Quiz 1

Question 1

A company has several sales offices distributed within a city. Each sales office has a SOHO network. What are two security features that are commonly found in such a network configuration? (Choose two.)

a.
Virtual Security Gateway within Cisco Nexus switches

b.
WPA2

c.
port security on user facing ports

d.
Cisco ASA firewall

e.
biometric verifications

Answer 1

b.
WPA2

c.
port security on user facing ports

Question 2

What is an objective of a state-sponsored attack?

a.
to gain attention

b.
to gain financial prosperity

c.
to right a perceived wrong

d.
to sell operating system vulnerabilities to other hackers

Answer 2

c.
to right a perceived wrong

Question 3

used to probe and test a firewall’s robustness using specially made forged packets.

Forensic Tools
Rootkit Detectors Tools
Packet Crafting Tools
Packet Sniffers
Network Scanning & Hacking Tools
Vulnerability Exploitation Tools
Debuggers Tools

Answer 3

Packet Crafting Tools

Question 4

used to capture and analyze packets within traditional Ethernet LANs or WANS.

Forensic Tools
Rootkit Detectors Tools
Packet Crafting Tools
Packet Sniffers
Network Scanning & Hacking Tools
Vulnerability Exploitation Tools
Debuggers Tools

Answer 4

Packet Sniffers

Question 5

used to probe network devices, servers, and hosts for open TCP or UDP ports.

Forensic Tools
Rootkit Detectors Tools
Packet Crafting Tools
Packet Sniffers
Network Scanning & Hacking Tools
Vulnerability Exploitation Tools
Debuggers Tools

Answer 5

Network Scanning & Hacking Tools

Question 6

used by black hats to reverse engineer binary files when writing exploits.

Forensic Tools
Rootkit Detectors Tools
Packet Crafting Tools
Packet Sniffers
Network Scanning & Hacking Tools
Vulnerability Exploitation Tools
Debuggers Tools

Answer 6

Debuggers Tools

Question 7

Which security measure is best used to limit the success of a reconnaissance attack from within a campus area network?

a.
Implement encryption for sensitive traffic.

b.
Implement a firewall at the edge of the network.

c.
Implement access lists on the border router.

d.
Implement restrictions on the use of ICMP echo-reply messages.

Answer 7

not c

Question 8

What is the purpose of a reconnaissance attack on a computer network?

a.
to gather information about the target network and system

b.
to redirect data traffic so that it can be monitored

c.
to prevent users from accessing network resources

d.
to steal data from the network servers

Answer 8

a.
to gather information about the target network and system

Question 9

What are two data protection functions provided by MDM? (Choose two.)

a.
quarantine

b.
remote wiping

c.
physical security

d.
PIN locking

e.
inoculation

Answer 9

b.
remote wiping

d.
PIN locking

Question 10

What is a ping sweep?

a.
a scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.

b.
a software application that enables the capture of all network packets that are sent across a LAN.

c.
a query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain.

d.
a network scanning technique that indicates the live hosts in a range of IP addresses.

Answer 10

d.
a network scanning technique that indicates the live hosts in a range of IP addresses.

Question 11

Which security implementation will provide management plane protection for a network device?

a.
access control lists

b.
antispoofing

c.
role-based access control

d.
routing protocol authentication

Answer 11

c.
role-based access control

Question 12

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes the risk of using social networking?

a.
data loss through access to personal or corporate instant messaging and social media sites

b.
gaining illegal access to corporate data by stealing passwords or cracking weak passwords

c.
sensitive data lost through access to the cloud that has been compromised due to weak security settings

d.
the retrieval of confidential or personal information from a lost or stolen device that was not configured to use encryption software

Answer 12

a.
data loss through access to personal or corporate instant messaging and social media sites

Question 13

Payment is usually made using wire transfer or crypto currencies such as Bitcoin.

Ransomware
Worm
Rootkit
Adware
Spyware

Answer 13

Ransomware

Question 14

using pop-up web browser windows, new toolbars, or unexpectedly redirect a webpage to a different website.

Ransomware
Worm
Rootkit
Adware
Spyware

Answer 14

Adware

Question 15

very difficult to detect because they can alter firewall, system files, and even OS commands to conceal their presence.

Ransomware
Worm
Rootkit
Adware
Spyware

Answer 15

Rootkit

Question 16

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes the risk of access to removable media?

a.
data loss through access to personal or corporate instant messaging and social media sites

b.
the potential of causing great damage because of direct access to the building and its infrastructure devices

c.
the unauthorized transfer of data containing valuable corporate information to a USB drive

d.
sensitive data lost through access to the cloud that has been compromised due to weak security settings

Answer 16

c.
the unauthorized transfer of data containing valuable corporate information to a USB drive

Question 17

Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

a.
RouterA(config)# login block-for 10 attempts 2 within 30

b.
RouterA(config)# login block-for 2 attempts 30 within 10

c.
RouterA(config)# login block-for 30 attempts 2 within 10

d.
RouterA(config)# login block-for 30 attempts 10 within 2

Answer 17

c.
RouterA(config)# login block-for 30 attempts 2 within 10

Question 18

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes an attack vector?

