d94829 d94829
Test por , creado hace más de 1 año

CCNA Security Chapter 1 Exam

1713
4
0
d94829 d94829
Creado por d94829 d94829 hace más de 6 años
Cerrar

CCNA Security Chapter 1 Exam

Pregunta 1 de 24

1

What method can be used to mitigate ping sweeps?

Selecciona una de las siguientes respuestas posibles:

  • using encrypted or hashed authentication protocols

  • installing antivirus software on hosts

  • deploying antisniffer software on all network devices

  • blocking ICMP echo and echo-replies at the network edge

Explicación

Pregunta 2 de 24

1

What are the three major components of a worm attack? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

  • a penetration mechanism

  • an infecting vulnerability

  • a payload

  • an enabling vulnerability

  • a probing mechanism

  • a propagation mechanism

Explicación

Pregunta 3 de 24

1

Which statement accurately characterizes the evolution of threats to network security?

Selecciona una de las siguientes respuestas posibles:

  • Internal threats can cause even greater damage than external threats

  • Threats have become less sophisticated while the technical knowledge needed by an attacker has grown

  • Early Internet users often engaged in activities that would harm other users

  • Internet architects planned for network security from the beginning.

Explicación

Pregunta 4 de 24

1

What causes a buffer overflow?

Selecciona una de las siguientes respuestas posibles:

  • launching a security countermeasure to mitigate a Trojan horse

  • sending repeated connections such as Telnet to a particular device, thus denying other data sources.

  • downloading and installing too many software updates at one time

  • attempting to write more data to a memory location than that location can hold

  • sending too much information to two or more interfaces of the same device, thereby causing dropped packets

Explicación

Pregunta 5 de 24

1

What commonly motivates cybercriminals to attack networks as compared to hactivists or state-sponsored hackers?

Selecciona una de las siguientes respuestas posibles:

  • status among peers

  • fame seeking

  • financial gain

  • political reasons

Explicación

Pregunta 6 de 24

1

Which two network security solutions can be used to mitigate DoS attacks? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

  • virus scanning

  • intrusion protection systems

  • applying user authentication

  • antispoofing technologies

  • data encryption

Explicación

Pregunta 7 de 24

1

Which two statements characterize DoS attacks? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

  • They are difficult to conduct and are initiated only by very skilled attackers

  • They are commonly launched with a tool called L0phtCrack.

  • Examples include smurf attacks and ping of death attacks.

  • They attempt to compromise the availability of a network, host, or application

  • They always precede access attacks

Explicación

Pregunta 8 de 24

1

An attacker is using a laptop as a rogue access point to capture all network traffic from a targeted user. Which type of attack is this?

Selecciona una de las siguientes respuestas posibles:

  • trust exploitation

  • buffer overflow

  • man in the middle

  • port redirection

Explicación

Pregunta 9 de 24

1

What functional area of the Cisco Network Foundation Protection framework is responsible for device-generated packets required for network operation, such as ARP message exchanges and routing advertisements?

Selecciona una de las siguientes respuestas posibles:

  • data plane

  • control plane

  • management plane

  • forwarding plane

Explicación

Pregunta 10 de 24

1

What are the three components of information security ensured by cryptography? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

  • threat prevention

  • authorization

  • confidentiality

  • countermeasures

  • integrity

  • availability

Explicación

Pregunta 11 de 24

1

What is the primary method for mitigating malware?

Selecciona una de las siguientes respuestas posibles:

  • using encrypted or hashed authentication protocols

  • installing antivirus software on all hosts

  • blocking ICMP echo and echo-replies at the network edge

  • deploying intrusion prevention systems throughout the network

Explicación

Pregunta 12 de 24

1

What is an objective of a state-sponsored attack?

Selecciona una de las siguientes respuestas posibles:

  • to gain financial prosperity

  • to sell operation system vulnerabilities to other hackers

  • to gain attention

  • to right a perceived wrong

Explicación

Pregunta 13 de 24

1

What role does the Security Intelligence Operations (SIO) play in the Cisco SecureX architecture?

