12761904
Descripción
Test por d94829 d94829, actualizado hace más de 1 año
|
Creado por d94829 d94829
hace más de 6 años
|
|
Pregunta 1
Pregunta
What method can be used to mitigate ping sweeps?
Respuesta
-
using encrypted or hashed authentication protocols
-
installing antivirus software on hosts
-
deploying antisniffer software on all network devices
-
blocking ICMP echo and echo-replies at the network edge
Pregunta 2
Pregunta
What are the three major components of a worm attack? (Choose three.)
Respuesta
-
a penetration mechanism
-
an infecting vulnerability
-
a payload
-
an enabling vulnerability
-
a probing mechanism
-
a propagation mechanism
Pregunta 3
Pregunta
Which statement accurately characterizes the evolution of threats to network security?
Respuesta
-
Internal threats can cause even greater damage than external threats
-
Threats have become less sophisticated while the technical knowledge needed by an attacker has grown
-
Early Internet users often engaged in activities that would harm other users
-
Internet architects planned for network security from the beginning.
Pregunta 4
Pregunta
What causes a buffer overflow?
Respuesta
-
launching a security countermeasure to mitigate a Trojan horse
-
sending repeated connections such as Telnet to a particular device, thus denying other data sources.
-
downloading and installing too many software updates at one time
-
attempting to write more data to a memory location than that location can hold
-
sending too much information to two or more interfaces of the same device, thereby causing dropped packets
Pregunta 5
Pregunta
What commonly motivates cybercriminals to attack networks as compared to hactivists or state-sponsored hackers?
Respuesta
-
status among peers
-
fame seeking
-
financial gain
-
political reasons
Pregunta 6
Pregunta
Which two network security solutions can be used to mitigate DoS attacks? (Choose two.)
Respuesta
-
virus scanning
-
intrusion protection systems
-
applying user authentication
-
antispoofing technologies
-
data encryption
Pregunta 7
Pregunta
Which two statements characterize DoS attacks? (Choose two.)
Respuesta
-
They are difficult to conduct and are initiated only by very skilled attackers
-
They are commonly launched with a tool called L0phtCrack.
-
Examples include smurf attacks and ping of death attacks.
-
They attempt to compromise the availability of a network, host, or application
-
They always precede access attacks
Pregunta 8
Pregunta
An attacker is using a laptop as a rogue access point to capture all network traffic from a targeted user. Which type of attack is this?
Respuesta
-
trust exploitation
-
buffer overflow
-
man in the middle
-
port redirection
Pregunta 9
Pregunta
What functional area of the Cisco Network Foundation Protection framework is responsible for device-generated packets required for network operation, such as ARP message exchanges and routing advertisements?
Respuesta
-
data plane
-
control plane
-
management plane
-
forwarding plane
Pregunta 10
Pregunta
What are the three components of information security ensured by cryptography? (Choose three.)
Respuesta
-
threat prevention
-
authorization
-
confidentiality
-
countermeasures
-
integrity
-
availability
Pregunta 11
Pregunta
What is the primary method for mitigating malware?
Respuesta
-
using encrypted or hashed authentication protocols
-
installing antivirus software on all hosts
-
blocking ICMP echo and echo-replies at the network edge
-
deploying intrusion prevention systems throughout the network
Pregunta 12
Pregunta
What is an objective of a state-sponsored attack?
Respuesta
-
to gain financial prosperity
-
to sell operation system vulnerabilities to other hackers
-
to gain attention
-
to right a perceived wrong
Pregunta 13
Pregunta
What role does the Security Intelligence Operations (SIO) play in the Cisco SecureX architecture?
Respuesta
-
identifying and stopping malicious traffic
-
authenticating users
-
enforcing policy
-
identifying applications
Pregunta 14
Pregunta
What worm mitigation phase involves actively disinfecting infected systems?
Respuesta
-
Treatment
-
containment
-
inoculation
-
quarantine
Pregunta 15
Pregunta
How is a smurf attack conducted?
Respuesta
-
by sending a large number of packets to overflow the allocated buffer memory of the target device
-
by sending a large number of ICMP requests to directed broadcast addresses from a spoofed source address on the same network
-
by sending a large number of TCP SYN packets to a target device from a spoofed source address
-
by sending an echo request in an IP packet larger than the maximum packet size of 65,535 bytes
Pregunta 16
Pregunta
What is a characteristic of a Trojan horse as it relates to network security?
Respuesta
-
Malware is contained in a seemingly legitimate executable program
-
Extreme quantities of data are sent to a particular network device interface.
-
An electronic dictionary is used to obtain a password to be used to infiltrate a key network device.
-
Too much information is destined for a particular memory block causing additional memory areas to be affected.
Pregunta 17
Pregunta
What is the first step in the risk management process specified by the ISO/IEC?
Respuesta
-
Create a security policy.
-
Conduct a risk assessment.
-
Inventory and classify IT assets.
-
Create a security governance model.
Pregunta 18
Pregunta
What is the significant characteristic of worm malware?
Respuesta
-
A worm can execute independently
-
A worm must be triggered by an event on the host system.
-
Worm malware disguises itself as legitimate software
-
Once installed on a host system, a worm does not replicate itself.
Pregunta 19
Pregunta
Which condition describes the potential threat created by Instant On in a data center?
Respuesta
-
when the primary firewall in the data center crashes
-
when an attacker hijacks a VM hypervisor and then launches attacks against other devices in the data center
-
when the primary IPS appliance is malfunctioning
-
when a VM that may have outdated security policies is brought online after a long period of inactivity
Pregunta 20
Pregunta
What are the three core components of the Cisco Secure Data Center solution? (Choose three.)
Respuesta
-
mesh network
-
secure segmentation
-
visibility
-
threat defense
-
servers
-
infrastructure
Pregunta 21
Pregunta
A disgruntled employee is using Wireshark to discover administrative Telnet usernames and passwords. What type of network attack does this describe?
Respuesta
-
trust exploitation
-
denial of service
-
reconnaissance
-
port redirection
Pregunta 22
Pregunta
Which two statements describe access attacks? (Choose two.)
Respuesta
-
Trust exploitation attacks often involve the use of a laptop to act as a rogue access point to capture and copy all network traffic in a public location, such as a wireless hotspot.
-
To detect listening services, port scanning attacks scan a range of TCP or UDP port numbers on a host
-
Buffer overflow attacks write data beyond the hallocated buffer memory to overwrite valid data or to exploit systems to execute malicious code.
-
Password attacks can be implemented by the use os brute-force attack methods, Trojan horse, or packet sniffers.
-
Port redirection attacks use a network adapter card in promiscuous mode to capture all network packets that are sent across a LAN.
Pregunta 23
Pregunta
What is a ping sweep?
Respuesta
-
a scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.
-
a software application that enables the capture of all network packets that are sent across a LAN
-
a query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain
-
a network scanning technique that indicates the live hosts in a range of IP addresses
Pregunta 24
Pregunta
As a dedicated network security tool, an intrusion ________ system can provide detection and blocking of attacks in real time.
Respuesta
-
prevention
-
nonprevention
¿Quieres crear tus propios Tests gratis con GoConqr? Más información.