a.
the path by which a threat actor can gain access to a server, host, or network

b.
gaining illegal access to corporate data by stealing passwords or cracking weak passwords

c.
sensitive data lost through access to the cloud that has been compromised due to weak security settings

d.
the potential of causing great damage because of direct access to the building and its infrastructure devices

Answer 18

a.
the path by which a threat actor can gain access to a server, host, or network

Question 19

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes an attack vector?

a.
the unauthorized transfer of data containing valuable corporate information to a USB drive

b.
the path by which a threat actor can gain access to a server, host, or network

c.
data loss through access to personal or corporate instant messaging and social media sites

d.
intercepted emails that reveal confidential corporate or personal information

Answer 19

b.
the path by which a threat actor can gain access to a server, host, or network

Question 20

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes the risk of access to cloud storage devices?

a.
the retrieval of confidential or personal information from a lost or stolen device that was not configured to use encryption software

b.
gaining illegal access to corporate data by stealing passwords or cracking weak passwords

c.
intercepted emails that reveal confidential corporate or personal information

d.
sensitive data lost through access to the cloud that has been compromised due to weak security settings

Answer 20

d.
sensitive data lost through access to the cloud that has been compromised due to weak security settings

Question 21

What is a characteristic of a Trojan horse as it relates to network security?

a.
Malware is contained in a seemingly legitimate executable program.

b.
An electronic dictionary is used to obtain a password to be used to infiltrate a key network device.

c.
Too much information is destined for a particular memory block, causing additional memory areas to be affected.

d.
Extreme quantities of data are sent to a particular network device interface.

Answer 21

a.
Malware is contained in a seemingly legitimate executable program.

Question 22

What role does the Security Intelligence Operations (SIO) play in the Cisco SecureX architecture?

a.
identifying applications

b.
identifying and stopping malicious traffic

c.
authenticating users

d.
enforcing policy

Answer 22

b.
identifying and stopping malicious traffic

Question 23

A network administrator enters the service password-encryption command into the configuration mode of a router. What does this command accomplish?

a.
This command automatically encrypts passwords in configuration files that are currently stored in NVRAM.

b.
This command enables a strong encryption algorithm for the enable secret password command.

c.
This command provides an exclusive encrypted password for external service personnel who are required to do router maintenance.

d.
This command prevents someone from viewing the running configuration passwords.

e.
This command encrypts passwords as they are transmitted across serial WAN links.

Answer 23

not a

Question 24

There are two major types of DoS attacks defined in Cisco Network Academy. Explain with examples using your own words.

Answer 24

Answer text
Overwhelming quantity of traffic. In this DoS attack, it sends out a huge amount of traffic to a server in which it cannot handle, thus, resulting to being confused of what to do next and not doing its proper job. Example, when a threat actor continuously send a ping, crashing the server. It can also used a ping of death, in which it gives a huge ping exceeding what the server is capable of.

Maliciously formatted packet. In this DoS attack, it formats the packet to confused most commonly the IPS. Example, it can send an extra bit to the packet, or change something there from ASCII to Unicode.

Question 25

According to Cisco Network Academy, what are the three components of a worm attack? Briefly describe each of them.

Answer 25

Answer text
enabling vulnerabilities - this is the first step of how a worm attacks. In this case, once the worm is in the network or in the computer, it searches for the vulnerabilities that is compliance to what and how the worm is programmed.

propagation mechanism - then, it will spread once it found its weakness (vulnerability), the other computers who has the same attributes to those who are infected will also now be infected and will be used to spread it more.

payload - payload is the action taken as a result of the first two steps. It is like a countermeasure but from the worm to the targeted network and computers.

Question 26

Cisco uses View to set up role-based CLI administration access control. Explain the major differences among view, root view, and superview.

Answer 26

Answer text
root view - in the root view, it can create views and superviews while in view and superview cannot. Here once the AAA is enabled, it can make the CLI and superview. Root view also functions like privilege level 15 except that the level 15 cannot create view and superview.

view or CLI - in view, it can now create specific commands that is only for that specific view / CLI. It can have a range of 1 - 65535 views. This is used for the specified roles of which commands you want to assign to that view.

superview - in superview, you can have a cli in a multiple superviews. With this, it is more flexible and granular. Also, you can access all the commands in view/CLI only if you are in that within superview. You can also access other superviews using password or go from CLI to superview.

Major difference is that view and superview will not exist without going through root view. Once in root view, it then now can create views /CLI and superview. Superview will not exist without the views /CLI.

Question 27

In the Network Academy, Cisco mentioned that data center physical security can be divided into two areas. Explain these two security areas with examples using your own words.

Answer 27

Answer text
Inside perimeter areas consist of security traps, biometrics / facial recognition, ID. It also has their heat and aircon ventilation since data centers hold various large amount of data, also has fire alarms. Outside perimeter areas includes gates, fences, guards. Both have the continuous surveillance camera installed.

Comment:
Explain with examples, not just list the examples