WGU - MSCSIA - C700 - Secure Network
Design – 2024/25 - Practice Test
What is another term for a demilitarized zone (DMZ)? - Screened subnet is another
term for a demilitarized zone (DMZ). Two firewalls are used in this configuration: one
firewall resides between the public network and DMZ, and the other resides between
the DMZ and private network.
Screened subnet - is another term for a demilitarized zone (DMZ). Two firewalls are
used in this configuration: one firewall resides between the public network and DMZ,
and the other resides between the DMZ and private network.
A screened host is - a firewall that resides between the router that connects a network
to the Internet and the private network. The router acts as a screening device, and the
firewall is the screen host. This firewall employs two network cards and a single
screening router.
A dual-homed firewall is - one that has two network interfaces: one interface connects
to the Internet, and the other connects to the private network. One of the most common
drawbacks to dual-homed firewalls is that internal routing may accidentally become
enabled.
APIPA - ?
Infrastructure mode - allows wireless computers to connect to a LAN, a WAN, or the
Internet.
This means that infrastructure mode wireless computers can access all computers on
the LAN, WAN, and Internet.
Infrastructure mode is much more expensive to implement than ad hoc mode because
you must configure wireless access points.
While infrastructure mode is harder to set up and configure, it is much easier to manage
than ad hoc mode.
Ad hoc mode - allows wireless computers to be configured much more quickly than
infrastructure mode.
computers all participate in the same network.
This means that the
wireless computers can access each other, but cannot access network resources on a
LAN, WAN, or Internet.
,is much cheaper than infrastructure mode to implement.
In addition, it is easy to set up and configure and can provide better performance than
infrastructure mode.
However, it is difficult to manage.
Static IP addresses should not be implemented because the corporate network
contains a DHCP server. - static IP
APIPA should not be used for the same reason. In addition, APIPA is utilized only if a
DHCP server is not found. - APIPA
The Ethernet LAN technology does NOT use a multistation access unit (MAU) as its
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
central device - The Ethernet LAN technology does NOT use a multistation access unit
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
(MAU) as its central device
ii ii ii ii ii
Multi-station Access Unit (MAU) - Central device in a Token Ring network which passes
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
the Token from device to device serially in order and in a one-way direction.
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
Token Ring supports - full duplex transmission using carrier sense multiple access with
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
collision avoidance (CSMA/CA).
ii ii ii
ii Ethernet LAN technology - supports full duplex transmissions.
ii ii ii ii ii ii ii ii ii
It uses carrier sense multiple access with collision detection (CSMA/CD).
ii ii ii ii ii ii ii ii ii
It is defined by IEEE 802.3
ii ii ii ii ii
ii Full-duplex can - transmit and receive information in both directions simultaneously.
ii ii ii ii ii ii ii ii ii ii ii ii
synchronous transmission has - a start bit is used to indicate the beginning of
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
transmission.
ii ii
The start bit is followed by data bits, and then one or two stop bits follow to indicate the end
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
of the transmission.
ii ii ii
In synchronous transmission, - the transmitter and receiver have synchronized clocks
ii ii ii ii ii ii ii ii ii ii ii ii ii
and the data is sent in a continuous stream.
ii ii ii ii ii ii ii ii ii ii
The clocks are synchronized by using transitions in the data and, therefore, start and stop
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
bits are not required for each unit of data sent
ii ii ii ii ii ii ii ii ii ii
, Half-duplex transmissions are - transmissions in which information can be transmitted in
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
two directions, but only one direction at a time.
ii ii ii ii ii ii ii ii ii
You should complete all of the following steps to protect against war-driving attacks: - 1.
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
Change the default SSID.
ii ii ii ii
2. Disable SSID broadcasts.
ii ii ii
3. Configure the network to use
ii ii ii ii ii ii
authenticated access only.f
ii ii ii
4. Implement Wi-Fi Protected Access (WPA) or WPA2 instead of WEP.
ii ii ii ii ii ii ii ii ii ii
5. Reduce the access point signal strength.
ii ii ii ii ii ii
ii NetStumbler is a - common war-driving tool. ii ii ii ii ii ii ii ii
To idenfity unauthorized wireless access points you should - periodically complete a site
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
survey
ii
The reason you would disable SSID broadcasts is to - protect a wireless network from
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
hackers and to prevent unauthorized site surveys.
ii ii ii ii ii ii ii
ii WEP - Uses a X-bit or X-bit key - 40bit or 104 bit
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
ii WPA/WPA2 Personal - Uses a x-bit key - 256-bit pre-shared key ii ii ii ii ii ii ii ii ii ii ii ii
ii WPA/WPA2 Enterprise - Requires a - RADIUS server ii ii ii ii ii ii ii ii ii
Dictionary attack - occurs when a - hacker tries to guess passwords using a list of
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
common words
ii ii
DoS attack - occurs when a - server or resource is overloaded so that legitimate users
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
cannot access it
ii ii ii
Pharming attack - occurs when - traffic is redirected to a site that looks identical to the
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
intended site
ii ii
Phishing attack - occurs when - confidential information is requested by an entity that
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
appears to be legitimate
ii ii ii ii
WEP/WPA cracking - - Mathematical algorithms are used to determine the pre-shared
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
key used on the access point.
ii ii ii ii ii ii
Warchalking - - SSID and other authentication details regarding a wireless network are
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
written down in a prominent public place.
ii ii ii ii ii ii ii
ii Evil twin - - A rogue access point is configured with the same SSID as a valid access point.