Selecciona una de las siguientes respuestas posibles:

  • identifying and stopping malicious traffic

  • authenticating users

  • enforcing policy

  • identifying applications

Explicación

Pregunta 14 de 24

1

What worm mitigation phase involves actively disinfecting infected systems?

Selecciona una de las siguientes respuestas posibles:

  • Treatment

  • containment

  • inoculation

  • quarantine

Explicación

Pregunta 15 de 24

1

How is a smurf attack conducted?

Selecciona una de las siguientes respuestas posibles:

  • by sending a large number of packets to overflow the allocated buffer memory of the target device

  • by sending a large number of ICMP requests to directed broadcast addresses from a spoofed source address on the same network

  • by sending a large number of TCP SYN packets to a target device from a spoofed source address

  • by sending an echo request in an IP packet larger than the maximum packet size of 65,535 bytes

Explicación

Pregunta 16 de 24

1

What is a characteristic of a Trojan horse as it relates to network security?

Selecciona una de las siguientes respuestas posibles:

  • Malware is contained in a seemingly legitimate executable program

  • Extreme quantities of data are sent to a particular network device interface.

  • An electronic dictionary is used to obtain a password to be used to infiltrate a key network device.

  • Too much information is destined for a particular memory block causing additional memory areas to be affected.

Explicación

Pregunta 17 de 24

1

What is the first step in the risk management process specified by the ISO/IEC?

Selecciona una de las siguientes respuestas posibles:

  • Create a security policy.

  • Conduct a risk assessment.

  • Inventory and classify IT assets.

  • Create a security governance model.

Explicación

Pregunta 18 de 24

1

What is the significant characteristic of worm malware?

Selecciona una de las siguientes respuestas posibles:

  • A worm can execute independently

  • A worm must be triggered by an event on the host system.

  • Worm malware disguises itself as legitimate software

  • Once installed on a host system, a worm does not replicate itself.

Explicación

Pregunta 19 de 24

1

Which condition describes the potential threat created by Instant On in a data center?

Selecciona una de las siguientes respuestas posibles:

  • when the primary firewall in the data center crashes

  • when an attacker hijacks a VM hypervisor and then launches attacks against other devices in the data center

  • when the primary IPS appliance is malfunctioning

  • when a VM that may have outdated security policies is brought online after a long period of inactivity

Explicación

Pregunta 20 de 24

1

What are the three core components of the Cisco Secure Data Center solution? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

  • mesh network

  • secure segmentation

  • visibility

  • threat defense

  • servers

  • infrastructure

Explicación

Pregunta 21 de 24

1

A disgruntled employee is using Wireshark to discover administrative Telnet usernames and passwords. What type of network attack does this describe?

Selecciona una de las siguientes respuestas posibles:

  • trust exploitation

  • denial of service

  • reconnaissance

  • port redirection

Explicación

Pregunta 22 de 24

1

Which two statements describe access attacks? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

  • Trust exploitation attacks often involve the use of a laptop to act as a rogue access point to capture and copy all network traffic in a public location, such as a wireless hotspot.

  • To detect listening services, port scanning attacks scan a range of TCP or UDP port numbers on a host

  • Buffer overflow attacks write data beyond the hallocated buffer memory to overwrite valid data or to exploit systems to execute malicious code.

  • Password attacks can be implemented by the use os brute-force attack methods, Trojan horse, or packet sniffers.

  • Port redirection attacks use a network adapter card in promiscuous mode to capture all network packets that are sent across a LAN.

Explicación

Pregunta 23 de 24

1

What is a ping sweep?

Selecciona una de las siguientes respuestas posibles:

  • a scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.

  • a software application that enables the capture of all network packets that are sent across a LAN

  • a query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain

  • a network scanning technique that indicates the live hosts in a range of IP addresses

Explicación

Pregunta 24 de 24

1

As a dedicated network security tool, an intrusion ________ system can provide detection and blocking of attacks in real time.

Selecciona una de las siguientes respuestas posibles:

  • prevention

  • nonprevention

Explicación

Anterior
Revisar respuesta
Siguiente