SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Security
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. An application layer gateway works at this layer of the OSI model
null session
allow by default
repeater
application
2. A complete transfer of all DNS zone information from one server to another
zone transfer
land attack
fraggle
SYN flood
3. A method - used by switches and email servers - of delivering messages which are temporarily held by an intermediary before being sent to their final destination
store and forward
NIDS network connections
content filter
10Base5
4. Most common DMZ implementation using three firewall interfaces (internet - intranet - DMZ)
multiple interface firewall
repeater
layered
0 - 1023
5. A firewall that checks all layers of a packet including content - verifying an expected response to a current communication session - also call a deep packet inspection
broadcast domain
0 - 1023
stateful inspection
NIDS network connections
6. One device per network segment - does not use local system resources - can't examine encrypted traffic - OS independent - less expensive
knowledge based
NIDS
source - destination - protocol
packet filter
7. A locked down/hardened host on the public side of the firewall highly exposed to attacks (i.e. web server - email server)
hub
bastion host
screened subnet
replay
8. IP - email - website - DNS - and ARP
tcp/ip hijacking
PBX (Private Branch Exchange)
spoofing attacks
stateful inspection
9. Twisted pair cable with speed capability of 1Gbps
bastion host
cat5
protocol analyzer
smurf
10. A physical or logical subnetwork that houses systems accessible to a larger untrusted network - usually the Internet - also known as DMZ
screened subnet
IP spoofing
teardrop
bastion host
11. Amplifies the signal of incoming packets before broadcasting them to the network
switch
port address translation
repeater
multiple interface firewall
12. Twisted pair cable with speed capability of 10Mbps
switch
DoS attacks
multiple interface firewall
cat3
13. IPS response method - terminate process/session - block/reject and redirect network traffic
layered
NAT
man in the middle and replay
active
14. An attacker redirects valid request to malicious sites by feeding a DNS server altered records which are retained in its cache
DNS spoofing
spoofing
content filter
switch
15. Head of a packet contains...
ARP
risk mitigation
source - destination - protocol
10base2
16. Cable designed for transmission at higher speeds (100Mbps - 2Gbps) and longer distances (2km) - expensive -eliminates signal tapping
twisted pair
firewall architectures
fiber optic
coaxial
17. Multiple network defense components are placed throughout the organizations assets and the network is properly segmented
defense in depth
NIPS
proxy
fiber optic
18. A logical group of computers connected via a switch/hub that share the same network prefix in their IP address
spoofing
ping of death
website spoofing
subnet
19. Promiscuous NIC to sniff passing traffic - admin NIC to send alerts to centralized management system
man in the middle
promiscuous
NIDS network connections
hub
20. A pool of public IP addresses is shared by a collection of private IP addresses
store and forward
10base2
dynamic NAT
twisted pair
21. IDS that relies on the identification of known attack signatures
protocol
knowledge based
tcp/ip hijacking
proxy
22. A packet filtering firewall works at this layer of the OSI model
10Base5
network
port
fraggle
23. Type of IP addresses not routed on the internet: 10.x.x.x - 172.16.x.x - 192.168.x.x
private
active
false negative
behavior based
24. A DoS attack that subverts the normal "three way handshake" of TCP/IP by sending SYN packets - but no corresponding ACK packets
honeynet
10Base5
ARP
SYN flood
25. Attack where an attacker intercepts traffic and tricks parties at either end into believing they are communicating with each other
proxy
0 - 1023
knowledge based
man in the middle
26. Bbenign activity reported as malicious
router
DMZ
false positive
knowledge based
27. A flaw in TCP/IP to verify that a packet really comes from the addess indicated in the IP header leads to this attack
NIDS network connections
application
application gateway
IP spoofing
28. A feature of firewalls / routers that disguise the IP address of internal systems allowing connection to the Internet using one public address
store and forward
NIDS
NAT
land attack
29. Known as thinnet - 10mbps - limited to 185 meters
spoofing
10base2
twisted pair
teardrop
30. Collection on honeypots
dynamic NAT
IP spoofing
screened subnet
honeynet
31. A level 3 firewall that remembers / tracks network connections - maintains a state table - distinguish which side of a firewall a connection was initiated - higher security
stateful inspection
IP spoofing
blind
false negative
32. IP spoofing attack where the attacker can monitor packets and participate in bidirectional communication
defense in depth
informed
NIDS
coaxial
33. Used to pass data from one VLAN to another
session hijacking
encrypt session key
10base2
router
34. A sniffer mode used to capture traffic addressed to/from another machine on the network
dynamic NAT
packet filter
promiscuous
defense in depth
35. Evolved from IDS - monitors network traffic - detects and responds to attack on network
multi homed
cat3
NIPS
application gateway
36. Examines content passing through and makes a decision on the data based on a set of criteria - normal uses email filtering and web browsing
tcp/ip hijacking
man in the middle and replay
NIDS
content filter
37. A logical connection point allowing computers and software to communicate and exchange data
ping flooding
port
knowledge based
split horizon DNS
38. Allows all traffic except traffic that is specifically denied - also known as permissive access
IP spoofing
twisted pair
risk mitigation
allow by default
39. One private IP address is mapped to one public IP address
session hijacking
static NAT
IP spoofing
ping flooding
40. A person or program masquerades as another by presenting false information to gain an illegitimate advantage
cat3
fraggle
SYN flood
spoofing
41. A server that sits between an intranet and it's Internet connection - masking all IP addresses
null session
NIPS
ping flooding
proxy server
42. A variation of a smurf attack using UDP
DNS spoofing
fraggle
behavior based
IP spoofing
43. Attempt to block service or reduce activity by overloading the victim machine with ping requests
NIPS
firewalls
ping flooding
ping of death
44. IDS that relies on usage patterns and baseline operation - can ID new vulnerability - high rate of false alarms
behavior based
blind
passive
allow by default
45. DMZ implementation using two firewalls with different rule sets for the DMZ and intranet
NIPS
layered
network
active
46. Crashing a computer by sending oversized packets (over 64 bytes) that it doesn't know how to handle
cat3
ping of death
DMZ
HIDS
47. Seeks to reduce the probability and/or impact of a specific risk below an acceptable threshold
multiple interface firewall
active
bastion host
risk mitigation
48. An attacker redirects traffic by falsifying the IP address requested by ARP request
stateful inspection
network
ARP poisoning
static NAT
49. Take control of a session between a server and client - the users gets kicked off the session while the attacker inserts himself into the session by sending a reset request to the client
encrypt session key
session hijacking
multiple interface firewall
null session
50. An attack where fragmented UDP packets with odd offset values are sent to the victim - when the OS attempts to rebuild the fragments they overwrite each other and cause confusion
teardrop
bastion host
application
behavior based