CS409 Final Exam Questions With
Accurate Answers
Which technology allows scattered users to be logically grouped even when
they are connected to different physical switches? - ANSWER VLAN
Which protocol is used to prevent looping in a switch? - ANSWER STP
In an interview, you are asked to analyze the following statements regarding
secure network designs and choose the correct one. Which of the following
should you choose? - ANSWER Load balancers can detect and stop protocol
attacks directed at a server or application.
Which of the following is a deception instrument? - ANSWER Sinkhole
Which monitoring methodology will trigger the IDS if any application tries to
scan multiple ports? - ANSWER Heuristic monitoring
Which of the following is a network set up with intentional vulnerabilities? -
ANSWER Honeynet
As a cybersecurity specialist, you are asked to defend the web app hosted by
your enterprise from web application attacks like cross-site scripting, SQL
injections, etc. Which of the following actions should you take? - ANSWER You
should install a WAF.
Which of the following best describes an extranet? - ANSWER Private network
only accessed by an authorized party
The head of cybersecurity at your enterprise has asked you to set up an IDS that
can create the baseline of all system activities and raise an alarm whenever any
abnormal activities take place, without waiting to check the underlying cause.
Which of the following actions should you take? - ANSWER You should set up an
IDS with anomaly-based monitoring methodology.
Which of the following best describes DLP? - ANSWER DLP is used to prevent
leakage of confidential data.
Which of the following best describes a host-based firewall? - ANSWER A host-
based firewall is a software firewall that protects a single endpoint device.
, Sansa is a network security administrator at an enterprise. She is asked to take
appropriate steps to defend against a MAC address spoofing attack in the
enterprise network. Which of the following methods should Sansa apply? -
ANSWER Configure the switch so that only one port can be assigned per MAC
address
In an interview, Max was asked to tell one difference between a software firewall
and a virtual firewall. How should Max answer? - ANSWER Software firewalls are
locally installed on a device, whereas virtual firewalls run in the cloud.
As a cybersecurity expert, you are asked to take adequate measures to mitigate
DDoS attacks on your enterprise servers. Which of the following techniques
should you apply? - ANSWER You should set up a DNS sinkhole.
How do NACs ensure that a device is safe to connect to a secure network? -
ANSWER The NAC issues a health certificate, only allowing healthy devices to
connect to the secured network.
Which of the following tools can be used to secure multiple VMs? - ANSWER
Firewall vitual appliance
Which of the followign is a virtualization instance that uses OS components for
virtualization? - ANSWER Container
Which of the following best describes the cloud access security broker? -
ANSWER CASB ensures that security policies of the enterprise comply with the
cloud.
Kane was transferring files from a file transfer protocol (FTP) server to his local
machine simultaneously. He sniffed the traffic to find that only the control port
commands are encrypted, and the data port is not encrypted. What protocol did
Kane use to transfer the files? - ANSWER FTPS
Pat is asked to automate critical security functions like responding to detected
threat patterns in an enterprise network. Which of the following should be done
by Pat? - ANSWER Use software-device visibility
You decided to test a potential malware application by sandboxing. However,
you want to ensure that if the application is infected, it will not affect the host
operating system. What should you do to ensure that the host OS is protected? -
ANSWER Implement virtual machine escape protection
Which of the following protocol can be used for secure routing and switching? -
ANSWER IPsec
Accurate Answers
Which technology allows scattered users to be logically grouped even when
they are connected to different physical switches? - ANSWER VLAN
Which protocol is used to prevent looping in a switch? - ANSWER STP
In an interview, you are asked to analyze the following statements regarding
secure network designs and choose the correct one. Which of the following
should you choose? - ANSWER Load balancers can detect and stop protocol
attacks directed at a server or application.
Which of the following is a deception instrument? - ANSWER Sinkhole
Which monitoring methodology will trigger the IDS if any application tries to
scan multiple ports? - ANSWER Heuristic monitoring
Which of the following is a network set up with intentional vulnerabilities? -
ANSWER Honeynet
As a cybersecurity specialist, you are asked to defend the web app hosted by
your enterprise from web application attacks like cross-site scripting, SQL
injections, etc. Which of the following actions should you take? - ANSWER You
should install a WAF.
Which of the following best describes an extranet? - ANSWER Private network
only accessed by an authorized party
The head of cybersecurity at your enterprise has asked you to set up an IDS that
can create the baseline of all system activities and raise an alarm whenever any
abnormal activities take place, without waiting to check the underlying cause.
Which of the following actions should you take? - ANSWER You should set up an
IDS with anomaly-based monitoring methodology.
Which of the following best describes DLP? - ANSWER DLP is used to prevent
leakage of confidential data.
Which of the following best describes a host-based firewall? - ANSWER A host-
based firewall is a software firewall that protects a single endpoint device.
, Sansa is a network security administrator at an enterprise. She is asked to take
appropriate steps to defend against a MAC address spoofing attack in the
enterprise network. Which of the following methods should Sansa apply? -
ANSWER Configure the switch so that only one port can be assigned per MAC
address
In an interview, Max was asked to tell one difference between a software firewall
and a virtual firewall. How should Max answer? - ANSWER Software firewalls are
locally installed on a device, whereas virtual firewalls run in the cloud.
As a cybersecurity expert, you are asked to take adequate measures to mitigate
DDoS attacks on your enterprise servers. Which of the following techniques
should you apply? - ANSWER You should set up a DNS sinkhole.
How do NACs ensure that a device is safe to connect to a secure network? -
ANSWER The NAC issues a health certificate, only allowing healthy devices to
connect to the secured network.
Which of the following tools can be used to secure multiple VMs? - ANSWER
Firewall vitual appliance
Which of the followign is a virtualization instance that uses OS components for
virtualization? - ANSWER Container
Which of the following best describes the cloud access security broker? -
ANSWER CASB ensures that security policies of the enterprise comply with the
cloud.
Kane was transferring files from a file transfer protocol (FTP) server to his local
machine simultaneously. He sniffed the traffic to find that only the control port
commands are encrypted, and the data port is not encrypted. What protocol did
Kane use to transfer the files? - ANSWER FTPS
Pat is asked to automate critical security functions like responding to detected
threat patterns in an enterprise network. Which of the following should be done
by Pat? - ANSWER Use software-device visibility
You decided to test a potential malware application by sandboxing. However,
you want to ensure that if the application is infected, it will not affect the host
operating system. What should you do to ensure that the host OS is protected? -
ANSWER Implement virtual machine escape protection
Which of the following protocol can be used for secure routing and switching? -
ANSWER IPsec
