stores MAC addresses associated with switch ports
■ Vulnerable to MAC flooding attacks, which can cause the switch to fail open
Define the following terms:
Identification
Authentication
Authorization
Accounting
Identification
● User claims an identity using a unique identifier (e.g., username or email
address)
● Ensures user legitimacy and accuracy of provided information
Authentication
● Verifies the identity of a user, device, or system
● Typically involves validating user credentials against an authorized user
database
● Methods
○ Passwords
○ Biometrics
,○ Multi-factor authentication
Authorization
● Determines the permissions or access levels for authenticated users
● Ensures users have access only to appropriate resources
● Role-based access control often used
Accounting (Auditing)
● Tracks and records user activities
Information Security
Protecting data and information from unauthorized access, modification, disruption,
disclosure, and destruction
Information Systems Security
Protecting the systems (e.g., computers, servers, network devices) that hold and process
critical data
CIA Triad
Confidentiality
● Ensures information is accessible only to authorized personnel (e.g., encryption)
Integrity
● Ensures data remains accurate and unaltered (e.g., checksums)
Availability
● Ensures information and resources are accessible when needed (e.g., redundancy measures)
, Non-Repudiation
Guarantees that an action or event cannot be denied by the involved parties (e.g., digital
signatures)
CIANA Pentagon
An extension of the CIA triad with the addition of non-repudiation and authentication
Triple A's of Security
Authentication
● Verifying the identity of a user or system (e.g., password checks)
Authorization
● Determining actions or resources an authenticated user can access (e.g., permissions)
Accounting
● Tracking user activities and resource usage for audit or billing purposes
Define the following security control categories:
technical
managerial (aka administrative)
operational
physical
Technical Controls
● Technologies, hardware, and software mechanisms that are implemented to manage and
reduce risks
