Intro to Network Security sixth ed
chapter 6 Questions And Answers.
A. router - Answer 1. Isabella is a security support manager for a large enterprise. In a recent
meeting, she was asked which of the standard networking devices already present on the
network could be configured to supplement the specific network security hardware devices that
were recently purchased. Which of these standard networking devices would Isabella
recommend?
A. router
B. hub
C. virtual private network
D. SIEM device
D. A bridge could permit access to the secure wired network from the unsecured wireless
network - Answer 2. Ximena noticed that Sofia had created a network bridge on her new
laptop between the unsecured wireless network and the organization's secure intranet. Ximena
explained to Sofia the problem associated with setting up the bridge. What did Ximena tell
Sofia?
A. A bridge will block packets between two different types of networks.
B. A bridge cannot be used on any Internet connection.
C. A bridge would block packets from reaching the Internet.
D. A bridge could permit access to the secure wired network from the unsecured wireless
network
C. date - Answer 3. Which of these would NOT be a filtering mechanism found in a firewall ACL
rule?
A. source address
B. direction
C. date
D. protocol
B. application-based firewall - Answer 4. Which of the following devices can identify the
application that send packets and then make decisions about filtering based on it?
A. Internet content filter
, A. intrusion detection - Answer 5. Which function does an Internet content filter NOT
perform?
A. intrusion detection
B. URL filtering
C. malware inspection
D. content inspection
B. It discards unsolicited packets. - Answer 6. How does network address translation (NAT)
improve security?
A. It filters based on protocol.
B. It discards unsolicited packets.
C. It masks the IP address of the NAT device.
D. NATs do not improve security.
A. Once the MAC address table is full the switch functions like a network hub. - Answer 7.
Francisco was asked by a student intern to explain the danger of a MAC flooding attack on a
switch. What would Francisco say?
A. Once the MAC address table is full the switch functions like a network hub.
B. A MAC flooding attack with filter to the local host computer's MAC-to-IP address tables and
prevent these hosts from reaching the network.
C. In a defense of a MAC flooding attack network routers will freeze and not permit any
incoming traffic.
D. A MAC flooding attack will prevent load balances from identifying the correct VIP of the
servers.
B. hub - Answer 8. Which device is easiest for an attacker to take advantage of to capture and
analyze packets?
A. router
B. hub
C. switch
D. load balancer
B. Cause the device to enter a fail-open mode. - Answer 9. Sebastian was explaining to his
supervisor why the enterprise needed to implement port security. His supervisor asked what
chapter 6 Questions And Answers.
A. router - Answer 1. Isabella is a security support manager for a large enterprise. In a recent
meeting, she was asked which of the standard networking devices already present on the
network could be configured to supplement the specific network security hardware devices that
were recently purchased. Which of these standard networking devices would Isabella
recommend?
A. router
B. hub
C. virtual private network
D. SIEM device
D. A bridge could permit access to the secure wired network from the unsecured wireless
network - Answer 2. Ximena noticed that Sofia had created a network bridge on her new
laptop between the unsecured wireless network and the organization's secure intranet. Ximena
explained to Sofia the problem associated with setting up the bridge. What did Ximena tell
Sofia?
A. A bridge will block packets between two different types of networks.
B. A bridge cannot be used on any Internet connection.
C. A bridge would block packets from reaching the Internet.
D. A bridge could permit access to the secure wired network from the unsecured wireless
network
C. date - Answer 3. Which of these would NOT be a filtering mechanism found in a firewall ACL
rule?
A. source address
B. direction
C. date
D. protocol
B. application-based firewall - Answer 4. Which of the following devices can identify the
application that send packets and then make decisions about filtering based on it?
A. Internet content filter
, A. intrusion detection - Answer 5. Which function does an Internet content filter NOT
perform?
A. intrusion detection
B. URL filtering
C. malware inspection
D. content inspection
B. It discards unsolicited packets. - Answer 6. How does network address translation (NAT)
improve security?
A. It filters based on protocol.
B. It discards unsolicited packets.
C. It masks the IP address of the NAT device.
D. NATs do not improve security.
A. Once the MAC address table is full the switch functions like a network hub. - Answer 7.
Francisco was asked by a student intern to explain the danger of a MAC flooding attack on a
switch. What would Francisco say?
A. Once the MAC address table is full the switch functions like a network hub.
B. A MAC flooding attack with filter to the local host computer's MAC-to-IP address tables and
prevent these hosts from reaching the network.
C. In a defense of a MAC flooding attack network routers will freeze and not permit any
incoming traffic.
D. A MAC flooding attack will prevent load balances from identifying the correct VIP of the
servers.
B. hub - Answer 8. Which device is easiest for an attacker to take advantage of to capture and
analyze packets?
A. router
B. hub
C. switch
D. load balancer
B. Cause the device to enter a fail-open mode. - Answer 9. Sebastian was explaining to his
supervisor why the enterprise needed to implement port security. His supervisor asked what
