EXAM LIST TOPIC QUESTIONS

Question 1

Three components of information security?

Answer 1

Confidentiality - Only authorized individuals, entities, or processes can access sensitive information.

Integrity – This refers to the protection of data from unauthorized alteration.

Availability - Authorized users must have uninterrupted access to the network resources and data that they require.

Network data can be encrypted (made unreadable to unauthorized users) using various cryptography applications. The conversation between two IP phone users can be encrypted. The files on a computer can also be encrypted. These are just a few examples. Cryptography can be used almost anywhere that there is data communication. In fact, the trend is toward all communication being encrypted.

Question 2

Network Interface Card (NIC)

Answer 2

A NIC physically connects the end device to the network.

Question 3

Physical Port

Answer 3

A connector or outlet on a networking device where the media connects to an end device or another networking device.

Question 4

Interface

Answer 4

Specialized ports on a networking device that connect to individual networks. Because routers connect networks, the ports on a router are referred to as network interfaces.

Question 5

Topology diagrams

Answer 5

Mandatory documentation for anyone working with a network. They provide a visual map of how the network is connected. There are two types of topology diagrams: physical and logical.

Question 6

Physical Topology Diagrams

Answer 6

Illustrate the physical location of intermediary devices and cable installation. You can see that the rooms in which these devices are located are labeled in this physical topology.

Question 7

Logical Topology Diagrams

Answer 7

illustrate devices, ports, and the addressing scheme of the network.

Question 8

Small office and home office (SOHO) networks

Answer 8

allow people to work from home, or a remote office. Many self-employed workers use these types of networks to advertise and sell products, order supplies, and communicate with customers.

Question 9

Small Home Networks

Answer 9

Small home networks connect a few computers to each other and to the internet.

Question 10

Medium to Large Networks

Answer 10

Medium to large networks, such as those used by corporations and schools, can have many locations with hundreds or thousands of interconnected hosts.

Question 11

World Wide Networks

Answer 11

The internet is a network of networks that connects hundreds of millions of computers world-wide.

Question 12

The two most common types of network infrastructures?

Answer 12

Local Area Networks (LANs), and Wide Area Networks (WANs).

A LAN is a network infrastructure that provides access to users and end devices in a small geographical area.

A WAN is a network infrastructure that provides access to other networks over a wide geographical area, which is typically owned and managed by a larger corporation or a telecommunications service provider.

Question 13

A hierarchical LAN design includes?

Answer 13

Access, distribution, and core layers

Access layer provides endpoints and users direct access to the network.

Distribution layer aggregates access layers and provides connectivity to services.

Core layer provides connectivity between distribution layers for large LAN environments.

Question 14

Traffic originating from the private network

Answer 14

Inspected as it travels toward the public or DMZ network. This traffic is permitted with little or no restriction.

Question 15

Inspected traffic returning from the DMZ or public network to the private network is

Answer 15

Permitted.

Question 16

A demilitarized zone (DMZ) is a

Answer 16

Firewall design where there is typically one inside interface connected to the private network, one outside interface connected to the public network, and one DMZ interface.

Question 17

Traffic originating from the DMZ network and traveling to the private network

Answer 17

usually blocked.

Question 18

Traffic originating from the DMZ network and traveling to the public network

Answer 18

is selectively permitted based on service requirements.

Question 19

Traffic originating from the public network and traveling toward the DMZ

Answer 19

is selectively permitted and inspected. This type of traffic is typically email, DNS, HTTP, or HTTPS traffic.

Question 20

Return traffic from the DMZ to the public network

Answer 20

is dynamically permitted.

Question 21

Traffic originating from the public network and traveling to the private network

Answer 21

is blocked.

Question 22

Zone-based policy firewalls (ZPFs)

Answer 22

use the concept of zones to provide additional flexibility.