1|Page
CS409 FINAL EXAM ACCURATE AND FREQUENTLY
TESTED QUESTIONS AND 100% CORRECT
ANSWERS|| LATEST AND COMPLETE UPDATE WITH
EXPERT VERIFIED SOLUTIONS|| SURE PASS
Which technology allows scattered users to be logically grouped even when they
are connected to different physical switches? - ANSWER: VLAN
Which protocol is used to prevent looping in a switch? - ANSWER: STP
In an interview, you are asked to analyze the following statements regarding secure
network designs and choose the correct one. Which of the following should you
choose? - ANSWER: Load balancers can detect and stop protocol attacks directed
at a server or application.
Which of the following is a deception instrument? - ANSWER: Sinkhole
Which monitoring methodology will trigger the IDS if any application tries to scan
multiple ports? - ANSWER: Heuristic monitoring
Which of the following is a network set up with intentional vulnerabilities? -
ANSWER: Honeynet
As a cybersecurity specialist, you are asked to defend the web app hosted by your
enterprise from web application attacks like cross-site scripting, SQL injections,
etc. Which of the following actions should you take? - ANSWER: You should
install a WAF.
Which of the following best describes an extranet? - ANSWER: Private network
only accessed by an authorized party
,2|Page
The head of cybersecurity at your enterprise has asked you to set up an IDS that
can create the baseline of all system activities and raise an alarm whenever any
abnormal activities take place, without waiting to check the underlying cause.
Which of the following actions should you take? - ANSWER: You should set up
an IDS with anomaly-based monitoring methodology.
Which of the following best describes DLP? - ANSWER: DLP is used to prevent
leakage of confidential data.
Which of the following best describes a host-based firewall? - ANSWER: A host-
based firewall is a software firewall that protects a single endpoint device.
Sansa is a network security administrator at an enterprise. She is asked to take
appropriate steps to defend against a MAC address spoofing attack in the
enterprise network. Which of the following methods should Sansa apply? -
ANSWER: Configure the switch so that only one port can be assigned per MAC
address
In an interview, Max was asked to tell one difference between a software firewall
and a virtual firewall. How should Max answer? - ANSWER: Software firewalls
are locally installed on a device, whereas virtual firewalls run in the cloud.
As a cybersecurity expert, you are asked to take adequate measures to mitigate
DDoS attacks on your enterprise servers. Which of the following techniques
should you apply? - ANSWER: You should set up a DNS sinkhole.
How do NACs ensure that a device is safe to connect to a secure network? -
ANSWER: The NAC issues a health certificate, only allowing healthy devices to
connect to the secured network.
, 3|Page
Which of the following tools can be used to secure multiple VMs? - ANSWER:
Firewall vitual appliance
Which of the followign is a virtualization instance that uses OS components for
virtualization? - ANSWER: Container
Which of the following best describes the cloud access security broker? -
ANSWER: CASB ensures that security policies of the enterprise comply with the
cloud.
Kane was transferring files from a file transfer protocol (FTP) server to his local
machine simultaneously. He sniffed the traffic to find that only the control port
commands are encrypted, and the data port is not encrypted. What protocol did
Kane use to transfer the files? - ANSWER: FTPS
Pat is asked to automate critical security functions like responding to detected
threat patterns in an enterprise network. Which of the following should be done by
Pat? - ANSWER: Use software-device visibility
You decided to test a potential malware application by sandboxing. However, you
want to ensure that if the application is infected, it will not affect the host operating
system. What should you do to ensure that the host OS is protected? - ANSWER:
Implement virtual machine escape protection
Which of the following protocol can be used for secure routing and switching? -
ANSWER: IPsec
You are a security consultant. An enterprise client contacted you because their mail
domain is blocked due to an unidentified entity using it to send spam. How should
CS409 FINAL EXAM ACCURATE AND FREQUENTLY
TESTED QUESTIONS AND 100% CORRECT
ANSWERS|| LATEST AND COMPLETE UPDATE WITH
EXPERT VERIFIED SOLUTIONS|| SURE PASS
Which technology allows scattered users to be logically grouped even when they
are connected to different physical switches? - ANSWER: VLAN
Which protocol is used to prevent looping in a switch? - ANSWER: STP
In an interview, you are asked to analyze the following statements regarding secure
network designs and choose the correct one. Which of the following should you
choose? - ANSWER: Load balancers can detect and stop protocol attacks directed
at a server or application.
Which of the following is a deception instrument? - ANSWER: Sinkhole
Which monitoring methodology will trigger the IDS if any application tries to scan
multiple ports? - ANSWER: Heuristic monitoring
Which of the following is a network set up with intentional vulnerabilities? -
ANSWER: Honeynet
As a cybersecurity specialist, you are asked to defend the web app hosted by your
enterprise from web application attacks like cross-site scripting, SQL injections,
etc. Which of the following actions should you take? - ANSWER: You should
install a WAF.
Which of the following best describes an extranet? - ANSWER: Private network
only accessed by an authorized party
,2|Page
The head of cybersecurity at your enterprise has asked you to set up an IDS that
can create the baseline of all system activities and raise an alarm whenever any
abnormal activities take place, without waiting to check the underlying cause.
Which of the following actions should you take? - ANSWER: You should set up
an IDS with anomaly-based monitoring methodology.
Which of the following best describes DLP? - ANSWER: DLP is used to prevent
leakage of confidential data.
Which of the following best describes a host-based firewall? - ANSWER: A host-
based firewall is a software firewall that protects a single endpoint device.
Sansa is a network security administrator at an enterprise. She is asked to take
appropriate steps to defend against a MAC address spoofing attack in the
enterprise network. Which of the following methods should Sansa apply? -
ANSWER: Configure the switch so that only one port can be assigned per MAC
address
In an interview, Max was asked to tell one difference between a software firewall
and a virtual firewall. How should Max answer? - ANSWER: Software firewalls
are locally installed on a device, whereas virtual firewalls run in the cloud.
As a cybersecurity expert, you are asked to take adequate measures to mitigate
DDoS attacks on your enterprise servers. Which of the following techniques
should you apply? - ANSWER: You should set up a DNS sinkhole.
How do NACs ensure that a device is safe to connect to a secure network? -
ANSWER: The NAC issues a health certificate, only allowing healthy devices to
connect to the secured network.
, 3|Page
Which of the following tools can be used to secure multiple VMs? - ANSWER:
Firewall vitual appliance
Which of the followign is a virtualization instance that uses OS components for
virtualization? - ANSWER: Container
Which of the following best describes the cloud access security broker? -
ANSWER: CASB ensures that security policies of the enterprise comply with the
cloud.
Kane was transferring files from a file transfer protocol (FTP) server to his local
machine simultaneously. He sniffed the traffic to find that only the control port
commands are encrypted, and the data port is not encrypted. What protocol did
Kane use to transfer the files? - ANSWER: FTPS
Pat is asked to automate critical security functions like responding to detected
threat patterns in an enterprise network. Which of the following should be done by
Pat? - ANSWER: Use software-device visibility
You decided to test a potential malware application by sandboxing. However, you
want to ensure that if the application is infected, it will not affect the host operating
system. What should you do to ensure that the host OS is protected? - ANSWER:
Implement virtual machine escape protection
Which of the following protocol can be used for secure routing and switching? -
ANSWER: IPsec
You are a security consultant. An enterprise client contacted you because their mail
domain is blocked due to an unidentified entity using it to send spam. How should