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
Design – 2024/25 - Practice Test
What is another term for a demilitarized zone (DMZ)? - Screened subnet is another
term for a demilitarized zone (DMZ). Two firewalls are used in this configuration: one
firewall resides between the public network and DMZ, and the other resides between
the DMZ and private network.
Screened subnet - is another term for a demilitarized zone (DMZ). Two firewalls are
used in this configuration: one firewall resides between the public network and DMZ,
and the other resides between the DMZ and private network.
A screened host is - a firewall that resides between the router that connects a network
to the Internet and the private network. The router acts as a screening device, and the
firewall is the screen host. This firewall employs two network cards and a single
screening router.
A dual-homed firewall is - one that has two network interfaces: one interface connects
to the Internet, and the other connects to the private network. One of the most common
drawbacks to dual-homed firewalls is that internal routing may accidentally become
enabled.
APIPA - ?
Infrastructure mode - allows wireless computers to connect to a LAN, a WAN, or the
Internet.
This means that infrastructure mode wireless computers can access all computers on
the LAN, WAN, and Internet.
Infrastructure mode is much more expensive to implement than ad hoc mode because
you must configure wireless access points.
While infrastructure mode is harder to set up and configure, it is much easier to manage
than ad hoc mode.
Ad hoc mode - allows wireless computers to be configured much more quickly than
infrastructure mode.
computers all participate in the same network.
This means that the
wireless computers can access each other, but cannot access network resources on a
LAN, WAN, or Internet.
,is much cheaper than infrastructure mode to implement.
In addition, it is easy to set up and configure and can provide better performance than
infrastructure mode.
However, it is difficult to manage.
Static IP addresses should not be implemented because the corporate network
contains a DHCP server. - static IP
APIPA should not be used for the same reason. In addition, APIPA is utilized only if a
DHCP server is not found. - APIPA
The Ethernet LAN technology does NOT use a multistation access unit (MAU) as its
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
central device - The Ethernet LAN technology does NOT use a multistation access unit
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
(MAU) as its central device
ii ii ii ii ii
Multi-station Access Unit (MAU) - Central device in a Token Ring network which passes
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
the Token from device to device serially in order and in a one-way direction.
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
Token Ring supports - full duplex transmission using carrier sense multiple access with
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
collision avoidance (CSMA/CA).
ii ii ii
ii Ethernet LAN technology - supports full duplex transmissions.
ii ii ii ii ii ii ii ii ii
It uses carrier sense multiple access with collision detection (CSMA/CD).
ii ii ii ii ii ii ii ii ii
It is defined by IEEE 802.3
ii ii ii ii ii
ii Full-duplex can - transmit and receive information in both directions simultaneously.
ii ii ii ii ii ii ii ii ii ii ii ii
synchronous transmission has - a start bit is used to indicate the beginning of
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
transmission.
ii ii
The start bit is followed by data bits, and then one or two stop bits follow to indicate the end
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
of the transmission.
ii ii ii
In synchronous transmission, - the transmitter and receiver have synchronized clocks
ii ii ii ii ii ii ii ii ii ii ii ii ii
and the data is sent in a continuous stream.
ii ii ii ii ii ii ii ii ii ii
The clocks are synchronized by using transitions in the data and, therefore, start and stop
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
bits are not required for each unit of data sent
ii ii ii ii ii ii ii ii ii ii
, Half-duplex transmissions are - transmissions in which information can be transmitted in
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
two directions, but only one direction at a time.
ii ii ii ii ii ii ii ii ii
You should complete all of the following steps to protect against war-driving attacks: - 1.
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
Change the default SSID.
ii ii ii ii
2. Disable SSID broadcasts.
ii ii ii
3. Configure the network to use
ii ii ii ii ii ii
authenticated access only.f
ii ii ii
4. Implement Wi-Fi Protected Access (WPA) or WPA2 instead of WEP.
ii ii ii ii ii ii ii ii ii ii
5. Reduce the access point signal strength.
ii ii ii ii ii ii
ii NetStumbler is a - common war-driving tool. ii ii ii ii ii ii ii ii
To idenfity unauthorized wireless access points you should - periodically complete a site
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
survey
ii
The reason you would disable SSID broadcasts is to - protect a wireless network from
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
hackers and to prevent unauthorized site surveys.
ii ii ii ii ii ii ii
ii WEP - Uses a X-bit or X-bit key - 40bit or 104 bit
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
ii WPA/WPA2 Personal - Uses a x-bit key - 256-bit pre-shared key ii ii ii ii ii ii ii ii ii ii ii ii
ii WPA/WPA2 Enterprise - Requires a - RADIUS server ii ii ii ii ii ii ii ii ii
Dictionary attack - occurs when a - hacker tries to guess passwords using a list of
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
common words
ii ii
DoS attack - occurs when a - server or resource is overloaded so that legitimate users
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
cannot access it
ii ii ii
Pharming attack - occurs when - traffic is redirected to a site that looks identical to the
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
intended site
ii ii
Phishing attack - occurs when - confidential information is requested by an entity that
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
appears to be legitimate
ii ii ii ii
WEP/WPA cracking - - Mathematical algorithms are used to determine the pre-shared
ii ii ii ii ii ii ii ii ii ii ii ii ii ii
key used on the access point.
ii ii ii ii ii ii
Warchalking - - SSID and other authentication details regarding a wireless network are
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
written down in a prominent public place.
ii ii ii ii ii ii ii
ii Evil twin - - A rogue access point is configured with the same SSID as a valid access point.
ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii ii
