12 - Network Security

Question 1

What does an SSL stripping attack look for to perform an on-path attack?

Answer 1

An unencrypted HTTP connection

Question 2

Ben wants to observe malicious behavior targeted at multiple systems on a network. He sets up a variety of systems and instruments to allow him to capture copies of attack tools and to document all the attacks that are conducted. What attractant has he set up?

Answer 2

A Honeypot

Question 3

Valerie wants to replace the telnet access that she found still in use in her org. Which protocol should she use to replace it, and what port will it run on?

Answer 3

SSH, on Port 22

Question 4

James is concerned about preventing broadcast storms on his network. What are some useful solutions he can implement to prevent this?

Answer 4

Spanning Tree Protocols, Loop Prevention Features, and limited VLAN sizes can all reduce the potential for a broadcast storm.

Question 5

Chuck wants to provide route security for his org, and he wants to secure the BGP traffic that his routers rely on for route information. What should Chuck do?

Answer 5

Unfortunately, BGP does not have native security methods. Two solutions (SIDR and RPLS) have not been broadly adopted.

Question 6

Connor believes that there is an issue between his org’s network and a remote web server, and he wants to verify this by checking each hop along the route. Which tool should he use if he is testing from a Windows 10 system?

Answer 6

pathping

Question 7

Nick wants to display the ARP cache for a Windows system. What command should he run to display the cache?

Answer 7

arp /a

Question 8

Bart needs to asses whether a three-way TCP handshake is occurring between a Linux server and a Windows workstation. He believes that the workstation is sending a SYN but is not sure what’s occurring next. If he want to monitor traffic, and he knows that the Linux system doesn’t provide a GUI, what tool should he use to view the traffic from the workstation?

Answer 8

tcpdump

Question 9

What protocol is used to securely wrap many otherwise insecure protocols?

Answer 9

Transport Layer Security (TLS)

Question 10

Bonita has discovered that her org is running a service on TCP port 636. What secure protocol is most likely in use?

Answer 10

LDAPS

Question 11

Randy want to prevent DHCP attacks on his network. What secure protocol should he implement to have the greatest impact?

Answer 11

Unfortunately, there is no secure way to transmit across DHCP

Question 12

True or False: IPv6’s NAT implementation is insecure.

Answer 12

False

Question 13

Madhuri is designing a load-balancing configuration for her company and wants to keep a single node from being overloaded. What type of design will meet this need?

Answer 13

Active/active (it will spread the wealth to every node, thus ensuring that a singular node won’t be overloaded)

Question 14

What type of NAC will provide Isaac with the greatest amount of info about the systems that are connecting while also giving him the most amount of control of systems and their potential impact on other systems that are connected to the network?

Answer 14

Agent-based, pre-admission NAC

Question 15

Danielle wants to capture traffic from a network so that she can analyze a VoIP conversation. Which of the following tools will allow her to review the conversation most effectively?

• A network SIPper
• tcpdump
• Wireshark
• netcat

Answer 15

Wireshark

Question 16

Wayne is concerned that an on-path attack has been used against computers he is responsible for. What artifact is he most likely to find associated with this attack?

Answer 16

A Browser Plug-in

Question 17

Elle is implementing a VoIP telephony system and wants to use secure protocols. If she has already implemented SIPS, which other protocol is she most likely to use?

Answer 17

Secure Real-time Transfer Protocol (SRTP)

Question 18

What technique is used to ensure that DNSSEC-protected DNS info is trustworthy?

Answer 18

It is digitally signed

Question 19

Fred wants to ensure that the admin interfaces for the switches and routers are protected so that they cannot be accessed by attackers. What solution should he recommend as part of his org’s network design?

Answer 19

Out-of-Band Management