Chapter 9 Flashcards
Your company hosts its own web server, and it allows consumers to make purchases via the server. The help line has been getting complaints that users are unable to access the secure portion of the website. You open the site and it seems fine, although the secure portion where transactions are completed is inaccessible. What is the most likely cause?
The firewall is blocking TCP port 80.
The firewall is blocking TCP port 443.
The security module of the web server is malfunctioning.
The web server is down.
B. For secure transactions, the web server should be using HTTPS, which uses port 443. If non-secure portions of the website work, then the server is fine. It’s most likely that the firewall is blocking inbound traffic on port 443.
Your manager wants you to install a networked Internet appliance that prevents network traffic–based attacks and includes anti-malware and anti-spam software. What should you install?
NIPS
NIDS
UTM
Endpoint management system
C. It sounds like the manager wants a unified threat management (UTM) device. They are designed to be one-stop network protection devices. Networked intrusion detection and prevention systems will detect network attacks but do not have anti-malware or anti-spam capabilities. An endpoint management system is not a security appliance.
You are installing a file server for the accounting department. Where should this file server be located on the network?
Outside of the firewall
In the DMZ
In the secure network
On the router
C. If the data on the server does not need to be accessed via the Internet, then the server should be in the most secure place possible, which is inside the firewall(s) in the secure network.
You have been asked to identify the right type of cloud service to help the team of developers to provide programming elements such as runtime environments. Which service do you recommend?
PaaS
IaaS
SaaS
DaaS
A. Platform as a Service (PaaS) is probably the right level of service for the developer team. It provides infrastructure, like IaaS, and also supplies needed programming elements.
Which of the following are services that a print server should provide? (Choose two.)
Accepting print jobs from clients
Turning off printers on demand
Providing clients with the appropriate printer driver during installation
Notifying users when the print job is complete
A, C. Print servers should make printers available to clients and accept print jobs. They also process print jobs and manage print priorities. Finally, they provide client computers with the right print drivers when the clients attempt to install the printer. They do not turn printers off on demand nor provide notification that a job has printed.
You are setting up a cloud contract with a provider. Your team needs the ability to increase capacity without intervention from the provider. What do you request?
Rapid elasticity
On-demand self-service
Resource pooling
Measured service
B. The ability to expand services without provider intervention is called on-demand self-service. Rapid elasticity means you can quickly increase capacity, but it usually requires supplier intervention. Resource pooling is taking resources from multiple machines and making them available as one pool. Measured service is how many suppliers track usage and charge accordingly.
Which type of server is responsible for preventing users from accessing websites with objectionable content?
Proxy
Web
DHCP
DNS
A. A proxy server can be configured to block access to websites that contain potentially dangerous or inflammatory material. Web servers host web pages, some of which may have objectionable content. DHCP servers provide clients with IP addresses, and DNS servers resolve host names to IP addresses.
Your company wants to move to a cloud provider to be able to scale resources quickly, but it is concerned about the security of confidential information. Which of the following types of cloud models might be the most appropriate for your company?
Public
Private
Community
Hybrid
D. A hybrid cloud provides the best of public and private clouds. You get the scalability and cost effectiveness of a public cloud but the security that you need for important files on the private portion of the cloud.
What does a DHCP server need to be configured with to operate properly?
DNS server
Scope
Range
DHCP relay agent
B. Every DHCP server needs to have a scope, which is the range of addresses available to clients, as well as other options that it can give to client computers. A DHCP server can optionally provide clients with the address of a DNS server. There is no DHCP range. A DHCP relay agent is a system configured on a subnet with no DHCP server that relays DHCP requests to the DHCP server.
You have been asked to advise a group of several universities that want to combine research efforts and store data in the cloud. Which type of cloud solution might be best for them?
Public
Private
Community
Hybrid
C. When multiple organizations with similar objectives want to combine efforts in a cloud, the best choice is generally a community cloud. This allows for the flexibility and scalability normally found in a public cloud, but it also limits the number of users to a smaller, trusted group.
When configuring a DNS server, administrators must create which of the following?
Zone file
Hosts file
Scope file
DNS proxy
A. DNS server records are contained in the zone file, which must be configured by administrators. A hosts file is an alternative to using DNS (but that does not work well when scaling to the Internet). A scope is created on DHCP servers. There is no DNS proxy.
Your manager wants to use the cloud because everyone seems to be talking about it. What should you include when you are listing the benefits of using the cloud? (Choose all that apply.)
Increased security
Increased scalability
Lower cost
Improved reliability
B, C, D. Cloud solutions are great for enhancing scalability and reliability while generally lowering costs. The biggest issue with cloud computing is security.
You are configuring two email servers on your company’s network. Which network protocol do the servers use to transfer mail to each other?
POP3
IMAP4
SNMP
SMTP
D. Simple Mail Transfer Protocol (SMTP) is used to transfer email between servers. POP3 and IMAP4 are used to download email. SNMP is Simple Network Management Protocol and not related to email.
You have been asked to configure a client-side virtualization solution with three guest OSs. Each one needs Internet access. How should you configure the solution in the most cost-effective way?
Three physical NICs
One physical NIC, three virtual NICs, and one virtual switch
One physical NIC, one virtual NIC, and three virtual switches
One physical NIC, three virtual NICs, and three virtual switches
B. Each virtual machine will use its own virtual NIC. The virtual NICs will communicate with a virtual switch managed by the hypervisor. The virtual switch will communicate with the physical NIC.
Which record type on a DNS server represents an IPv6 host?
A
MX
CNAME
AAAA
D. The AAAA (quad A) record is used to represent IPv6 hosts. IPv4 hosts need an A record. The CNAME record is used if one host has alias (multiple) names. MX is for a mail server.
