Chapter 13

Question 1

What type of function is being performed when a router screens packets based on information in the packet header?

Answer 1

router screening

Question 2

Which of the following describes a team of professionals whose job is to detect and respond to security incidents?

Answer 2

Security Operations Center (SOC)

Question 3

What device is designed specifically to reduce broadcast traffic that passes over a network and to choose the best path for moving those packets?

Answer 3

router

Question 4

To see what information is stored in RAM, a Cisco administrator would enter which command?

Answer 4

show running-config

Question 5

A firewall that blocks a Telnet session from leaving the network over TCP port 443 uses which of the following?

Answer 5

Application layer inspection

Question 6

Application layer inspection

Answer 6

False

Question 7

Which of the following describes a tool that collects logs and alerts from multiple devices for security analysis?

Answer 7

Security Information and Event Management (SIEM)

Question 8

Which of the following Cisco router components holds the router’s configuration file, and retains the configuration file’s information from being lost if the router is turned off?

Answer 8

NVRAM

Question 9

Firewalls are installed on a network to protect a company’s internal network from dangers on the Internet. True or False?

Answer 9

True

Question 10

Which type of Cisco access lists can restrict IP traffic entering or leaving a router’s interface based only on the source IP address?

Answer 10

Standard IP

Question 11

Web filters can prevent which type of malicious activity?

Answer 11

Drive-by download

Question 12

A large organization that is responsible for sensitive or critical data may elect to create which of the following to do damage assessment, risk remediation, and legal consultation?

Answer 12

Security Operations Center

Question 13

A honeypot might be used in a network for which of the following reasons? (Choose all that apply.)

Answer 13

Lure or entrap hackers so that law enforcement can be informed.

Gather information on new attacks and threats.

Distract hackers from attacking legitimate network resources.

Question 14

A router using a distance-vector routing protocol sends only new information to other routers on the network. True or False?

Answer 14

False

Question 15

A stateful packet inspection firewall keeps track of network connections by using which of the following?

Answer 15

A state table

Question 16

A standard IP access list can’t filter IP packets based on a destination address. True or False?

Answer 16

True

Question 17

Which of the following sits between the Internet and the internal network and is sometimes referred to as a perimeter network?

Answer 17

DMZ

Question 18

A benchmark is an industry consensus of best practices for writing access lists. True or False?

Answer 18

False

Question 19

What type of packet filtering records session-specific information about a network connection, including the ports a client uses?

Answer 19

Stateful

Question 20

Which of the following Cisco router components holds the router’s running configuration, routing tables, and buffers; this information is lost if the router is turned off?

Answer 20

RAM

Question 21

Which type of memory contains a minimum version of Cisco’s IOS that is used to boot the router if the Cisco IOS becomes corrupted?

Answer 21

Read-only memory

Question 22

A standard IP access list is restricted to source IP addresses.

Answer 22

True

Question 23

What type of an IDS is being used when it does not take any action to stop or prevent an activity occurring?

Answer 23

passive system

Question 24

Which type of routing protocol advertises only new paths to other routers on the network?

Answer 24

Link-state routing protocol

Question 25

What type of firewall inspects network traffic at a higher level in the OSI model than a traditional stateful packet inspection firewall does?

Answer 25

application-aware firewall

Question 26

What type of IDSs/IPSs monitors activity on network segments by sniffing traffic as it flows over the network and alerting a security administrator when something suspicious occurs?

Answer 26

Network-based

Question 27

Which component holds the IOS a Cisco router can use?

Answer 27

Flash memory

Question 28

Firewalls use which of the following to hide the internal network topology from outside users?

Answer 28

NAT

Question 29

What specific type of tools can assist teams by identifying attacks and indicators of compromise by collecting, aggregating, and correlating log and alert data from routers, firewalls, IDS/IPS, endpoint logs, Web filtering devices, and other security tools?

Answer 29

SIEM

Question 30

Which of the following Cisco components stores a router’s running configuration, routing tables, and buffers?

Answer 30

RAM