SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Security
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. An attacker redirects valid request to malicious sites by feeding a DNS server altered records which are retained in its cache
49 -152 - 65 -535
DNS spoofing
informed
knowledge based
2. A person or program masquerades as another by presenting false information to gain an illegitimate advantage
coaxial
spoofing
passive
teardrop
3. One process on every system - use local system resources - detect attacks that NIDS misses - examine data after decrypted - can be OS specific - more expensive
49 -152 - 65 -535
private
application
HIDS
4. Multiple network defense components are placed throughout the organizations assets and the network is properly segmented
defense in depth
man in the middle and replay
IP spoofing
49 -152 - 65 -535
5. A ping message is broadcast to an entire network with a spoofed source IP addess of the victim computer - flooding the victim computer with responses during this attack
application
smurf
repeater
null session
6. An attacker redirects traffic by falsifying the IP address requested by ARP request
stateful inspection
session hijacking
honeynet
ARP poisoning
7. Forging an IP address with the address of a trusted host
IP spoofing
source - destination - protocol
screened host
port
8. A method - used by switches and email servers - of delivering messages which are temporarily held by an intermediary before being sent to their final destination
zone transfer
active
store and forward
1024 - 49 -151
9. A feature of firewalls / routers that disguise the IP address of internal systems allowing connection to the Internet using one public address
NAT
honeynet
dynamic NAT
source - destination - protocol
10. Packets with a forged source IP address - purpose to conceal the identity of the sender or impersonate another computing system
store and forward
ARP
application gateway
IP spoofing
11. Most common DMZ implementation using three firewall interfaces (internet - intranet - DMZ)
multiple interface firewall
allow by default
cat5
PBX (Private Branch Exchange)
12. Capture and analyze network traffic - also known as packet analyzer - sniffer - network analyzer
NIPS
false negative
router
protocol analyzer
13. Firewall that communicates directly with a perimeter router and the internal network - 2 NICs - screens internal traffic
application gateway
firewalls
screened host
proxy
14. Known as thinnet - 10mbps - limited to 185 meters
hub
replay
screened subnet
10base2
15. DMZ implementation using two firewalls with different rule sets for the DMZ and intranet
switch
man in the middle
layered
private
16. A logical connection point allowing computers and software to communicate and exchange data
zone transfer
port
port address translation
IP spoofing
17. Level 1 firewall that looks at the head of a packet - (not content) - operates rapidly - application independent - either allow or deny packets
fraggle
packet filter
zone transfer
active
18. Bbenign activity reported as malicious
PBX (Private Branch Exchange)
false positive
cat5
multi homed
19. One device per network segment - does not use local system resources - can't examine encrypted traffic - OS independent - less expensive
behavior based
IP spoofing
teardrop
NIDS
20. Seeks to reduce the probability and/or impact of a specific risk below an acceptable threshold
protocol analyzer
risk mitigation
packet filter
SYN flood
21. Type of IP addresses not routed on the internet: 10.x.x.x - 172.16.x.x - 192.168.x.x
smurf
encrypt session key
private
content filter
22. IDS response method using logging and notification
HIDS
risk mitigation
ping flooding
passive
23. Used to pass data from one VLAN to another
port
router
teardrop
extranet
24. Protocol used to map an known IP address to its corresponding media access control (MAC) address
private
DNS spoofing
ARP
firewalls
25. Firewall that intercepts and inspects messages before delivering them - placed between trusted and untrusted networks - degrade network traffic - also know as application gateway
deny by default
proxy
content filter
knowledge based
26. IP - email - website - DNS - and ARP
spoofing attacks
DMZ
stateful inspection
49 -152 - 65 -535
27. Web servers - FTP servers - DNS servers - mail servers should be located on the _____________
layered
DMZ
HIDS
router
28. A pool of public IP addresses is shared by a collection of private IP addresses
DoS attacks
man in the middle
dynamic NAT
content filter
29. Ping flooding - ping of death - smurf - fraggle - SYN flood - land - teardrop - email flood
DoS attacks
blind
split horizon DNS
risk mitigation
30. A decoy system - intentionally left exposed to attract/distract attackers - logs and monitors attacker activities
honeypot
IP spoofing
passive
screened subnet
31. Man in the middle attack where the attacker captures the traffic and sends it to the original recipient without altering the intercepted data
proxy server
passive
1024 - 49 -151
coaxial
32. Twisted pair cable with speed capability of 1Gbps
NIPS
cat5
null session
active
33. Blocks all traffic from passing through the firewall except for traffic that is explicitly allowed - also known as restrictive access - best practice
10Base5
cat5
deny by default
smurf
34. Allows all traffic except traffic that is specifically denied - also known as permissive access
1024 - 49 -151
allow by default
null session
man in the middle and replay
35. Monitors network traffic to identify possible attacks
NIDS
informed
SYN flood
HIDS
36. Examines content passing through and makes a decision on the data based on a set of criteria - normal uses email filtering and web browsing
stateful inspection
store and forward
content filter
firewalls
37. Attack where an attacker intercepts traffic and tricks parties at either end into believing they are communicating with each other
DoS attacks
man in the middle
proxy
honeypot
38. Acts as an organizations internal phone system
fiber optic
source - destination - protocol
null session
PBX (Private Branch Exchange)
39. An attack where fragmented UDP packets with odd offset values are sent to the victim - when the OS attempts to rebuild the fragments they overwrite each other and cause confusion
IP spoofing
HIDS
teardrop
NIDS
40. A level 3 firewall that remembers / tracks network connections - maintains a state table - distinguish which side of a firewall a connection was initiated - higher security
teardrop
blind
replay
stateful inspection
41. A complete transfer of all DNS zone information from one server to another
zone transfer
website spoofing
ping flooding
application gateway
42. When a hacker takes over a TCP session between two machines - also known as session hijacking - foiled by the use of encrypted sessions
ping of death
static NAT
tcp/ip hijacking
fraggle
43. Malicious activity not reported or detected
NIDS
stateful inspection
false negative
dual homed
44. A group of hosts on logical network segment that communicate as if they were attached to the same broadcast domain - regardless of their physical location
risk mitigation
DNS spoofing
extranet
VLAN
45. Connects devices together to form a subnet - packet forwarding is based on MAC addresses - works at the data link layer of the OSI
protocol
switch
DoS attacks
spoofing
46. An attack where an attacker captures sensitive information and sends it again later in an attempt to replicate the transaction
DoS attacks
replay
network
website spoofing
47. A locked down/hardened host on the public side of the firewall highly exposed to attacks (i.e. web server - email server)
NIDS network connections
bastion host
PBX (Private Branch Exchange)
split horizon DNS
48. Unauthenticated connections - creating the potential for a successful connection as an anonymous user
null session
cat5
ping flooding
smurf
49. Amplifies the signal of incoming packets before broadcasting them to the network
repeater
passive
promiscuous
informed
50. Dynamic / private ports
honeypot
10Base5
dual homed
49 -152 - 65 -535