MGRADES
Chapter 10 - Security in Network Design
UPDATED ACTUAL Exam Questions and
CORRECT Answers
C - CORRECT ANSWER - Which adaptation of EAP utilizes EAP-MSCHAPv2 inside of
an encrypted TLS tunnel?
A. EAP-TLS
B. EAP-FAST
C. Protected EAP (PEAP)
D. LEAP
A - CORRECT ANSWER - The Group Policy utility can be opened by typing what name
into a Run box?
A. gpedit.msc
B. grppol.msc
C. secpol.msc
D. grouppol.msc
C - CORRECT ANSWER - In regards to the use of local authentication, what statement is
accurate?
A. Local authentication does not allow for strong enough passwords.
B. Local authentication provides the most security.
C. Local authentication is network and server failure tolerant.
D. Local authentication is scalable for large networks.
D - CORRECT ANSWER - What is NOT a variable that an network access control list can
filter traffic with?
A. The Transport layer protocol used for the packet.
B. The source or destination TCP/UDP port number in the packet.
, MGRADES
C. The Network layer protocol used for the packet.
D. The operating system used by the source or destination device.
false - CORRECT ANSWER - A stateless firewall inspects each incoming packet to
determine whether it belongs to a currently active connection.
C - CORRECT ANSWER - What statement regarding role-based access control is
accurate?
A. RBAC is the most restrictive method of access control.
B. RBAC allows users to decide for themselves who has access to that user's resources.
C. RBAC allows a network administrator to base privileges and permissions around a detailed
description of a user's roles or jobs.
D. RBAC organizes resources into hierarchical classifications, such as "confidential" or "top
secret".
C - CORRECT ANSWER - Enforcing a virtual security perimeter using a client's
geographic location is known by what term?
A. geohashing
B. geolocking
C. geofencing
D. geolocating
C - CORRECT ANSWER - What is a SIEM (Security Information and Event
Management) system utilized for?
A. It is an advanced intrusion protection system with a GUI-frontend.
B. It is a system that monitors security device hardware availability.
C. It is a system used to evaluate data from security devices and generate alerts.
D. It is an intellectual property protection software that prevents data links, and generates alerts.
Chapter 10 - Security in Network Design
UPDATED ACTUAL Exam Questions and
CORRECT Answers
C - CORRECT ANSWER - Which adaptation of EAP utilizes EAP-MSCHAPv2 inside of
an encrypted TLS tunnel?
A. EAP-TLS
B. EAP-FAST
C. Protected EAP (PEAP)
D. LEAP
A - CORRECT ANSWER - The Group Policy utility can be opened by typing what name
into a Run box?
A. gpedit.msc
B. grppol.msc
C. secpol.msc
D. grouppol.msc
C - CORRECT ANSWER - In regards to the use of local authentication, what statement is
accurate?
A. Local authentication does not allow for strong enough passwords.
B. Local authentication provides the most security.
C. Local authentication is network and server failure tolerant.
D. Local authentication is scalable for large networks.
D - CORRECT ANSWER - What is NOT a variable that an network access control list can
filter traffic with?
A. The Transport layer protocol used for the packet.
B. The source or destination TCP/UDP port number in the packet.
, MGRADES
C. The Network layer protocol used for the packet.
D. The operating system used by the source or destination device.
false - CORRECT ANSWER - A stateless firewall inspects each incoming packet to
determine whether it belongs to a currently active connection.
C - CORRECT ANSWER - What statement regarding role-based access control is
accurate?
A. RBAC is the most restrictive method of access control.
B. RBAC allows users to decide for themselves who has access to that user's resources.
C. RBAC allows a network administrator to base privileges and permissions around a detailed
description of a user's roles or jobs.
D. RBAC organizes resources into hierarchical classifications, such as "confidential" or "top
secret".
C - CORRECT ANSWER - Enforcing a virtual security perimeter using a client's
geographic location is known by what term?
A. geohashing
B. geolocking
C. geofencing
D. geolocating
C - CORRECT ANSWER - What is a SIEM (Security Information and Event
Management) system utilized for?
A. It is an advanced intrusion protection system with a GUI-frontend.
B. It is a system that monitors security device hardware availability.
C. It is a system used to evaluate data from security devices and generate alerts.
D. It is an intellectual property protection software that prevents data links, and generates alerts.
